feat: add current user and tenant endpoints

Tiku.Api/Controllers/AuthController.cs

@@ -0,0 +1,92 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Tiku.Application.Auth;
+
+namespace Tiku.Api.Controllers;
+
+[ApiController]
+[Route("api/auth")]
+public sealed class AuthController(IAuthService authService) : ControllerBase
+{
+    [AllowAnonymous]
+    [HttpPost("login/password")]
+    public async Task<ActionResult<AuthenticatedUser>> LoginWithPassword(
+        PasswordLoginHttpRequest request,
+        CancellationToken cancellationToken)
+    {
+        var result = await authService.LoginWithPasswordAsync(
+            new PasswordLoginRequest(
+                request.TenantId,
+                request.Phone,
+                request.Password,
+                GetIpAddress(),
+                Request.Headers.UserAgent.ToString()),
+            cancellationToken);
+
+        return Ok(result);
+    }
+
+    [AllowAnonymous]
+    [HttpPost("login/sms")]
+    public async Task<ActionResult<AuthenticatedUser>> LoginWithSms(
+        SmsLoginHttpRequest request,
+        CancellationToken cancellationToken)
+    {
+        var result = await authService.LoginWithSmsAsync(
+            new SmsLoginRequest(
+                request.TenantId,
+                request.Phone,
+                request.Code,
+                GetIpAddress(),
+                Request.Headers.UserAgent.ToString()),
+            cancellationToken);
+
+        return Ok(result);
+    }
+
+    [AllowAnonymous]
+    [HttpPost("refresh")]
+    public async Task<ActionResult<AuthTokenPair>> Refresh(
+        RefreshHttpRequest request,
+        CancellationToken cancellationToken)
+    {
+        var result = await authService.RefreshAsync(
+            new RefreshSessionRequest(
+                request.RefreshToken,
+                GetIpAddress(),
+                Request.Headers.UserAgent.ToString()),
+            cancellationToken);
+
+        return Ok(result);
+    }
+
+    [AllowAnonymous]
+    [HttpPost("logout")]
+    public async Task<IActionResult> Logout(
+        RefreshHttpRequest request,
+        CancellationToken cancellationToken)
+    {
+        await authService.LogoutAsync(
+            new LogoutSessionRequest(request.RefreshToken),
+            cancellationToken);
+
+        return NoContent();
+    }
+
+    private string? GetIpAddress()
+    {
+        return HttpContext.Connection.RemoteIpAddress?.ToString();
+    }
+}
+
+public sealed record PasswordLoginHttpRequest(
+    Guid TenantId,
+    string Phone,
+    string Password);
+
+public sealed record SmsLoginHttpRequest(
+    Guid TenantId,
+    string Phone,
+    string Code);
+
+public sealed record RefreshHttpRequest(string RefreshToken);

Tiku.Api/Controllers/MeController.cs

@@ -0,0 +1,68 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using Tiku.Application.Security;
+using Tiku.Domain.Tenancy;
+using Tiku.Infrastructure.Persistence;
+
+namespace Tiku.Api.Controllers;
+
+[ApiController]
+[Authorize(Policy = TikuPolicies.AuthenticatedUser)]
+[Route("api/me")]
+public sealed class MeController(
+    ICurrentUser currentUser,
+    TikuDbContext dbContext) : ControllerBase
+{
+    [HttpGet]
+    public async Task<ActionResult<MeResponse>> Get(CancellationToken cancellationToken)
+    {
+        if (currentUser.UserId is null)
+        {
+            return Unauthorized();
+        }
+
+        var user = await dbContext.Users.FindAsync([currentUser.UserId.Value], cancellationToken);
+        if (user is null)
+        {
+            return Unauthorized();
+        }
+
+        var memberships = await dbContext.TenantMemberships
+            .Where(membership =>
+                membership.UserId == user.Id &&
+                membership.Status == MembershipStatus.Active)
+            .Join(
+                dbContext.Tenants,
+                membership => membership.TenantId,
+                tenant => tenant.Id,
+                (membership, tenant) => new TenantMembershipResponse(
+                    tenant.Id,
+                    tenant.Name,
+                    tenant.Slug,
+                    membership.Role,
+                    membership.Status))
+            .ToArrayAsync(cancellationToken);
+
+        return Ok(new MeResponse(
+            user.Id,
+            user.Phone,
+            user.Email,
+            user.Name,
+            memberships));
+    }
+}
+
+public sealed record MeResponse(
+    Guid UserId,
+    string? Phone,
+    string? Email,
+    string? Name,
+    IReadOnlyCollection<TenantMembershipResponse> Tenants);
+
+public sealed record TenantMembershipResponse(
+    Guid TenantId,
+    string TenantName,
+    string TenantSlug,
+    TenantRole Role,
+    MembershipStatus Status);

Tiku.Api/Controllers/TenantsController.cs

@@ -0,0 +1,61 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.EntityFrameworkCore;
+using System.Text.Json;
+using Tiku.Application.Auth;
+using Tiku.Application.Security;
+using Tiku.Domain.Tenancy;
+using Tiku.Infrastructure.Persistence;
+
+namespace Tiku.Api.Controllers;
+
+[ApiController]
+[Authorize(Policy = TikuPolicies.CurrentTenantMember)]
+[Route("api/tenants")]
+public sealed class TenantsController(
+    ICurrentUser currentUser,
+    ICurrentTenant currentTenant,
+    TikuDbContext dbContext) : ControllerBase
+{
+    [HttpGet("current")]
+    public async Task<ActionResult<CurrentTenantResponse>> GetCurrent(CancellationToken cancellationToken)
+    {
+        if (currentUser.UserId is null || currentTenant.TenantId is null)
+        {
+            throw new TenantAccessDeniedException();
+        }
+
+        var result = await dbContext.TenantMemberships
+            .Where(membership =>
+                membership.UserId == currentUser.UserId.Value &&
+                membership.TenantId == currentTenant.TenantId.Value &&
+                membership.Status == MembershipStatus.Active)
+            .Join(
+                dbContext.Tenants,
+                membership => membership.TenantId,
+                tenant => tenant.Id,
+                (membership, tenant) => new CurrentTenantResponse(
+                    tenant.Id,
+                    tenant.Name,
+                    tenant.Slug,
+                    tenant.Status,
+                    membership.Role,
+                    membership.Permissions))
+            .SingleOrDefaultAsync(cancellationToken);
+
+        if (result is null)
+        {
+            throw new TenantAccessDeniedException();
+        }
+
+        return Ok(result);
+    }
+}
+
+public sealed record CurrentTenantResponse(
+    Guid TenantId,
+    string TenantName,
+    string TenantSlug,
+    TenantStatus Status,
+    TenantRole Role,
+    JsonElement Permissions);