using PostFundManagement.Application.Abstractions.Services; using PostFundManagement.Application.Extensions; using PostFundManagement.Domain.Abstractions; using PostFundManagement.Domain.Errors; using PostFundManagement.Domain.Extensions; using PostFundManagement.Domain.Security; using Problems = Microsoft.AspNetCore.Mvc.ProblemDetails; namespace PostFundManagement.Api.Endpoints.Grants; [ApiVersionTarget(1)] public sealed class UploadContractEndpoint : IEndpoint { public void Map(IEndpointRouteBuilder builder) { builder.MapPost("api/grants/contracts/{contractId}", async (string contractId, HttpRequest request, IGrantsService service, CancellationToken cancellationToken = default) => { if (!request.HasFormContentType) return Results.BadRequest("Request must be a multipart form."); var form = await request.ReadFormAsync(cancellationToken); var file = form.Files.GetFile("file"); if (file == null || file.Length == 0) return Results.BadRequest("No file uploaded or file is empty."); return await service.UploadContractAsync(contractId, request.HttpContext.GetUserId(), file, cancellationToken) switch { { IsSuccess: true } => Results.Ok(), var r when r.HasError() => Results.BadRequest(r.Errors.ToProblems()), var r => Results.InternalServerError(r.Errors.ToProblems()) }; }) .WithDescription("Uploads a contract file securely") .RequireAuthorization(Constants.MainScope) .DisableAntiforgery() .WithName(typeof(UploadContractEndpoint).ToEndpointName()) .MapToApiVersion(new ApiVersion(1)) .Produces(StatusCodes.Status200OK) .Produces(StatusCodes.Status403Forbidden) .Produces(StatusCodes.Status401Unauthorized) .Produces(StatusCodes.Status404NotFound) .Produces(StatusCodes.Status500InternalServerError) .WithTags(EndpointTags.Grants) .CacheOutput(); } }