Core.Thalos.Service.API/Core.Cerberos.Service.API/Controllers/PermissionController.cs

using Asp.Versioning;
using Core.Cerberos.Adapters;
using Core.Cerberos.Adapters.Attributes;
using Core.Cerberos.Adapters.Common.Constants;
using Core.Cerberos.Application.UseCases.Permissions.Input;
using Core.Cerberos.Application.UseCases.Permissions.Ports;
using Lib.Architecture.BuildingBlocks;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace Core.Cerberos.Service.API.Controllers
{
    /// <summary>
    /// Handles all services and business rules related to <see cref="PermissionController"/>.
    /// </summary>
    [ApiVersion("1.0")]
    [Route("api/v{api-version:apiVersion}/[controller]")]
    [Produces("application/json")]
    [ApiController]
    public class PermissionController : ControllerBase
    {
        private readonly IComponentHandler<GetPermissionRequest> getPermissionHandler;
        private readonly IComponentHandler<GetAllPermissionsRequest> getAllPermissionsHandler;
        private readonly IComponentHandler<GetAllPermissionsByListRequest> getAllPermissionsByListHandler;
        private readonly IComponentHandler<CreatePermissionRequest> createPermissionHandler;
        private readonly IComponentHandler<UpdatePermissionRequest> updatePermissionHandler;
        private readonly IComponentHandler<ChangePermissionStatusRequest> changePermissionStatusHandler;
        private readonly IPermissionPort port;

        /// <summary>
        /// Handles all services and business rules related to <see cref="PermissionController"/>.
        /// </summary>
        public PermissionController(
            IComponentHandler<GetPermissionRequest> getPermissionHandler,
            IComponentHandler<GetAllPermissionsRequest> getAllPermissionsHandler,
            IComponentHandler<GetAllPermissionsByListRequest> getAllPermissionsByListHandler,
            IComponentHandler<CreatePermissionRequest> createPermissionHandler,
            IComponentHandler<UpdatePermissionRequest> updatePermissionHandler,
            IComponentHandler<ChangePermissionStatusRequest> changePermissionStatusHandler,
            IPermissionPort port
            )
        {
            this.createPermissionHandler = createPermissionHandler;
            this.updatePermissionHandler = updatePermissionHandler;
            this.changePermissionStatusHandler = changePermissionStatusHandler;
            this.getAllPermissionsHandler = getAllPermissionsHandler;
            this.getPermissionHandler = getPermissionHandler;
            this.getAllPermissionsByListHandler = getAllPermissionsByListHandler;
            this.port = port;
        }

        /// <summary>
        /// Gets all the permissions.
        /// </summary>
        [HttpGet("GetAll")]
        [ProducesResponseType(StatusCodes.Status200OK)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status412PreconditionFailed)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status422UnprocessableEntity)]
        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
        [ProducesResponseType(StatusCodes.Status400BadRequest)]
        [Authorize(AuthenticationSchemes = Schemes.HeathScheme)]
        [Permission("PermissionManagement.Read, RoleManagement.Read")]
        public async Task<IActionResult> GetAllPermissionsAsync(CancellationToken cancellationToken)
        {
            await getAllPermissionsHandler.ExecuteAsync(new GetAllPermissionsRequest { }, cancellationToken).ConfigureAwait(false);

            return port.ViewModel;
        }

        /// <summary>
        /// Gets all the permissions by permission identifiers.
        /// </summary>
        /// <param name="request">The request containing the list of permission identifiers.</param>
        /// <param name="cancellationToken">Cancellation token for the asynchronous operation.</param>
        /// <returns>The <see cref="IActionResult"/> representing the result of the service call.</returns>
        /// <response code="200">The permissions found.</response>
        /// <response code="204">No content if no permissions are found.</response>
        /// <response code="400">Bad request if the permission identifiers are missing or invalid.</response>
        /// <response code="401">Unauthorized if the user is not authenticated.</response>
        /// <response code="412">Precondition failed if the request does not meet expected conditions.</response>
        /// <response code="422">Unprocessable entity if the request cannot be processed.</response>
        /// <response code="500">Internal server error if an unexpected error occurs.</response>
        [HttpPost]
        [Route(Routes.GetPermissionList)]
        [ProducesResponseType(typeof(IEnumerable<PermissionAdapter>), StatusCodes.Status200OK)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        [ProducesResponseType(StatusCodes.Status400BadRequest)]
        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status412PreconditionFailed)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status422UnprocessableEntity)]
        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
        [Authorize(AuthenticationSchemes = Schemes.HeathScheme)]
        [Permission("PermissionManagement.Read")]
        public async Task<IActionResult> GetAllPermissionsByListAsync([FromBody] GetAllPermissionsByListRequest request, CancellationToken cancellationToken)
        {

