final1

2024-01-23 15:41:59 +01:00
parent 5d5a69ccf7
commit 3b2b4c9b7e
76 changed files with 4100 additions and 888 deletions
--- a/SecureBank.API/SecureBank.API.Controllers/AccountsController.cs
+++ b/SecureBank.API/SecureBank.API.Controllers/AccountsController.cs
@@ -1,12 +1,18 @@
-using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.ModelBinding;
 using Microsoft.Identity.Client;
+using SecureBank.API.Authentication;
 using SecureBank.API.Services;
+using SecureBank.Authentication;
 using SecureBank.Common;
 using SecureBank.Common.Accounts;
+using SecureBank.Helpers.Attributes;
 using System;
 using System.Collections.Generic;
 using System.Linq;
+using System.Security.Claims;
 using System.Text;
 using System.Threading.Tasks;
 using static System.Runtime.InteropServices.JavaScript.JSType;
@@ -40,18 +46,17 @@ namespace SecureBank.API.Controllers

        [HttpPost]
        [Route("create-account")]
-        [AllowAnonymous]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        [RequiresClaim("admin", "True")]
        public async Task<ActionResult<APIResponse<int>>> CreateAccount([FromBody] CreateAccountRequest data)
        {
            APIResponse<int> response = await _accountsService.CreateAccount(data);
-            if (response.Success)
+            return response.Status switch
            {
-                return Ok(response);
-            }
-            else
-            {
-                return BadRequest(response);
-            }
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
        }

        [HttpGet]
@@ -60,35 +65,102 @@ namespace SecureBank.API.Controllers
        public async Task<ActionResult<APIResponse<GetPasswordVariantResponse>>> GetPasswordVariant([FromRoute(Name = "account_id")] int accountId)
        {
            APIResponse<GetPasswordVariantResponse> response = await _accountsService.GetPasswordVariant(accountId);
-            if (response.Success)
+            return response.Status switch
            {
-                return Ok(response);
-            }
-            else
-            {
-                return BadRequest(response);
-            }
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
        }

        [HttpPost]
-        [Route("{account_id}/authentication")]
+        [Route("authentication")]
        [AllowAnonymous]
        /*
         * Action codes:
         * 1 - Go back to client code input
-         * 2 - Failed login count increment
+         * 2 - Change password required
         */
-        public async Task<ActionResult<APIResponse<string>>> Authentication([FromRoute(Name = "account_id")] int accountId, [FromBody] AuthenticationRequest data)
+        public async Task<ActionResult<APIResponse<string>>> Authentication([FromBody] AuthenticationRequest data)
        {
-            APIResponse<string> response = await _accountsService.Authentication(accountId, data);
-            if (response.Success)
+            APIResponse<string> response = await _accountsService.Authentication(data);
+            return response.Status switch
            {
-                return Ok(response);
-            }
-            else
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpPost]
+        [Route("authentication-refresh")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        public async Task<ActionResult<APIResponse<string>>> AuthenticationRefresh()
+        {
+            APIResponse<string> response = await _accountsService.AuthenticationRefresh(new Claims(User.Claims));
+            return response.Status switch
            {
-                return BadRequest(response);
-            }
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpPatch]
+        [Route("change-password")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        public async Task<ActionResult<APIResponse>> ChangePassword([FromBody] ChangePasswordRequest data)
+        {
+            APIResponse response = await _accountsService.ChangePassword(new Claims(User.Claims), data);
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpGet]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        public async Task<ActionResult<APIResponse<IEnumerable<AccountResponse>>>> GetAccounts([FromQuery]int? id, [FromQuery] string? iban)
+        {
+            APIResponse<IEnumerable<AccountResponse>> response = await _accountsService.GetAccounts(iban, id, new Claims(User.Claims));
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpPatch]
+        [Route("{account_id}/reset-password")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        [RequiresClaim("admin", "True")]
+        public async Task<ActionResult<APIResponse>> ResetPassword([FromRoute(Name = "account_id")] int accountId)
+        {
+            APIResponse response = await _accountsService.ResetPassword(accountId);
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpPatch]
+        [Route("{account_id}/unlock")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        [RequiresClaim("admin", "True")]
+        public async Task<ActionResult<APIResponse>> UnlockAccount([FromRoute(Name = "account_id")] int accountId)
+        {
+            APIResponse response = await _accountsService.UnlockAccount(accountId);
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
        }

