using PostFundManagement.Application.Evidence; using PostFundManagement.Domain.Abstractions; using PostFundManagement.Domain.Api; using PostFundManagement.Domain.Extensions; namespace PostFundManagement.Api.Endpoints.Evidence; [ApiVersionTarget(1)] public class UploadEvidenceFilesEndpoint : IEndpoint { public void Map(IEndpointRouteBuilder builder) { builder.MapPost("api/evidence/files", async (HttpRequest request, ClaimsPrincipal principal, EvidenceService service, CancellationToken cancellationToken = default) => { var sidClaim = principal.FindFirst("sid")?.Value ?? principal.FindFirst(ClaimTypes.Sid)?.Value; if (!Guid.TryParse(sidClaim, out var userId)) return Results.BadRequest("Missing or invalid 'sid' claim."); if (!request.HasFormContentType) return Results.BadRequest("Request must be a multipart form."); var form = await request.ReadFormAsync(cancellationToken); var file = form.Files.GetFile("file"); if (file == null || file.Length == 0) return Results.BadRequest("No file uploaded or file is empty."); var result = await service.UploadEvidenceFileAsync(userId, form, file, cancellationToken); return result.IsSuccess ? Results.Created() : Results.BadRequest("Evidence upload failed"); }) .RequireAuthorization() .DisableAntiforgery() .WithDescription("Upload supporting evidence file to S3 and register metadata (M14)") .WithName(typeof(UploadEvidenceFilesEndpoint).ToEndpointName()) .MapToApiVersion(new ApiVersion(1)) .Produces(StatusCodes.Status200OK) .Produces(StatusCodes.Status400BadRequest) .Produces(StatusCodes.Status401Unauthorized) .WithTags(EndpointTags.Evidence); } }