541 lines
20 KiB
C#
541 lines
20 KiB
C#
using Microsoft.AspNetCore.Mvc;
|
|
using Tiku.Api.Controllers;
|
|
using Tiku.Application.Assets;
|
|
using Tiku.Application.Auth;
|
|
using Tiku.Application.Security;
|
|
using Tiku.Application.Commerce;
|
|
using Tiku.Application.Content;
|
|
using Tiku.Application.Growth;
|
|
using Tiku.Application.Points;
|
|
using Tiku.Application.PlatformAdmin;
|
|
using Tiku.Application.QuestionBanks;
|
|
using Tiku.Application.Storage;
|
|
using Tiku.Infrastructure.Content;
|
|
using Tiku.Infrastructure.Learning;
|
|
using Tiku.Infrastructure.Profile;
|
|
using Tiku.Infrastructure.QuestionBanks;
|
|
using Tiku.Infrastructure.Scoreline;
|
|
using Tiku.Application.TenantAdmin;
|
|
using Tiku.Application.Tenancy;
|
|
using Tiku.Infrastructure.Backoffice;
|
|
|
|
namespace Tiku.Api.Middleware;
|
|
|
|
public sealed class ExceptionHandlingMiddleware(
|
|
RequestDelegate next,
|
|
ILogger<ExceptionHandlingMiddleware> logger,
|
|
IHostEnvironment environment)
|
|
{
|
|
public async Task InvokeAsync(HttpContext context)
|
|
{
|
|
try
|
|
{
|
|
await next(context);
|
|
}
|
|
catch (Exception exception)
|
|
{
|
|
if (exception is AuthException authException)
|
|
{
|
|
await WriteAuthProblemAsync(context, authException);
|
|
return;
|
|
}
|
|
|
|
if (exception is TenantNotFoundException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
"Tenant was not found.",
|
|
StatusCodes.Status404NotFound,
|
|
"tenant_not_found");
|
|
return;
|
|
}
|
|
|
|
if (exception is TenantContextConflictException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
exception.Message,
|
|
StatusCodes.Status403Forbidden,
|
|
"tenant_context_conflict");
|
|
return;
|
|
}
|
|
|
|
if (exception is TenantFrontendConfigException frontendConfigException)
|
|
{
|
|
var status = frontendConfigException.Code switch
|
|
{
|
|
"tenant_not_found" or "frontend_config_not_found" => StatusCodes.Status404NotFound,
|
|
"frontend_config_version_conflict" => StatusCodes.Status409Conflict,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
await WriteProblemAsync(
|
|
context,
|
|
frontendConfigException.Message,
|
|
status,
|
|
frontendConfigException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is PublicQuestionAccessDeniedException publicQuestionAccessDeniedException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
publicQuestionAccessDeniedException.Message,
|
|
StatusCodes.Status403Forbidden,
|
|
publicQuestionAccessDeniedException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is QuestionLocatorException questionLocatorException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
questionLocatorException.Message,
|
|
StatusCodes.Status404NotFound,
|
|
questionLocatorException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is RequiredFieldException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
exception.Message,
|
|
StatusCodes.Status400BadRequest,
|
|
"required_field");
|
|
return;
|
|
}
|
|
|
|
if (exception is ContentNavigationNotFoundException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
exception.Message,
|
|
StatusCodes.Status404NotFound,
|
|
"content_navigation_not_found");
|
|
return;
|
|
}
|
|
|
|
if (exception is QuestionBankRequiredFieldException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
exception.Message,
|
|
StatusCodes.Status400BadRequest,
|
|
"required_field");
|
|
return;
|
|
}
|
|
|
|
if (exception is QuestionBankNotFoundException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
exception.Message,
|
|
StatusCodes.Status404NotFound,
|
|
"question_not_found");
|
|
return;
|
|
}
|
|
|
|
if (exception is AssetAccessException assetAccessException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
assetAccessException.Message,
|
|
AssetAccessStatusCode(assetAccessException.Code),
|
|
assetAccessException.Code.ToLowerInvariant());
|
|
return;
|
|
}
|
|
|
|
if (exception is AssetManagementException assetManagementException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
assetManagementException.Message,
|
|
AssetManagementStatusCode(assetManagementException.Code),
|
|
assetManagementException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is ContentManagementException contentManagementException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
contentManagementException.Message,
|
|
ContentManagementStatusCode(contentManagementException.Code),
|
|
contentManagementException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is LearningValidationException learningValidationException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
learningValidationException.Message,
|
|
LearningValidationStatusCode(learningValidationException.Code),
|
|
learningValidationException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is LearningResourceNotFoundException learningResourceNotFoundException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
learningResourceNotFoundException.Message,
|
|
StatusCodes.Status404NotFound,
|
|
learningResourceNotFoundException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is LearningAccessDeniedException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
exception.Message,
|
|
StatusCodes.Status403Forbidden,
|
|
"learning_access_denied");
|
|
return;
|
|
}
|
|
|
|
