using Distribution.Infra.Authorization; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Mvc; namespace Distribution.Features.Claims; [ApiController] public class ClaimController(ClaimService service, ICurrentUserService currentUser) : ControllerBase { [HttpGet("api/claims")] [Authorize("claim.view")] public async Task GetAll() => Ok(await service.GetAllAsync()); [HttpGet("api/claims/{id:guid}")] [Authorize("claim.view")] public async Task GetById(Guid id) { var result = await service.GetByIdAsync(id); return result is null ? NotFound() : Ok(result); } [HttpPost("api/claims")] [Authorize("claim.manage")] public async Task Create(CreateClaimRequest request, CancellationToken ct) { try { var result = await service.CreateAsync(request, ct); return CreatedAtAction(nameof(GetById), new { id = result.Id }, result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } [HttpPut("api/claims/{id:guid}")] [Authorize("claim.manage")] public async Task Update(Guid id, UpdateClaimRequest request, CancellationToken ct) { try { var result = await service.UpdateAsync(id, request, ct); return Ok(result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } [HttpPost("api/claims/{id:guid}/settle")] [Authorize("claim.manage")] public async Task Settle(Guid id, SettleClaimRequest request, CancellationToken ct) { var userId = currentUser.UserId ?? request.SettledByUserId; if (userId is null) return BadRequest(new { error = "SettledByUserId is required while auth is unavailable" }); try { var result = await service.SettleAsync(id, request, userId.Value, ct); return Ok(result); } catch (KeyNotFoundException) { return NotFound(); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } }