47 lines
1.6 KiB
C#
47 lines
1.6 KiB
C#
using HelloShop.IdentityService.Entities;
|
|
using HelloShop.IdentityService.EntityFrameworks;
|
|
using HelloShop.ServiceDefaults.Authorization;
|
|
using HelloShop.ServiceDefaults.Constants;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.EntityFrameworkCore;
|
|
|
|
[Route("api/[controller]")]
|
|
[ApiController]
|
|
[Authorize]
|
|
public class PermissionsController(IdentityServiceDbContext dbContext) : ControllerBase
|
|
{
|
|
|
|
[HttpGet(nameof(PermissionList))]
|
|
public async Task<ActionResult<IEnumerable<PermissionGrantedResponse>>> PermissionList(int? roleId, string? name, string? resourceType = null, string? resourceId = null)
|
|
{
|
|
var roleIds = HttpContext.User.FindAll(CustomClaimTypes.RoleIdentifier).Select(c => Convert.ToInt32(c.Value));
|
|
|
|
if (roleId.HasValue && roleIds.Any(x => x == roleId))
|
|
{
|
|
roleIds = [roleId.Value];
|
|
}
|
|
|
|
List<PermissionGrantedResponse> result = [];
|
|
|
|
IQueryable<PermissionGranted> queryable = dbContext.Set<PermissionGranted>().Where(x => roleIds.Contains(x.RoleId));
|
|
|
|
if (!string.IsNullOrWhiteSpace(name))
|
|
{
|
|
queryable = queryable.Where(x => x.PermissionName == name);
|
|
}
|
|
|
|
var permissionGrants = await queryable.Where(x => x.ResourceType == resourceType && x.ResourceId == resourceId).Distinct().ToListAsync();
|
|
|
|
result.AddRange(permissionGrants.Select(x => new PermissionGrantedResponse
|
|
{
|
|
Name = x.PermissionName,
|
|
ResourceType = x.ResourceType,
|
|
ResourceId = x.ResourceId,
|
|
IsGranted = true
|
|
}));
|
|
|
|
return Ok(result);
|
|
}
|
|
}
|