lasserh/DeutschLernen
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: lasserh:858afde058c957eb137f9b16b2324d8145b6a4a2
Branches Tags
lasserh:main
lasserh:feature/fix-mistral-story-generation
lasserh:feature/lesson-management
lasserh:feature/user-authentication
lasserh:feature/infrastructure-setup
..
compare: lasserh:84e499103089090a37909eb8879933a720faf746
Branches Tags
lasserh:main
lasserh:feature/fix-mistral-story-generation
lasserh:feature/lesson-management
lasserh:feature/user-authentication
lasserh:feature/infrastructure-setup

No commits in common. "858afde058c957eb137f9b16b2324d8145b6a4a2" and "84e499103089090a37909eb8879933a720faf746" have entirely different histories.
858afde058 ... 84e4991030

38 changed files with 111 additions and 2658 deletions
Show stats Expand all files Collapse all files

40
.dockerignore
View file

@ -1,40 +0,0 @@
# Root .dockerignore for the entire solution
# Git
.git/
.gitignore
# Docker files
Dockerfile
docker-compose*
.dockerignore
# IDE
.idea/
.vs/
.vscode/
*.suo
*.user
# OS
.DS_Store
Thumbs.db
# Build output
**/bin/
**/obj/
**/dist/
# Node modules
**/node_modules/
# Logs
*.log
# Test results
**/TestResults/
# Secrets
**/appsettings.Development.json
**/secrets.json
**/.env*

76
.woodpecker.yml
View file

@ -1,76 +0,0 @@
when:
- branch: main
event: push
steps:
- name: build-and-test
image: mcr.microsoft.com/dotnet/sdk:9.0
commands:
- dotnet restore GermanApp/GermanApp.csproj
- dotnet build GermanApp/GermanApp.csproj --no-restore --configuration Release
when:
- branch:
- main
- feature/*
- bugfix/*
- refactor/*
- name: build-backend
image: woodpeckerci/plugin-docker-buildx
privileged: true
settings:
dockerfile: GermanApp/Dockerfile
context: GermanApp
registry: registry.lrhdev.dk
repo: registry.lrhdev.dk/lasserh/deutschlernen-backend
username:
from_secret: REGISTRY_USERNAME
password:
from_secret: REGISTRY_PASSWORD
tags:
- latest
- ${CI_COMMIT_SHA}
when:
- branch: main
- name: build-frontend
image: woodpeckerci/plugin-docker-buildx
privileged: true
settings:
dockerfile: german-app-frontend/Dockerfile
context: german-app-frontend
registry: registry.lrhdev.dk
repo: registry.lrhdev.dk/lasserh/deutschlernen-frontend
username:
from_secret: REGISTRY_USERNAME
password:
from_secret: REGISTRY_PASSWORD
tags:
- latest
- ${CI_COMMIT_SHA}
when:
- branch: main
- name: deploy
image: appleboy/drone-ssh
settings:
host:
from_secret: SSH_HOST
username: root
key:
from_secret: SSH_PRIVATE_KEY
script:
- docker login registry.lrhdev.dk -u $REGISTRY_USERNAME -p $REGISTRY_PASSWORD
- docker pull registry.lrhdev.dk/lasserh/deutschlernen-backend:latest
- docker pull registry.lrhdev.dk/lasserh/deutschlernen-frontend:latest
- cd /opt/deutschlernen
- docker compose down
- docker compose up -d
- docker image prune -f
environment:
REGISTRY_USERNAME:
from_secret: REGISTRY_USERNAME
REGISTRY_PASSWORD:
from_secret: REGISTRY_PASSWORD
when:
- branch: main

3
AGENTS.md
View file

@ -447,7 +447,7 @@ docs/features/
### Workflow
1. **Create**: Copy `template.md` → `[feature-name].md`, fill in details
2. **Plan**: Set status to `⏳ Planned`, add to `README.md` table
3. **Develop**: Update status to `🚀 In Progress`, **mark tasks as `[x]` when completed**
3. **Develop**: Update status to `🚀 In Progress`, check off tasks
4. **Review**: Set status to `🔄 Code Review`, link PR in feature file
5. **Complete**: Set status to `✅ Completed`, document lessons learned
@ -460,7 +460,6 @@ docs/features/
### Best Practices
- Create a feature file **before** starting development
- **Update task checkmarks as you work** - Mark tasks as `[x]` when completed in the feature file
- Update the file **as you work** (tasks, notes, decisions)
- Be **specific** with tasks (not "implement X", but "create Y service", "add Z endpoint")
- Document **design decisions** and **lessons learned**

31
GermanApp/.dockerignore
View file

@ -1,31 +0,0 @@
# .NET Core
**/bin/
**/obj/
# User secrets
**/appsettings.Development.json
**/secrets.json
# NuGet packages
**/packages/
# IDE
.idea/
.vs/
*.user
*.suo
# Git
.git/
.gitignore
# Docker
Dockerfile
.dockerignore
# OS
.DS_Store
Thumbs.db
# Test results
**/TestResults/

14
GermanApp/Application/DTOs/Auth/AuthResponse.cs
View file

@ -1,14 +0,0 @@
namespace GermanApp.Application.DTOs.Auth;
/// <summary>
/// DTO for authentication response containing JWT token and refresh token.
/// </summary>
public record AuthResponse
{
public int UserId { get; init; }
public string Username { get; init; } = string.Empty;
public string Email { get; init; } = string.Empty;
public string Token { get; init; } = string.Empty;
public string RefreshToken { get; init; } = string.Empty;
public DateTime ExpiresAt { get; init; }
}

16
GermanApp/Application/DTOs/Auth/LoginDto.cs
View file

@ -1,16 +0,0 @@
using System.ComponentModel.DataAnnotations;
namespace GermanApp.Application.DTOs.Auth;
/// <summary>
/// DTO for user login.
/// </summary>
public record LoginDto
{
[Required]
[EmailAddress]
public string Email { get; init; } = string.Empty;
[Required]
public string Password { get; init; } = string.Empty;
}

11
GermanApp/Application/DTOs/Auth/RefreshTokenResponse.cs
View file

@ -1,11 +0,0 @@
namespace GermanApp.Application.DTOs.Auth;
/// <summary>
/// DTO for refresh token response.
/// </summary>
public record RefreshTokenResponse
{
public string Token { get; init; } = string.Empty;
public string RefreshToken { get; init; } = string.Empty;
public DateTime ExpiresAt { get; init; }
}

22
GermanApp/Application/DTOs/Auth/RegisterDto.cs
View file

@ -1,22 +0,0 @@
using System.ComponentModel.DataAnnotations;
namespace GermanApp.Application.DTOs.Auth;
/// <summary>
/// DTO for user registration.
/// </summary>
public record RegisterDto
{
[Required]
[StringLength(50, MinimumLength = 3)]
public string Username { get; init; } = string.Empty;
[Required]
[EmailAddress]
[StringLength(100)]
public string Email { get; init; } = string.Empty;
[Required]
[StringLength(100, MinimumLength = 8)]
public string Password { get; init; } = string.Empty;
}

45
GermanApp/Application/Interfaces/IAuthService.cs
View file

@ -1,45 +0,0 @@
using GermanApp.Application.DTOs.Auth;
using GermanApp.Domain.Entities;
namespace GermanApp.Application.Interfaces;
/// <summary>
/// Interface for authentication services.
/// Part of the Application layer.
/// </summary>
public interface IAuthService
{
/// <summary>
/// Registers a new user.
/// </summary>
/// <param name="registerDto">User registration data</param>
/// <returns>Authentication response with token</returns>
Task<AuthResponse> RegisterAsync(RegisterDto registerDto);
/// <summary>
/// Authenticates a user and returns a JWT token.
/// </summary>
/// <param name="loginDto">User login data</param>
/// <returns>Authentication response with token</returns>
Task<AuthResponse> LoginAsync(LoginDto loginDto);
/// <summary>
/// Gets the current authenticated user.
/// </summary>
/// <param name="userId">User ID from token claims</param>
/// <returns>The user entity</returns>
Task<User?> GetCurrentUserAsync(int userId);
/// <summary>
/// Refreshes the access token using a refresh token.
/// </summary>
/// <param name="refreshToken">The refresh token</param>
/// <returns>New access token and refresh token</returns>
Task<RefreshTokenResponse> RefreshTokenAsync(string refreshToken);
/// <summary>
/// Revokes a refresh token.
/// </summary>
/// <param name="refreshToken">The refresh token to revoke</param>
Task RevokeRefreshTokenAsync(string refreshToken);
}

51
GermanApp/Dockerfile
View file

@ -1,51 +0,0 @@
# GermanApp Backend Dockerfile
# .NET 9.0 Web API Application
# Multi-stage build for production optimization
# Build context: GermanApp directory
# ============================================
# Build Stage
# ============================================
FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
WORKDIR /src
# Copy project file and restore dependencies for Linux-x64
COPY ["GermanApp.csproj", "."]
RUN dotnet restore "GermanApp.csproj" --runtime linux-x64
# Copy everything else and build
COPY . .
WORKDIR "/src"
RUN dotnet build "GermanApp.csproj" -c Release -o /app/build --runtime linux-x64
# Publish the application
RUN dotnet publish "GermanApp.csproj" -c Release -o /app/publish \
--no-restore \
--runtime linux-x64 \
-p:PublishSingleFile=false \
-p:PublishTrimmed=false
# ============================================
# Publish Stage
# ============================================
FROM build AS publish
# ============================================
# Runtime Stage
# ============================================
FROM mcr.microsoft.com/dotnet/aspnet:9.0 AS runtime
WORKDIR /app
# Copy published app from publish stage
COPY --from=publish /app/publish .
# Set environment variables
ENV DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=false
ENV ASPNETCORE_URLS=http://+:8080
ENV ASPNETCORE_ENVIRONMENT=Production
# Expose port
EXPOSE 8080
# Entry point
ENTRYPOINT ["dotnet", "GermanApp.dll"]

53
GermanApp/Domain/Entities/RefreshToken.cs
View file

@ -1,53 +0,0 @@
namespace GermanApp.Domain.Entities;
/// <summary>
/// Represents a refresh token for JWT authentication.
/// </summary>
public class RefreshToken
{
public int Id { get; internal set; }
public int UserId { get; internal set; }
public string Token { get; internal set; } = string.Empty;
public DateTime ExpiresAt { get; internal set; }
public bool IsActive { get; internal set; } = true;
public DateTime CreatedAt { get; internal set; }
public DateTime? RevokedAt { get; internal set; }
/// <summary>
/// Constructor for EF Core deserialization.
/// </summary>
private RefreshToken() { }
/// <summary>
/// Factory method to create a new refresh token.
/// </summary>
public static RefreshToken Create(int userId, string token, int expireDays = 7)
{
return new RefreshToken
{
UserId = userId,
Token = token,
ExpiresAt = DateTime.UtcNow.AddDays(expireDays),
CreatedAt = DateTime.UtcNow
};
}
/// <summary>
/// Revokes the refresh token.
/// </summary>
public void Revoke()
{
IsActive = false;
RevokedAt = DateTime.UtcNow;
}
/// <summary>
/// Checks if the token is expired.
/// </summary>
public bool IsExpired() => DateTime.UtcNow >= ExpiresAt;
/// <summary>
/// Checks if the token is valid (not revoked and not expired).
/// </summary>
public bool IsValid() => IsActive && !IsExpired();
}

2
GermanApp/Domain/Entities/User.cs
View file

@ -65,7 +65,7 @@ public class User
/// </summary>
public void ChangeEmail(string newEmail)
{
Email = newEmail?.ToLowerInvariant() ?? string.Empty;
Email = newEmail.ToLowerInvariant();
}
/// <summary>

9
GermanApp/GermanApp.csproj
View file

@ -2,16 +2,10 @@
<PropertyGroup>
<TargetFramework>net9.0</TargetFramework>
<RuntimeIdentifier>linux-x64</RuntimeIdentifier>
<Nullable>enable</Nullable>
<ImplicitUsings>enable</ImplicitUsings>
</PropertyGroup>
<ItemGroup>
<InternalsVisibleTo Include="GermanApp.Tests.Unit" />
<InternalsVisibleTo Include="GermanApp.Tests.Integration" />
</ItemGroup>
<ItemGroup>
<PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="9.0.16" />
<PackageReference Include="Swashbuckle.AspNetCore" Version="6.5.0" />
@ -25,9 +19,6 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="9.0.0" />
<PackageReference Include="Microsoft.IdentityModel.Tokens" Version="8.0.1" />
<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.0.1" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="9.0.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore" Version="9.0.0" />
<PackageReference Include="Serilog.AspNetCore" Version="8.0.0" />

19
GermanApp/Infrastructure/Data/DbContext/AppDbContext.cs
View file

@ -16,7 +16,6 @@ public class AppDbContext : Microsoft.EntityFrameworkCore.DbContext
// DbSets for domain entities
public DbSet<Lesson> Lessons { get; set; } = null!;
public DbSet<User> Users { get; set; } = null!;
public DbSet<RefreshToken> RefreshTokens { get; set; } = null!;
// Note: Value objects are not stored directly as entities.
// They are owned by entities and stored as part of the entity's data.
@ -62,24 +61,6 @@ public class AppDbContext : Microsoft.EntityFrameworkCore.DbContext
builder.HasIndex(u => u.Email).IsUnique();
});
// Configure RefreshToken entity
modelBuilder.Entity<RefreshToken>(builder =>
{
builder.HasKey(r => r.Id);
builder.Property(r => r.UserId).IsRequired();
builder.Property(r => r.Token).IsRequired().HasMaxLength(255);
builder.Property(r => r.ExpiresAt).IsRequired();
builder.Property(r => r.IsActive).HasDefaultValue(true);
builder.Property(r => r.CreatedAt).IsRequired();
builder.Property(r => r.RevokedAt).IsRequired(false);
// Foreign key to User
builder.HasOne<User>()
.WithMany()
.HasForeignKey(r => r.UserId)
.OnDelete(DeleteBehavior.Cascade);
});
// Seed data (optional) - Note: For EF Core, we need to set properties directly
// In a real application, use migrations or a separate seeding mechanism
// modelBuilder.Entity<Lesson>().HasData(

