using Microsoft.AspNetCore.Http; using Microsoft.AspNetCore.Mvc; using System; using System.Collections.Generic; using System.Linq; using System.Text; using SecureCore.Services; using SecureCore.Authentication; namespace SecureCore.Controllers { [Route("api/[controller]")] [ApiController] public class EmployeeController : Controller { private readonly IDataService DataService; public EmployeeController(IDataService dataService) { DataService = dataService; } [HttpGet] public IActionResult Get() { AppSettingsManager.TryGetConnectionString("MainDataConnectionString", out string connectionString); if (SessionManager.IsSessionTokenValid(HttpContext, connectionString)) return Ok(DataService.Get()); else return Unauthorized(); } [HttpGet("{id}", Name = "Get")] public IActionResult Get(int id) { AppSettingsManager.TryGetConnectionString("MainDataConnectionString", out string connectionString); if (SessionManager.IsSessionTokenValid(HttpContext, connectionString)) return Ok(DataService.GetById(id)); else return Unauthorized(); } } public class AuthenticatedUser { public string UserName { get; set; } public string SessionToken { get; set; } } }