using System; using System.Linq; using System.Threading.Tasks; using Microsoft.AspNetCore.Mvc; using Bit.Core.Repositories; using Microsoft.AspNetCore.Authorization; using Bit.Core.Models.Api; using Bit.Core.Exceptions; using Bit.Core.Services; using Bit.Core; namespace Bit.Api.Controllers { [Route("organizations/{orgId}/groups")] [Authorize("Application")] public class GroupsController : Controller { private readonly IGroupRepository _groupRepository; private readonly IUserService _userService; private readonly CurrentContext _currentContext; public GroupsController( IGroupRepository groupRepository, IUserService userService, CurrentContext currentContext) { _groupRepository = groupRepository; _userService = userService; _currentContext = currentContext; } [HttpGet("{id}")] public async Task Get(string orgId, string id) { var group = await _groupRepository.GetByIdAsync(new Guid(id)); if(group == null || !_currentContext.OrganizationAdmin(group.OrganizationId)) { throw new NotFoundException(); } return new GroupResponseModel(group); } [HttpGet("")] public async Task> Get(string orgId) { var orgIdGuid = new Guid(orgId); if(!_currentContext.OrganizationAdmin(orgIdGuid)) { throw new NotFoundException(); } var groups = await _groupRepository.GetManyByOrganizationIdAsync(orgIdGuid); var responses = groups.Select(g => new GroupResponseModel(g)); return new ListResponseModel(responses); } [HttpPost("")] public async Task Post(string orgId, [FromBody]GroupRequestModel model) { var orgIdGuid = new Guid(orgId); if(!_currentContext.OrganizationAdmin(orgIdGuid)) { throw new NotFoundException(); } var group = model.ToGroup(orgIdGuid); await _groupRepository.CreateAsync(group); return new GroupResponseModel(group); } [HttpPut("{id}")] [HttpPost("{id}")] public async Task Put(string orgId, string id, [FromBody]GroupRequestModel model) { var group = await _groupRepository.GetByIdAsync(new Guid(id)); if(group == null || !_currentContext.OrganizationAdmin(group.OrganizationId)) { throw new NotFoundException(); } await _groupRepository.ReplaceAsync(model.ToGroup(group)); return new GroupResponseModel(group); } [HttpDelete("{id}")] [HttpPost("{id}/delete")] public async Task Delete(string orgId, string id) { var group = await _groupRepository.GetByIdAsync(new Guid(id)); if(group == null || !_currentContext.OrganizationAdmin(group.OrganizationId)) { throw new NotFoundException(); } await _groupRepository.DeleteAsync(group); } } }