162
GermanApp/Infrastructure/Data/Migrations/20260605131551_AddRefreshTokensTable.Designer.cs generated
View file

@ -1,162 +0,0 @@
// <auto-generated />
using System;
using GermanApp.Infrastructure.Data.DbContext;
using Microsoft.EntityFrameworkCore;
using Microsoft.EntityFrameworkCore.Infrastructure;
using Microsoft.EntityFrameworkCore.Migrations;
using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
#nullable disable
namespace GermanApp.Infrastructure.Data.Migrations
{
[DbContext(typeof(AppDbContext))]
[Migration("20260605131551_AddRefreshTokensTable")]
partial class AddRefreshTokensTable
{
/// <inheritdoc />
protected override void BuildTargetModel(ModelBuilder modelBuilder)
{
#pragma warning disable 612, 618
modelBuilder
.HasAnnotation("ProductVersion", "9.0.0")
.HasAnnotation("Relational:MaxIdentifierLength", 63);
NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
modelBuilder.Entity("GermanApp.Domain.Entities.Lesson", b =>
{
b.Property<int>("Id")
.ValueGeneratedOnAdd()
.HasColumnType("integer");
NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
b.Property<DateTime>("CreatedAt")
.HasColumnType("timestamp with time zone");
b.Property<string>("Description")
.IsRequired()
.HasMaxLength(2000)
.HasColumnType("character varying(2000)");
b.Property<int>("Level")
.HasColumnType("integer");
b.Property<string>("Title")
.IsRequired()
.HasMaxLength(200)
.HasColumnType("character varying(200)");
b.Property<DateTime?>("UpdatedAt")
.HasColumnType("timestamp with time zone");
b.HasKey("Id");
b.ToTable("Lessons");
});
modelBuilder.Entity("GermanApp.Domain.Entities.RefreshToken", b =>
{
b.Property<int>("Id")
.ValueGeneratedOnAdd()
.HasColumnType("integer");
NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
b.Property<DateTime>("CreatedAt")
.HasColumnType("timestamp with time zone");
b.Property<DateTime>("ExpiresAt")
.HasColumnType("timestamp with time zone");
b.Property<bool>("IsActive")
.ValueGeneratedOnAdd()
.HasColumnType("boolean")
.HasDefaultValue(true);
b.Property<DateTime?>("RevokedAt")
.HasColumnType("timestamp with time zone");
b.Property<string>("Token")
.IsRequired()
.HasMaxLength(255)
.HasColumnType("character varying(255)");
b.Property<int>("UserId")
.HasColumnType("integer");
b.HasKey("Id");
b.HasIndex("UserId");
b.ToTable("RefreshTokens");
});
modelBuilder.Entity("GermanApp.Domain.Entities.User", b =>
{
b.Property<int>("Id")
.ValueGeneratedOnAdd()
.HasColumnType("integer");
NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
b.Property<DateTime>("CreatedAt")
.HasColumnType("timestamp with time zone");
b.Property<string>("CurrentLevel")
.IsRequired()
.ValueGeneratedOnAdd()
.HasMaxLength(10)
.HasColumnType("character varying(10)")
.HasDefaultValue("A1");
b.Property<string>("Email")
.IsRequired()
.HasMaxLength(100)
.HasColumnType("character varying(100)");
b.Property<string>("PasswordHash")
.IsRequired()
.HasMaxLength(255)
.HasColumnType("character varying(255)");
b.Property<int>("Streak")
.ValueGeneratedOnAdd()
.HasColumnType("integer")
.HasDefaultValue(0);
b.Property<int>("TotalPoints")
.ValueGeneratedOnAdd()
.HasColumnType("integer")
.HasDefaultValue(0);
b.Property<string>("Username")
.IsRequired()
.HasMaxLength(50)
.HasColumnType("character varying(50)");
b.HasKey("Id");
b.HasIndex("Email")
.IsUnique();
b.HasIndex("Username")
.IsUnique();
b.ToTable("Users");
});
modelBuilder.Entity("GermanApp.Domain.Entities.RefreshToken", b =>
{
b.HasOne("GermanApp.Domain.Entities.User", null)
.WithMany()
.HasForeignKey("UserId")
.OnDelete(DeleteBehavior.Cascade)
.IsRequired();
});
#pragma warning restore 612, 618
}
}
}

52
GermanApp/Infrastructure/Data/Migrations/20260605131551_AddRefreshTokensTable.cs
View file

@ -1,52 +0,0 @@
using System;
using Microsoft.EntityFrameworkCore.Migrations;
using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
#nullable disable
namespace GermanApp.Infrastructure.Data.Migrations
{
/// <inheritdoc />
public partial class AddRefreshTokensTable : Migration
{
/// <inheritdoc />
protected override void Up(MigrationBuilder migrationBuilder)
{
migrationBuilder.CreateTable(
name: "RefreshTokens",
columns: table => new
{
Id = table.Column<int>(type: "integer", nullable: false)
.Annotation("Npgsql:ValueGenerationStrategy", NpgsqlValueGenerationStrategy.IdentityByDefaultColumn),
UserId = table.Column<int>(type: "integer", nullable: false),
Token = table.Column<string>(type: "character varying(255)", maxLength: 255, nullable: false),
ExpiresAt = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
IsActive = table.Column<bool>(type: "boolean", nullable: false, defaultValue: true),
CreatedAt = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
RevokedAt = table.Column<DateTime>(type: "timestamp with time zone", nullable: true)
},
constraints: table =>
{
table.PrimaryKey("PK_RefreshTokens", x => x.Id);
table.ForeignKey(
name: "FK_RefreshTokens_Users_UserId",
column: x => x.UserId,
principalTable: "Users",
principalColumn: "Id",
onDelete: ReferentialAction.Cascade);
});
migrationBuilder.CreateIndex(
name: "IX_RefreshTokens_UserId",
table: "RefreshTokens",
column: "UserId");
}
/// <inheritdoc />
protected override void Down(MigrationBuilder migrationBuilder)
{
migrationBuilder.DropTable(
name: "RefreshTokens");
}
}
}

46
GermanApp/Infrastructure/Data/Migrations/AppDbContextModelSnapshot.cs
View file

@ -54,43 +54,6 @@ namespace GermanApp.Migrations
b.ToTable("Lessons");
});
modelBuilder.Entity("GermanApp.Domain.Entities.RefreshToken", b =>
{
b.Property<int>("Id")
.ValueGeneratedOnAdd()
.HasColumnType("integer");
NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
b.Property<DateTime>("CreatedAt")
.HasColumnType("timestamp with time zone");
b.Property<DateTime>("ExpiresAt")
.HasColumnType("timestamp with time zone");
b.Property<bool>("IsActive")
.ValueGeneratedOnAdd()
.HasColumnType("boolean")
.HasDefaultValue(true);
b.Property<DateTime?>("RevokedAt")
.HasColumnType("timestamp with time zone");
b.Property<string>("Token")
.IsRequired()
.HasMaxLength(255)
.HasColumnType("character varying(255)");
b.Property<int>("UserId")
.HasColumnType("integer");
b.HasKey("Id");
b.HasIndex("UserId");
b.ToTable("RefreshTokens");
});
modelBuilder.Entity("GermanApp.Domain.Entities.User", b =>
{
b.Property<int>("Id")
@ -144,15 +107,6 @@ namespace GermanApp.Migrations
b.ToTable("Users");
});
modelBuilder.Entity("GermanApp.Domain.Entities.RefreshToken", b =>
{
b.HasOne("GermanApp.Domain.Entities.User", null)
.WithMany()
.HasForeignKey("UserId")
.OnDelete(DeleteBehavior.Cascade)
.IsRequired();
});
#pragma warning restore 612, 618
}
}

