DeleteFromVault.cs

using System;
using System.Collections.Generic;
using System.Threading.Tasks;
using System.Xml;
using Waher.Content;
using Waher.Networking.HTTP;
using Waher.Persistence;
using Waher.Persistence.Filters;
using Waher.Runtime.IO;
using Waher.Script;
using Waher.Script.Abstraction.Elements;
using Waher.Service.IoTBroker.DataStorage;
 
namespace Waher.Service.IoTBroker.WebServices.Agent.Storage
{
    public class DeleteFromVault : AgentPostResource
    {
        public DeleteFromVault()
            : base("Storage/DeleteFromVault",
                new KeyValuePair<Type, Expression>(typeof(Dictionary<string, object>), new Expression(jsonPattern)),
                new KeyValuePair<Type, Expression>(typeof(XmlDocument), new Expression(xmlPattern)))
        {
        }
 
        private static readonly string jsonPattern = Resources.LoadResourceAsText(typeof(StoreInVault).Namespace + ".JSON.DeleteFromVault.req");
        private static readonly string xmlPattern = Resources.LoadResourceAsText(typeof(StoreInVault).Namespace + ".XML.DeleteFromVault.req");
 
        public override async Task POST(HttpRequest Request, HttpResponse Response, Dictionary<string, IElement> Parameters)
        {
            AccountUser User = AssertUserAuthenticated(Request);
 
            string VaultId = (string)Parameters["PVaultId"]?.AssociatedObjectValue;
            byte[] VaultIdBin;
 
            try
            {
                VaultIdBin = Convert.FromBase64String(VaultId);
            }
            catch (Exception)
            {
                throw new BadRequestException("Invalid Vault ID.");
            }
 
            VaultItem Item = await Database.FindFirstIgnoreRest<VaultItem>(
                new FilterFieldEqualTo("VaultId", VaultIdBin))
                ?? throw new NotFoundException("Vault item not found.");
 
            if (Item.Account != User.UserName)
                throw new ForbiddenException(Request, "Access to vault item denied.");
 
            await Database.Delete(Item);
 
            await Response.Return(new NamedDictionary<string, object>("AckResponse", AgentNamespace));
        }
    }
}