mirror of
https://github.com/aaronpo97/the-biergarten-app.git
synced 2026-07-16 17:47:22 +00:00
62d682472e
Begins the move to vertical-slice architecture. ResponseBody moves out of API.Core into Shared.Contracts so slices won't have to depend on the API host project for it. Shared.Application adds the MediatR pipeline's ValidationBehavior plus the cross-slice email commands that Features.Auth will send and Features.Emails will handle, keeping slices decoupled from each other.
39 lines
1.3 KiB
C#
39 lines
1.3 KiB
C#
using System.Security.Claims;
|
|
using Shared.Contracts;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
namespace API.Core.Controllers;
|
|
|
|
/// <summary>
|
|
/// Sample controller demonstrating an endpoint that requires JWT authentication.
|
|
/// </summary>
|
|
[ApiController]
|
|
[Route("api/[controller]")]
|
|
[Authorize(AuthenticationSchemes = "JWT")]
|
|
public class ProtectedController : ControllerBase
|
|
{
|
|
/// <summary>
|
|
/// Returns the authenticated caller's user ID and username, extracted from the JWT claims.
|
|
/// </summary>
|
|
/// <returns>
|
|
/// A <c>200 OK</c> result wrapping a <see cref="ResponseBody{T}"/> whose payload contains the
|
|
/// caller's <c>userId</c> (from <see cref="ClaimTypes.NameIdentifier"/>) and <c>username</c>
|
|
/// (from <see cref="ClaimTypes.Name"/>), either of which may be <c>null</c> if not present in the token.
|
|
/// </returns>
|
|
[HttpGet]
|
|
public ActionResult<ResponseBody<object>> Get()
|
|
{
|
|
var userId = User.FindFirst(ClaimTypes.NameIdentifier)?.Value;
|
|
var username = User.FindFirst(ClaimTypes.Name)?.Value;
|
|
|
|
return Ok(
|
|
new ResponseBody<object>
|
|
{
|
|
Message = "Protected endpoint accessed successfully",
|
|
Payload = new { userId, username },
|
|
}
|
|
);
|
|
}
|
|
}
|