230
GermanApp/Infrastructure/Services/AuthService.cs
View file

@ -1,230 +0,0 @@
using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Security.Cryptography;
using System.Text;
using GermanApp.Application.DTOs.Auth;
using GermanApp.Application.Interfaces;
using GermanApp.Domain.Entities;
using GermanApp.Infrastructure.Data.DbContext;
using Microsoft.AspNetCore.Identity;
using Microsoft.EntityFrameworkCore;
using Microsoft.Extensions.Configuration;
using Microsoft.IdentityModel.Tokens;
namespace GermanApp.Infrastructure.Services;
/// <summary>
/// Authentication service implementation.
/// Part of the Infrastructure layer.
/// </summary>
public class AuthService : IAuthService
{
private readonly AppDbContext _dbContext;
private readonly IPasswordHasher<User> _passwordHasher;
private readonly IConfiguration _configuration;
public AuthService(
AppDbContext dbContext,
IPasswordHasher<User> passwordHasher,
IConfiguration configuration)
{
_dbContext = dbContext;
_passwordHasher = passwordHasher;
_configuration = configuration;
}
/// <summary>
/// Generates a cryptographically secure random token string.
/// </summary>
private static string GenerateRefreshTokenString(int length = 32)
{
var randomNumber = new byte[length];
using var rng = RandomNumberGenerator.Create();
rng.GetBytes(randomNumber);
return Convert.ToBase64String(randomNumber);
}
/// <summary>
/// Registers a new user.
/// </summary>
public async Task<AuthResponse> RegisterAsync(RegisterDto registerDto)
{
// Check if username or email already exists
if (await _dbContext.Users.AnyAsync(u => u.Username == registerDto.Username))
throw new InvalidOperationException("Username already taken");
if (await _dbContext.Users.AnyAsync(u => u.Email == registerDto.Email))
throw new InvalidOperationException("Email already in use");
// Hash password and create user
var user = User.Create(registerDto.Username, registerDto.Email.ToLowerInvariant(), string.Empty);
var passwordHash = _passwordHasher.HashPassword(user, registerDto.Password);
user.ChangePassword(passwordHash);
_dbContext.Users.Add(user);
await _dbContext.SaveChangesAsync();
// Generate JWT token
var token = GenerateJwtToken(user);
// Generate and store refresh token
var refreshTokenString = GenerateRefreshTokenString();
var refreshToken = RefreshToken.Create(user.Id, refreshTokenString);
_dbContext.RefreshTokens.Add(refreshToken);
await _dbContext.SaveChangesAsync();
return new AuthResponse
{
UserId = user.Id,
Username = user.Username,
Email = user.Email,
Token = token,
RefreshToken = refreshTokenString,
ExpiresAt = DateTime.UtcNow.AddHours(24)
};
}
/// <summary>
/// Authenticates a user and returns a JWT token.
/// </summary>
public async Task<AuthResponse> LoginAsync(LoginDto loginDto)
{
var user = await _dbContext.Users.FirstOrDefaultAsync(u => u.Email == loginDto.Email);
if (user == null)
throw new UnauthorizedAccessException("Invalid email or password");
// Verify password
var result = _passwordHasher.VerifyHashedPassword(user, user.PasswordHash, loginDto.Password);
if (result == PasswordVerificationResult.Failed)
throw new UnauthorizedAccessException("Invalid email or password");
// Revoke any existing refresh tokens for this user (optional: rotate tokens)
var existingRefreshTokens = await _dbContext.RefreshTokens
.Where(rt => rt.UserId == user.Id && rt.IsActive)
.ToListAsync();
foreach (var rt in existingRefreshTokens)
{
rt.Revoke();
}
// Generate JWT token
var token = GenerateJwtToken(user);
// Generate and store new refresh token
var refreshTokenString = GenerateRefreshTokenString();
var refreshToken = RefreshToken.Create(user.Id, refreshTokenString);
_dbContext.RefreshTokens.Add(refreshToken);
await _dbContext.SaveChangesAsync();
return new AuthResponse
{
UserId = user.Id,
Username = user.Username,
Email = user.Email,
Token = token,
RefreshToken = refreshTokenString,
ExpiresAt = DateTime.UtcNow.AddHours(24)
};
}
/// <summary>
/// Gets the current authenticated user.
/// </summary>
public async Task<User?> GetCurrentUserAsync(int userId)
{
return await _dbContext.Users.FirstOrDefaultAsync(u => u.Id == userId);
}
/// <summary>
/// Generates a JWT token for the given user.
/// </summary>
private string GenerateJwtToken(User user)
{
var securityKey = new SymmetricSecurityKey(
Encoding.UTF8.GetBytes(_configuration["Jwt:Key"] ?? "super-secret-key-at-least-32-characters"));
var credentials = new SigningCredentials(securityKey, SecurityAlgorithms.HmacSha256);
var claims = new[]
{
new Claim(ClaimTypes.NameIdentifier, user.Id.ToString()),
new Claim(ClaimTypes.Name, user.Username),
new Claim(ClaimTypes.Email, user.Email),
new Claim(ClaimTypes.Role, "User")
};
var token = new JwtSecurityToken(
issuer: _configuration["Jwt:Issuer"] ?? "DeutschLernen",
audience: _configuration["Jwt:Audience"] ?? "DeutschLernen",
claims: claims,
expires: DateTime.UtcNow.AddHours(24),
signingCredentials: credentials
);
return new JwtSecurityTokenHandler().WriteToken(token);
}
/// <summary>
/// Refreshes the access token using a refresh token.
/// Rotates the refresh token (generates a new one, revokes the old one).
/// </summary>
/// <param name="refreshToken">The refresh token</param>
/// <returns>New access token and refresh token</returns>
/// <exception cref="UnauthorizedAccessException">Thrown when refresh token is invalid</exception>
public async Task<RefreshTokenResponse> RefreshTokenAsync(string refreshToken)
{
// Find the refresh token in the database
var storedToken = await _dbContext.RefreshTokens
.FirstOrDefaultAsync(rt => rt.Token == refreshToken);
if (storedToken == null)
throw new UnauthorizedAccessException("Invalid refresh token");
if (!storedToken.IsValid())
throw new UnauthorizedAccessException("Invalid refresh token");
// Get the user associated with this refresh token
var user = await _dbContext.Users.FirstOrDefaultAsync(u => u.Id == storedToken.UserId);
if (user == null)
throw new UnauthorizedAccessException("User not found for refresh token");
// Revoke the current refresh token
storedToken.Revoke();
// Generate new JWT access token
var newAccessToken = GenerateJwtToken(user);
// Generate new refresh token (rotate)
var newRefreshTokenString = GenerateRefreshTokenString();
var newRefreshToken = RefreshToken.Create(user.Id, newRefreshTokenString);
_dbContext.RefreshTokens.Add(newRefreshToken);
await _dbContext.SaveChangesAsync();
return new RefreshTokenResponse
{
Token = newAccessToken,
RefreshToken = newRefreshTokenString,
ExpiresAt = DateTime.UtcNow.AddHours(24)
};
}
/// <summary>
/// Revokes a refresh token.
/// </summary>
/// <param name="refreshToken">The refresh token to revoke</param>
/// <exception cref="UnauthorizedAccessException">Thrown when refresh token is not found</exception>
public async Task RevokeRefreshTokenAsync(string refreshToken)
{
var storedToken = await _dbContext.RefreshTokens
.FirstOrDefaultAsync(rt => rt.Token == refreshToken);
if (storedToken == null)
throw new UnauthorizedAccessException("Refresh token not found");
storedToken.Revoke();
await _dbContext.SaveChangesAsync();
}
}

