RBAC - REST APIs

src/IoTHub.Portal.Application/Mappers/GroupProfile.cs

@@ -0,0 +1,39 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Application.Mappers
+{
+    using AutoMapper;
+    using IoTHub.Portal.Domain.Entities;
+    using IoTHub.Portal.Shared.Models.v10;
+
+    public class GroupProfile : Profile
+    {
+        public GroupProfile()
+        {
+            _ = CreateMap<Group, GroupModel>()
+               .ForMember(dest => dest.Id, opts => opts.MapFrom(src => src.Id))
+               .ForMember(dest => dest.Name, opts => opts.MapFrom(src => src.Name));
+
+            _ = CreateMap<Group, GroupDetailsModel>()
+                .ForMember(dest => dest.Id, opts => opts.MapFrom(src => src.Id))
+                .ForMember(dest => dest.Name, opts => opts.MapFrom(src => src.Name))
+                .ForMember(dest => dest.Users, opts => opts.MapFrom(src =>
+                                   src.Members.Select(u => new UserModel
+                                   {
+                                       Id = u.User.Id,
+                                       GivenName = u.User.GivenName
+                                   })))
+                .ForMember(dest => dest.AccessControls, opts => opts.MapFrom(src =>
+                                   src.AccessControls.Select(ac => new AccessControlModel
+                                   {
+                                       Id = ac.Id,
+                                       Scope = ac.Scope,
+                                       Role = new RoleModel { Name = ac.Role.Name }
+                                   })));
+
+            _ = CreateMap<GroupModel, Group>()
+                 .ForMember(dest => dest.Name, opts => opts.MapFrom(src => src.Name));
+        }
+    }
+}

src/IoTHub.Portal.Application/Mappers/RoleProfile.cs

@@ -0,0 +1,32 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Application.Mappers
+{
+    using AutoMapper;
+    using IoTHub.Portal.Domain.Entities;
+    using IoTHub.Portal.Shared.Models.v10;
+
+    public class RoleProfile : Profile
+    {
+        public RoleProfile()
+        {
+            _ = CreateMap<Role, RoleModel>()
+               .ForMember(dest => dest.Id, opts => opts.MapFrom(src => src.Id))
+               .ForMember(dest => dest.Name, opts => opts.MapFrom(src => src.Name));
+
+            _ = CreateMap<Role, RoleDetailsModel>()
+                .ForMember(dest => dest.Id, opts => opts.MapFrom(src => src.Id))
+                .ForMember(dest => dest.Name, opts => opts.MapFrom(src => src.Name))
+                .ForMember(dest => dest.Description, opts => opts.MapFrom(src => src.Description))
+                .ForMember(dest => dest.Actions, opts => opts.MapFrom(src =>
+                    src.Actions.Select(a => a.Name)));
+
+            _ = CreateMap<RoleDetailsModel, Role>()
+                 .ForMember(dest => dest.Id, opts => opts.MapFrom(src => src.Id))
+                 .ForMember(dest => dest.Name, opts => opts.MapFrom(src => src.Name))
+                 .ForMember(dest => dest.Description, opts => opts.MapFrom(src => src.Description))
+                 .ForMember(dest => dest.Actions, opts => opts.Ignore());
+        }
+    }
+}

src/IoTHub.Portal.Application/Mappers/UserProfile.cs

@@ -0,0 +1,33 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Application.Mappers
+{
+    using AutoMapper;
+    using IoTHub.Portal.Domain.Entities;
+    using IoTHub.Portal.Shared.Models.v10;
+
+    public class UserProfile : Profile
+    {
+        public UserProfile()
+        {
+            _ = CreateMap<User, UserModel>()
+               .ForMember(dest => dest.Id, opts => opts.MapFrom(src => src.Id))
+               .ForMember(dest => dest.GivenName, opts => opts.MapFrom(src => src.GivenName));
+
+            _ = CreateMap<User, UserDetailsModel>()
+                .ForMember(dest => dest.Id, opts => opts.MapFrom(src => src.Id))
+                .ForMember(dest => dest.Name, opts => opts.MapFrom(src => src.Name))
+                .ForMember(dest => dest.Email, opts => opts.MapFrom(src => src.Email))
+                .ForMember(dest => dest.GivenName, opts => opts.MapFrom(src => src.GivenName))
+                .ForMember(dest => dest.FamilyName, opts => opts.MapFrom(src => src.FamilyName))
+                .ForMember(dest => dest.AccessControls, opts => opts.MapFrom(src =>
+                                   src.AccessControls.Select(ac => new AccessControlModel
+                                   {
+                                       Id = ac.Id,
+                                       Scope = ac.Scope,
+                                       Role = new RoleModel { Name = ac.Role.Name }
+                                   })));
+        }
+    }
+}

