using System; using System.Threading.Tasks; using Microsoft.AspNetCore.Http; using Microsoft.AspNetCore.Mvc; using Microsoft.AspNetCore.Routing; using Microsoft.AspNetCore.Authorization; using Microsoft.Extensions.Logging; using AyaNova.Models; using AyaNova.Api.ControllerHelpers; using AyaNova.Biz; namespace AyaNova.Api.Controllers { /// /// Log files controller /// [ApiController] [ApiVersion("8.0")] [Route("api/v{version:apiVersion}/[controller]")] [Authorize] public class EventLogController : ControllerBase { private readonly AyContext ct; private readonly ILogger log; private readonly ApiServerState serverState; /// /// ctor /// /// /// /// public EventLogController(AyContext dbcontext, ILogger logger, ApiServerState apiServerState) { ct = dbcontext; log = logger; serverState = apiServerState; } /// /// Get event log for object and date range specified /// /// Required Role: Read full object properties rights to object type specified /// /// /// Event log entry list for object [HttpGet("ObjectLog")] public async Task GetObjectLog([FromQuery] EventLogOptions opt) { if (serverState.IsClosed) return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); if (!Authorized.HasReadFullRole(HttpContext.Items, opt.AyType)) { return StatusCode(403, new ApiNotAuthorizedResponse()); } var result = await EventLogProcessor.GetLogForObjectAsync(opt, ct); return Ok(ApiOkResponse.Response(result, true)); } /// /// Get event log entries for a specified user and date range /// /// Required Role: Read rights to User object or User's own data /// /// /// Event log for user [HttpGet("UserLog")] public async Task GetUserLog([FromQuery] UserEventLogOptions opt) { if (serverState.IsClosed) return StatusCode(503, new ApiErrorResponse(serverState.ApiErrorCode, null, serverState.Reason)); if (opt.AyType != AyaType.User) { //return bad request return BadRequest(new ApiErrorResponse(ApiErrorCode.VALIDATION_INVALID_VALUE, "AyType", "User type required")); } long UserId = UserIdFromContext.Id(HttpContext.Items); //If not authorized to read a user and also not the current user asking for their own log then NO LOG FOR YOU! if (!Authorized.HasReadFullRole(HttpContext.Items, AyaType.User) && opt.AyId != UserId) { return StatusCode(403, new ApiNotAuthorizedResponse()); } var result = await EventLogProcessor.GetLogForUserAsync(opt, ct); return Ok(ApiOkResponse.Response(result, true)); } //------------ public sealed class EventLogOptions { [FromQuery] public AyaType AyType { get; set; } [FromQuery] public long AyId { get; set; } [FromQuery] public int? Offset { get; set; } [FromQuery] public int? Limit { get; set; } } public sealed class UserEventLogOptions { [FromQuery] public long AyId { get; set; } [FromQuery] public int? Offset { get; set; } [FromQuery] public int? Limit { get; set; } } public sealed class ObjectEventLogItem { //DateTime, UserId, Event, Textra public DateTime Date { get; set; } public long UserId { get; set; } public AyaEvent Event { get; set; } public string Textra { get; set; } } public sealed class UserEventLogItem { //DateTime, ObjectType, ObjectId, Event, Textra public DateTime Date { get; set; } public AyaType ObjectType { get; set; } public long ObjectId { get; set; } public AyaEvent Event { get; set; } public string Textra { get; set; } } }//eoc }//eons