159
GermanApp/Presentation/Controllers/AuthController.cs
View file

@ -1,159 +0,0 @@
using GermanApp.Application.DTOs.Auth;
using GermanApp.Application.Interfaces;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using System.Net;
namespace GermanApp.Presentation.Controllers;
/// <summary>
/// Controller for authentication endpoints.
/// Part of the Presentation layer.
/// </summary>
[ApiController]
[Route("api/[controller]")]
public class AuthController : ControllerBase
{
private readonly IAuthService _authService;
public AuthController(IAuthService authService)
{
_authService = authService;
}
/// <summary>
/// Register a new user.
/// </summary>
/// <param name="registerDto">Registration data</param>
/// <returns>Authentication response with JWT token</returns>
[HttpPost("register")]
[ProducesResponseType(typeof(AuthResponse), (int)HttpStatusCode.OK)]
[ProducesResponseType(typeof(string), (int)HttpStatusCode.BadRequest)]
public async Task<IActionResult> Register([FromBody] RegisterDto registerDto)
{
try
{
var result = await _authService.RegisterAsync(registerDto);
return Ok(result);
}
catch (InvalidOperationException ex)
{
return BadRequest(ex.Message);
}
catch (Exception ex)
{
return StatusCode((int)HttpStatusCode.InternalServerError, ex.Message);
}
}
/// <summary>
/// Login an existing user.
/// </summary>
/// <param name="loginDto">Login data</param>
/// <returns>Authentication response with JWT token</returns>
[HttpPost("login")]
[ProducesResponseType(typeof(AuthResponse), (int)HttpStatusCode.OK)]
[ProducesResponseType(typeof(string), (int)HttpStatusCode.Unauthorized)]
public async Task<IActionResult> Login([FromBody] LoginDto loginDto)
{
try
{
var result = await _authService.LoginAsync(loginDto);
return Ok(result);
}
catch (UnauthorizedAccessException ex)
{
return Unauthorized(ex.Message);
}
catch (Exception ex)
{
return StatusCode((int)HttpStatusCode.InternalServerError, ex.Message);
}
}
/// <summary>
/// Get current authenticated user information.
/// </summary>
/// <returns>Current user information</returns>
[HttpGet("me")]
[Authorize]
[ProducesResponseType(typeof(AuthResponse), (int)HttpStatusCode.OK)]
[ProducesResponseType((int)HttpStatusCode.Unauthorized)]
public async Task<IActionResult> GetCurrentUser()
{
try
{
var userId = int.Parse(User.FindFirst("nameid")?.Value ?? "0");
if (userId == 0)
return Unauthorized();
var user = await _authService.GetCurrentUserAsync(userId);
if (user == null)
return Unauthorized();
return Ok(new AuthResponse
{
UserId = user.Id,
Username = user.Username,
Email = user.Email
});
}
catch (Exception ex)
{
return StatusCode((int)HttpStatusCode.InternalServerError, ex.Message);
}
}
/// <summary>
/// Refresh the access token using a refresh token.
/// </summary>
/// <param name="refreshToken">The refresh token</param>
/// <returns>New access token and refresh token</returns>
[HttpPost("refresh")]
[ProducesResponseType(typeof(RefreshTokenResponse), (int)HttpStatusCode.OK)]
[ProducesResponseType(typeof(string), (int)HttpStatusCode.Unauthorized)]
[ProducesResponseType(typeof(string), (int)HttpStatusCode.BadRequest)]
public async Task<IActionResult> Refresh([FromBody] string refreshToken)
{
try
{
var result = await _authService.RefreshTokenAsync(refreshToken);
return Ok(result);
}
catch (UnauthorizedAccessException ex)
{
return Unauthorized(ex.Message);
}
catch (Exception ex)
{
return StatusCode((int)HttpStatusCode.InternalServerError, ex.Message);
}
}
/// <summary>
/// Revoke a refresh token.
/// </summary>
/// <param name="refreshToken">The refresh token to revoke</param>
/// <returns>Success or error response</returns>
[HttpPost("revoke-refresh")]
[Authorize]
[ProducesResponseType((int)HttpStatusCode.OK)]
[ProducesResponseType(typeof(string), (int)HttpStatusCode.Unauthorized)]
[ProducesResponseType(typeof(string), (int)HttpStatusCode.BadRequest)]
public async Task<IActionResult> RevokeRefreshToken([FromBody] string refreshToken)
{
try
{
await _authService.RevokeRefreshTokenAsync(refreshToken);
return Ok(new { message = "Refresh token revoked successfully" });
}
catch (UnauthorizedAccessException ex)
{
return Unauthorized(ex.Message);
}
catch (Exception ex)
{
return StatusCode((int)HttpStatusCode.InternalServerError, ex.Message);
}
}
}

4
GermanApp/Presentation/Endpoints/LessonsEndpoints.cs
View file

@ -1,7 +1,6 @@
using GermanApp.Application.DTOs;
using GermanApp.Application.UseCases.Commands;
using GermanApp.Domain.Interfaces;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
namespace GermanApp.Presentation.Endpoints;
@ -91,7 +90,6 @@ public static class LessonsEndpoints
var result = await handler.Handle(command, cancellationToken);
return Results.Created($"/api/lessons/{result.Id}", result);
})
.RequireAuthorization()
.WithName("CreateLesson")
.WithOpenApi(operation => new(operation)
{
@ -115,7 +113,6 @@ public static class LessonsEndpoints
return Results.Ok(existingLesson.ToDto());
})
.RequireAuthorization()
.WithName("UpdateLesson")
.WithOpenApi(operation => new(operation)
{
@ -133,7 +130,6 @@ public static class LessonsEndpoints
await repository.DeleteAsync(lesson);
return Results.NoContent();
})
.RequireAuthorization()
.WithName("DeleteLesson")
.WithOpenApi(operation => new(operation)
{

52
GermanApp/Program.cs
View file

@ -1,21 +1,13 @@
using GermanApp.Application.DTOs;
using GermanApp.Application.Interfaces;
using GermanApp.Application.UseCases.Commands;
using GermanApp.Domain.Entities;
using GermanApp.Domain.Interfaces;
using GermanApp.Infrastructure.Data.DbContext;
using GermanApp.Infrastructure.Data.Repositories;
using GermanApp.Infrastructure.Data.SeedData;
using GermanApp.Infrastructure.Services;
using GermanApp.Presentation.Controllers;
using GermanApp.Presentation.Endpoints;
using GermanApp.Shared.Middleware;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Identity;
using Microsoft.EntityFrameworkCore;
using Microsoft.IdentityModel.Tokens;
using Serilog;
using System.Text;
// Configure Serilog
Log.Logger = new LoggerConfiguration()
@ -44,41 +36,6 @@ try
builder.Services.AddHealthChecks()
.AddDbContextCheck<AppDbContext>();
// Add Password Hasher for custom User entity
builder.Services.AddScoped<IPasswordHasher<User>, PasswordHasher<User>>();
// Configure JWT Authentication
var jwtKey = builder.Configuration["Jwt:Key"] ?? "super-secret-key-at-least-32-characters";
var jwtIssuer = builder.Configuration["Jwt:Issuer"] ?? "DeutschLernen";
var jwtAudience = builder.Configuration["Jwt:Audience"] ?? "DeutschLernen";
builder.Services.AddAuthentication(options =>
{
options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
})
.AddJwtBearer(options =>
{
options.TokenValidationParameters = new TokenValidationParameters
{
ValidateIssuer = true,
ValidateAudience = true,
ValidateLifetime = true,
ValidateIssuerSigningKey = true,
ValidIssuer = jwtIssuer,
ValidAudience = jwtAudience,
IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtKey)),
ClockSkew = TimeSpan.Zero
};
});
// Add Authorization
builder.Services.AddAuthorization();
// Register AuthService
builder.Services.AddScoped<IAuthService, AuthService>();
// Configure CORS
builder.Services.AddCors(options =>
{
@ -137,21 +94,12 @@ try
app.UseSwaggerUI();
}
// Use Authentication & Authorization
app.UseAuthentication();
app.UseAuthorization();
// Use CORS
app.UseCors("AllowAll");
// Use Health Checks
app.MapHealthChecks("/health");
// Map Auth endpoints
app.MapControllerRoute(
name: "api",
pattern: "api/{controller}/{action}/{id?}" );
// Seed database with initial data
app.SeedDatabase();

