feat(backend): add api for managing project tokens

ScriptBeeWebApp/src/Common/Common/DateTimeProvider.cs

@@ -1,6 +1,6 @@
 namespace ScriptBee.Common;
 
-public class DateTimeProvider : IDateTimeProvider
+public sealed class DateTimeProvider : IDateTimeProvider
 {
     public DateTimeOffset UtcNow() => DateTimeOffset.UtcNow;
 }

ScriptBeeWebApp/src/Common/Common/GuidProvider.cs

@@ -1,6 +1,6 @@
 namespace ScriptBee.Common;
 
-public class GuidProvider : IGuidProvider
+public sealed class GuidProvider : IGuidProvider
 {
     public Guid NewGuid() => Guid.CreateVersion7();
 }

ScriptBeeWebApp/src/Common/Common/ISecureRandomProvider.cs

@@ -0,0 +1,6 @@
+namespace ScriptBee.Common;
+
+public interface ISecureRandomProvider
+{
+    byte[] GetBytes(int count);
+}

ScriptBeeWebApp/src/Common/Common/SecureRandomProvider.cs

@@ -0,0 +1,8 @@
+using System.Security.Cryptography;
+
+namespace ScriptBee.Common;
+
+public sealed class SecureRandomProvider : ISecureRandomProvider
+{
+    public byte[] GetBytes(int count) => RandomNumberGenerator.GetBytes(32);
+}

ScriptBeeWebApp/src/Common/Model/Project/ProjectToken.cs

@@ -0,0 +1,13 @@
+using ScriptBee.Domain.Model.User;
+
+namespace ScriptBee.Domain.Model.Project;
+
+public record ProjectToken(
+    ProjectTokenId Id,
+    ProjectId ProjectId,
+    string TokenHash,
+    string? Description,
+    UserRole Role,
+    DateTimeOffset CreatedAt,
+    DateTimeOffset ExpiresAt
+);

ScriptBeeWebApp/src/Common/Model/Project/ProjectTokenId.cs

@@ -0,0 +1,6 @@
+namespace ScriptBee.Domain.Model.Project;
+
+public readonly record struct ProjectTokenId(string Value)
+{
+    public override string ToString() => Value;
+}

ScriptBeeWebApp/src/Gateway/Adapters/Persistence.Mongodb.Gateway/Entity/MongodbProjectToken.cs

@@ -0,0 +1,37 @@
+using MongoDB.Bson;
+using MongoDB.Bson.Serialization.Attributes;
+using ScriptBee.Domain.Model.Project;
+using ScriptBee.Domain.Model.User;
+using ScriptBee.Persistence.Mongodb.Repository;
+
+namespace ScriptBee.Persistence.Mongodb.Entity;
+
+[BsonIgnoreExtraElements]
+public class MongodbProjectToken : IDocument
+{
+    [BsonId]
+    [BsonRepresentation(BsonType.ObjectId)]
+    public string Id { get; set; } = null!;
+
+    public required string ProjectId { get; init; }
+    public required string TokenHash { get; init; }
+    public string? Description { get; init; }
+
+    public required string Role { get; init; }
+
+    public required DateTimeOffset CreatedAt { get; init; }
+    public required DateTimeOffset ExpiresAt { get; init; }
+
+    public ProjectToken ToProjectToken()
+    {
+        return new ProjectToken(
+            new ProjectTokenId(Id),
+            Domain.Model.Project.ProjectId.FromValue(ProjectId),
+            TokenHash,
+            Description,
+            new UserRole(Role),
+            CreatedAt,
+            ExpiresAt
+        );
+    }
+}

ScriptBeeWebApp/src/Gateway/Adapters/Persistence.Mongodb.Gateway/Extensions/GatewayMongoDbExtensions.cs

@@ -43,7 +43,7 @@ public IServiceCollection AddResourceMembersAdapters(IMongoDatabase mongoDatabas
                 .AddSingleton<IRemoveProjectMember, ResourceMembersPersistenceAdapter>();
         }
 
