Files
jobtrackingapp/JobTrackerApi/Controllers/ApplicationChecklistController.cs
T

73 lines
2.9 KiB
C#

using JobTrackerApi.Models;
using JobTrackerApi.Services;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc;
namespace JobTrackerApi.Controllers;
// Phase 5 Milestone 2 — the application checklist. System items seed themselves on first read from the
// existing readiness signals; the user owns everything after that.
// docs/architecture/overview.md.
[ApiController]
[Route("api/jobapplications/{jobId:int}/checklist")]
[Authorize(AuthenticationSchemes = "local")]
public sealed class ApplicationChecklistController : ControllerBase
{
private readonly UserManager<ApplicationUser> _users;
private readonly IApplicationChecklistService _checklist;
public ApplicationChecklistController(UserManager<ApplicationUser> users, IApplicationChecklistService checklist)
{
_users = users;
_checklist = checklist;
}
[HttpGet]
public async Task<ActionResult<ChecklistDto>> Get(int jobId, CancellationToken ct)
{
var userId = await CurrentUserIdAsync();
if (userId is null) return Unauthorized();
var result = await _checklist.GetAsync(userId, jobId, ct);
return result is null ? NotFound() : Ok(result);
}
[HttpPost]
public async Task<ActionResult<ChecklistItemDto>> Add(int jobId, [FromBody] ChecklistItemInput input, CancellationToken ct)
{
var userId = await CurrentUserIdAsync();
if (userId is null) return Unauthorized();
if (string.IsNullOrWhiteSpace(input.Title)) return BadRequest("Title is required.");
var created = await _checklist.AddAsync(userId, jobId, input, ct);
return created is null ? NotFound() : Ok(created);
}
[HttpPatch("{itemId:int}")]
public async Task<ActionResult<ChecklistItemDto>> Update(int jobId, int itemId, [FromBody] ChecklistItemInput input, CancellationToken ct)
{
var userId = await CurrentUserIdAsync();
if (userId is null) return Unauthorized();
var updated = await _checklist.UpdateAsync(userId, jobId, itemId, input, ct);
return updated is null ? NotFound() : Ok(updated);
}
[HttpDelete("{itemId:int}")]
public async Task<IActionResult> Delete(int jobId, int itemId, CancellationToken ct)
{
var userId = await CurrentUserIdAsync();
if (userId is null) return Unauthorized();
return await _checklist.DeleteAsync(userId, jobId, itemId, ct) ? NoContent() : NotFound();
}
[HttpPut("order")]
public async Task<ActionResult<ChecklistDto>> Reorder(int jobId, [FromBody] List<int> orderedIds, CancellationToken ct)
{
var userId = await CurrentUserIdAsync();
if (userId is null) return Unauthorized();
var result = await _checklist.ReorderAsync(userId, jobId, orderedIds ?? new List<int>(), ct);
return result is null ? NotFound() : Ok(result);
}
private async Task<string?> CurrentUserIdAsync() => (await _users.GetUserAsync(User))?.Id;
}