using System.Collections.Generic; using System.Linq; using System.Threading.Tasks; using API.Data; using API.DTOs; using API.Entities; using API.Extensions; using API.Interfaces; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Mvc; namespace API.Controllers { [Authorize] public class UsersController : BaseApiController { private readonly DataContext _context; private readonly IUserRepository _userRepository; private readonly ILibraryRepository _libraryRepository; public UsersController(DataContext context, IUserRepository userRepository, ILibraryRepository libraryRepository) { _context = context; _userRepository = userRepository; _libraryRepository = libraryRepository; } [HttpPost("add-library")] public async Task AddLibrary(CreateLibraryDto createLibraryDto) { // NOTE: I think we should move this into library controller because it gets added to all admins var user = await _userRepository.GetUserByUsernameAsync(User.GetUsername()); if (user == null) return BadRequest("Could not validate user"); if (await _libraryRepository.LibraryExists(createLibraryDto.Name)) { return BadRequest("Library name already exists. Please choose a unique name to the server."); } // TODO: We probably need to clean the folders before we insert var library = new Library { Name = createLibraryDto.Name, // TODO: Ensure code handles Library name always being lowercase Type = createLibraryDto.Type, AppUsers = new List() { user } }; library.Folders = createLibraryDto.Folders.Select(x => new FolderPath { Path = x, Library = library }).ToList(); user.Libraries ??= new List(); // If user is null, then set it user.Libraries.Add(library); if (await _userRepository.SaveAllAsync()) { return Ok(); } return BadRequest("Not implemented"); } [Authorize(Policy = "RequireAdminRole")] [HttpDelete("delete-user")] public async Task DeleteUser(string username) { var user = await _userRepository.GetUserByUsernameAsync(username); _userRepository.Delete(user); if (await _userRepository.SaveAllAsync()) { return Ok(); } return BadRequest("Could not delete the user."); } [Authorize(Policy = "RequireAdminRole")] [HttpGet] public async Task>> GetUsers() { return Ok(await _userRepository.GetMembersAsync()); } } }