-        public IServiceCollection AddUserManagementAdaptersAdapters(IMongoDatabase mongoDatabase)
+        public IServiceCollection AddUserManagementAdapters(IMongoDatabase mongoDatabase)
         {
             return services
                 .AddMongoCollection<MongodbUser>(mongoDatabase, "Users")
@@ -52,5 +52,14 @@ public IServiceCollection AddUserManagementAdaptersAdapters(IMongoDatabase mongo
                 .AddSingleton<IGetOrAddUser, UserManagementPersistenceAdapter>()
                 .AddSingleton<IGetAllUsers, UserManagementPersistenceAdapter>();
         }
+
+        public IServiceCollection AddProjectTokensAdapters(IMongoDatabase mongoDatabase)
+        {
+            return services
+                .AddMongoCollection<MongodbProjectToken>(mongoDatabase, "ProjectTokens")
+                .AddSingleton<ICreateProjectToken, ProjectTokensPersistenceAdapter>()
+                .AddSingleton<IGetAllProjectTokens, ProjectTokensPersistenceAdapter>()
+                .AddSingleton<IDeleteProjectToken, ProjectTokensPersistenceAdapter>();
+        }
     }
 }

ScriptBeeWebApp/src/Gateway/Adapters/Persistence.Mongodb.Gateway/ProjectTokensPersistenceAdapter.cs

@@ -0,0 +1,63 @@
+using MongoDB.Driver;
+using ScriptBee.Domain.Model.Project;
+using ScriptBee.Domain.Model.User;
+using ScriptBee.Persistence.Mongodb.Entity;
+using ScriptBee.Persistence.Mongodb.Repository;
+using ScriptBee.Ports.Permissions;
+
+namespace ScriptBee.Persistence.Mongodb;
+
+public sealed class ProjectTokensPersistenceAdapter(
+    IMongoRepository<MongodbProjectToken> mongoRepository
+) : ICreateProjectToken, IGetAllProjectTokens, IDeleteProjectToken
+{
+    public async Task<ProjectToken> CreateToken(
+        ProjectId projectId,
+        string tokenHash,
+        string? description,
+        UserRole role,
+        DateTimeOffset expiresAt,
+        CancellationToken cancellationToken
+    )
+    {
+        var mongoToken = new MongodbProjectToken
+        {
+            ProjectId = projectId.Value,
+            Description = description,
+            TokenHash = tokenHash,
+            Role = role.Value,
+            CreatedAt = DateTimeOffset.UtcNow,
+            ExpiresAt = expiresAt,
+        };
+
+        await mongoRepository.CreateDocument(mongoToken, cancellationToken);
+
+        return mongoToken.ToProjectToken();
+    }
+
+    public async Task<List<ProjectToken>> GetAllForProjectId(
+        ProjectId projectId,
+        CancellationToken cancellationToken
+    )
+    {
+        var tokens = await mongoRepository.GetAllDocuments(
+            token => token.ProjectId == projectId.Value,
+            cancellationToken
+        );
+        return [.. tokens.Select(t => t.ToProjectToken())];
+    }
+
+    public async Task DeleteToken(
+        ProjectId projectId,
+        ProjectTokenId tokenId,
+        CancellationToken cancellationToken
+    )
+    {
+        var filter = Builders<MongodbProjectToken>.Filter.And(
+            Builders<MongodbProjectToken>.Filter.Eq(m => m.ProjectId, projectId.Value),
+            Builders<MongodbProjectToken>.Filter.Eq(m => m.Id, tokenId.Value)
+        );
+
+        await mongoRepository.MongoCollection.DeleteOneAsync(filter, cancellationToken);
+    }
+}

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebCreateProjectTokenRequest.cs

@@ -0,0 +1,19 @@
+using System.ComponentModel;
+using ScriptBee.Domain.Model.Project;
+using ScriptBee.Domain.Model.User;
+using ScriptBee.UseCases.Gateway;
+
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+[Description("Command used to create a new project toke.")]
+public record WebCreateProjectTokenRequest(
+    string? Description,
+    string Role,
+    DateTimeOffset ExpiresAt
+)
+{
+    public CreateProjectTokenCommand Map(ProjectId projectId)
+    {
+        return new CreateProjectTokenCommand(projectId, Description, new UserRole(Role), ExpiresAt);
+    }
+}

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebCreateProjectTokenResponse.cs

@@ -0,0 +1,25 @@
+using ScriptBee.UseCases.Gateway;
+
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+public record WebCreateProjectTokenResponse(
+    string Id,
+    string Token,
+    string? Description,
+    string Role,
+    DateTimeOffset CreatedAt,
+    DateTimeOffset ExpiresAt
+)
+{
+    public static WebCreateProjectTokenResponse Map(NewProjectTokenResult result)
+    {
+        return new WebCreateProjectTokenResponse(
+            result.Token.Id.Value,
+            result.UnhashedToken,
+            result.Token.Description,
+            result.Token.Role.Value,
+            result.Token.CreatedAt,
+            result.Token.ExpiresAt
+        );
+    }
+}

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/Project/Contracts/WebGetAllUsersResponse.cs → ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebGetAllUsersResponse.cs

@@ -1,3 +1,3 @@
-namespace ScriptBee.Web.EndpointDefinitions.Project.Contracts;
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
 
 public record WebGetAllUsersResponse(IEnumerable<WebUserInfo> Users);

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/Project/Contracts/WebGetAvailableRolesResponse.cs → ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebGetAvailableRolesResponse.cs

@@ -1,3 +1,3 @@
-namespace ScriptBee.Web.EndpointDefinitions.Project.Contracts;
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
 
 public record WebGetAvailableRolesResponse(IEnumerable<WebRoleInfo> Roles);

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/Project/Contracts/WebGetProjectMembersResponse.cs → ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebGetProjectMembersResponse.cs

@@ -1,3 +1,3 @@
-namespace ScriptBee.Web.EndpointDefinitions.Project.Contracts;
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
 
 public record WebGetProjectMembersResponse(IEnumerable<WebProjectMember> Members);

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebGetProjectTokensResponse.cs

@@ -0,0 +1,3 @@
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+public record WebGetProjectTokensResponse(IEnumerable<WebProjectToken> Tokens);

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/Project/Contracts/WebGetUserPermissionsForProjectResponse.cs → ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebGetUserPermissionsForProjectResponse.cs

@@ -1,4 +1,4 @@
-namespace ScriptBee.Web.EndpointDefinitions.Project.Contracts;
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
 
 public record WebGetUserPermissionsForProjectResponse(
     string? Role,

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebProjectMember.cs

@@ -0,0 +1,11 @@
+using ScriptBee.Domain.Model.User;
+
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+public record WebProjectMember(string MemberId, string MemberType, string Role)
+{
+    public static WebProjectMember Map(ProjectMember member)
+    {
+        return new WebProjectMember(member.MemberId, member.MemberType, member.Role.Value);
+    }
+}

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebProjectToken.cs

@@ -0,0 +1,23 @@
+using ScriptBee.Domain.Model.Project;
+
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+public record WebProjectToken(
+    string Id,
+    string? Description,
+    string Role,
+    DateTimeOffset CreatedAt,
+    DateTimeOffset ExpiresAt
+)
+{
+    public static WebProjectToken Map(ProjectToken token)
+    {
+        return new WebProjectToken(
+            token.Id.Value,
+            token.Description,
+            token.Role.Value,
+            token.CreatedAt,
+            token.ExpiresAt
+        );
+    }
+}

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebRoleInfo.cs

@@ -0,0 +1,3 @@
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+public record WebRoleInfo(string Id, string Description);

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebUpdateProjectMemberCommand.cs

@@ -0,0 +1,3 @@
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+public record WebUpdateProjectMemberCommand(string Role, string MemberType);

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/Contracts/WebUserInfo.cs

@@ -0,0 +1,3 @@
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
+
+public record WebUserInfo(string Id, string Name);

ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/Project/GetProjectPermissionsEndpoint.cs → ScriptBeeWebApp/src/Gateway/Adapters/Web/EndpointDefinitions/ProjectAccess/GetProjectPermissionsEndpoint.cs

@@ -5,9 +5,9 @@
 using ScriptBee.Domain.Model.Project;
 using ScriptBee.Service.Gateway;
 using ScriptBee.UseCases.Gateway;
-using ScriptBee.Web.EndpointDefinitions.Project.Contracts;
+using ScriptBee.Web.EndpointDefinitions.ProjectAccess.Contracts;
 
-namespace ScriptBee.Web.EndpointDefinitions.Project;
+namespace ScriptBee.Web.EndpointDefinitions.ProjectAccess;
 
 public class GetProjectPermissionsEndpoint : IEndpointDefinition
 {