api cu adaugare/revocare acces

backend/Application/Endpoints/MedicalHistories/FileManagement/MedicalHistoryCreateDto.cs

@@ -1,4 +1,4 @@
-namespace Application.Endpoints.MedicalHistories;
+namespace Application.Endpoints.MedicalHistories.FileManagement;
 
 public class MedicalHistoryCreateDto
 {

backend/Application/Endpoints/MedicalHistories/FileManagement/MedicalHistoryCreateValidation.cs

@@ -1,7 +1,7 @@
 using Application.Services.Database;
 using FluentValidation;
 
-namespace Application.Endpoints.MedicalHistories;
+namespace Application.Endpoints.MedicalHistories.FileManagement;
 
 public class MedicalHistoryCreateValidation : AbstractValidator<MedicalHistoryCreateDto>
 {

backend/Application/Endpoints/MedicalHistories/FileManagement/MedicalHistoryFileManagementHandler.cs

@@ -2,15 +2,15 @@
 using Application.Services.Database.MongoDB;
 using Core.Entities;
 
-namespace Application.Endpoints.MedicalHistories;
+namespace Application.Endpoints.MedicalHistories.FileManagement;
 
-public class MedicalHistoryHandler
+public class MedicalHistoryFileManagementHandler
 {
     private readonly IMedicalHistoryRepository _medicalHistoryRepository;
     private readonly IMedicalHistoryMongoDbService _medicalHistoryMongoDbService;
     private readonly IPatientRepository _patientRepository;
 
-    public MedicalHistoryHandler(IMedicalHistoryRepository medicalHistoryRepository,
+    public MedicalHistoryFileManagementHandler(IMedicalHistoryRepository medicalHistoryRepository,
         IPatientRepository patientRepository, IMedicalHistoryMongoDbService medicalHistoryMongoDbService)
     {
         _medicalHistoryRepository = medicalHistoryRepository;
@@ -80,7 +80,7 @@ public class MedicalHistoryHandler
             UserId = medicalHistoryCreateDto.UserId,
             Content = medicalHistoryCreateDto.Content
         };
-        
+
         var medicalHistoryId = medicalHistory.Id;
         var newMedicalHistory = new MedicalHistoryAuthorisationModel
         {

backend/Application/Endpoints/MedicalHistories/FileManagement/MedicalHistoryUpdateDto.cs

@@ -1,4 +1,4 @@
-namespace Application.Endpoints.MedicalHistories;
+namespace Application.Endpoints.MedicalHistories.FileManagement;
 
 public class MedicalHistoryUpdateDto
 {

backend/Application/Endpoints/MedicalHistories/FileManagement/MedicalHistoryUpdateValidation.cs

@@ -1,7 +1,7 @@
 using Application.Services.Database;
 using FluentValidation;
 
-namespace Application.Endpoints.MedicalHistories;
+namespace Application.Endpoints.MedicalHistories.FileManagement;
 
 public class MedicalHistoryUpdateValidation : AbstractValidator<MedicalHistoryUpdateDto>
 {

backend/Application/Endpoints/MedicalHistories/ManageAuthorization/MedicalHistoryManageAuthorizationDoctorDto.cs

@@ -0,0 +1,7 @@
+namespace Application.Endpoints.MedicalHistories.ManageAuthorization;
+
+public class MedicalHistoryManageAuthorizationDoctorDto
+{
+    public Guid MedicalRecordId { get; set; }
+    public Guid DoctorId { get; set; }
+}

backend/Application/Endpoints/MedicalHistories/ManageAuthorization/MedicalHistoryManageAuthorizationHandler.cs

