using PostFundManagement.Domain; using PostFundManagement.Domain.Abstractions; using PostFundManagement.Domain.Api; using PostFundManagement.Domain.Extensions; using PostFundManagement.Infrastructure.Database; namespace PostFundManagement.Api.Endpoints.Execution; [ApiVersionTarget(1)] public class ApproveDisbursementEndpoint : IEndpoint { public void Map(IEndpointRouteBuilder builder) { builder.MapPost("api/execution/disbursements/{id:long}/approve", async (long id, ClaimsPrincipal principal, IDbContextFactory contextFactory, CancellationToken cancellationToken = default) => { var sidClaim = principal.FindFirst("sid")?.Value ?? principal.FindFirst(ClaimTypes.Sid)?.Value; if (!Guid.TryParse(sidClaim, out var userId)) return Results.BadRequest("Missing or invalid 'sid' claim."); using var context = await contextFactory.CreateDbContextAsync(cancellationToken); var disbursement = await context.Disbursements.FirstOrDefaultAsync(d => d.Id == id, cancellationToken); if (disbursement == null) return Results.NotFound($"Disbursement with ID {id} does not exist."); disbursement.Status = ApprovalStatus.Approved; disbursement.UpdatedBy = userId; disbursement.UpdatedAt = DateTime.UtcNow; context.Disbursements.Update(disbursement); return await context.SaveChangesAsync(cancellationToken) > 0 ? Results.Ok(disbursement) : Results.BadRequest("Failed to approve payment"); }) .RequireAuthorization() .WithDescription("Approve disbursement and release payment (M06)") .WithName(typeof(ApproveDisbursementEndpoint).ToEndpointName()) .MapToApiVersion(new ApiVersion(1)) .Produces(StatusCodes.Status200OK) .Produces(StatusCodes.Status404NotFound) .Produces(StatusCodes.Status401Unauthorized) .WithTags(EndpointTags.Execution); } }