yavsc/src/Yavsc.Org/Controllers/Administration/AdministrationController.cs

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Mvc.Rendering;
using Microsoft.EntityFrameworkCore;
using Yavsc.Abstract.Identity;
using Yavsc.Helpers;
using Yavsc.Models;
using Yavsc.Server.Helpers;
using Yavsc.ViewModels;
using Yavsc.ViewModels.Administration;

namespace Yavsc.Controllers
{
    [Authorize()]
    public class AdministrationController : Controller
    {
        private readonly UserManager<ApplicationUser> _userManager;
        private readonly RoleManager<IdentityRole> _roleManager;

        private readonly ApplicationDbContext _dbContext;

        public AdministrationController(UserManager<ApplicationUser> userManager,
         RoleManager<IdentityRole> roleManager,
         ApplicationDbContext context)
        {
            _userManager = userManager;
            _roleManager = roleManager;
            this._dbContext = context;
        }


        [Authorize("AdministratorOnly")]
        public async Task<IActionResult> Role(string id)
        {
            var role = await _roleManager.FindByIdAsync(id);
            if (role == null) return NotFound();
            RoleUserCollection roleUserCollection = new RoleUserCollection
            {
                Id = id,
                Name = role.Name,
                Users = (await this._userManager.GetUsersInRoleAsync(role.Name))
                .Select(u => new UserInfo(id, u.UserName, u.Email, u.Avatar)).ToArray()
            };
            return View(roleUserCollection);
        }

        private async Task<bool> EnsureRoleList()
        {
            // ensure all roles existence
            foreach (string roleName in new string[] {
                YavscConstants.AdminGroupName,
                YavscConstants.StarGroupName,
                YavscConstants.PerformerGroupName,
                YavscConstants.FrontOfficeGroupName,
                YavscConstants.StarHunterGroupName,
                YavscConstants.BlogModeratorGroupName
                })
                if (!await _roleManager.RoleExistsAsync(roleName))
                {
                    var role = new IdentityRole { Name = roleName };
                    var resultCreate = await _roleManager.CreateAsync(role);
                    if (!resultCreate.Succeeded)
                    {
                        AddErrors(resultCreate);
                    }
                }
            if (ModelState.ErrorCount > 0) return false;
            return true;
        }

        /// <summary>
        /// Gives the new, when not existing, administrator role
        /// to current authenticated user.
        /// If nothing is to do, it returns a 404.
        /// </summary>
        /// <returns></returns>
        [Produces("application/json")]
        public async Task<IActionResult> Take()
        {
            // If some amdin already exists, make this method disapear
            var admins = await _userManager.GetUsersInRoleAsync(YavscConstants.AdminGroupName);
            if (admins != null && admins.Count > 0)
            {
                // All is ok, nothing to do here.
                if (User.IsInMsRole(YavscConstants.AdminGroupName))
                {

                    return Ok(new { message = "you already got it." });
                }
                return NotFound();
            }

            var user = await _userManager.FindByIdAsync(User.GetUserId());
            // check all user groups exist
            if (!await EnsureRoleList())
            {
                ModelState.AddModelError(null, "Could not ensure role list existence. aborting.");
                return new BadRequestObjectResult(ModelState);
            }

            var addToRoleResult = await _userManager.AddToRoleAsync(user, YavscConstants.AdminGroupName);
            if (!addToRoleResult.Succeeded)
            {
                AddErrors(addToRoleResult);
                return new BadRequestObjectResult(ModelState);
            }

            return Ok(new { message = "you owned it." });
        }

        [Authorize("AdministratorOnly")]
        public async Task<IActionResult> Index()
        {
            var adminCount = await _userManager.GetUsersInRoleAsync(
                YavscConstants.AdminGroupName);
            var userCount = await _dbContext.Users.CountAsync();
            var youAreAdmin = await _userManager.IsInRoleAsync(
                await _userManager.FindByIdAsync(User.GetUserId()),
                YavscConstants.AdminGroupName);

            var roles = await _roleManager.Roles.Select(x => new RoleInfo
            {
                Id = x.Id,
                Name = x.Name
            }).ToArrayAsync();
            foreach (var role in roles)
            {
                var uinrole = await _userManager.GetUsersInRoleAsync(role.Name);

                role.UserCount = uinrole.Count();
            }
            var assembly = GetType().Assembly;
            ViewBag.ThisAssembly = assembly.FullName;
            ViewBag.RunTimeVersion = assembly.ImageRuntimeVersion;
            var rolesArray = roles.ToArray();
            return View(new AdminViewModel
            {
                Roles = rolesArray,
                AdminCount = adminCount.Count,
                YouAreAdmin = youAreAdmin,
                UserCount = userCount
            });
        }

        [Authorize("AdministratorOnly")]
        public IActionResult Enroll(string roleName)
        {
            ViewBag.UserId = new SelectList(_dbContext.Users, "Id", "UserName");
            return View(new EnrolerViewModel { RoleName = roleName });
        }

        [Authorize("AdministratorOnly")]
        [HttpPost()]
        public async Task<IActionResult> Enroll(EnrolerViewModel model)
        {
            if (ModelState.IsValid)
            {
                var newAdmin = await _dbContext.Users.FirstOrDefaultAsync(u => u.Id == model.EnroledUserId);
                if (newAdmin == null) return NotFound();
                var addToRoleResult = await _userManager.AddToRoleAsync(newAdmin, model.RoleName);
                if (addToRoleResult.Succeeded)
                {
                    return RedirectToAction("Index");
                }
                AddErrors(addToRoleResult);
            }
            ViewBag.UserId = new SelectList(_dbContext.Users, "Id", "UserName");
            return View(model);
        }

        [Authorize("AdministratorOnly")]
        public async Task<IActionResult> Fire(string roleName, string userId)
        {
            var user = await _dbContext.Users.FirstOrDefaultAsync(u => u.Id == userId);
            if (user == null) return NotFound();

            return View(new FireViewModel { RoleName = roleName, EnroledUserId = userId, EnroledUserName = user.UserName });
        }

        [Authorize("AdministratorOnly")]
        [HttpPost()]
        public async Task<IActionResult> Fire(FireViewModel model)
        {
            if (ModelState.IsValid)
            {
                var oldEnroled = await _dbContext.Users.FirstOrDefaultAsync(u => u.Id == model.EnroledUserId);
                if (oldEnroled == null) return NotFound();
                var removeFromRole = await _userManager.RemoveFromRoleAsync(oldEnroled, model.RoleName);
                if (removeFromRole.Succeeded)
                {
                    return RedirectToAction("Index");
                }
                AddErrors(removeFromRole);
            }
            ViewBag.UserId = new SelectList(_dbContext.Users, "Id", "UserName");
            return View(model);
        }

        private void AddErrors(IdentityResult result)
        {
            foreach (var error in result.Errors)
            {
                ModelState.AddModelError(string.Empty, error.Description);
            }
        }

    }
}