Files
jube-fork/Jube.Data/Repository/CaseWorkflowDisplayRepository.cs
T
richard-churchman 1b9777fa71 Updated Dependencies and Resolved Breaking Changes:
* Fixed NullReferenceException: Addressed a crash in JwtSecurityTokenHandler under .NET 9 caused by internal changes in cryptographic primitives and claim handling.
* Migrated JWT Handling: Updated Jwt.CreateToken to use JsonWebTokenHandler with SecurityTokenDescriptor.
The method now returns a string directly (formerly JwtSecurityToken).
* Configured AddJwtBearer with UseSecurityTokenValidators = false to ensure end-to-end consistency using JsonWebTokenHandler.
* Updated AutoMapper: Adjusted the instantiation signature to include a null logger following the upgrade from v13 to v15 (required to patch a CodeQL security vulnerability). Resolved high-severity DoS vulnerability GHSA-rvv3-g6hj-g44x (uncontrolled recursion) and fixed the new instantiation signature requiring a null logger.
2026-03-30 11:08:32 +02:00

215 lines
11 KiB
C#

/* Copyright (C) 2022-present Jube Holdings Limited.
*
* This file is part of Jube™ software.
*
* Jube™ is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License
* as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
* Jube™ is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty
* of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
* You should have received a copy of the GNU Affero General Public License along with Jube™. If not,
* see <https://www.gnu.org/licenses/>.
*/
namespace Jube.Data.Repository
{
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using AutoMapper;
using Context;
using LinqToDB;
using Microsoft.Extensions.Logging.Abstractions;
using Poco;
public class CaseWorkflowDisplayRepository
{
private readonly DbContext dbContext;
private readonly int tenantRegistryId;
private readonly string userName;
public CaseWorkflowDisplayRepository(DbContext dbContext, string userName)
{
this.dbContext = dbContext;
this.userName = userName;
tenantRegistryId = this.dbContext.UserInTenant.Where(w => w.User == this.userName)
.Select(s => s.TenantRegistryId).FirstOrDefault();
}
public CaseWorkflowDisplayRepository(DbContext dbContext, int tenantRegistryId)
{
this.dbContext = dbContext;
this.tenantRegistryId = tenantRegistryId;
}
public async Task<IEnumerable<CaseWorkflowDisplay>> GetAsync(CancellationToken token = default)
{
return await dbContext.CaseWorkflowDisplay
.Where(w => w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId)
.ToListAsync(token);
}
public Task<CaseWorkflowDisplay> GetByNameCaseWorkflowIdAsync(string name, int caseWorkflowId, CancellationToken token = default)
{
return dbContext.CaseWorkflowDisplay
.FirstOrDefaultAsync(f =>
f.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& f.CaseWorkflowId == caseWorkflowId
&& (f.Deleted == 0 || f.Deleted == null)
&& f.Name.ToLower() == name.ToLower(), token);
}
public async Task<IEnumerable<CaseWorkflowDisplay>> GetByCasesWorkflowIdOrderByIdAsync(int casesWorkflowId, CancellationToken token = default)
{
return await dbContext.CaseWorkflowDisplay
.Where(w => w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& w.CaseWorkflowId == casesWorkflowId && (w.Deleted == 0 || w.Deleted == null))
.OrderBy(o => o.Id).ToListAsync(token);
}
public async Task<IEnumerable<CaseWorkflowDisplay>> GetByCasesWorkflowIdActiveOnlyAsync(int casesWorkflowId, CancellationToken token = default)
{
return await dbContext.CaseWorkflowDisplay
.Where(w => w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& w.Active == 1
&& w.CaseWorkflowId == casesWorkflowId
&& (w.Deleted == 0 || w.Deleted == null)
&& dbContext.CaseWorkflowDisplayRole
.Where(r => r.CaseWorkflowDisplayGuid == w.Guid
&& (r.Deleted == 0 || r.Deleted == null))
.Any(r => dbContext.RoleRegistry
.Where(rr => rr.Guid == r.RoleRegistryGuid)
.Any(rr => dbContext.UserRegistry
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
&& dbContext.CaseWorkflowRole
.Where(r => r.CaseWorkflowGuid == w.CaseWorkflow.Guid
&& (r.Deleted == 0 || r.Deleted == null))
.Any(r => dbContext.RoleRegistry
.Where(rr => rr.Guid == r.RoleRegistryGuid)
.Any(rr => dbContext.UserRegistry
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
).ToListAsync(token);
}
