LegalIdentityStateChanged.cs

using System;
using System.Collections.Generic;
using System.Threading.Tasks;
using Waher.Content.Json;
using Waher.IoTGateway;
using Waher.Networking.HTTP;
using Waher.Networking.XMPP.Server;
using Waher.Persistence;
using Waher.Persistence.Filters;
using Waher.Service.IoTBroker.Legal.Identity;
 
namespace Waher.Service.IoTBroker.WebServices
{
    public class LegalIdentityStateChanged : HttpSynchronousResource, IHttpPostMethod
    {
        public LegalIdentityStateChanged()
            : base("/LegalIdentityStateChanged")
        {
        }
 
        public override bool HandlesSubPaths => false;
        public override bool UserSessions => true;
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            Gateway.AssertUserAuthenticated(Request, "Admin.Notarius.Identities");
            // TODO: OR Admin.Notarius.PendingIdentities
            // TODO: Remove on lab neuron, rights for QA testers to view all identities.
 
            if (!Request.HasData)
                throw new BadRequestException();
 
            if (!(await Request.DecodeDataAsync() is Dictionary<string, object> Obj))
                throw new BadRequestException();
 
            if (!Obj.TryGetValue("id", out object Obj2) || !(Obj2 is string Id) ||
                !Obj.TryGetValue("state", out Obj2) || !(Obj2 is string s) ||
                !Enum.TryParse(s, out IdentityState State))
            {
                throw new BadRequestException();
            }
 
            LegalIdentity Identity = await Database.FindFirstDeleteRest<LegalIdentity>(new FilterFieldEqualTo("Id", Id))
                ?? throw new NotFoundException();
 
            IAccount Account = await XmppServerModule.GetAccountAsync(Identity.Account)
                ?? throw new ForbiddenException("Account has been removed.");
 
            if (!Account.Enabled)
                throw new ForbiddenException("Account has been disabled.");
 
            await XmppServerModule.Legal.UpdateState(Identity, State, Request.RemoteEndPoint, Account as DataStorage.Account);
 
            Response.StatusCode = 200;
            Response.ContentType = JsonCodec.DefaultContentType;
            await Response.Write("true");
        }
    }
}