src/IoTHub.Portal.Application/Services/IGroupManagementService.cs

@@ -0,0 +1,14 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Application.Services
+{
+    using IoTHub.Portal.Shared.Models.v10;
+
+    public interface IGroupManagementService
+    {
+        Task<IEnumerable<GroupModel>> GetAllGroupsAsync();
+        Task<GroupDetailsModel> GetGroupDetailsAsync(string groupId);
+
+    }
+}

src/IoTHub.Portal.Application/Services/IRoleManagementService.cs

@@ -0,0 +1,16 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Application.Services
+{
+    using IoTHub.Portal.Shared.Models.v10;
+
+    public interface IRoleManagementService
+    {
+        Task<IEnumerable<RoleModel>> GetAllRolesAsync();
+        Task<RoleDetailsModel> GetRoleDetailsAsync(string roleName);
+        Task<RoleDetailsModel> CreateRole(RoleDetailsModel roleDetails);
+        Task<RoleDetailsModel> UpdateRole(string roleName, RoleDetailsModel roleDetails);
+        Task<bool> DeleteRole(string roleName);
+    }
+}

src/IoTHub.Portal.Application/Services/IUserManagementService.cs

@@ -0,0 +1,14 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Application.Services
+{
+    using IoTHub.Portal.Shared.Models.v10;
+
+    public interface IUserManagementService
+    {
+        Task<IEnumerable<UserModel>> GetAllUsersAsync();
+        Task<UserDetailsModel> GetUserDetailsAsync(string userId);
+
+    }
+}

src/IoTHub.Portal.Domain/Entities/AccessControl.cs

@@ -10,5 +10,9 @@ public class AccessControl : EntityBase
         public string Scope { get; set; } = default!;
         public string RoleId { get; set; } = default!;
         public Role Role { get; set; } = new Role();
+        public User User { get; set; } = new User();
+        public Group Group { get; set; } = new Group();
+        public string? GroupId { get; set; } = default!;
+        public string? UserId { get; set; } = default!;
     }
 }

src/IoTHub.Portal.Domain/Entities/Group.cs

@@ -11,7 +11,7 @@ namespace IoTHub.Portal.Domain.Entities
     public class Group : EntityBase
     {
         public string Name { get; set; } = default!;
-        public string Avatar { get; set; } = default!;
+        public string Description { get; set; } = default!;
         public virtual ICollection<UserMemberShip> Members { get; set; } = new Collection<UserMemberShip>();
         public virtual ICollection<AccessControl> AccessControls { get; set; } = new Collection<AccessControl>();
 

src/IoTHub.Portal.Domain/Entities/Role.cs

@@ -10,6 +10,7 @@ namespace IoTHub.Portal.Domain.Entities
     public class Role : EntityBase
     {
         public string Name { get; set; } = default!;
+        public string Description { get; set; } = default!;
         public virtual ICollection<Action> Actions { get; set; } = new Collection<Action>();
     }
 }

src/IoTHub.Portal.Domain/Entities/User.cs

@@ -12,7 +12,8 @@ public class User : EntityBase
     {
         public string Email { get; set; } = default!;
         public string Name { get; set; } = default!;
-        public string Forename { get; set; } = default!;
+        public string GivenName { get; set; } = default!;
+        public string FamilyName { get; set; } = default!;
         public virtual ICollection<UserMemberShip> Groups { get; set; } = new Collection<UserMemberShip>();
         public virtual ICollection<AccessControl> AccessControls { get; set; } = new Collection<AccessControl>();
     }

src/IoTHub.Portal.Domain/Entities/UserMemberShip.cs

@@ -3,9 +3,7 @@
 
 namespace IoTHub.Portal.Domain.Entities
 {
-    using IoTHub.Portal.Domain.Base;
-
-    public class UserMemberShip : EntityBase
+    public class UserMemberShip
     {
         public string UserId { get; set; } = default!;
         public virtual User? User { get; set; }

src/IoTHub.Portal.Domain/Repositories/IGroupRepository.cs

@@ -0,0 +1,14 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Domain.Repositories
+{
+    using IoTHub.Portal.Domain.Entities;
+    using System.Threading.Tasks;
+
+    public interface IGroupRepository
+    {
+        Task<Group[]> GetAllAsync();
+        Task<Group?> GetByIdAsync(string groupId);
+    }
+}

