using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Mvc; using Newtonsoft.Json.Linq; using System.Security.Claims; using System.Text.Json; using TIAMWebApp.Shared.Application.Models; using TIAMWebApp.Shared.Application.Models.PageModels; using TIAMWebApp.Server.Models; using AyCode.Core.Loggers; using TIAM.Database.DataLayers.Users; using TIAM.Entities.Users; using TIAM.Models.Dtos.Users; using TIAM.Entities.Profiles; using TIAM.Entities.Addresses; using TIAM.Services.Server.Logins; using ILogger = TIAM.Core.Loggers.ILogger; namespace TIAMWebApp.Server.Controllers { [Authorize] [ApiController] [Route("api/v1/[controller]")] public class UserAPIController : ControllerBase { private LoginService _loginService; private UserDal _userDal; private readonly IConfiguration _configuration; //private readonly IWebHostEnvironment _webHostEnvironment; //readonly PasswordHasher _hasher = new(); private readonly ILogger _logger; /*private UserModel[] users = new UserModel[] { new UserModel(new Guid("540271f6-c604-4c16-8160-d5a7cafedf00"), "test@tiam.hu", "+36701234567", "Asdasd123456"), new UserModel(new Guid("4cbaed43-2465-4d99-84f1-c8bc6b7025f7"), "adam@tiam.hu", "+36701234567", "Asdasd987654") };*/ //private readonly ILogger _logger; public UserAPIController(IConfiguration configuration, UserDal userDal, IEnumerable logWriters) { _configuration = configuration; //_webHostEnvironment = webHostEnvironment; _userDal = userDal; _loginService = new LoginService(_userDal, _configuration); _logger = new TIAM.Core.Loggers.Logger(logWriters.ToArray()); } //[AllowAnonymous] //[HttpPost] //[Route(APIUrls.LoggerRouteName)] //public async Task AddLogItem(AcLogItem? logItem) //{ // if (logItem == null) // { // _logger.Error("AddLogItem; LogItem == null"); // //_logger.Writer().Detail(""); // return; // } // //logItem.LogHeaderId = ??? // logItem.TimeStampUtc = DateTime.UtcNow; // _logger.Write(logItem); // //_logger.Writer()?.Write(logItem.AppType, logItem.LogLevel, logItem.Text, logItem.CallerName, logItem.CategoryName, logItem.ErrorType, logItem.Exception); // //_logger.Writer().WriteLogItemAsync(logItem); //} [AllowAnonymous] [HttpPost] [Route(APIUrls.LogoutUserRouteName)] public async Task LogoutUser([FromBody] string refreshToken) { _logger.Info(@"LogoutUser called"); _logger.Info($"refreshtoken: {refreshToken}"); _loginService.Logout(); //TODO: Implementálni a Logout-ot kliens és szerver oldalon is! - J. return Ok("OK"); } [AllowAnonymous] [HttpPost] [Route(APIUrls.AuthenticateUserRouteName)] public async Task AuthenticateUser([FromBody] JsonElement serializedLoginModel) { _logger.Info(@"AuthenticateUser called"); var authenticateUser = JObject.Parse(serializedLoginModel.GetRawText()).ToObject(); if (authenticateUser == null) throw new NullReferenceException("authenticateUser == null"); _logger.Info(authenticateUser.Email); var loggedInModel = _loginService.Login(authenticateUser.Email, authenticateUser.Password); if (loggedInModel.IsLoggedIn) { var response = new MainResponse { Content = new AuthenticationResponse { RefreshToken = loggedInModel.LoggedInUser.RefreshToken, AccessToken = loggedInModel.AccessToken }, IsSuccess = true, ErrorMessage = "" }; return Ok(response); } _logger.Warning(@"User not valid! errorCode: " + loggedInModel.LoginErrorCode); return Unauthorized(); } [AllowAnonymous] [HttpPost] [Route(APIUrls.RefreshTokenRouteName)] public async Task RefreshToken(RefreshTokenRequest? refreshTokenRequest) { _logger.Info(@"RefreshToken