6
GermanApp/appsettings.json
View file

@ -8,11 +8,5 @@
"AllowedHosts": "*",
"ConnectionStrings": {
"DefaultConnection": "Host=localhost;Port=5432;Database=DeutschLernen;Username=postgres;Password=postgres"
},
"Jwt": {
"Key": "your-super-secret-key-at-least-32-characters-long",
"Issuer": "DeutschLernen",
"Audience": "DeutschLernen",
"ExpireHours": 24
}
}

26
Tests/GermanApp.Tests.Integration.csproj
View file

@ -1,26 +0,0 @@
<Project Sdk="Microsoft.NET.Sdk">
<PropertyGroup>
<TargetFramework>net9.0</TargetFramework>
<Nullable>enable</Nullable>
<ImplicitUsings>disable</ImplicitUsings>
<IsPackable>false</IsPackable>
</PropertyGroup>
<ItemGroup>
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
<PackageReference Include="MSTest.TestAdapter" Version="4.2.3" />
<PackageReference Include="MSTest.TestFramework" Version="4.2.3" />
<PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="9.0.0" />
<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="9.0.0" />
<PackageReference Include="Microsoft.AspNetCore.Identity" Version="2.2.0" />
<PackageReference Include="Microsoft.Extensions.Configuration" Version="9.0.0" />
<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.0.1" />
<PackageReference Include="Moq" Version="4.20.72" />
</ItemGroup>
<ItemGroup>
<ProjectReference Include="..\GermanApp\GermanApp.csproj" />
</ItemGroup>
</Project>

25
Tests/GermanApp.Tests.Unit.csproj
View file

@ -1,25 +0,0 @@
<Project Sdk="Microsoft.NET.Sdk">
<PropertyGroup>
<TargetFramework>net9.0</TargetFramework>
<Nullable>enable</Nullable>
<ImplicitUsings>disable</ImplicitUsings>
<IsPackable>false</IsPackable>
</PropertyGroup>
<ItemGroup>
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
<PackageReference Include="MSTest.TestAdapter" Version="4.2.3" />
<PackageReference Include="MSTest.TestFramework" Version="4.2.3" />
<PackageReference Include="Moq" Version="4.20.72" />
<PackageReference Include="Microsoft.AspNetCore.Identity" Version="2.2.0" />
<PackageReference Include="Microsoft.Extensions.Configuration" Version="9.0.0" />
<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="9.0.0" />
<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.0.1" />
</ItemGroup>
<ItemGroup>
<ProjectReference Include="..\GermanApp\GermanApp.csproj" />
</ItemGroup>
</Project>