src/IoTHub.Portal.Domain/Repositories/IRoleRepository.cs

@@ -0,0 +1,13 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Domain.Repositories
+{
+    using System.Linq.Expressions;
+    using IoTHub.Portal.Domain.Entities;
+
+    public interface IRoleRepository : IRepository<Role>
+    {
+        Task<Role?> GetByNameAsync(string roleName, params Expression<Func<Role, object>>[] includeProperties);
+    }
+}

src/IoTHub.Portal.Domain/Repositories/IUserRepository.cs

@@ -0,0 +1,14 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Domain.Repositories
+{
+    using IoTHub.Portal.Domain.Entities;
+    using System.Threading.Tasks;
+
+    public interface IUserRepository
+    {
+        Task<User[]> GetAllAsync();
+        Task<User?> GetByIdAsync(string userId);
+    }
+}

src/IoTHub.Portal.Infrastructure/PortalDbContext.cs

@@ -80,6 +80,7 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
             _ = modelBuilder.Entity<Group>()
                 .HasMany(a => a.AccessControls);
 
+
             _ = modelBuilder.Entity<User>()
                .HasMany(a => a.AccessControls);
 
@@ -88,6 +89,18 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
 
             _ = modelBuilder.Entity<AccessControl>()
                 .HasOne(r => r.Role);
+
+            _ = modelBuilder.Entity<AccessControl>()
+                .HasOne(ac => ac.User)
+                .WithMany(u => u.AccessControls)
+                .HasForeignKey(ac => ac.UserId)
+                .IsRequired(false);
+
+            _ = modelBuilder.Entity<AccessControl>()
+                .HasOne(ac => ac.Group)
+                .WithMany(g => g.AccessControls)
+                .HasForeignKey(ac => ac.GroupId)
+                .IsRequired(false);
         }
     }
 }

src/IoTHub.Portal.Infrastructure/Repositories/GroupRepository.cs

@@ -0,0 +1,36 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Infrastructure.Repositories
+{
+    using IoTHub.Portal.Domain.Entities;
+    using IoTHub.Portal.Domain.Repositories;
+    using Microsoft.EntityFrameworkCore;
+    using System.Threading.Tasks;
+
+    public class GroupRepository : IGroupRepository
+    {
+        private readonly PortalDbContext context;
+
+        public GroupRepository(PortalDbContext context)
+        {
+            this.context = context;
+        }
+
+        public Task<Group[]> GetAllAsync()
+        {
+            return context.Groups
+                .ToArrayAsync();
+        }
+
+        public Task<Group?> GetByIdAsync(string groupId)
+        {
+            return context.Groups
+                .Include(g => g.Members)
+                    .ThenInclude(m => m.User)
+                .Include(g => g.AccessControls)
+                    .ThenInclude(ac => ac.Role)
+                .FirstOrDefaultAsync(g => g.Id == groupId);
+        }
+    }
+}

src/IoTHub.Portal.Infrastructure/Repositories/RoleRepository.cs

@@ -0,0 +1,26 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Infrastructure.Repositories
+{
+    using System.Linq.Expressions;
+    using IoTHub.Portal.Domain.Entities;
+    using IoTHub.Portal.Domain.Repositories;
+    using Microsoft.EntityFrameworkCore;
+
+    public class RoleRepository : GenericRepository<Role>, IRoleRepository
+    {
+        public RoleRepository(PortalDbContext context) : base(context)
+        {
+        }
+        public async Task<Role?> GetByNameAsync(string roleName, params Expression<Func<Role, object>>[] includeProperties)
+        {
+            IQueryable<Role> query = context.Roles;
+            foreach (var includeProperty in includeProperties)
+            {
+                query = query.Include(includeProperty);
+            }
+            return await query.FirstOrDefaultAsync(r => r.Name == roleName);
+        }
+    }
+}

src/IoTHub.Portal.Infrastructure/Repositories/UserRepository.cs

@@ -0,0 +1,34 @@
+// Copyright (c) CGI France. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+
+namespace IoTHub.Portal.Infrastructure.Repositories
+{
+    using IoTHub.Portal.Domain.Entities;
+    using IoTHub.Portal.Domain.Repositories;
+    using Microsoft.EntityFrameworkCore;
+    using System.Threading.Tasks;
+
+    public class UserRepository : IUserRepository
+    {
+        private readonly PortalDbContext context;
+
+        public UserRepository(PortalDbContext context)
+        {
+            this.context = context;
+        }
+
+        public Task<User[]> GetAllAsync()
+        {
+            return context.Users
+                .ToArrayAsync();
+        }
+
+        public Task<User?> GetByIdAsync(string userId)
+        {
+            return context.Users
+                .Include(r => r.AccessControls)
+                .ThenInclude(ac => ac.Role)
+                .FirstOrDefaultAsync(r => r.Id == userId);
+        }
+    }
+}