WIP

2026-06-10 13:06:55 -07:00
parent 4621e8380b
commit 570ab363c2
987 changed files with 22413 additions and 21031 deletions
--- a/src/api/MicCheck.Api/Common/Security/Authorization/ProjectPermissionRequirementHandler.cs
+++ b/src/api/MicCheck.Api/Common/Security/Authorization/ProjectPermissionRequirementHandler.cs
@@ -1,54 +1,54 @@
-using System.IdentityModel.Tokens.Jwt;
-using MicCheck.Api.Data;
-using MicCheck.Api.Organizations;
-using Microsoft.AspNetCore.Authorization;
-using Microsoft.EntityFrameworkCore;
-
-namespace MicCheck.Api.Common.Security.Authorization;
-
-public class ProjectPermissionRequirementHandler(
-    MicCheckDbContext db,
-    IHttpContextAccessor httpContextAccessor)
-    : AuthorizationHandler<ProjectPermissionRequirement>
-{
-    protected override async Task HandleRequirementAsync(
-        AuthorizationHandlerContext context,
-        ProjectPermissionRequirement requirement)
-    {
-        var userIdClaim = context.User.FindFirst(JwtRegisteredClaimNames.Sub);
-        if (userIdClaim is null || !int.TryParse(userIdClaim.Value, out var userId))
-        {
-            context.Fail();
-            return;
-        }
-
-        if (context.User.HasClaim("OrganizationRole", OrganizationRole.Admin.ToString()))
-        {
-            context.Succeed(requirement);
-            return;
-        }
-
-        var httpContext = httpContextAccessor.HttpContext;
-        if (httpContext is null ||
-            !httpContext.Request.RouteValues.TryGetValue("projectId", out var projectIdValue) ||
-            !int.TryParse(projectIdValue?.ToString(), out var projectId))
-        {
-            context.Fail();
-            return;
-        }
-
-        var permission = await db.UserProjectPermissions
-            .FirstOrDefaultAsync(p => p.UserId == userId && p.ProjectId == projectId);
-
-        if (permission is null)
-        {
-            context.Fail();
-            return;
-        }
-
-        if (permission.IsAdmin || permission.Permissions.Contains(requirement.Permission))
-            context.Succeed(requirement);
-        else
-            context.Fail();
-    }
-}
+using System.IdentityModel.Tokens.Jwt;
+using MicCheck.Api.Data;
+using MicCheck.Api.Organizations;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.EntityFrameworkCore;
+
+namespace MicCheck.Api.Common.Security.Authorization;
+
+public class ProjectPermissionRequirementHandler(
+    MicCheckDbContext db,
+    IHttpContextAccessor httpContextAccessor)
+    : AuthorizationHandler<ProjectPermissionRequirement>
+{
+    protected override async Task HandleRequirementAsync(
+        AuthorizationHandlerContext context,
+        ProjectPermissionRequirement requirement)
+    {
+        var userIdClaim = context.User.FindFirst(JwtRegisteredClaimNames.Sub);
+        if (userIdClaim is null || !int.TryParse(userIdClaim.Value, out var userId))
+        {
+            context.Fail();
+            return;
+        }
+
+        if (context.User.HasClaim("OrganizationRole", OrganizationRole.Admin.ToString()))
+        {
+            context.Succeed(requirement);
+            return;
+        }
+
+        var httpContext = httpContextAccessor.HttpContext;
+        if (httpContext is null ||
+            !httpContext.Request.RouteValues.TryGetValue("projectId", out var projectIdValue) ||
+            !int.TryParse(projectIdValue?.ToString(), out var projectId))
+        {
+            context.Fail();
+            return;
+        }
+
+        var permission = await db.UserProjectPermissions
+            .FirstOrDefaultAsync(p => p.UserId == userId && p.ProjectId == projectId);
+
+        if (permission is null)
+        {
+            context.Fail();
+            return;
+        }
+
+        if (permission.IsAdmin || permission.Permissions.Contains(requirement.Permission))
+            context.Succeed(requirement);
+        else
+            context.Fail();
+    }
+}