aljaz/btcpayserver
1
0
Fork 0
mirror of https://github.com/aljazceru/btcpayserver.git synced 2025-12-17 14:04:26 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add "/api/v1/users/me" endpoint

Browse Source
This commit is contained in:
Umar Bolatov
2021-04-07 20:40:57 -07:00
parent b4076b53e8
commit d9935ada9d
5 changed files with 56 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
BTCPayServer/Controllers/GreenField/UsersController.cs
View File

@@ -79,6 +79,21 @@ namespace BTCPayServer.Controllers.GreenField
return await FromModel(user);
}
[Authorize(Policy = Policies.CanDeleteUser, AuthenticationSchemes = AuthenticationSchemes.Greenfield)]
[HttpDelete("~/api/v1/users/me")]
public async Task<ActionResult<ApplicationUserData>> DeleteCurrentUser()
{
// Don't want to allow the user to delete themselves if they are the only admin
if (await IsUserTheOnlyOneAdmin()) {
return Forbid(AuthenticationSchemes.GreenfieldBasic);
}
var user = await _userManager.GetUserAsync(User);
await _userService.DeleteUserAndAssociatedData(user);
return Ok();
}
[AllowAnonymous]
[HttpPost("~/api/v1/users")]
public async Task<IActionResult> CreateUser(CreateApplicationUserRequest request, CancellationToken cancellationToken = default)
@@ -206,7 +221,7 @@ namespace BTCPayServer.Controllers.GreenField
}
// User shouldn't be deleted if it's the only admin
if ((await _userManager.GetUsersInRoleAsync(Roles.ServerAdmin)).Count == 1)
if (await IsUserTheOnlyOneAdmin(user))
{
return Forbid(AuthenticationSchemes.GreenfieldBasic);
}
@@ -245,5 +260,20 @@ namespace BTCPayServer.Controllers.GreenField
Created = data.Created
};
}
private async Task<bool> IsUserTheOnlyOneAdmin()
{
return await IsUserTheOnlyOneAdmin(await _userManager.GetUserAsync(User));
}
private async Task<bool> IsUserTheOnlyOneAdmin(ApplicationUser user)
{
var isUserAdmin = await _userService.IsAdminUser(user);
if (!isUserAdmin) {
return false;
}
return (await _userManager.GetUsersInRoleAsync(Roles.ServerAdmin)).Count == 1;
}
}
}