hamid
39a979b1a7
backend phase 3: identity profiles, patients & nurse bank accounts Add the role-attached identity layer on top of the b2 auth spine: nurse seller profiles (guarded is_verified, read-only aggregates), thin customer payer profiles, first-class patients (tenancy-scoped), and nurse payout bank accounts hardened with an iban_hash uniqueness guard and an automated استعلام شبا IBAN-ownership inquiry. - Four usr tables via one migration (1:1 uniques, UNIQUE(iban_hash), filtered UNIQUE(nurse_id) WHERE is_primary=1, guarded is_verified, encrypted PII, soft-delete on nurse_profiles) - 15 CQRS slices + 4 role-scoped controllers; reads projected + paginated, IBAN masked (last-4); ownership-inquiry endpoints rate-limited - New IBankAccountOwnershipVerifier seam (mock deterministic شبا match) + per-domain repositories on IUnitOfWork + encrypted-PII value converters - Activate FluentValidation repo-wide (validators were never registered) - Handler unit tests + WebApplicationFactory integration tests (76 pass); contract identity-profiles.md + swagger snapshot; docs, handoff & report Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> @
50 lines
2.2 KiB
C#
50 lines
2.2 KiB
C#
using System.ComponentModel.DataAnnotations;
|
|
using Asp.Versioning;
|
|
using Baya.Application.Features.Identity.Commands.ArchivePatient;
|
|
using Baya.Application.Features.Identity.Commands.CreatePatient;
|
|
using Baya.Application.Features.Identity.Commands.UpdatePatient;
|
|
using Baya.Application.Features.Identity.Queries.GetPatient;
|
|
using Baya.Application.Features.Identity.Queries.ListPatients;
|
|
using Baya.Application.Models.Common;
|
|
using Baya.Application.Models.Identity;
|
|
using Baya.WebFramework.Attributes;
|
|
using Baya.WebFramework.BaseController;
|
|
using Mediator;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
namespace Baya.Web.Api.Controllers.V1;
|
|
|
|
[ApiVersion("1")]
|
|
[ApiController]
|
|
[Route("api/v{version:apiVersion}/[controller]")]
|
|
[Authorize]
|
|
[Display(Description = "The signed-in customer's patients (care recipients)")]
|
|
public sealed class PatientsController(ISender sender) : BaseController
|
|
{
|
|
[HttpPost("[action]")]
|
|
[ProducesOkApiResponseType<PatientDto>]
|
|
public async Task<IActionResult> Create(CreatePatientCommand command, CancellationToken cancellationToken)
|
|
=> OperationResult(await sender.Send(command, cancellationToken));
|
|
|
|
[HttpGet("[action]")]
|
|
[ProducesOkApiResponseType<PagedResult<PatientDto>>]
|
|
public async Task<IActionResult> List([FromQuery] ListPatientsQuery query, CancellationToken cancellationToken)
|
|
=> OperationResult(await sender.Send(query, cancellationToken));
|
|
|
|
[HttpGet("[action]/{id}")]
|
|
[ProducesOkApiResponseType<PatientDto>]
|
|
public async Task<IActionResult> Get(long id, CancellationToken cancellationToken)
|
|
=> OperationResult(await sender.Send(new GetPatientQuery(id), cancellationToken));
|
|
|
|
[HttpPost("[action]/{id}")]
|
|
[ProducesOkApiResponseType<PatientDto>]
|
|
public async Task<IActionResult> Update(long id, UpdatePatientCommand command, CancellationToken cancellationToken)
|
|
=> OperationResult(await sender.Send(command with { Id = id }, cancellationToken));
|
|
|
|
[HttpPost("[action]/{id}")]
|
|
[ProducesOkApiResponseType]
|
|
public async Task<IActionResult> Archive(long id, CancellationToken cancellationToken)
|
|
=> OperationResult(await sender.Send(new ArchivePatientCommand(id), cancellationToken));
|
|
}
|