1 files changed, 112 insertions, 0 deletions
diff --git a/backend/api/api/Controllers/FileController.cs b/backend/api/api/Controllers/FileController.cs
new file mode 100644
index 00000000..3bfdad93
--- /dev/null
+++ b/backend/api/api/Controllers/FileController.cs
@@ -0,0 +1,112 @@
+using System.Net.Http.Headers;
+using api.Models;
+using api.Services;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.Net.Http.Headers;
+namespace api.Controllers
+{
+    [Route("api/[controller]")]
+    [ApiController]
+    public class FileController : ControllerBase
+    {
+        private string[] permittedExtensions = { ".csv" };
+        private readonly IConfiguration _configuration;
+        private JwtToken _token;
+        private IFileService _fileservice;
+        public FileController(IConfiguration configuration,IFileService fileService)
+        {
+            _configuration = configuration;
+            _token = new JwtToken(configuration);
+            _fileservice = fileService;
+
+        }
+
+
+        [HttpPost("Csv")]
+        [Authorize(Roles = "User")]
+        public async Task<ActionResult<string>> CsvUpload([FromForm]IFormFile file)
+        {
+
+            //get username from jwtToken
+            string username;
+            var header = Request.Headers[HeaderNames.Authorization];
+            if (AuthenticationHeaderValue.TryParse(header, out var headerValue))
+            {
+
+                var scheme = headerValue.Scheme;
+                var parameter = headerValue.Parameter;
+                username = _token.TokenToUsername(parameter);
+                if (username == null)
+                    return null;
+            }else 
+                return BadRequest();
+            
+
+            //Check filetype
+            var filename=file.FileName;
+            var ext=Path.GetExtension(filename).ToLowerInvariant();
+            var name = Path.GetFileNameWithoutExtension(filename).ToLowerInvariant();
+            if (string.IsNullOrEmpty(ext) || ! permittedExtensions.Contains(ext)) {
+                return BadRequest("Wrong file type");
+            }
+            var folderPath=Path.Combine(Directory.GetCurrentDirectory(),"UploadedFiles",username);
+            //Check Directory
+            if (!Directory.Exists(folderPath))
+            {
+                Directory.CreateDirectory(folderPath);
+            }
+            //Index file if same filename
+            var fullPath = Path.Combine(folderPath, filename);
+            int i=0;
+
+            while (System.IO.File.Exists(fullPath)) {
+                i++;
+                fullPath = Path.Combine(folderPath,name+i.ToString()+ext);
+            }
+
+
+            //Write file
+            using (var stream=new FileStream(fullPath, FileMode.Create))
+            {
+                await file.CopyToAsync(stream);
+            }
+            FileModel fileModel= new FileModel();
+            fileModel.path=fullPath;
+            fileModel.username=username;
+            fileModel=_fileservice.Create(fileModel);
+
+            return Ok(fileModel);
+        }
+
+        [HttpGet("Download")]
+        [Authorize(Roles = "User")]
+        public async Task<ActionResult> DownloadFile(string id)
+        {
+            //Get Username
+            string username;
+            var header = Request.Headers[HeaderNames.Authorization];
+            if (AuthenticationHeaderValue.TryParse(header, out var headerValue))
+            {
+
+                var scheme = headerValue.Scheme;
+                var parameter = headerValue.Parameter;
+                username = _token.TokenToUsername(parameter);
+                if (username == null)
+                    return null;
+            }
+            else
+                return BadRequest();
+
+            string filePath = _fileservice.GetFilePath(id, username);
+            if (filePath == null)
+                return BadRequest();
+
+            return File(System.IO.File.ReadAllBytes(filePath),"application/octet-stream", Path.GetFileName(filePath));
+
+        }
+
+
+
+    }
+}