aboutsummaryrefslogtreecommitdiffstats
path: root/code/api/src/Endpoints/Internal/PasswordResetRequests/Create/Route.cs
diff options
context:
space:
mode:
authorivarlovlie <git@ivarlovlie.no>2022-10-24 06:29:23 +0200
committerivarlovlie <git@ivarlovlie.no>2022-10-24 06:29:23 +0200
commit585c5c8537eb21dfc9f16108548e63d9ced3d971 (patch)
tree1582bc45dcab585ec7204f1570019b2ca8de36c5 /code/api/src/Endpoints/Internal/PasswordResetRequests/Create/Route.cs
parent4b42c5235482fe0d3811b4e2936614c79e20d970 (diff)
downloadgreatoffice-585c5c8537eb21dfc9f16108548e63d9ced3d971.tar.xz
greatoffice-585c5c8537eb21dfc9f16108548e63d9ced3d971.zip
feat: Before move to FastEndpoints
Diffstat (limited to 'code/api/src/Endpoints/Internal/PasswordResetRequests/Create/Route.cs')
-rw-r--r--code/api/src/Endpoints/Internal/PasswordResetRequests/Create/Route.cs57
1 files changed, 57 insertions, 0 deletions
diff --git a/code/api/src/Endpoints/Internal/PasswordResetRequests/Create/Route.cs b/code/api/src/Endpoints/Internal/PasswordResetRequests/Create/Route.cs
new file mode 100644
index 0000000..f837fc0
--- /dev/null
+++ b/code/api/src/Endpoints/Internal/PasswordResetRequests/Create/Route.cs
@@ -0,0 +1,57 @@
+namespace IOL.GreatOffice.Api.Endpoints.Internal.PasswordResetRequests.Create;
+
+public class Route : RouteBaseAsync.WithRequest<RequestModel>.WithActionResult
+{
+ private readonly ILogger<Route> _logger;
+ private readonly PasswordResetService _passwordResetService;
+ private readonly AppDbContext _context;
+
+ public Route(ILogger<Route> logger, PasswordResetService passwordResetService, AppDbContext context) {
+ _logger = logger;
+ _passwordResetService = passwordResetService;
+ _context = context;
+ }
+
+ /// <summary>
+ /// Create a new password reset request.
+ /// </summary>
+ /// <param name="request"></param>
+ /// <param name="cancellationToken"></param>
+ /// <returns></returns>
+ [AllowAnonymous]
+ [HttpPost("~/_/password-reset-request/create")]
+ public override async Task<ActionResult> HandleAsync(RequestModel request, CancellationToken cancellationToken = default) {
+ if (!request.Username.IsValidEmailAddress()) {
+ _logger.LogInformation("Username is invalid, not doing request for password change");
+ return KnownProblem("Invalid email address", request.Username + " looks like an invalid email address");
+ }
+
+ Request.Headers.TryGetValue(AppHeaders.BROWSER_TIME_ZONE, out var timeZoneHeader);
+ var tz = TimeZoneInfo.FindSystemTimeZoneById(timeZoneHeader.ToString().HasValue() ? timeZoneHeader.ToString() : "UTC");
+ var offset = tz.BaseUtcOffset.Hours;
+
+ // this is fine as long as the client is not connecting from Australia: Lord Howe Island
+ // according to https://en.wikipedia.org/wiki/Daylight_saving_time_by_country
+ if (tz.IsDaylightSavingTime(AppDateTime.UtcNow)) {
+ offset++;
+ }
+
+ _logger.LogInformation("Request time zone (" + tz.Id + ") offset is: " + offset + " hours");
+ var requestDateTime = TimeZoneInfo.ConvertTimeFromUtc(AppDateTime.UtcNow, tz);
+ _logger.LogInformation("Creating forgot password request with date time: " + requestDateTime.ToString("u"));
+
+ try {
+ var user = _context.Users.SingleOrDefault(c => c.Username.Equals(request.Username));
+ if (user != default) {
+ await _passwordResetService.AddRequestAsync(user, tz, cancellationToken);
+ return Ok();
+ }
+
+ _logger.LogInformation("User was not found, not doing request for password change");
+ return Ok();
+ } catch (Exception e) {
+ _logger.LogError(e, "_/password-reset-request/create threw an exception");
+ return Ok();
+ }
+ }
+} \ No newline at end of file