1 files changed, 54 insertions, 0 deletions
diff --git a/code/api/src/Services/UserService.cs b/code/api/src/Services/UserService.cs
new file mode 100644
index 0000000..4df8ded
--- /dev/null
+++ b/code/api/src/Services/UserService.cs
@@ -0,0 +1,54 @@
+namespace IOL.GreatOffice.Api.Services;
+
+public class UserService
+{
+    private readonly PasswordResetService _passwordResetService;
+    private readonly ILogger<UserService> _logger;
+    private readonly MainAppDatabase _database;
+
+    public UserService(PasswordResetService passwordResetService, ILogger<UserService> logger, MainAppDatabase database) {
+        _passwordResetService = passwordResetService;
+        _logger = logger;
+        _database = database;
+    }
+
+    public async Task LogInUserAsync(HttpContext httpContext, User user, bool persist = false, CancellationToken cancellationToken = default) {
+        var identity = new ClaimsIdentity(user.DefaultClaims(), CookieAuthenticationDefaults.AuthenticationScheme);
+        var principal = new ClaimsPrincipal(identity);
+        var authenticationProperties = new AuthenticationProperties {
+            AllowRefresh = true,
+            IssuedUtc = DateTimeOffset.UtcNow,
+        };
+
+        if (persist) {
+            authenticationProperties.ExpiresUtc = DateTimeOffset.UtcNow.AddMonths(6);
+            authenticationProperties.IsPersistent = true;
+        }
+
+        await httpContext.SignInAsync(principal, authenticationProperties);
+        await _passwordResetService.DeleteRequestsForUserAsync(user.Id, cancellationToken);
+        _logger.LogInformation("Logged in user {userId}", user.Id);
+    }
+
+    public async Task LogOutUser(HttpContext httpContext, CancellationToken cancellationToken = default) {
+        await httpContext.SignOutAsync();
+        _logger.LogInformation("Logged out user {userId}", httpContext.User.FindFirst(AppClaims.USER_ID));
+    }
+
+    public async Task MarkUserAsDeleted(Guid userId, Guid actorId) {
+        var user = _database.Users.FirstOrDefault(c => c.Id == userId);
+        if (user == default) {
+            _logger.LogInformation("Tried to delete unknown user {userId}", userId);
+            return;
+        }
+
+        if (user.Username is "demo@greatoffice.app" or "tester@greatoffice.app") {
+            _logger.LogInformation("Not deleting user {userId}, because it's username is {username}", user.Id, user.Username);
+            return;
+        }
+
+        await _passwordResetService.DeleteRequestsForUserAsync(user.Id);
+        user.SetDeleted(actorId);
+        await _database.SaveChangesAsync();
+    }
+}
+\ No newline at end of file