        #endregion
--- a/SecureBank.API/SecureBank.API.Controllers/BalanceController.cs
+++ b/SecureBank.API/SecureBank.API.Controllers/BalanceController.cs
@@ -0,0 +1,71 @@
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SecureBank.API.Services;
+using SecureBank.Authentication;
+using SecureBank.Common;
+using SecureBank.Helpers.Attributes;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace SecureBank.API.Controllers
+{
+    [ApiController]
+    [Route("api/balance")]
+    public class BalanceController : ControllerBase
+    {
+        #region SERVICES
+
+        private IBalanceService _balanceService;
+
+        #endregion
+
+
+
+        #region CONSTRUCTORS
+
+        public BalanceController(IBalanceService balanceService)
+        {
+            _balanceService = balanceService;
+        }
+
+        #endregion
+
+
+
+        #region METHODS
+
+        [HttpGet]
+        [Route("{account_id}")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        [RequiresClaim("admin", "True")]
+        public async Task<ActionResult<APIResponse<decimal>>> GetAccountBalance([FromRoute(Name = "account_id")]int accountId)
+        {
+            APIResponse<decimal> response = await _balanceService.GetAccountBalance(accountId);
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpGet]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        public async Task<ActionResult<APIResponse<decimal>>> GetBalance()
+        {
+            APIResponse<decimal> response = await _balanceService.GetBalance(new Claims(User.Claims));
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        #endregion
+    }
+}
--- a/SecureBank.API/SecureBank.API.Controllers/SecureBank.API.Controllers.csproj
+++ b/SecureBank.API/SecureBank.API.Controllers/SecureBank.API.Controllers.csproj
@@ -7,12 +7,14 @@
  </PropertyGroup>

  <ItemGroup>
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.1" />
    <PackageReference Include="Swashbuckle.AspNetCore" Version="6.5.0" />
    <PackageReference Include="Swashbuckle.AspNetCore.Swagger" Version="6.5.0" />
    <PackageReference Include="Swashbuckle.AspNetCore.SwaggerGen" Version="6.5.0" />
  </ItemGroup>

  <ItemGroup>
+    <ProjectReference Include="..\..\SecureBank.Authentication\SecureBank.Authentication.csproj" />
    <ProjectReference Include="..\..\SecureBank.Common\SecureBank.Common.csproj" />
    <ProjectReference Include="..\SecureBank.API.Services\SecureBank.API.Services.csproj" />
  </ItemGroup>
--- a/SecureBank.API/SecureBank.API.Controllers/TransfersController.cs
+++ b/SecureBank.API/SecureBank.API.Controllers/TransfersController.cs
@@ -0,0 +1,103 @@
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using SecureBank.API.Services;
+using SecureBank.Authentication;
+using SecureBank.Common;
+using SecureBank.Common.Transfers;
+using SecureBank.Helpers.Attributes;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+using static System.Runtime.InteropServices.JavaScript.JSType;
+
+namespace SecureBank.API.Controllers
+{
+    [ApiController]
+    [Route("api/transfers")]
+    public class TransfersController : ControllerBase
+    {
+        #region SERVICES
+
+        private ITransfersService _transfersService;
+
+        #endregion
+
+
+
+        #region CONSTRUCTORS
+
+        public TransfersController(ITransfersService transfersService)
+        {
+            _transfersService = transfersService;
+        }
+
+        #endregion
+
+
+
+        #region METHODS
+
+        [HttpGet]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        public async Task<ActionResult<APIResponse<IEnumerable<TransferResponse>>>> GetTransfers()
+        {
+            APIResponse<IEnumerable<TransferResponse>> response = await _transfersService.GetTransfers(new Claims(User.Claims));
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+
+        [HttpGet]
+        [Route("{account_id}")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        [RequiresClaim("admin", "True")]
+        public async Task<ActionResult<APIResponse<IEnumerable<TransferResponse>>>> GetUserTransfers([FromRoute(Name = "account_id")]int accountId)
+        {
+            APIResponse<IEnumerable<TransferResponse>> response = await _transfersService.GetUserTransfers(accountId);
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpPost]
+        [Route("admin-transfer")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        [RequiresClaim("admin", "True")]
+        public async Task<ActionResult<APIResponse>> CreateAdminTransfer([FromBody]CreateAdminTransferRequest data)
+        {
+            APIResponse response = await _transfersService.CreateAdminTransfer(data);
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        [HttpPost]
+        [Route("user-transfer")]
+        [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)]
+        public async Task<ActionResult<APIResponse>> CreateUserTransfer([FromBody] CreateUserTransferRequest data)
+        {
+            APIResponse response = await _transfersService.CreateUserTransfer(data, new Claims(User.Claims));
+            return response.Status switch
+            {
+                ResponseStatus.Ok => Ok(response),
+                ResponseStatus.BadRequest => BadRequest(response),
+                ResponseStatus.Unauthorized => Unauthorized(response),
+            };
+        }
+
+        #endregion
+    }
+}