@@ -0,0 +1,143 @@
+using Application.Services.Database;
+using Application.Services.Database.MongoDB;
+using Core.Entities;
+
+namespace Application.Endpoints.MedicalHistories.ManageAuthorization;
+
+public class MedicalHistoryManageAuthorizationHandler
+{
+    private readonly IMedicalHistoryRepository _medicalHistoryRepository;
+    private readonly IDoctorRepository _doctorRepository;
+    private readonly IMedicalHistoryMongoDbService _medicalHistoryMongoDbService;
+
+    public MedicalHistoryManageAuthorizationHandler(IMedicalHistoryRepository medicalHistoryRepository,
+        IMedicalHistoryMongoDbService medicalHistoryMongoDbService, IDoctorRepository doctorRepository)
+    {
+        _medicalHistoryRepository = medicalHistoryRepository;
+        _medicalHistoryMongoDbService = medicalHistoryMongoDbService;
+        _doctorRepository = doctorRepository;
+    }
+
+    public async Task<BaseResponse> HandleGrantDoctorAccess(MedicalHistoryManageAuthorizationDoctorDto infoDto)
+    {
+        var validation = new MedicalHistoryManageAuthorizationValidation(_medicalHistoryRepository, _doctorRepository);
+        var validationResult = await validation.ValidateAsync(infoDto);
+
+        if (!validationResult.IsValid)
+        {
+            var firstError = validationResult.Errors.FirstOrDefault();
+            var errorCode = int.TryParse(firstError.ErrorCode, out var code) ? code : -1;
+            var errorMessage = firstError.ErrorMessage;
+
+            return new BaseResponse
+            {
+                StatusCode = errorCode,
+                Message = errorMessage,
+                Data = null
+            };
+        }
+
+        var criteria = new List<(string, string)>();
+        criteria.Add(("_id", infoDto.MedicalRecordId.ToString()));
+
+        var documents = await _medicalHistoryMongoDbService.FindAsync<MedicalHistoryAuthorisationModel>(criteria);
+        if (!documents.Any())
+        {
+            return new BaseResponse()
+            {
+                StatusCode = HttpStatusCodes.NotFound,
+                Message = "Access to medical history not found.",
+                Data = null
+            };
+        }
+        
+        var authorisations = documents[0].Authorisation;
+        if (authorisations.Contains(infoDto.ToString()))
+        {
+            return new BaseResponse()
+            {
+                StatusCode = HttpStatusCodes.Conflict,
+                Message = "Access to medical history already granted.",
+                Data = null
+            };
+        }
+        
+        authorisations.Add(infoDto.DoctorId.ToString());
+        var authorizationModel = new MedicalHistoryAuthorisationModel()
+        {
+            Id = infoDto.MedicalRecordId.ToString(),
+            Authorisation = authorisations
+        };
+
+        await _medicalHistoryMongoDbService.ModifyAsync("_id", infoDto.MedicalRecordId.ToString(), authorizationModel);
+
+        return new BaseResponse()
+        {
+            StatusCode = HttpStatusCodes.OK,
+            Message = "Access to medical history granted.",
+            Data = null
+        };
+    }
+
+    public async Task<BaseResponse> HandleRevokeDoctorAccess(MedicalHistoryManageAuthorizationDoctorDto infoDto)
+    {
+        var validation = new MedicalHistoryManageAuthorizationValidation(_medicalHistoryRepository, _doctorRepository);
+        var validationResult = await validation.ValidateAsync(infoDto);
+
+        if (!validationResult.IsValid)
+        {
+            var firstError = validationResult.Errors.FirstOrDefault();
+            var errorCode = int.TryParse(firstError.ErrorCode, out var code) ? code : -1;
+            var errorMessage = firstError.ErrorMessage;
+
+            return new BaseResponse
+            {
+                StatusCode = errorCode,
+                Message = errorMessage,
+                Data = null
+            };
+        }
+
+        var criteria = new List<(string, string)>();
+        criteria.Add(("_id", infoDto.MedicalRecordId.ToString()));
+
+        var documents = await _medicalHistoryMongoDbService.FindAsync<MedicalHistoryAuthorisationModel>(criteria);
+        if (!documents.Any())
+        {
+            return new BaseResponse()
+            {
+                StatusCode = HttpStatusCodes.NotFound,
+                Message = "Access to medical history not found.",
+                Data = null
+            };
+        }
+        
+        var authorisations = documents[0].Authorisation;
+        Console.WriteLine(authorisations);
+        if (!authorisations.Contains(infoDto.DoctorId.ToString()))
+        {
+            return new BaseResponse()
+            {
+                StatusCode = HttpStatusCodes.Conflict,
+                Message = "Access to medical history already revoked.",
+                Data = null
+            };
+        }
+        
+        authorisations.Remove(infoDto.DoctorId.ToString());
+        var authorizationModel = new MedicalHistoryAuthorisationModel()
+        {
+            Id = infoDto.MedicalRecordId.ToString(),
+            Authorisation = authorisations
+        };
+
+        await _medicalHistoryMongoDbService.ModifyAsync("_id", infoDto.MedicalRecordId.ToString(), authorizationModel);
+
+        return new BaseResponse()
+        {
+            StatusCode = HttpStatusCodes.OK,
+            Message = "Access to medical history granted.",
+            Data = null
+        };
+    }
+}

backend/Application/Endpoints/MedicalHistories/ManageAuthorization/MedicalHistoryManageAuthorizationValidation.cs

@@ -0,0 +1,39 @@
+using Application.Services.Database;
+using FluentValidation;
+
+namespace Application.Endpoints.MedicalHistories.ManageAuthorization;
+
+public class MedicalHistoryManageAuthorizationValidation : AbstractValidator<MedicalHistoryManageAuthorizationDoctorDto>
+{
+    private readonly IMedicalHistoryRepository _medicalHistoryRepository;
+    private readonly IDoctorRepository _doctorRepository;
+
+    public MedicalHistoryManageAuthorizationValidation(IMedicalHistoryRepository medicalHistoryRepository,
+        IDoctorRepository doctorRepository)
+    {
+        RuleFor(x => x.MedicalRecordId)
+            .NotEmpty().WithMessage("Id is required").WithErrorCode(HttpStatusCodes.BadRequest.ToString())
+            .MustAsync(BeExistingMedicalHistoryRecord).WithMessage("Medical history record does not exist")
+            .WithErrorCode(HttpStatusCodes.NotFound.ToString());
+
+        RuleFor(x => x.DoctorId)
+            .NotEmpty().WithMessage("Id is required.").WithErrorCode(HttpStatusCodes.BadRequest.ToString())
+            .MustAsync(IsDoctorRegistered).WithMessage("Doctor is not registered in system")
+            .WithErrorCode(HttpStatusCodes.NotFound.ToString());
+
+        _medicalHistoryRepository = medicalHistoryRepository;
+        _doctorRepository = doctorRepository;
+    }
+
+    private async Task<bool> BeExistingMedicalHistoryRecord(Guid guid, CancellationToken token)
+    {
+        var record = await _medicalHistoryRepository.GetByIdAsync(guid);
+        return record != null;
+    }
+
+    private async Task<bool> IsDoctorRegistered(Guid id, CancellationToken cancellationToken)
+    {
+        var doctor = await _doctorRepository.GetByIdAsync(id);
+        return doctor != null;
+    }
+}