56 lines
2.3 KiB
C#
56 lines
2.3 KiB
C#
using PostFundManagement.Domain;
|
|
using PostFundManagement.Domain.Abstractions;
|
|
using PostFundManagement.Domain.Api;
|
|
using PostFundManagement.Domain.Extensions;
|
|
using PostFundManagement.Infrastructure.Database;
|
|
|
|
namespace PostFundManagement.Api.Endpoints.Execution;
|
|
|
|
[ApiVersionTarget(1)]
|
|
public class CreateRiskEndpoint : IEndpoint
|
|
{
|
|
public record CreateRiskRequest(long ProjectId, RiskLikelihood Likelihood, RiskImpact Impact, string Name, string Description);
|
|
|
|
public void Map(IEndpointRouteBuilder builder)
|
|
{
|
|
builder.MapPost("api/execution/risks", async (CreateRiskRequest request, ClaimsPrincipal principal,
|
|
IDbContextFactory<ApplicationDbContext> contextFactory, CancellationToken cancellationToken = default) =>
|
|
{
|
|
var sidClaim = principal.FindFirst("sid")?.Value ?? principal.FindFirst(ClaimTypes.Sid)?.Value;
|
|
|
|
if (!Guid.TryParse(sidClaim, out var userId))
|
|
return Results.BadRequest("Missing or invalid 'sid' claim.");
|
|
|
|
using var context = await contextFactory.CreateDbContextAsync(cancellationToken);
|
|
|
|
if (!await context.Projects.AnyAsync(p => p.Id == request.ProjectId, cancellationToken))
|
|
return Results.BadRequest($"Project with ID {request.ProjectId} does not exist.");
|
|
|
|
var risk = new Domain.Entities.Risk
|
|
{
|
|
ProjectId = request.ProjectId,
|
|
Likelihood = request.Likelihood,
|
|
Impact = request.Impact,
|
|
Name = request.Name,
|
|
Description = request.Description,
|
|
CreatedBy = userId,
|
|
CreatedAt = DateTime.UtcNow
|
|
};
|
|
|
|
context.Risks.Add(risk);
|
|
|
|
return await context.SaveChangesAsync(cancellationToken) > 0
|
|
? Results.Created($"api/execution/risks/{risk.Id}", risk)
|
|
: Results.BadRequest("Failed to create project risk");
|
|
})
|
|
.RequireAuthorization()
|
|
.WithDescription("Add risk to risk register (M09)")
|
|
.WithName(typeof(CreateRiskEndpoint).ToEndpointName())
|
|
.MapToApiVersion(new ApiVersion(1))
|
|
.Produces<Domain.Entities.Risk>(StatusCodes.Status201Created)
|
|
.Produces(StatusCodes.Status400BadRequest)
|
|
.Produces(StatusCodes.Status401Unauthorized)
|
|
.WithTags(EndpointTags.Execution);
|
|
}
|
|
}
|