46 lines
2.0 KiB
C#
46 lines
2.0 KiB
C#
using System.Net;
|
|
using Application.Services.Database.PostgreSQL;
|
|
using Application.Services.HashingAlgorithms;
|
|
using FluentValidation;
|
|
|
|
namespace Application.Endpoints.Authorization.Patient;
|
|
|
|
public class PatientResetPasswordValidation : AbstractValidator<LoginDto>
|
|
{
|
|
private readonly IPatientRepository _patientRepository;
|
|
private readonly IHashingAlgorithms _hashingAlgorithms;
|
|
|
|
public PatientResetPasswordValidation(IPatientRepository patientRepository,
|
|
IHashingAlgorithms hashingAlgorithms)
|
|
{
|
|
_patientRepository = patientRepository;
|
|
_hashingAlgorithms = hashingAlgorithms;
|
|
|
|
RuleFor(x => x.Email)
|
|
.NotEmpty().WithMessage("Email is required.").WithErrorCode(HttpStatusCodes.BadRequest.ToString())
|
|
.EmailAddress().WithMessage("Invalid email format.").WithErrorCode(HttpStatusCodes.BadRequest.ToString())
|
|
.MustAsync(BeExistingPatient).WithMessage("Patient with this email does not exist.")
|
|
.WithErrorCode(HttpStatusCodes.NotFound.ToString());
|
|
|
|
RuleFor(x => x.Password)
|
|
.NotEmpty().WithMessage("Password is required.").WithErrorCode(HttpStatusCodes.BadRequest.ToString())
|
|
.WithErrorCode(HttpStatusCode.BadRequest.ToString());
|
|
|
|
RuleFor(x => x)
|
|
.MustAsync(BeDifferentFromOldPassword).WithMessage("Password can't be as the previous.")
|
|
.WithErrorCode(HttpStatusCode.BadRequest.ToString()).WithErrorCode(HttpStatusCodes.BadRequest.ToString());
|
|
}
|
|
|
|
private async Task<bool> BeExistingPatient(string email, CancellationToken cancellationToken)
|
|
{
|
|
var patient = await _patientRepository.FindByEmailAsync(email);
|
|
return patient != null;
|
|
}
|
|
|
|
private async Task<bool> BeDifferentFromOldPassword(LoginDto dto, CancellationToken cancellationToken)
|
|
{
|
|
var currentPatient = await _patientRepository.FindByEmailAsync(dto.Email);
|
|
return !_hashingAlgorithms.SHA256Algorithm(dto.Password)
|
|
.Equals(currentPatient?.Password, StringComparison.Ordinal);
|
|
}
|
|
} |