using PostFundManagement.Domain; using PostFundManagement.Domain.Abstractions; using PostFundManagement.Domain.Api; using PostFundManagement.Domain.Extensions; using PostFundManagement.Infrastructure.Database; namespace PostFundManagement.Api.Endpoints.Grants; [ApiVersionTarget(1)] public class CreateAwardEndpoint : IEndpoint { public record CreateAwardRequest(long OrganisationId, long ProgrammeId, decimal Amount); public void Map(IEndpointRouteBuilder builder) { builder.MapPost("api/grants/awards", async (CreateAwardRequest request, ClaimsPrincipal principal, IDbContextFactory contextFactory, CancellationToken cancellationToken = default) => { var sidClaim = principal.FindFirst("sid")?.Value ?? principal.FindFirst(ClaimTypes.Sid)?.Value; if (!Guid.TryParse(sidClaim, out var userId)) return Results.BadRequest("Missing or invalid 'sid' claim."); if (request.Amount <= 0) return Results.BadRequest("Approved amount must be greater than zero."); using var context = await contextFactory.CreateDbContextAsync(cancellationToken); if (!await context.Organisations.AnyAsync(o => o.Id == request.OrganisationId, cancellationToken)) return Results.BadRequest($"Organisation with ID {request.OrganisationId} does not exist."); if (!await context.Programmes.AnyAsync(p => p.Id == request.ProgrammeId, cancellationToken)) return Results.BadRequest($"Programme with ID {request.ProgrammeId} does not exist."); var award = new Domain.Entities.Award { OrganisationId = request.OrganisationId, ProgrammeId = request.ProgrammeId, Amount = request.Amount, Status = ApprovalStatus.Pending, CreatedBy = userId, CreatedAt = DateTime.UtcNow }; context.Awards.Add(award); return await context.SaveChangesAsync(cancellationToken) > 0 ? Results.Created($"api/grants/awards/{award.Id}", award) : Results.BadRequest("Failred to create award"); }) .RequireAuthorization() .WithDescription("Register an approved funding award (M01)") .WithName(typeof(CreateAwardEndpoint).ToEndpointName()) .MapToApiVersion(new ApiVersion(1)) .Produces(StatusCodes.Status201Created) .Produces(StatusCodes.Status400BadRequest) .Produces(StatusCodes.Status401Unauthorized) .WithTags(EndpointTags.Grants); } }