refactor: Clean Architecture mit Repository Pattern, Controllern und DTOs

- 15 Controller-Klassen ersetzen Minimal APIs in Program.cs - Repository Pattern mit Interfaces + Implementierungen (Project, Task, Activity, User) - AuthService verwendet jetzt IUserRepository statt direktem DbContext-Zugriff - SecurityHeadersMiddleware als eigenständige Middleware-Klasse - PathSecurityHelper als gemeinsamer Helper für Pfadvalidierung - DTOs in eigenem Namespace Nexus.Api.DTOs - EF-Entities in Nexus.Api.Data (vorher Nexus.Api.Domain) - Program.cs auf DI-Registrierung + Middleware reduziert - Alle 43 Endpoints unverändert erhalten - Build + 3/3 Tests erfolgreich
2026-06-09 19:52:58 +02:00
parent 13d4c2f157
commit a79d8282dc
45 changed files with 1590 additions and 1182 deletions
@@ -0,0 +1,125 @@
+using Microsoft.AspNetCore.Mvc;
+using Nexus.Api.Data;
+using Nexus.Api.DTOs;
+using Nexus.Api.Repositories;
+
+namespace Nexus.Api.Controllers;
+
+[ApiController]
+[Route("api/v1/tasks")]
+public class TasksController(ITaskRepository taskRepo, IActivityRepository activityRepo) : ControllerBase
+{
+    [HttpGet]
+    public async Task<IResult> GetAll(CancellationToken ct)
+        => Results.Ok(await taskRepo.GetAllAsync(ct));
+
+    [HttpPost]
+    public async Task<IResult> Create([FromBody] CreateTaskRequest request, CancellationToken ct)
+    {
+        if (string.IsNullOrWhiteSpace(request.Title))
+            return Results.ValidationProblem(new Dictionary<string, string[]> { ["title"] = ["Title is required."] });
+
+        var task = new WorkTask
+        {
+            Title = request.Title.Trim(),
+            Priority = string.IsNullOrWhiteSpace(request.Priority) ? "Normal" : request.Priority.Trim(),
+            ProjectId = request.ProjectId
+        };
+        await taskRepo.AddAsync(task, ct);
+        await activityRepo.AddAsync(new ActivityEvent { Type = "task", Message = $"Task {task.Title} created" }, ct);
+        return Results.Created($"/api/v1/tasks/{task.Id}", task);
+    }
+
+    [HttpGet("pending-approval")]
+    public async Task<IResult> GetPendingApproval(CancellationToken ct)
+    {
+        var pending = await taskRepo.GetPendingApprovalAsync(ct);
+        return Results.Ok(pending.Select(x => new { x.Id, x.Title, x.State, x.Priority, x.ProjectId, x.UpdatedAt }));
+    }
+
+    [HttpPost("{id:guid}/approve")]
+    public async Task<IResult> Approve(Guid id, CancellationToken ct)
+    {
+        var task = await taskRepo.GetByIdAsync(id, ct);
+        if (task is null) return Results.NotFound();
+
+        if (!TaskStateHelper.IsInProgressOrBlocked(task.State))
+            return Results.Problem(
+                title: "Approval denied",
+                detail: "Only tasks in 'In progress' or 'Blocked' state can be approved.",
+                statusCode: StatusCodes.Status403Forbidden);
+
+        task.State = TaskStateHelper.ToStateString(TaskState.Done);
+        await taskRepo.UpdateAsync(task, ct);
+        await activityRepo.AddAsync(new ActivityEvent { Type = "task", Message = $"Task {task.Title} approved" }, ct);
+        return Results.Ok(task);
+    }
+
+    [HttpPost("{id:guid}/reject")]
+    public async Task<IResult> Reject(Guid id, CancellationToken ct)
+    {
+        var task = await taskRepo.GetByIdAsync(id, ct);
+        if (task is null) return Results.NotFound();
+
+        if (!TaskStateHelper.IsInProgressOrBlocked(task.State))
+            return Results.Problem(
+                title: "Rejection denied",
+                detail: "Only tasks in 'In progress' or 'Blocked' state can be rejected.",
+                statusCode: StatusCodes.Status403Forbidden);
+
+        task.State = TaskStateHelper.ToStateString(TaskState.Backlog);
+        await taskRepo.UpdateAsync(task, ct);
+        await activityRepo.AddAsync(new ActivityEvent { Type = "task", Message = $"Task {task.Title} rejected, returned to backlog" }, ct);
+        return Results.Ok(task);
+    }
+
+    [HttpPatch("{id:guid}/state")]
+    public async Task<IResult> UpdateState(Guid id, [FromBody] UpdateTaskStateRequest request, CancellationToken ct)
+    {
+        var allowedStates = TaskStateHelper.AllStates;
+        if (!allowedStates.Contains(request.State, StringComparer.OrdinalIgnoreCase))
+            return Results.ValidationProblem(new Dictionary<string, string[]> { ["state"] = ["Unsupported task state."] });
+
+        var task = await taskRepo.GetByIdAsync(id, ct);
+        if (task is null) return Results.NotFound();
+        task.State = allowedStates.First(x => x.Equals(request.State, StringComparison.OrdinalIgnoreCase));
+        await taskRepo.UpdateAsync(task, ct);
+        await activityRepo.AddAsync(new ActivityEvent { Type = "task", Message = $"Task {task.Title} moved to {task.State}" }, ct);
+        return Results.Ok(task);
+    }
+
+    [HttpDelete("{id:guid}")]
+    public async Task<IResult> Delete(Guid id, CancellationToken ct)
+    {
+        var task = await taskRepo.GetByIdAsync(id, ct);
+        if (task is null) return Results.NotFound();
+
+        if (!TaskStateHelper.IsDoneOrBacklog(task.State))
+            return Results.Problem(
+                title: "Task deletion denied",
+                detail: "Only tasks in 'Done' or 'Backlog' state can be deleted.",
+                statusCode: StatusCodes.Status403Forbidden);
+
+        await activityRepo.AddAsync(new ActivityEvent { Type = "task", Message = $"Task {task.Title} deleted" }, ct);
+        await taskRepo.DeleteAsync(task, ct);
+        return Results.NoContent();
+    }
+
+    [HttpPatch("{id:guid}")]
+    public async Task<IResult> Update(Guid id, [FromBody] UpdateTaskRequest request, CancellationToken ct)
+    {
+        var task = await taskRepo.GetByIdAsync(id, ct);
+        if (task is null) return Results.NotFound();
+
+        if (!string.IsNullOrWhiteSpace(request.Title))
+            task.Title = request.Title.Trim();
+        if (!string.IsNullOrWhiteSpace(request.Priority))
+            task.Priority = request.Priority.Trim();
+        if (request.ProjectId.HasValue)
+            task.ProjectId = request.ProjectId.Value == Guid.Empty ? null : request.ProjectId;
+
+        await taskRepo.UpdateAsync(task, ct);
+        await activityRepo.AddAsync(new ActivityEvent { Type = "task", Message = $"Task {task.Title} updated" }, ct);
+        return Results.Ok(task);
+    }
+}