#nullable enable using LBPUnion.ProjectLighthouse.Database; using LBPUnion.ProjectLighthouse.Extensions; using LBPUnion.ProjectLighthouse.Helpers; using LBPUnion.ProjectLighthouse.Servers.API.Responses; using LBPUnion.ProjectLighthouse.Types.Entities.Profile; using LBPUnion.ProjectLighthouse.Types.Entities.Token; using LBPUnion.ProjectLighthouse.Types.Users; using Microsoft.AspNetCore.Mvc; using Microsoft.EntityFrameworkCore; namespace LBPUnion.ProjectLighthouse.Servers.API.Controllers; /// /// A collection of endpoints relating to users. /// public class UserEndpoints : ApiEndpointController { private readonly DatabaseContext database; public UserEndpoints(DatabaseContext database) { this.database = database; } /// /// Gets a user and their information from the database. /// /// The ID of the user /// The user /// The user, if successful. /// The user could not be found. [HttpGet("user/{id:int}")] [ProducesResponseType(typeof(ApiUser), StatusCodes.Status200OK)] [ProducesResponseType(StatusCodes.Status404NotFound)] public async Task GetUser(int id) { UserEntity? user = await this.database.Users.FirstOrDefaultAsync(u => u.UserId == id); if (user == null) return this.NotFound(); return this.Ok(ApiUser.CreateFromEntity(user)); } [HttpGet("username/{username}")] [ProducesResponseType(typeof(ApiUser), StatusCodes.Status200OK)] [ProducesResponseType(StatusCodes.Status404NotFound)] public async Task GetUser(string username) { UserEntity? user = await this.database.Users.FirstOrDefaultAsync(u => u.Username == username); if (user == null) return this.NotFound(); return this.Ok(ApiUser.CreateFromEntity(user)); } /// /// Searches for the user based on the query /// /// The search query /// A list of users /// The list of users, if any were found /// No users matched the query [HttpGet("search/user")] [ProducesResponseType(typeof(ApiUser), StatusCodes.Status200OK)] [ProducesResponseType(StatusCodes.Status404NotFound)] public async Task SearchUsers(string query) { List users = (await this.database.Users .Where(u => u.PermissionLevel != PermissionLevel.Banned && u.Username.Contains(query)) .Where(u => u.ProfileVisibility == PrivacyType.All) // TODO: change check for when user is logged in .OrderByDescending(b => b.UserId) .Take(20) .ToListAsync()).ToSerializableList(ApiUser.CreateFromEntity); if (!users.Any()) return this.NotFound(); return this.Ok(users); } /// /// Gets a user and their information from the database. /// /// The ID of the user /// The user's status /// The user's status, if successful. /// The user could not be found. [HttpGet("user/{id:int}/status")] [ProducesResponseType(typeof(ApiUser), StatusCodes.Status200OK)] [ProducesResponseType(StatusCodes.Status404NotFound)] public IActionResult GetUserStatus(int id) { UserStatus userStatus = new(this.database, id); return this.Ok(userStatus); } [HttpPost("user/inviteToken")] [HttpPost("user/inviteToken/{username}")] public async Task CreateUserInviteToken([FromRoute] string? username) { if (!Configuration.ServerConfiguration.Instance.Authentication.RegistrationEnabled) return this.NotFound(); string? authHeader = this.Request.Headers["Authorization"]; if (string.IsNullOrWhiteSpace(authHeader)) return this.NotFound(); string authToken = authHeader[(authHeader.IndexOf(' ') + 1)..]; ApiKeyEntity? apiKey = await this.database.APIKeys.FirstOrDefaultAsync(k => k.Key == authToken); if (apiKey == null) return this.StatusCode(403); if (!string.IsNullOrWhiteSpace(username)) { bool userExists = await this.database.Users.AnyAsync(u => u.Username == username); if (userExists) return this.BadRequest(); } RegistrationTokenEntity token = new() { Created = DateTime.Now, Token = CryptoHelper.GenerateAuthToken(), Username = username, }; this.database.RegistrationTokens.Add(token); await this.database.SaveChangesAsync(); return this.Ok(token.Token); } }