Kalana B. Thilakarathna
98 lines
3.7 KiB
C#
98 lines
3.7 KiB
C#
using Distribution.Infra.Authorization;
|
|
using Distribution.Models;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
namespace Distribution.Features.LoadingEvent;
|
|
|
|
[ApiController]
|
|
[Route("api/loading-sheets")]
|
|
public class LoadingSheetController(
|
|
LoadingSheetService service,
|
|
IScopeAccessService scopeAccess,
|
|
ICurrentUserService currentUser) : ControllerBase
|
|
{
|
|
[HttpGet]
|
|
[Authorize("loading-sheet.view")]
|
|
public async Task<IActionResult> GetAll(
|
|
[FromQuery] Guid? rideId,
|
|
[FromQuery] LoadingSheetStatus? status,
|
|
[FromQuery] Guid? routeId,
|
|
[FromQuery] Guid? regionId,
|
|
[FromQuery] int page = 1,
|
|
[FromQuery] int pageSize = 20)
|
|
{
|
|
if (routeId.HasValue)
|
|
{
|
|
var userId = currentUser.UserId;
|
|
if (userId.HasValue && !await scopeAccess.HasRouteScopeAsync(userId.Value, routeId.Value))
|
|
return StatusCode(403);
|
|
}
|
|
|
|
if (regionId.HasValue)
|
|
{
|
|
var userId = currentUser.UserId;
|
|
if (userId.HasValue && !await scopeAccess.HasRegionScopeAsync(userId.Value, regionId.Value))
|
|
return StatusCode(403);
|
|
}
|
|
|
|
var result = await service.GetAllAsync(rideId, status, routeId, regionId, page, pageSize);
|
|
return Ok(result);
|
|
}
|
|
|
|
[HttpGet("{id:guid}")]
|
|
[Authorize("loading-sheet.view")]
|
|
public async Task<IActionResult> GetById(Guid id)
|
|
{
|
|
var result = await service.GetByIdAsync(id);
|
|
return result is null ? NotFound() : Ok(result);
|
|
}
|
|
|
|
[HttpPost]
|
|
[Authorize("loading-sheet.manage")]
|
|
public async Task<IActionResult> Create(CreateLoadingSheetRequest request, CancellationToken ct)
|
|
{
|
|
// TEMPORARY: currentUser.UserId is always unset due to the broken auth middleware
|
|
// (testbug.md #28) — fall back to the explicitly supplied user until that's fixed.
|
|
var userId = currentUser.UserId ?? request.PopulatedByUserId;
|
|
if (userId is null) return BadRequest(new { error = "PopulatedByUserId is required while auth is unavailable" });
|
|
try
|
|
{
|
|
var result = await service.CreateAsync(request, userId.Value, ct);
|
|
return CreatedAtAction(nameof(GetById), new { id = result.Id }, result);
|
|
}
|
|
catch (KeyNotFoundException) { return NotFound(); }
|
|
catch (InvalidOperationException ex) { return BadRequest(new { error = ex.Message }); }
|
|
}
|
|
|
|
[HttpPut("{id:guid}/items")]
|
|
[Authorize("loading-sheet.manage")]
|
|
public async Task<IActionResult> SetItems(Guid id, SetItemsRequest request, CancellationToken ct)
|
|
{
|
|
try
|
|
{
|
|
var result = await service.SetItemsAsync(id, request, ct);
|
|
return Ok(result);
|
|
}
|
|
catch (KeyNotFoundException) { return NotFound(); }
|
|
catch (InvalidOperationException ex) { return BadRequest(new { error = ex.Message }); }
|
|
}
|
|
|
|
[HttpPost("{id:guid}/confirm")]
|
|
[Authorize("loading-sheet.manage")]
|
|
public async Task<IActionResult> Confirm(Guid id, ConfirmLoadingSheetRequest request, CancellationToken ct)
|
|
{
|
|
// TEMPORARY: currentUser.UserId is always unset due to the broken auth middleware
|
|
// (testbug.md #28) — fall back to the explicitly supplied user until that's fixed.
|
|
var userId = currentUser.UserId ?? request.ConfirmedByUserId;
|
|
if (userId is null) return BadRequest(new { error = "ConfirmedByUserId is required while auth is unavailable" });
|
|
try
|
|
{
|
|
var result = await service.ConfirmAsync(id, userId.Value, ct);
|
|
return Ok(result);
|
|
}
|
|
catch (KeyNotFoundException) { return NotFound(); }
|
|
catch (InvalidOperationException ex) { return BadRequest(new { error = ex.Message }); }
|
|
}
|
|
}
|