415
Tests/Integration/Controllers/AuthControllerTests.cs
View file

@ -1,415 +0,0 @@
using System;
using System.Net;
using System.Threading.Tasks;
using GermanApp.Application.DTOs.Auth;
using GermanApp.Application.Interfaces;
using GermanApp.Domain.Entities;
using GermanApp.Presentation.Controllers;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.VisualStudio.TestTools.UnitTesting;
using Moq;
namespace GermanApp.Tests.Integration.Controllers;
/// <summary>
/// Integration tests for AuthController.
/// Tests controller behavior with mocked services.
/// </summary>
[TestClass]
public class AuthControllerTests
{
private Mock<IAuthService>? _mockAuthService;
private AuthController? _controller;
[TestInitialize]
public void TestInitialize()
{
_mockAuthService = new Mock<IAuthService>();
_controller = new AuthController(_mockAuthService.Object);
}
[TestCleanup]
public void TestCleanup()
{
_controller = null;
_mockAuthService = null;
}
// ==================== REGISTER ENDPOINT TESTS ====================
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Register")]
public async Task Register_WithValidData_ReturnsOkWithToken()
{
// Arrange
var registerDto = new RegisterDto
{
Username = "testuser",
Email = "test@example.com",
Password = "TestPassword123!"
};
var expectedResponse = new AuthResponse
{
UserId = 1,
Username = "testuser",
Email = "test@example.com",
Token = "test-token",
RefreshToken = "test-refresh-token",
ExpiresAt = DateTime.UtcNow.AddHours(24)
};
_mockAuthService!.Setup(s => s.RegisterAsync(It.IsAny<RegisterDto>()))
.ReturnsAsync(expectedResponse);
// Act
var result = await _controller!.Register(registerDto);
// Assert
Assert.IsInstanceOfType(result, typeof(OkObjectResult));
var okResult = result as OkObjectResult;
Assert.IsNotNull(okResult);
Assert.AreEqual(expectedResponse, okResult.Value);
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Register")]
public async Task Register_WithDuplicateUsername_ReturnsBadRequest()
{
// Arrange
var registerDto = new RegisterDto
{
Username = "duplicate_user",
Email = "test@example.com",
Password = "TestPassword123!"
};
_mockAuthService!.Setup(s => s.RegisterAsync(It.IsAny<RegisterDto>()))
.ThrowsAsync(new InvalidOperationException("Username already taken"));
// Act
var result = await _controller!.Register(registerDto);
// Assert
Assert.IsInstanceOfType(result, typeof(BadRequestObjectResult));
var badRequestResult = result as BadRequestObjectResult;
Assert.IsNotNull(badRequestResult);
Assert.AreEqual("Username already taken", badRequestResult.Value);
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Register")]
public async Task Register_WithDuplicateEmail_ReturnsBadRequest()
{
// Arrange
var registerDto = new RegisterDto
{
Username = "testuser",
Email = "duplicate@example.com",
Password = "TestPassword123!"
};
_mockAuthService!.Setup(s => s.RegisterAsync(It.IsAny<RegisterDto>()))
.ThrowsAsync(new InvalidOperationException("Email already in use"));
// Act
var result = await _controller!.Register(registerDto);
// Assert
Assert.IsInstanceOfType(result, typeof(BadRequestObjectResult));
var badRequestResult = result as BadRequestObjectResult;
Assert.IsNotNull(badRequestResult);
Assert.AreEqual("Email already in use", badRequestResult.Value);
}
// ==================== LOGIN ENDPOINT TESTS ====================
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Login")]
public async Task Login_WithValidCredentials_ReturnsOkWithToken()
{
// Arrange
var loginDto = new LoginDto
{
Email = "test@example.com",
Password = "TestPassword123!"
};
var expectedResponse = new AuthResponse
{
UserId = 1,
Username = "testuser",
Email = "test@example.com",
Token = "test-token",
RefreshToken = "test-refresh-token",
ExpiresAt = DateTime.UtcNow.AddHours(24)
};
_mockAuthService!.Setup(s => s.LoginAsync(It.IsAny<LoginDto>()))
.ReturnsAsync(expectedResponse);
// Act
var result = await _controller!.Login(loginDto);
// Assert
Assert.IsInstanceOfType(result, typeof(OkObjectResult));
var okResult = result as OkObjectResult;
Assert.IsNotNull(okResult);
Assert.AreEqual(expectedResponse, okResult.Value);
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Login")]
public async Task Login_WithInvalidEmail_ReturnsUnauthorized()
{
// Arrange
var loginDto = new LoginDto
{
Email = "nonexistent@example.com",
Password = "TestPassword123!"
};
_mockAuthService!.Setup(s => s.LoginAsync(It.IsAny<LoginDto>()))
.ThrowsAsync(new UnauthorizedAccessException("Invalid email or password"));
// Act
var result = await _controller!.Login(loginDto);
// Assert
Assert.IsInstanceOfType(result, typeof(UnauthorizedObjectResult));
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Login")]
public async Task Login_WithInvalidPassword_ReturnsUnauthorized()
{
// Arrange
var loginDto = new LoginDto
{
Email = "test@example.com",
Password = "wrong_password"
};
_mockAuthService!.Setup(s => s.LoginAsync(It.IsAny<LoginDto>()))
.ThrowsAsync(new UnauthorizedAccessException("Invalid email or password"));
// Act
var result = await _controller!.Login(loginDto);
// Assert
Assert.IsInstanceOfType(result, typeof(UnauthorizedObjectResult));
}
// ==================== GET CURRENT USER ENDPOINT TESTS ====================
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Me")]
public async Task GetCurrentUser_WithValidUser_ReturnsUserInfo()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hashed-password");
_mockAuthService!.Setup(s => s.GetCurrentUserAsync(1))
.ReturnsAsync(user);
// Arrange - set up controller context with user claim
_controller!.ControllerContext = new ControllerContext
{
HttpContext = new DefaultHttpContext
{
User = new System.Security.Claims.ClaimsPrincipal(new System.Security.Claims.ClaimsIdentity(new[]
{
new System.Security.Claims.Claim("nameid", "1"),
new System.Security.Claims.Claim("name", "testuser"),
new System.Security.Claims.Claim("email", "test@example.com"),
new System.Security.Claims.Claim(System.Security.Claims.ClaimTypes.Role, "User")
}))
}
};
// Act
var result = await _controller.GetCurrentUser();
// Assert
Assert.IsInstanceOfType(result, typeof(OkObjectResult));
var okResult = result as OkObjectResult;
Assert.IsNotNull(okResult);
var response = okResult.Value as AuthResponse;
Assert.IsNotNull(response);
Assert.AreEqual(user.Id, response.UserId);
Assert.AreEqual(user.Username, response.Username);
Assert.AreEqual(user.Email, response.Email);
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Me")]
public async Task GetCurrentUser_WithoutAuthentication_ReturnsUnauthorized()
{
// Arrange - no user in context
_controller!.ControllerContext = new ControllerContext
{
HttpContext = new DefaultHttpContext()
};
// Act
var result = await _controller.GetCurrentUser();
// Assert
Assert.IsInstanceOfType(result, typeof(UnauthorizedResult));
}
// ==================== REFRESH TOKEN ENDPOINT TESTS ====================
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Refresh")]
public async Task Refresh_WithValidRefreshToken_ReturnsNewTokens()
{
// Arrange
var validRefreshToken = "valid-refresh-token";
var expectedResponse = new RefreshTokenResponse
{
Token = "new-access-token",
RefreshToken = "new-refresh-token",
ExpiresAt = DateTime.UtcNow.AddHours(24)
};
_mockAuthService!.Setup(s => s.RefreshTokenAsync(validRefreshToken))
.ReturnsAsync(expectedResponse);
// Act
var result = await _controller!.Refresh(validRefreshToken);
// Assert
Assert.IsInstanceOfType(result, typeof(OkObjectResult));
var okResult = result as OkObjectResult;
Assert.IsNotNull(okResult);
Assert.AreEqual(expectedResponse, okResult.Value);
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("Refresh")]
public async Task Refresh_WithInvalidRefreshToken_ReturnsUnauthorized()
{
// Arrange
var invalidRefreshToken = "invalid-refresh-token";
_mockAuthService!.Setup(s => s.RefreshTokenAsync(invalidRefreshToken))
.ThrowsAsync(new UnauthorizedAccessException("Invalid refresh token"));
// Act
var result = await _controller!.Refresh(invalidRefreshToken);
// Assert
Assert.IsInstanceOfType(result, typeof(UnauthorizedObjectResult));
}
// ==================== REVOKE REFRESH TOKEN ENDPOINT TESTS ====================
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("RevokeRefresh")]
public async Task RevokeRefreshToken_WithValidToken_ReturnsOk()
{
// Arrange
var validRefreshToken = "valid-refresh-token";
// No exception means success
_mockAuthService!.Setup(s => s.RevokeRefreshTokenAsync(validRefreshToken))
.Returns(Task.CompletedTask);
// Arrange - set up authorized context
_controller!.ControllerContext = new ControllerContext
{
HttpContext = new DefaultHttpContext
{
User = new System.Security.Claims.ClaimsPrincipal(new System.Security.Claims.ClaimsIdentity(new[]
{
new System.Security.Claims.Claim("nameid", "1"),
new System.Security.Claims.Claim(System.Security.Claims.ClaimTypes.Role, "User")
}))
}
};
// Act
var result = await _controller.RevokeRefreshToken(validRefreshToken);
// Assert
Assert.IsInstanceOfType(result, typeof(OkObjectResult));
var okResult = result as OkObjectResult;
Assert.IsNotNull(okResult);
// Check that the response contains the expected message
dynamic responseValue = okResult.Value!;
Assert.AreEqual("Refresh token revoked successfully", (string)responseValue.message);
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("RevokeRefresh")]
public async Task RevokeRefreshToken_WithoutAuthentication_ReturnsUnauthorized()
{
// Note: When testing controllers directly (not through HTTP pipeline),
// the [Authorize] attribute is not automatically enforced.
// This test would pass in a full integration test with WebApplicationFactory.
// For now, we test that the controller correctly uses the service.
// Arrange - no user in context, service throws exception
var invalidRefreshToken = "any-token";
_mockAuthService!.Setup(s => s.RevokeRefreshTokenAsync(invalidRefreshToken))
.ThrowsAsync(new UnauthorizedAccessException("Refresh token not found"));
_controller!.ControllerContext = new ControllerContext
{
HttpContext = new DefaultHttpContext()
};
// Act
var result = await _controller.RevokeRefreshToken(invalidRefreshToken);
// Assert - Without [Authorize] enforcement in direct controller tests,
// we expect the service exception to propagate as UnauthorizedObjectResult
Assert.IsInstanceOfType(result, typeof(UnauthorizedObjectResult));
}
[TestMethod]
[TestCategory("AuthController")]
[TestCategory("RevokeRefresh")]
public async Task RevokeRefreshToken_WithInvalidToken_ReturnsUnauthorized()
{
// Arrange
var invalidRefreshToken = "invalid-refresh-token";
_mockAuthService!.Setup(s => s.RevokeRefreshTokenAsync(invalidRefreshToken))
.ThrowsAsync(new UnauthorizedAccessException("Refresh token not found"));
// Arrange - set up authorized context
_controller!.ControllerContext = new ControllerContext
{
HttpContext = new DefaultHttpContext
{
User = new System.Security.Claims.ClaimsPrincipal(new System.Security.Claims.ClaimsIdentity(new[]
{
new System.Security.Claims.Claim("nameid", "1"),
new System.Security.Claims.Claim(System.Security.Claims.ClaimTypes.Role, "User")
}))
}
};
// Act
var result = await _controller.RevokeRefreshToken(invalidRefreshToken);
// Assert
Assert.IsInstanceOfType(result, typeof(UnauthorizedObjectResult));
}
}

