From 19fb7f97393511570fcadde75ed78ff060463f6e Mon Sep 17 00:00:00 2001
From: adamhaeger <adamgullerud@gmail.com>
Date: Mon, 16 Dec 2024 16:29:05 +0100
Subject: [PATCH] added roles endpoint from core

---
 .../Authorization/RolesController.cs          | 59 +++++++++++++++++++
 1 file changed, 59 insertions(+)
 create mode 100644 src/Controllers/Authorization/RolesController.cs

diff --git a/src/Controllers/Authorization/RolesController.cs b/src/Controllers/Authorization/RolesController.cs
new file mode 100644
index 00000000..bd6bf7e2
--- /dev/null
+++ b/src/Controllers/Authorization/RolesController.cs
@@ -0,0 +1,59 @@
+
+using Altinn.Platform.Authorization.Services.Interface;
+using Altinn.Platform.Storage.Helpers;
+using Authorization.Interface.Models;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace Altinn.Platform.Authorization.Controllers
+{
+    /// <summary>
+    /// Contains all actions related to the roles model
+    /// </summary>
+    [Route("authorization/api/v1/roles")]
+    [ApiController]
+    public class RolesController : ControllerBase
+    {
+        private readonly IRoles _rolesWrapper;
+
+        /// <summary>
+        /// Initializes a new instance of the <see cref="RolesController"/> class
+        /// </summary>
+        public RolesController(IRoles rolesWrapper)
+        {
+            _rolesWrapper = rolesWrapper;
+        }
+
+        /// <summary>
+        /// Get the decision point roles for the loggedin user for a selected party
+        /// </summary>
+        /// <param name="coveredByUserId">the logged in user id</param>
+        /// <param name="offeredByPartyId">the partyid of the person/org the logged in user is representing</param>
+        /// <returns></returns>
+        [HttpGet]
+        [Authorize]
+        public async Task<ActionResult> Get(int coveredByUserId, int offeredByPartyId)
+        {
+            int? authnUserId = User.GetUserIdAsInt();
+
+            if (coveredByUserId != authnUserId)
+            {
+                return Forbid();
+            }
+
+            if (coveredByUserId == 0 || offeredByPartyId == 0)
+            {
+                return BadRequest();
+            }
+
+            List<Role> roleList = await _rolesWrapper.GetDecisionPointRolesForUser(coveredByUserId, offeredByPartyId);
+
+            if (roleList == null || roleList.Count == 0)
+            {
+                return NotFound();
+            }
+
+            return Ok(roleList);
+        }
+    }
+}
\ No newline at end of file