Kavita/API/Controllers/PluginController.cs

using System.ComponentModel.DataAnnotations;
using System.Threading.Tasks;
using API.Data;
using API.DTOs;
using API.Services;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Logging;

namespace API.Controllers
{
    public class PluginController : BaseApiController
    {
        private readonly IUnitOfWork _unitOfWork;
        private readonly ITokenService _tokenService;
        private readonly ILogger<PluginController> _logger;

        public PluginController(IUnitOfWork unitOfWork, ITokenService tokenService, ILogger<PluginController> logger)
        {
            _unitOfWork = unitOfWork;
            _tokenService = tokenService;
            _logger = logger;
        }

        /// <summary>
        /// Authenticate with the Server given an apiKey. This will log you in by returning the user object and the JWT token.
        /// </summary>
        /// <remarks>This API is not fully built out and may require more information in later releases</remarks>
        /// <param name="apiKey">API key which will be used to authenticate and return a valid user token back</param>
        /// <param name="pluginName">Name of the Plugin</param>
        /// <returns></returns>
        [AllowAnonymous]
        [HttpPost("authenticate")]
        public async Task<ActionResult<UserDto>> Authenticate([Required] string apiKey, [Required] string pluginName)
        {
            // NOTE: In order to log information about plugins, we need some Plugin Description information for each request
            // Should log into access table so we can tell the user
            var userId = await _unitOfWork.UserRepository.GetUserIdByApiKeyAsync(apiKey);
            if (userId <= 0) return Unauthorized();
            var user = await _unitOfWork.UserRepository.GetUserByIdAsync(userId);
            _logger.LogInformation("Plugin {PluginName} has authenticated with {UserName} ({UserId})'s API Key", pluginName, user.UserName, userId);
            return new UserDto
            {
                Username = user.UserName,
                Token = await _tokenService.CreateToken(user),
                ApiKey = user.ApiKey,
            };
        }
    }
}