feat: add Logs

api/Controllers/AuditController.cs

@@ -0,0 +1,43 @@
+using MediatR;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using mws.backend.dotnet.application.Audit;
+using mws.backend.dotnet.application.Common;
+
+namespace mws.backend.dotnet.api.Controllers;
+
+[ApiController]
+[Route("api/audit")]
+[Authorize]
+public class AuditController(ISender sender) : ControllerBase
+{
+    [HttpGet("actions")]
+    public async Task<ActionResult<PagedResult<ActionLogDto>>> GetActions(
+        [FromQuery] DateTimeOffset? from,
+        [FromQuery] DateTimeOffset? to,
+        [FromQuery] string? actor,
+        [FromQuery] string? action,
+        [FromQuery] string? entityType,
+        [FromQuery] Guid? entityId,
+        [FromQuery] int page = 1,
+        [FromQuery] int pageSize = 20,
+        CancellationToken ct = default)
+    {
+        var filter = new ActionLogFilter(from, to, actor, action, entityType, entityId);
+        return Ok(await sender.Send(new GetActionLogsQuery(User.GetUserId(), filter, page, pageSize), ct));
+    }
+
+    [HttpGet("logins")]
+    public async Task<ActionResult<PagedResult<LoginLogDto>>> GetLogins(
+        [FromQuery] DateTimeOffset? from,
+        [FromQuery] DateTimeOffset? to,
+        [FromQuery] string? username,
+        [FromQuery] bool? success,
+        [FromQuery] int page = 1,
+        [FromQuery] int pageSize = 20,
+        CancellationToken ct = default)
+    {
+        var filter = new LoginLogFilter(from, to, username, success);
+        return Ok(await sender.Send(new GetLoginLogsQuery(User.GetUserId(), filter, page, pageSize), ct));
+    }
+}

api/Controllers/UsersController.cs

@@ -6,7 +6,6 @@ using Microsoft.EntityFrameworkCore;
 using mws.backend.dotnet.application.Common;
 using mws.backend.dotnet.application.Permissions;
 using mws.backend.dotnet.application.Users;
-using mws.backend.dotnet.domain.Users;
 using mws.backend.dotnet.infrastructure.Persistence;
 
 namespace mws.backend.dotnet.api.Controllers;
@@ -95,32 +94,14 @@ public class UsersController(ISender sender, AppDbContext db, IPermissionService
     [HttpPost("{id:guid}/roles")]
     public async Task<IActionResult> AssignRole(Guid id, [FromBody] AssignRoleRequest req, CancellationToken ct)
     {
-        await permissions.EnsureAsync(User.GetUserId(), "permissions", PermissionAction.Edit, ct);
-
-        var user = await db.Users.Include(u => u.UserRoles).FirstOrDefaultAsync(u => u.Id == id, ct);
-        if (user is null) return NotFound("User not found");
-
-        if (!user.UserRoles.Any(ur => ur.RoleId == req.RoleId))
-        {
-            user.UserRoles.Add(new UserRole { UserId = id, RoleId = req.RoleId });
-            await db.SaveChangesAsync(ct);
-        }
-
+        await sender.Send(new AssignUserRoleCommand(User.GetUserId(), id, req.RoleId), ct);
         return NoContent();
     }
 
     [HttpDelete("{id:guid}/roles/{roleId:guid}")]
     public async Task<IActionResult> UnassignRole(Guid id, Guid roleId, CancellationToken ct)
     {
-        await permissions.EnsureAsync(User.GetUserId(), "permissions", PermissionAction.Edit, ct);
-
-        var ur = await db.UserRoles.FirstOrDefaultAsync(x => x.UserId == id && x.RoleId == roleId, ct);
-        if (ur != null)
-        {
-            db.UserRoles.Remove(ur);
-            await db.SaveChangesAsync(ct);
-        }
-
+        await sender.Send(new UnassignUserRoleCommand(User.GetUserId(), id, roleId), ct);
         return NoContent();
     }