            if (request == null || request.Permissions == null || !request.Permissions.Any())
            {
                return BadRequest("Permission identifiers are required.");
            }

            await getAllPermissionsByListHandler.ExecuteAsync(request, cancellationToken).ConfigureAwait(false);

            return port.ViewModel;
        }

        /// <summary>
        /// Gets the permission by identifier.
        /// </summary>
        [HttpPost]
        [Route("GetById")]
        [ProducesResponseType(StatusCodes.Status200OK)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        [ProducesResponseType(StatusCodes.Status400BadRequest)]
        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status412PreconditionFailed)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status422UnprocessableEntity)]
        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
        [Authorize(AuthenticationSchemes = Schemes.HeathScheme)]
        [Permission("PermissionManagement.Read")]
        public async Task<IActionResult> GetPermissionById([FromBody] GetPermissionRequest request, CancellationToken cancellationToken)
        {

            if (request.Id == null || !request.Id.Any())
            {
                return BadRequest("Invalid Permission Id");
            }

            await getPermissionHandler.ExecuteAsync(request, cancellationToken).ConfigureAwait(false);

            return port.ViewModel;
        }

        /// <summary>
        /// Creates a new permission.
        /// </summary>
        [HttpPost("Create")]
        [ProducesResponseType(StatusCodes.Status200OK)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status412PreconditionFailed)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status422UnprocessableEntity)]
        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
        [ProducesResponseType(StatusCodes.Status400BadRequest)]
        [Authorize(AuthenticationSchemes = Schemes.HeathScheme)]
        [Permission("PermissionManagement.Write")]
        public async Task<IActionResult> CreatePermissionAsync([FromBody] CreatePermissionRequest newPermission, CancellationToken cancellationToken = default)
        {
            await createPermissionHandler.ExecuteAsync(newPermission, cancellationToken).ConfigureAwait(false);

            return port.ViewModel;
        }

        /// <summary>
        /// Updates a full permission by identifier.
        /// </summary>
        [HttpPut("Update")]
        [ProducesResponseType(StatusCodes.Status200OK)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status412PreconditionFailed)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status422UnprocessableEntity)]
        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
        [ProducesResponseType(StatusCodes.Status400BadRequest)]
        [Authorize(AuthenticationSchemes = Schemes.HeathScheme)]
        [Permission("PermissionManagement.Write")]
        public async Task<IActionResult> UpdatePermissionAsync([FromBody] UpdatePermissionRequest request, CancellationToken cancellationToken = default)
        {
            await updatePermissionHandler.ExecuteAsync(request, cancellationToken).ConfigureAwait(false);

            return port.ViewModel;
        }

        /// <summary>
        /// Changes the status of the permission.
        /// </summary>
        [HttpPatch]
        [Route("ChangeStatus")]
        [ProducesResponseType(StatusCodes.Status200OK)]
        [ProducesResponseType(StatusCodes.Status204NoContent)]
        [ProducesResponseType(StatusCodes.Status400BadRequest)]
        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status412PreconditionFailed)]
        [ProducesResponseType(typeof(Notification), StatusCodes.Status422UnprocessableEntity)]
        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
        [Authorize(AuthenticationSchemes = Schemes.HeathScheme)]
        [Permission("PermissionManagement.Write")]
        public async Task<IActionResult> ChangePermissionStatusAsync([FromBody] ChangePermissionStatusRequest request,
                                                                     CancellationToken cancellationToken)
        {
            if (string.IsNullOrEmpty(request.Id)) { return BadRequest("Invalid permission identifier"); }

            await changePermissionStatusHandler.ExecuteAsync(request, cancellationToken).ConfigureAwait(false);

            return port.ViewModel;
        }
    }
}