public async Task<IEnumerable<CaseWorkflowDisplay>> GetByCasesWorkflowGuidActiveOnlyAsync(Guid casesWorkflowGuid, CancellationToken token = default)
{
return await dbContext.CaseWorkflowDisplay
.Where(w => w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& w.Active == 1
&& w.CaseWorkflow.Guid == casesWorkflowGuid
&& (w.CaseWorkflow.EntityAnalysisModel.Deleted == 0 || w.CaseWorkflow.EntityAnalysisModel.Deleted == null)
&& (w.Deleted == 0 || w.Deleted == null)
&& dbContext.CaseWorkflowDisplayRole
.Where(r => r.CaseWorkflowDisplayGuid == w.Guid
&& (r.Deleted == 0 || r.Deleted == null))
.Any(r => dbContext.RoleRegistry
.Where(rr => rr.Guid == r.RoleRegistryGuid)
.Any(rr => dbContext.UserRegistry
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
&& dbContext.CaseWorkflowRole
.Where(r => r.CaseWorkflowGuid == w.CaseWorkflow.Guid
&& (r.Deleted == 0 || r.Deleted == null))
.Any(r => dbContext.RoleRegistry
.Where(rr => rr.Guid == r.RoleRegistryGuid)
.Any(rr => dbContext.UserRegistry
.Any(u => u.RoleRegistryId == rr.Id && u.Name == userName)))
).ToListAsync(token);
}
public Task<CaseWorkflowDisplay> GetByIdAsync(int id, CancellationToken token = default)
{
return dbContext.CaseWorkflowDisplay.FirstOrDefaultAsync(w =>
w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& w.Id == id && (w.Deleted == 0 || w.Deleted == null), token);
}
public Task<CaseWorkflowDisplay> GetByIdActiveOnlyAsync(int id, CancellationToken token = default)
{
return dbContext.CaseWorkflowDisplay.FirstOrDefaultAsync(w =>
w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& w.Id == id && (w.Deleted == 0 || w.Deleted == null)
&& w.Active == 1
&& (w.CaseWorkflowDisplayRole.RoleRegistry.UserRegistry.Name == userName
&& w.CaseWorkflowDisplayRole.Deleted == 0 || w.CaseWorkflowDisplayRole.Deleted == null)
&& (w.CaseWorkflow.CaseWorkflowRole.RoleRegistry.UserRegistry.Name == userName
&& w.CaseWorkflow.CaseWorkflowRole.Deleted == 0 || w.CaseWorkflow.CaseWorkflowRole.Deleted == null), token);
}
public async Task<CaseWorkflowDisplay> InsertAsync(CaseWorkflowDisplay model, CancellationToken token = default)
{
model.CreatedUser = userName;
model.CreatedDate = DateTime.Now;
model.Version = 1;
model.Guid = model.Guid == Guid.Empty ? Guid.NewGuid() : model.Guid;
model.Id = await dbContext.InsertWithInt32IdentityAsync(model, token: token);
return model;
}
public async Task<CaseWorkflowDisplay> UpdateAsync(CaseWorkflowDisplay model, CancellationToken token = default)
{
var existing = await dbContext.CaseWorkflowDisplay
.FirstOrDefaultAsync(w => w.Id
== model.Id
&& w.CaseWorkflow.EntityAnalysisModel.TenantRegistryId ==
tenantRegistryId
&& (w.Deleted == 0 || w.Deleted == null)
&& (w.Locked == 0 || w.Locked == null), token);
if (existing == null)
{
throw new KeyNotFoundException();
}
model.Version = existing.Version + 1;
model.CreatedUser = userName ?? model.CreatedUser;
model.Guid = existing.Guid;
model.CreatedDate = DateTime.Now;
await dbContext.UpdateAsync(model, token: token);
var mapper = new Mapper(new MapperConfiguration(cfg =>
{
cfg.CreateMap<CaseWorkflowDisplay, CaseWorkflowDisplayVersion>();
}, NullLoggerFactory.Instance));
var audit = mapper.Map<CaseWorkflowDisplayVersion>(existing);
audit.CaseWorkflowDisplayId = existing.Id;
await dbContext.InsertAsync(audit, token: token);
return model;
}
public async Task DeleteAsync(int id, CancellationToken token = default)
{
var records = await dbContext.CaseWorkflowDisplay
.Where(d => d.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryId
&& d.Id == id
&& (d.Locked == 0 || d.Locked == null)
&& (d.Deleted == 0 || d.Deleted == null))
.Set(s => s.Deleted, Convert.ToByte(1))
.Set(s => s.DeletedDate, DateTime.Now)
.Set(s => s.DeletedUser, userName)
.UpdateAsync(token);
if (records == 0)
{
throw new KeyNotFoundException();
}
}
public Task DeleteByTenantRegistryIdOutsideOfInstanceAsync(int tenantRegistryIdOutsideOfInstance, int importId, CancellationToken token = default)
{
return dbContext.CaseWorkflowDisplay
.Where(d => d.CaseWorkflow.EntityAnalysisModel.TenantRegistryId == tenantRegistryIdOutsideOfInstance
&& (d.Deleted == 0 || d.Deleted == null))
.Set(s => s.ImportId, importId)
.Set(s => s.Deleted, Convert.ToByte(1))
.Set(s => s.DeletedDate, DateTime.Now)
.UpdateAsync(token);
}
}
}