95 lines
3.1 KiB
C#
95 lines
3.1 KiB
C#
using FastEndpoints;
|
|
using KArtSell.BuildingBlocks.Time;
|
|
using Microsoft.AspNetCore.Http;
|
|
using Microsoft.Extensions.Logging;
|
|
|
|
namespace KArtSell.Modules.ModelOperations.Compliance;
|
|
|
|
/// <summary>
|
|
/// Submit GDPR right-to-be-forgotten request.
|
|
/// POST /compliance/gdpr-request
|
|
/// </summary>
|
|
public class SubmitGdprRequestDto
|
|
{
|
|
public Guid CustomerId { get; set; }
|
|
public string Reason { get; set; } = "Right to be forgotten (GDPR Article 17)";
|
|
}
|
|
|
|
public class GdprRequestResponseDto
|
|
{
|
|
public Guid GdprTrackingId { get; set; }
|
|
public string Status { get; set; } = "IN_PROGRESS";
|
|
public DateTime EstimatedCompletion { get; set; }
|
|
public string Message { get; set; } = string.Empty;
|
|
}
|
|
|
|
public class SubmitGdprRequestEndpoint : Endpoint<SubmitGdprRequestDto, GdprRequestResponseDto>
|
|
{
|
|
private readonly ProcessGdprRequestHandler _handler;
|
|
private readonly IClock _clock;
|
|
private readonly ILogger<SubmitGdprRequestEndpoint> _logger;
|
|
|
|
public SubmitGdprRequestEndpoint(ProcessGdprRequestHandler handler, IClock clock, ILogger<SubmitGdprRequestEndpoint> logger)
|
|
{
|
|
_handler = handler;
|
|
_clock = clock;
|
|
_logger = logger;
|
|
}
|
|
|
|
public override void Configure()
|
|
{
|
|
Post("/compliance/gdpr-request");
|
|
Roles("DataAdmin", "Compliance");
|
|
Summary(x =>
|
|
{
|
|
x.Summary = "Submit GDPR Request";
|
|
x.Description = "Submit right-to-be-forgotten request for customer data redaction";
|
|
});
|
|
}
|
|
|
|
public override async Task HandleAsync(SubmitGdprRequestDto req, CancellationToken ct)
|
|
{
|
|
try
|
|
{
|
|
var trackingId = Guid.NewGuid();
|
|
var now = _clock.UtcNow.UtcDateTime;
|
|
var correlationId = HttpContext.Request.Headers.TryGetValue("X-Correlation-ID", out var header)
|
|
? Guid.Parse(header.ToString())
|
|
: Guid.NewGuid();
|
|
|
|
var command = new ProcessGdprRequestCommand
|
|
{
|
|
TrackingId = trackingId,
|
|
CustomerId = req.CustomerId,
|
|
RequestDate = now,
|
|
Reason = req.Reason,
|
|
CorrelationId = correlationId
|
|
};
|
|
|
|
await _handler.Handle(command, ct);
|
|
|
|
var response = new GdprRequestResponseDto
|
|
{
|
|
GdprTrackingId = trackingId,
|
|
Status = "IN_PROGRESS",
|
|
EstimatedCompletion = now.AddHours(24),
|
|
Message = $"GDPR request {trackingId} submitted. Redaction will complete within 24 hours."
|
|
};
|
|
|
|
await Send.ResponseAsync(response, StatusCodes.Status202Accepted, ct);
|
|
|
|
_logger.LogInformation(
|
|
"GDPR request {TrackingId} submitted for customer {CustomerId}",
|
|
trackingId, req.CustomerId);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
_logger.LogError(ex, "Failed to submit GDPR request for customer {CustomerId}", req.CustomerId);
|
|
await Send.ResponseAsync(
|
|
new GdprRequestResponseDto { Message = "Failed to submit request" },
|
|
StatusCodes.Status500InternalServerError,
|
|
ct);
|
|
}
|
|
}
|
|
}
|