Changeset b373fea for ChapterX.Application/Comment

Timestamp:

06/23/26 15:20:39 (13 days ago)

Author:

kikisrbinoska <srbinoskakristina07@…>

Branches:

main

Children:

0b502c2

Parents:

d300631

Message:

Fixes for authentication and auhtorization\

Location:

ChapterX.Application/Comment/Commands

Files:

• AddRequest.cs (modified) (1 diff)
• DeleteHandler.cs (modified) (1 diff)
• DeleteRequest.cs (modified) (1 diff)
• UpdateHandler.cs (modified) (1 diff)
• UpdateRequest.cs (modified) (1 diff)

ChapterX.Application/Comment/Commands/AddRequest.cs

@@ -1 +1 @@
 using MediatR;
+using System.ComponentModel.DataAnnotations;
 
 namespace ChapterX.Application.Comment.Commands
 {
-    public record AddRequest(string Content, int UserId, int StoryId) : IRequest<AddResponse>;
+    public record AddRequest(
+        [Required][MaxLength(2000)] string Content,
+        int UserId,
+        int StoryId
+    ) : IRequest<AddResponse>;
 }

ChapterX.Application/Comment/Commands/DeleteHandler.cs

@@ -22 +22 @@
                 return new DeleteResponse(false);
 
+            if (comment.UserId != request.CallerId)
+                throw new UnauthorizedAccessException("You do not own this comment.");
+
             await _commentRepository.DeleteAsync(comment, cancellationToken);
 

ChapterX.Application/Comment/Commands/DeleteRequest.cs

@@ -3 +3 @@
 namespace ChapterX.Application.Comment.Commands
 {
-    public record DeleteRequest(int Id) : IRequest<DeleteResponse>;
+    public record DeleteRequest(int Id, int CallerId) : IRequest<DeleteResponse>;
 }

ChapterX.Application/Comment/Commands/UpdateHandler.cs

@@ -22 +22 @@
                 return new UpdateResponse(false);
 
+            if (comment.UserId != request.CallerId)
+                throw new UnauthorizedAccessException("You do not own this comment.");
+
             comment.Content = request.Content;
             comment.UpdatedAt = DateTime.UtcNow;

ChapterX.Application/Comment/Commands/UpdateRequest.cs

@@ -3 +3 @@
 namespace ChapterX.Application.Comment.Commands
 {
-    public record UpdateRequest(int Id, string Content) : IRequest<UpdateResponse>;
+    public record UpdateRequest(int Id, string Content, int CallerId = 0) : IRequest<UpdateResponse>;
 }