aboutsummaryrefslogtreecommitdiffstats
path: root/code/api/src/Endpoints/Internal/PasswordResetRequests/CreateResetRequestRoute.cs
blob: edf825e27e5fbc2bdf06c63651c960edfb6b7258 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
namespace IOL.GreatOffice.Api.Endpoints.Internal.PasswordResetRequests;

public class CreateResetRequestRoute : RouteBaseAsync.WithRequest<string>.WithActionResult
{
    private readonly ILogger<CreateResetRequestRoute> _logger;
    private readonly PasswordResetService _passwordResetService;
    private readonly MainAppDatabase _database;

    public CreateResetRequestRoute(ILogger<CreateResetRequestRoute> logger, PasswordResetService passwordResetService, MainAppDatabase database) {
        _logger = logger;
        _passwordResetService = passwordResetService;
        _database = database;
    }

    [AllowAnonymous]
    [HttpPost("~/_/password-reset-request/create")]
    public override async Task<ActionResult> HandleAsync([FromQuery(Name = "for_user")] string username, CancellationToken cancellationToken = default) {
        var tz = GetRequestTimeZone(_logger);
        _logger.LogInformation("Creating forgot password request with local date time: " + tz.LocalDateTime.ToString("u"));

        var user = _database.Users.FirstOrDefault(c => c.Username.Equals(username));
        // Don't inform the caller that the user does not exist.
        if (user == default) return Ok();

        await _passwordResetService.AddRequestAsync(user, tz.TimeZoneInfo, cancellationToken);

        return Ok();
    }
}