Merge authentication into Questions API

2026-07-20 17:21:15 -05:00
parent 2dd4fa6420
commit 5c406a271f
24 changed files with 1472 additions and 30 deletions
@@ -0,0 +1,50 @@
+using QuestionsApi.Models;
+
+namespace QuestionsApi.Services;
+
+public sealed record LegalPolicyStatus(
+    string TermsVersion,
+    string PrivacyVersion,
+    DateTime EffectiveUtc,
+    string TermsUrl,
+    string PrivacyUrl,
+    bool RequiresLegalAcceptance);
+
+public sealed class LegalPolicy(IConfiguration configuration)
+{
+    public const string DefaultVersion = "2026-07-20";
+
+    public string TermsVersion => configuration["Legal:TermsVersion"] ?? DefaultVersion;
+    public string PrivacyVersion => configuration["Legal:PrivacyVersion"] ?? DefaultVersion;
+    public string TermsUrl => configuration["Legal:TermsUrl"] ?? "https://doctor.ranaze.com/terms.html";
+    public string PrivacyUrl => configuration["Legal:PrivacyUrl"] ?? "https://doctor.ranaze.com/privacy.html";
+    public DateTime EffectiveUtc => DateTime.TryParse(configuration["Legal:EffectiveUtc"], out var value)
+        ? value.ToUniversalTime()
+        : new DateTime(2026, 7, 20, 0, 0, 0, DateTimeKind.Utc);
+
+    public bool IsCurrent(AuthUser user) =>
+        user.TermsAcceptedVersion == TermsVersion && user.PrivacyAcceptedVersion == PrivacyVersion;
+
+    public LegalPolicyStatus Status(AuthUser? user = null) => new(
+        TermsVersion, PrivacyVersion, EffectiveUtc, TermsUrl, PrivacyUrl,
+        user is not null && !IsCurrent(user));
+
+    public void Accept(AuthUser user, string source, DateTime? acceptedUtc = null)
+    {
+        var timestamp = acceptedUtc ?? DateTime.UtcNow;
+        user.LegalAcceptances ??= [];
+        if (IsCurrent(user) && user.LegalAcceptances.Any(record =>
+                record.TermsVersion == TermsVersion && record.PrivacyVersion == PrivacyVersion))
+            return;
+        user.TermsAcceptedVersion = TermsVersion;
+        user.PrivacyAcceptedVersion = PrivacyVersion;
+        user.LegalAcceptedUtc = timestamp;
+        user.LegalAcceptances.Add(new LegalAcceptanceRecord
+        {
+            TermsVersion = TermsVersion,
+            PrivacyVersion = PrivacyVersion,
+            AcceptedUtc = timestamp,
+            Source = source
+        });
+    }
+}