BotSharp/src/Infrastructure/BotSharp.OpenAPI/Controllers/UserController.cs

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authentication.Cookies;
using System.ComponentModel.DataAnnotations;

namespace BotSharp.OpenAPI.Controllers;

[Authorize]
[ApiController]
public class UserController : ControllerBase
{
    private readonly IServiceProvider _services;
    private readonly IUserService _userService;
    public UserController(IUserService userService, IServiceProvider services)
    {
        _services = services;
        _userService = userService;
    }

    [AllowAnonymous]
    [HttpPost("/token")]
    public async Task<ActionResult<Token>> GetToken([FromHeader(Name = "Authorization")][Required] string authcode)
    {
        if (authcode.Contains(' '))
        {
            authcode = authcode.Split(' ')[1];
        }

        var token = await _userService.GetToken(authcode);

        if (token == null)
        {
            return Unauthorized();
        }
        return Ok(token);
    }

    [AllowAnonymous]
    [HttpGet("/sso/{provider}")]
    public async Task<IActionResult> Authorize([FromRoute] string provider, string redirectUrl)
    {
        return Challenge(new AuthenticationProperties { RedirectUri = redirectUrl }, provider);
    }

    [AllowAnonymous]
    [HttpGet("/signout")]
    [HttpPost("/signout")]
    public IActionResult SignOutCurrentUser()
    {
        // Instruct the cookies middleware to delete the local cookie created
        // when the user agent is redirected from the external identity provider
        // after a successful authentication flow (e.g Google or Facebook).
        return SignOut(new AuthenticationProperties { RedirectUri = "/" },
            CookieAuthenticationDefaults.AuthenticationScheme);
    }

    [AllowAnonymous]
    [HttpPost("/user")]
    public async Task<UserViewModel> CreateUser(UserCreationModel user)
    {
        var createdUser = await _userService.CreateUser(user.ToUser());
        return UserViewModel.FromUser(createdUser);
    }

    [AllowAnonymous]
    [HttpPost("/user/activate")]
    public async Task<ActionResult<Token>> ActivateUser(UserActivationModel model)
    {
        var token = await _userService.ActiveUser(model);
        if (token == null)
        {
            return BadRequest();
        }
        return Ok(token);
    }

    [HttpGet("/user/me")]
    public async Task<UserViewModel> GetMyUserProfile()
    {
        var user = await _userService.GetMyProfile();
        if (user == null)
        {
            var identiy = _services.GetRequiredService<IUserIdentity>();
            var accessor = _services.GetRequiredService<IHttpContextAccessor>();
            var claims = accessor.HttpContext.User.Claims;
            user = await _userService.CreateUser(new User
            {
                Email = identiy.Email,
                UserName = identiy.UserName,
                FirstName = identiy.FirstName,
                LastName = identiy.LastName,
                Source = claims.First().Issuer,
                ExternalId = identiy.Id,
                RegionCode = identiy.RegionCode,
                Phone = identiy.Phone,
            });
        }
        return UserViewModel.FromUser(user);
    }

    [AllowAnonymous]
    [HttpGet("/user/name/existing")]
    public async Task<bool> VerifyUserNameExisting([FromQuery] string userName)
    {
        return await _userService.VerifyUserNameExisting(userName);
    }

    [AllowAnonymous]
    [HttpGet("/user/email/existing")]
    public async Task<bool> VerifyEmailExisting([FromQuery] string email)
    {
        return await _userService.VerifyEmailExisting(email);
    }

    [AllowAnonymous]
    [HttpGet("/user/phone/existing")]
    public async Task<bool> VerifyPhoneExisting([FromQuery] string phone)
    {
        return await _userService.VerifyPhoneExisting(phone);
    }

    [AllowAnonymous]
    [HttpPost("/user/verifycode-out")]
    public async Task<bool> SendVerificationCodeResetPassword([FromBody] UserCreationModel user)
    {
        return await _userService.SendVerificationCodeResetPasswordNoLogin(user.ToUser());
    }

    [HttpPost("/user/verifycode-in")]
    public async Task<bool> SendVerificationCodeResetPasswordLogined()
    {
        return await _userService.SendVerificationCodeResetPasswordLogin();
    }

    [AllowAnonymous]
    [HttpPost("/user/resetpassword")]
    public async Task<bool> ResetUserPassword([FromBody] UserResetPasswordModel user)
    {
        return await _userService.ResetUserPassword(user.ToUser());
    }

    [HttpPost("/user/updatepassword")]
    public async Task<bool> UpdatePassword([FromBody] User user)
    {
        if (string.IsNullOrWhiteSpace(user.Password) || string.IsNullOrWhiteSpace(user.VerificationCode))
        {
            return false;
        }
        return await _userService.UpdatePassword(user.Password, user.VerificationCode);
    }

    [HttpPost("/user/email/modify")]
    public async Task<bool> ModifyUserEmail([FromQuery] string email)
    {
        return await _userService.ModifyUserEmail(email);
    }

    [HttpPost("/user/phone/modify")]
    public async Task<bool> ModifyUserPhone([FromQuery] string phone, [FromQuery] string regionCode = "CN")
    {
        return await _userService.ModifyUserPhone(phone, regionCode);
    }

    [HttpPost("/user/update/isdisable")]
    public async Task<bool> UpdateUsersIsDisable([FromQuery] List<string> userIds, [FromQuery] bool isDisable)
    {
        return await _userService.UpdateUsersIsDisable(userIds, isDisable);
    }

    #region Avatar
    [HttpPost("/user/avatar")]
    public bool UploadUserAvatar([FromBody] UserAvatarModel input)
    {
        var fileStorage = _services.GetRequiredService<IFileStorageService>();
        var file = new FileDataModel
        {
            FileName = input.FileName,
            FileData = input.FileData,
        };
        return fileStorage.SaveUserAvatar(file);
    }

    [HttpGet("/user/avatar")]
    public IActionResult GetUserAvatar()
    {
        var fileStorage = _services.GetRequiredService<IFileStorageService>();
        var file = fileStorage.GetUserAvatar();
        if (string.IsNullOrEmpty(file))
        {
            return NotFound();
        }
        return BuildFileResult(file);
    }
    #endregion


    #region Private methods
    private FileContentResult BuildFileResult(string file)
    {
        var fileStorage = _services.GetRequiredService<IFileStorageService>();
        var bytes = fileStorage.GetFileBytes(file);
        return File(bytes, "application/octet-stream", Path.GetFileName(file));
    }
    #endregion
}