called"); var response = new MainResponse(); if (refreshTokenRequest is null) { _logger.Info(@"RefreshTokenRequest is null"); response.ErrorMessage = "Invalid request"; return BadRequest(response); } var principal = _loginService.GetPrincipalFromExpiredToken(refreshTokenRequest.AccessToken); if (principal != null) { _logger.Info(@"Principal is not null"); var email = principal.Claims.FirstOrDefault(f => f.Type == ClaimTypes.Email); //var userModel = await _userManager.FindByEmailAsync(email?.Value); //UserModel? user = users.FirstOrDefault(x => x.Email == email?.Value); User? dbUser = null; if (email != null) { //get user from db dbUser = await _userDal.GetUserByEmailAsync(email.Value, true); _logger.Info($@"DbUser email: {dbUser?.EmailAddress}"); } //mocking - update userModel with new refreshToken so it returns true after the check below //dbUser.RefreshToken = refreshTokenRequest.RefreshToken; if (dbUser is null || dbUser.RefreshToken != refreshTokenRequest.RefreshToken) { response.ErrorMessage = "Invalid Request"; _logger.Info($@"{dbUser?.RefreshToken}, {refreshTokenRequest.RefreshToken}"); return BadRequest(response); } var newAccessToken = _loginService.GenerateAccessToken(dbUser); var refreshToken = _loginService.GenerateRefreshToken(); //mocking - update userModel with new refreshToken dbUser.RefreshToken = refreshToken; //TODO await _userManager.UpdateAsync(userModel); await _userDal.UpdateJwtRefreshTokenAsync(dbUser.EmailAddress, dbUser.RefreshToken); response.IsSuccess = true; response.Content = new AuthenticationResponse { RefreshToken = refreshToken, AccessToken = newAccessToken }; return Ok(response); } _logger.Info(@"Principal is null"); return NotFound("Invalid Token Found"); } [AllowAnonymous] [HttpPost] [Route("CreateUser")] public async Task CreateUser([FromBody] JsonElement serializedRegistrationModel) { _logger.Info(@"CreateUser called"); if (string.IsNullOrEmpty(serializedRegistrationModel.GetRawText())) { return BadRequest("SerializedLoginModel is required"); } else { var user = JObject.Parse(serializedRegistrationModel.GetRawText()).ToObject(); if (user != null) { //add userModel to users array //Array.Resize(ref users, users.Length + 1); //users[users.Length - 1] = new UserModel(user.Email, user.PhoneNumber, user.Password); var userId = Guid.NewGuid(); var email = user?.Email; var phoneNumber = user?.PhoneNumber; var password = user?.Password; if (email is null || phoneNumber is null || password is null) { return BadRequest("Invalid request"); } else { _logger.Info($@"User to be created: {userId}"); _logger.Info($@"User to be created: {email}"); _logger.Info($@"User to be created: {phoneNumber}"); _logger.Info($@"User to be created: {password}"); await _userDal.CreateUserAsync(new User(userId, email, phoneNumber, password)); } } return Ok("yes"); } } [AllowAnonymous] [HttpPost] [Route(APIUrls.UpdateUser)] public async Task UpdateUser([FromBody] JsonElement SerializedUserModel) { _logger.Info("UpdateUser called"); if (string.IsNullOrEmpty(SerializedUserModel.GetRawText())) { return BadRequest("SerializedUserModel is required"); } else { var user = JObject.Parse(SerializedUserModel.GetRawText()).ToObject(); if (user != null) { var userId = user.Id; var email = user.UserDto.EmailAddress; var phoneNumber = user.UserDto.PhoneNumber; if (email is null || phoneNumber is null) { return BadRequest("Invalid request"); } else { _logger.Info($"User to be updated: {userId}"); _logger.Info($"User to be