if (exception is ScorelineQueryException scorelineQueryException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
scorelineQueryException.Message,
|
|
StatusCodes.Status400BadRequest,
|
|
scorelineQueryException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is ProfileException profileException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
profileException.Message,
|
|
ProfileStatusCode(profileException.Code),
|
|
profileException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is TenantAdminDirectException tenantAdminDirectException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
tenantAdminDirectException.Message,
|
|
TenantAdminDirectStatusCode(tenantAdminDirectException.Code),
|
|
tenantAdminDirectException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is BackofficeException backofficeException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
backofficeException.Message,
|
|
BackofficeStatusCode(backofficeException.Code),
|
|
backofficeException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is PlatformAdminException platformAdminException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
platformAdminException.Message,
|
|
PlatformAdminStatusCode(platformAdminException.Code),
|
|
platformAdminException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is CommerceException commerceException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
commerceException.Message,
|
|
CommerceStatusCode(commerceException.Code),
|
|
commerceException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is PointException pointException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
pointException.Message,
|
|
PointStatusCode(pointException.Code),
|
|
pointException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is ReferralException referralException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
referralException.Message,
|
|
ReferralStatusCode(referralException.Code),
|
|
referralException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is CrmException crmException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
crmException.Message,
|
|
CrmStatusCode(crmException.Code),
|
|
crmException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is CommissionException commissionException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
commissionException.Message,
|
|
CommissionStatusCode(commissionException.Code),
|
|
commissionException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is PaymentProviderException paymentProviderException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
paymentProviderException.Message,
|
|
CommerceStatusCode(paymentProviderException.Code),
|
|
paymentProviderException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is TenantExternalProviderException externalProviderException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
externalProviderException.Message,
|
|
StatusCodes.Status400BadRequest,
|
|
externalProviderException.Code);
|
|
return;
|
|
}
|
|
|
|
if (exception is ObjectStorageException storageException)
|
|
{
|
|
await WriteProblemAsync(
|
|
context,
|
|
storageException.Message,
|
|
storageException is ObjectStorageNotConfiguredException
|
|
? StatusCodes.Status503ServiceUnavailable
|
|
: StatusCodes.Status400BadRequest,
|
|
storageException.Code.ToLowerInvariant());
|
|
return;
|
|
}
|
|
|
|
logger.LogError(exception, "Unhandled API exception");
|
|
|
|
var problem = new ProblemDetails
|
|
{
|
|
Title = "An unexpected error occurred.",
|
|
Status = StatusCodes.Status500InternalServerError,
|
|
Detail = environment.IsDevelopment() ? exception.Message : null,
|
|
Instance = context.Request.Path
|
|
};
|
|
|
|
problem.Extensions["traceId"] = context.TraceIdentifier;
|
|
context.Response.StatusCode = StatusCodes.Status500InternalServerError;
|
|
await context.Response.WriteAsJsonAsync(problem);
|
|
}
|
|
}
|
|
|
|
private static async Task WriteProblemAsync(
|
|
HttpContext context,
|
|
string title,
|
|
int status,
|
|
string code)
|
|
{
|
|
var problem = new ProblemDetails
|
|
{
|
|
Title = title,
|
|
Status = status,
|
|
Instance = context.Request.Path
|
|
};
|
|
|
|
problem.Extensions["code"] = code;
|
|
problem.Extensions["traceId"] = context.TraceIdentifier;
|
|
context.Response.StatusCode = status;
|
|
await context.Response.WriteAsJsonAsync(problem);
|
|
}
|
|
|
|
private static async Task WriteAuthProblemAsync(HttpContext context, AuthException exception)
|
|
{
|
|
var status = exception.Code switch
|
|
{
|
|
"tenant_access_denied" => StatusCodes.Status403Forbidden,
|
|
"sms_rate_limited" => StatusCodes.Status429TooManyRequests,
|
|
"auth_provider_not_configured" => StatusCodes.Status503ServiceUnavailable,
|
|
"session_revoked" => StatusCodes.Status401Unauthorized,
|
|
_ => StatusCodes.Status401Unauthorized
|
|
};
|
|
var problem = new ProblemDetails
|
|
{
|
|
Title = exception.Message,
|
|
Status = status,
|
|
Instance = context.Request.Path
|
|
};
|
|
|
|
problem.Extensions["code"] = exception.Code;
|
|
problem.Extensions["traceId"] = context.TraceIdentifier;
|
|
context.Response.StatusCode = status;
|
|
await context.Response.WriteAsJsonAsync(problem);
|
|
}
|
|
|
|
private static int AssetAccessStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"ASSET_NOT_FOUND" => StatusCodes.Status404NotFound,
|
|
"AUTH_REQUIRED" => StatusCodes.Status401Unauthorized,
