using System.Collections.Generic; using System.Linq; using System.Threading.Tasks; using API.DTOs; using API.Extensions; using API.Interfaces; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Mvc; namespace API.Controllers { [Authorize] public class UsersController : BaseApiController { private readonly IUnitOfWork _unitOfWork; public UsersController(IUnitOfWork unitOfWork) { _unitOfWork = unitOfWork; } [Authorize(Policy = "RequireAdminRole")] [HttpDelete("delete-user")] public async Task DeleteUser(string username) { var user = await _unitOfWork.UserRepository.GetUserByUsernameAsync(username); _unitOfWork.UserRepository.Delete(user); if (await _unitOfWork.Complete()) { return Ok(); } return BadRequest("Could not delete the user."); } [Authorize(Policy = "RequireAdminRole")] [HttpGet] public async Task>> GetUsers() { return Ok(await _unitOfWork.UserRepository.GetMembersAsync()); } [HttpGet("has-library-access")] public async Task> HasLibraryAccess(int libraryId) { // TODO: refactor this to use either userexists or usermanager var user = await _unitOfWork.UserRepository.GetUserByUsernameAsync(User.GetUsername()); if (user == null) return BadRequest("Could not validate user"); var libs = await _unitOfWork.LibraryRepository.GetLibraryDtosForUsernameAsync(user.UserName); return Ok(libs.Any(x => x.Id == libraryId)); } } }