updated: {email}"); _logger.Info($"User to be updated: {phoneNumber}"); await _userDal.UpdateUserAsync(new User(userId, email, phoneNumber)); } } return Ok("yes"); } } [AllowAnonymous] [HttpPost] [Route(APIUrls.CreateGuestUserRouteName)] public async Task CreateGuestUser([FromBody] JsonElement serializedRegistrationModel) { _logger.Info(@"CreateGuestUser called"); var result = false; UserModelDtoDetail? guestUser = null; if (string.IsNullOrEmpty(serializedRegistrationModel.GetRawText())) { return BadRequest("SerializedLoginModel is required"); } else { var user = JObject.Parse(serializedRegistrationModel.GetRawText()).ToObject(); if (user != null) { var random = new Random(); var chars = "1234567890"; var nameExtension = new string(Enumerable.Repeat(chars, 10) .Select(s => s[random.Next(s.Length)]).ToArray()); var userId = Guid.NewGuid(); var email = user?.Email; var phoneNumber = user?.PhoneNumber; var password = user?.Password; var referralId = user?.ReferralId; if (email is null || phoneNumber is null || password is null) { return BadRequest("Invalid request"); } else { _logger.Info($@"User to be created: {userId}"); _logger.Info($@"User to be created: {email}"); _logger.Info($@"User to be created: {phoneNumber}"); _logger.Info($@"User to be created: {password}"); User userToCreate = new(userId, email, phoneNumber, password); userToCreate.ProfileId = Guid.NewGuid(); userToCreate.Profile = new Profile(); userToCreate.Profile.Id = userToCreate.ProfileId; userToCreate.Profile.Name = "Guest - " + nameExtension; userToCreate.RefferalId = referralId; userToCreate.Profile.AddressId = Guid.NewGuid(); //Random rnd = new Random(); userToCreate.Profile.Address = new Address(); userToCreate.Profile.Address.Id = userToCreate.Profile.AddressId; userToCreate.Profile.Address.AddressText = null; userToCreate.Profile.Address.Latitude = null; //Math.Round(90 + rnd.NextDouble(), 8); userToCreate.Profile.Address.Longitude = null; //Math.Round(180 + rnd.NextDouble(), 8); result = await _userDal.AddUserAsync(userToCreate); guestUser = await _userDal.GetUserModelDtoByIdAsync(userId, false); } } return Ok(guestUser); } } [AllowAnonymous] [HttpGet] [Route("GetUsers")] public Task> GetUsers() { //var users = await _userDal.Ctx.Users.ToListAsync();//.GetUsersAsync(); //return users; return _userDal.GetAllUserModelDtoAsync(); } [AllowAnonymous] [HttpGet] [Route(APIUrls.GetUsersWithDetailsRouteName)] public Task> GetUsersWithDetails() { _logger.Info("GetUsersWithDetails called"); //var users = await _userDal.Ctx.Users.ToListAsync();//.GetUsersAsync(); //return users; return _userDal.GetAllUserModelDtoAsync(); } [AllowAnonymous] [HttpGet] [Route(APIUrls.GetUserByEmailRouteName + "/{email}")] public async Task? GetUserByEmail(string email) { _logger.Info($"GetUserByEmail called with email: {email}"); var result = _userDal.GetUserModelDtoByEmailAsync(email, false); if (result.Result == null) { UserModelDto resultDto = new UserModelDto(); return resultDto; } else { return result.Result; } } [AllowAnonymous] [HttpPost] [Route("GetUserById")] public Task GetUserById([FromBody] Guid id) { _logger.Info($"GetUserById called with id: {id}"); return _userDal.GetUserModelDtoByIdAsync(id, true); } [AllowAnonymous] [HttpPost] [Route(APIUrls.GetUserDetailByIdRouteName)] public async Task GetUserDetailById([FromBody] Guid id) { _logger.Info($"GetUserDetailById called with id: {id}"); var result = await _userDal.GetUserModelDtoByIdAsync(id, true); return result; } } }