|
|
"ASSET_HIDDEN" or "ASSET_MEMBERSHIP_REQUIRED" or "ASSET_SVIP_REQUIRED" => StatusCodes.Status403Forbidden,
|
|
"ASSET_UPLOAD_NOT_VERIFIED" or "ASSET_SECURITY_SCAN_NOT_PASSED" => StatusCodes.Status409Conflict,
|
|
"ASSET_PREVIEW_NOT_SUPPORTED" => StatusCodes.Status400BadRequest,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int LearningValidationStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"no_practice_questions" or "practice_session_empty" => StatusCodes.Status409Conflict,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int AssetManagementStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"asset_not_found" or "import_job_not_found" => StatusCodes.Status404NotFound,
|
|
"asset_upload_missing" => StatusCodes.Status409Conflict,
|
|
"tenant_content_access_denied" => StatusCodes.Status403Forbidden,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int ContentManagementStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"entry_not_found" or "node_not_found" or "collection_not_found" or "question_not_found" or
|
|
"import_type_invalid" => StatusCodes.Status404NotFound,
|
|
"tenant_content_access_denied" => StatusCodes.Status403Forbidden,
|
|
_ when code.EndsWith("_not_found", StringComparison.Ordinal) => StatusCodes.Status404NotFound,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int ProfileStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"profile_access_denied" => StatusCodes.Status403Forbidden,
|
|
"profile_user_not_found" => StatusCodes.Status404NotFound,
|
|
"region_not_found" or "school_not_found" or "major_not_found" => StatusCodes.Status404NotFound,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int TenantAdminDirectStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"tenant_admin_access_denied" => StatusCodes.Status403Forbidden,
|
|
"class_not_found" or "class_member_not_found" or "student_not_found" or "user_not_found" => StatusCodes.Status404NotFound,
|
|
"tenant_member_not_found" => StatusCodes.Status404NotFound,
|
|
_ when code.EndsWith("_not_found", StringComparison.Ordinal) => StatusCodes.Status404NotFound,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int CommerceStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"commerce_access_denied" or "tenant_access_denied" => StatusCodes.Status403Forbidden,
|
|
"tenant_admin_access_denied" => StatusCodes.Status403Forbidden,
|
|
"order_not_found" or "svip_plan_not_found" or "region_not_found" or "activation_code_not_found" or
|
|
"coupon_not_found" or "coupon_redemption_not_found" => StatusCodes.Status404NotFound,
|
|
"payment_provider_not_configured" or "payment_secret_not_configured" => StatusCodes.Status503ServiceUnavailable,
|
|
"order_status_invalid" or "activation_code_used" or "payment_amount_mismatch" or
|
|
"coupon_usage_limit_reached" or "coupon_redemption_status_invalid" => StatusCodes.Status409Conflict,
|
|
_ when code.EndsWith("_not_found", StringComparison.Ordinal) => StatusCodes.Status404NotFound,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int BackofficeStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"platform_access_denied" or "tenant_access_denied" => StatusCodes.Status403Forbidden,
|
|
_ when code.EndsWith("_not_found", StringComparison.Ordinal) => StatusCodes.Status404NotFound,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int PlatformAdminStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"platform_access_denied" => StatusCodes.Status403Forbidden,
|
|
"tenant_slug_exists" => StatusCodes.Status409Conflict,
|
|
_ when code.EndsWith("_not_found", StringComparison.Ordinal) => StatusCodes.Status404NotFound,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int PointStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"point_access_denied" or "tenant_access_denied" => StatusCodes.Status403Forbidden,
|
|
"point_task_not_found" or "point_exchange_item_not_found" => StatusCodes.Status404NotFound,
|
|
"point_task_claim_limit_reached" or "insufficient_points" or "point_exchange_item_sold_out" =>
|
|
StatusCodes.Status409Conflict,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int ReferralStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"referral_access_denied" or "tenant_access_denied" => StatusCodes.Status403Forbidden,
|
|
"referral_code_not_found" => StatusCodes.Status404NotFound,
|
|
"referral_lead_protected" or "self_referral_not_allowed" => StatusCodes.Status409Conflict,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int CrmStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"crm_access_denied" => StatusCodes.Status403Forbidden,
|
|
"crm_queue_not_found" => StatusCodes.Status404NotFound,
|
|
"crm_queue_status_invalid" => StatusCodes.Status409Conflict,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
|
|
private static int CommissionStatusCode(string code)
|
|
{
|
|
return code switch
|
|
{
|
|
"commission_access_denied" => StatusCodes.Status403Forbidden,
|
|
"commission_member_not_found" or "commission_settlement_not_found" or "commission_proof_not_found" =>
|
|
StatusCodes.Status404NotFound,
|
|
"commission_no_unsettled_sources" or "commission_below_minimum" or "commission_status_invalid" or
|
|
"commission_proof_closed" => StatusCodes.Status409Conflict,
|
|
_ => StatusCodes.Status400BadRequest
|
|
};
|
|
}
|
|
}
|