Harden request validation and admin UX cues

2026-06-30 08:45:28 +02:00
parent 1191abc914
commit 33ba00a682
11 changed files with 248 additions and 70 deletions
@@ -151,10 +151,15 @@ public static partial class AdminModerationEndpoints

    private static async Task<IResult> BulkResolveRiskFlags(
        HttpContext context,
-        BulkResolveRiskFlagsRequest request,
+        BulkResolveRiskFlagsRequest? request,
        AwardsDbContext db,
        IAdminAuditService adminAuditService)
    {
+        if (request is null || request.RiskFlagIds is null)
+        {
+            return Results.BadRequest(new { message = "Bulk-Verarbeitung braucht mindestens einen Risikohinweis." });
+        }
+
        var session = AdminEndpointConventions.CurrentSession(context);
        var normalizedIds = request.RiskFlagIds
            .Distinct()
@@ -188,7 +193,7 @@ public static partial class AdminModerationEndpoints

        if (riskFlags.Any(item => item.Severity != "low"))
        {
-            return Results.BadRequest(new { message = "Bulk-Verarbeitung ist nur fuer Low-Severity-Hinweise erlaubt." });
+            return Results.BadRequest(new { message = "Bulk-Verarbeitung ist nur fuer offene Low-Severity-Hinweise erlaubt." });
        }

        if (riskFlags.Any(item => item.Status != "open"))