DD.WellWorkover.Cloud/AsbCloudWebApi/Controllers/CrudWellRelatedController.cs

using AsbCloudApp.Data;
using AsbCloudApp.Services;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using System.Collections.Generic;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;

// For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
namespace AsbCloudWebApi.Controllers
{

    /// <summary>
    /// CRUD контроллер dto связных со скважиной для админки.
    /// </summary>
    /// <typeparam name="T"></typeparam>
    /// <typeparam name="TService"></typeparam>
    [ApiController]
    [Route("api/[controller]")]
    [Authorize]
    public abstract class CrudWellRelatedController<T, TService> : CrudController<T, TService>
        where T : IId, IWellRelated
        where TService : IRepositoryWellRelated<T>
    {
        protected readonly IWellService wellService;

        protected CrudWellRelatedController(IWellService wellService, TService service)
            : base(service)
        {
            this.wellService = wellService;
        }

        /// <summary>
        /// Получение всех записей, доступных компании пользователя.
        /// </summary>
        /// <param name="token"></param>
        /// <returns></returns>
        [HttpGet]
        public override async Task<ActionResult<IEnumerable<T>>> GetAllAsync(CancellationToken token)
        {
            var idCompany = User.GetCompanyId();

            if (idCompany is null)
                return Forbid();

            var wells = await wellService.GetAsync(new() { IdCompany = idCompany }, token);
            if (!wells.Any())
                return NoContent();

            var idsWells = wells.Select(w => w.Id);
            var result = await service.GetByIdWellAsync(idsWells, token);
            return Ok(result);
        }

        /// <summary>
        /// Получение всех записей, для скважины.
        /// </summary>
        /// <param name="idWell"></param>
        /// <param name="token"></param>
        /// <returns></returns>
        [HttpGet("well/{idWell}")]
        public async Task<ActionResult<IEnumerable<T>>> GetByIdWellAsync(int idWell, CancellationToken token)
        {
            if (!await UserHasAccesToWellAsync(idWell, token))
                return Forbid();

            var result = await service.GetByIdWellAsync(idWell, token);
            return Ok(result);
        }

        /// <summary>
        /// Получить одну запись по Id
        /// </summary>
        /// <param name="id">id записи</param>
        /// <param name="token"></param>
        /// <returns>запись</returns>
        [HttpGet("{id}")]
        public override async Task<ActionResult<T?>> GetOrDefaultAsync(int id, CancellationToken token)
        {
            var actionResult = await base.GetOrDefaultAsync(id, token);
            if(actionResult.Result is OkObjectResult okResult)
            {
                if (okResult.Value is IWellRelated wellRelated)
                    if (!await UserHasAccesToWellAsync(wellRelated.IdWell, token))
                        return Forbid();
            }
            
            return actionResult;
        }

        /// <summary>
        /// Добавить запись
        /// </summary>
        /// <param name="value">запись</param>
        /// <param name="token"></param>
        /// <returns>id</returns>
        [HttpPost]
        public override async Task<ActionResult<int>> InsertAsync([FromBody] T value, CancellationToken token)
        {
            if (!await UserHasAccesToWellAsync(value.IdWell, token))
                return Forbid();
            return await base.InsertAsync(value, token);
        }

        /// <summary>
        /// Добавить несколько записей<br/>
        /// При невозможности добавить любую из записей, все не будут добавлены.
        /// </summary>
        /// <param name="values">записи</param>
        /// <param name="token"></param>
        /// <returns>id</returns>
        [HttpPost("range")]
        public override async Task<ActionResult<int>> InsertRangeAsync([FromBody] IEnumerable<T> values, CancellationToken token)
        {
            var idsWells = values.Select(v => v.IdWell).Distinct();
            foreach (var idWell in idsWells)
                if (!await UserHasAccesToWellAsync(idWell, token))
                    return Forbid();
            return await base.InsertRangeAsync(values, token);
        }

        /// <summary>
        /// Редактировать запись по id
        /// </summary>
        /// <param name="value">запись</param>
        /// <param name="token"></param>
        /// <returns>1 - успешно отредактировано, 0 - нет</returns>
        [HttpPut]
        public override async Task<ActionResult<int>> UpdateAsync([FromBody] T value, CancellationToken token)
        {
            if (!await UserHasAccesToWellAsync(value.IdWell, token))
                return Forbid();
            return await base.UpdateAsync(value, token);
        }

        /// <summary>
        /// Удалить запись по id
        /// </summary>
        /// <param name="id">id записи</param>
        /// <param name="token"></param>
        /// <returns>1 - успешно удалено, 0 - нет</returns>
        [HttpDelete("{id}")]
        public override async Task<ActionResult<int>> DeleteAsync(int id, CancellationToken token)
        {
            var item = await service.GetOrDefaultAsync(id, token);
            if (item is null)
                return NoContent();
            if (!await UserHasAccesToWellAsync(item.IdWell, token))
                return Forbid();
            return await base.DeleteAsync(id, token);
        }

        protected async Task<bool> UserHasAccesToWellAsync(int idWell, CancellationToken token)
        {
            var idCompany = User.GetCompanyId();
            if (idCompany is not null &&
                await wellService.IsCompanyInvolvedInWellAsync((int)idCompany, idWell, token)
                    .ConfigureAwait(false))
                return true;
            return false;
        }
    }

}