From 55a44000fcc2cee2ae3ff012ab48b64e87b01e5b Mon Sep 17 00:00:00 2001
From: Joseph Milazzo <joseph.v.milazzo@gmail.com>
Date: Sat, 2 Jan 2021 09:25:45 -0600
Subject: [PATCH] Changed scan to POST and added new API for route gurads on
 UI.

---
 API/Controllers/LibraryController.cs |  2 +-
 API/Controllers/UsersController.cs   | 12 ++++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/API/Controllers/LibraryController.cs b/API/Controllers/LibraryController.cs
index e06cba530..b87e75cbf 100644
--- a/API/Controllers/LibraryController.cs
+++ b/API/Controllers/LibraryController.cs
@@ -85,7 +85,7 @@ namespace API.Controllers
         }
 
         [Authorize(Policy = "RequireAdminRole")]
-        [HttpGet("scan")]
+        [HttpPost("scan")]
         public async Task<ActionResult> ScanLibrary(int libraryId)
         {
             var library = await _libraryRepository.GetLibraryDtoForIdAsync(libraryId);
diff --git a/API/Controllers/UsersController.cs b/API/Controllers/UsersController.cs
index db81af51d..a332c88c9 100644
--- a/API/Controllers/UsersController.cs
+++ b/API/Controllers/UsersController.cs
@@ -84,5 +84,17 @@ namespace API.Controllers
         {
             return Ok(await _userRepository.GetMembersAsync());
         }
+
+        [HttpGet("has-library-access")]
+        public async Task<ActionResult<bool>> HasLibraryAccess(int libraryId)
+        {
+            var user = await _userRepository.GetUserByUsernameAsync(User.GetUsername());
+
+            if (user == null) return BadRequest("Could not validate user");
+
+            var libs = await _libraryRepository.GetLibrariesForUsernameAysnc(user.UserName);
+
+            return Ok(libs.Any(x => x.Id == libraryId));
+        }
     }
 }
\ No newline at end of file