320
Tests/Unit/Domain/Entities/RefreshTokenTests.cs
View file

@ -1,320 +0,0 @@
using System;
using GermanApp.Domain.Entities;
using Microsoft.VisualStudio.TestTools.UnitTesting;
namespace GermanApp.Tests.Unit.Domain.Entities;
/// <summary>
/// Unit tests for RefreshToken domain entity.
/// Tests the refresh token factory methods and business logic.
/// </summary>
[TestClass]
public class RefreshTokenTests
{
#region Factory Method Tests
[TestMethod]
[TestCategory("Factory")]
public void Create_WithValidParameters_ReturnsRefreshToken()
{
// Arrange
int userId = 1;
string token = "test-token-string";
int expireDays = 7;
// Act
var refreshToken = RefreshToken.Create(userId, token, expireDays);
// Assert
Assert.IsNotNull(refreshToken);
Assert.AreEqual(userId, refreshToken.UserId);
Assert.AreEqual(token, refreshToken.Token);
Assert.AreEqual(DateTime.UtcNow.Date, refreshToken.CreatedAt.Date);
Assert.IsTrue(refreshToken.ExpiresAt > DateTime.UtcNow);
Assert.IsTrue(refreshToken.IsActive);
Assert.IsNull(refreshToken.RevokedAt);
}
[TestMethod]
[TestCategory("Factory")]
public void Create_WithDefaultExpireDays_Uses7Days()
{
// Arrange
int userId = 1;
string token = "test-token-string";
// Act
var refreshToken = RefreshToken.Create(userId, token);
// Assert
var timeDifference = refreshToken.ExpiresAt - DateTime.UtcNow;
Assert.IsTrue(timeDifference.TotalDays > 6.9 && timeDifference.TotalDays < 7.1);
}
[TestMethod]
[TestCategory("Factory")]
public void Create_WithCustomExpireDays_SetsCorrectExpiry()
{
// Arrange
int userId = 1;
string token = "test-token";
int expireDays = 30;
// Act
var refreshToken = RefreshToken.Create(userId, token, expireDays);
// Assert
var expectedExpiry = DateTime.UtcNow.AddDays(expireDays);
var timeDifference = refreshToken.ExpiresAt - DateTime.UtcNow;
Assert.IsTrue(timeDifference.TotalDays > 29.9 && timeDifference.TotalDays < 30.1);
}
#endregion
#region Revoke Method Tests
[TestMethod]
[TestCategory("Behavior")]
public void Revoke_ActiveToken_DeactivatesAndSetsRevokedAt()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token");
// Act
refreshToken.Revoke();
// Assert
Assert.IsFalse(refreshToken.IsActive);
Assert.IsNotNull(refreshToken.RevokedAt);
Assert.IsTrue(refreshToken.RevokedAt > DateTime.UtcNow.AddSeconds(-1));
}
[TestMethod]
[TestCategory("Behavior")]
public void Revoke_AlreadyRevokedToken_UpdatesRevokedAt()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token");
refreshToken.Revoke();
System.Threading.Thread.Sleep(10); // Small delay
var firstRevokedAt = refreshToken.RevokedAt;
// Act
refreshToken.Revoke();
// Assert
Assert.IsFalse(refreshToken.IsActive);
Assert.IsNotNull(refreshToken.RevokedAt);
Assert.IsTrue(refreshToken.RevokedAt >= firstRevokedAt);
}
#endregion
#region IsExpired Method Tests
[TestMethod]
[TestCategory("Query")]
public void IsExpired_NotExpiredToken_ReturnsFalse()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token", 7);
// Act
var isExpired = refreshToken.IsExpired();
// Assert
Assert.IsFalse(isExpired);
}
[TestMethod]
[TestCategory("Query")]
public void IsExpired_ExpiredToken_ReturnsTrue()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token");
refreshToken.ExpiresAt = DateTime.UtcNow.AddDays(-1); // Set to past
// Act
var isExpired = refreshToken.IsExpired();
// Assert
Assert.IsTrue(isExpired);
}
[TestMethod]
[TestCategory("Query")]
public void IsExpired_ExactlyAtExpiryTime_ReturnsTrue()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token");
refreshToken.ExpiresAt = DateTime.UtcNow; // Set to exactly now
// Act
var isExpired = refreshToken.IsExpired();
// Assert
Assert.IsTrue(isExpired);
}
[TestMethod]
[TestCategory("Query")]
public void IsExpired_FarFutureExpiry_ReturnsFalse()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token");
refreshToken.ExpiresAt = DateTime.UtcNow.AddYears(1);
// Act
var isExpired = refreshToken.IsExpired();
// Assert
Assert.IsFalse(isExpired);
}
#endregion
#region IsValid Method Tests
[TestMethod]
[TestCategory("Query")]
public void IsValid_ActiveNotExpiredToken_ReturnsTrue()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token", 7);
// Act
var isValid = refreshToken.IsValid();
// Assert
Assert.IsTrue(isValid);
}
[TestMethod]
[TestCategory("Query")]
public void IsValid_RevokedToken_ReturnsFalse()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token", 7);
refreshToken.Revoke();
// Act
var isValid = refreshToken.IsValid();
// Assert
Assert.IsFalse(isValid);
}
[TestMethod]
[TestCategory("Query")]
public void IsValid_ExpiredToken_ReturnsFalse()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token");
refreshToken.ExpiresAt = DateTime.UtcNow.AddDays(-1);
// Act
var isValid = refreshToken.IsValid();
// Assert
Assert.IsFalse(isValid);
}
[TestMethod]
[TestCategory("Query")]
public void IsValid_RevokedAndExpiredToken_ReturnsFalse()
{
// Arrange
var refreshToken = RefreshToken.Create(1, "test-token");
refreshToken.Revoke();
refreshToken.ExpiresAt = DateTime.UtcNow.AddDays(-1);
// Act
var isValid = refreshToken.IsValid();
// Assert
Assert.IsFalse(isValid);
}
#endregion
#region Property Tests
[TestMethod]
[TestCategory("Property")]
public void Id_HasDefaultValueOfZero()
{
// Arrange & Act
var refreshToken = RefreshToken.Create(1, "test-token");
// Assert
Assert.AreEqual(0, refreshToken.Id);
}
[TestMethod]
[TestCategory("Property")]
public void UserId_IsSetCorrectly()
{
// Arrange
int userId = 42;
// Act
var refreshToken = RefreshToken.Create(userId, "test-token");
// Assert
Assert.AreEqual(userId, refreshToken.UserId);
}
[TestMethod]
[TestCategory("Property")]
public void Token_IsSetCorrectly()
{
// Arrange
string tokenString = "test-token-12345";
// Act
var refreshToken = RefreshToken.Create(1, tokenString);
// Assert
Assert.AreEqual(tokenString, refreshToken.Token);
}
[TestMethod]
[TestCategory("Property")]
public void IsActive_HasDefaultValueOfTrue()
{
// Arrange & Act
var refreshToken = RefreshToken.Create(1, "test-token");
// Assert
Assert.IsTrue(refreshToken.IsActive);
}
[TestMethod]
[TestCategory("Property")]
public void RevokedAt_IsNullByDefault()
{
// Arrange & Act
var refreshToken = RefreshToken.Create(1, "test-token");
// Assert
Assert.IsNull(refreshToken.RevokedAt);
}
[TestMethod]
[TestCategory("Property")]
public void CreatedAt_IsSetToCurrentTime()
{
// Arrange
var beforeCreation = DateTime.UtcNow;
// Act
var refreshToken = RefreshToken.Create(1, "test-token");
var afterCreation = DateTime.UtcNow;
// Assert
Assert.IsTrue(refreshToken.CreatedAt >= beforeCreation);
Assert.IsTrue(refreshToken.CreatedAt <= afterCreation);
}
#endregion
}

428
Tests/Unit/Domain/Entities/UserTests.cs
View file

@ -1,428 +0,0 @@
using System;
using GermanApp.Domain.Entities;
using Microsoft.VisualStudio.TestTools.UnitTesting;
namespace GermanApp.Tests.Unit.Domain.Entities;
/// <summary>
/// Unit tests for User domain entity.
/// Tests the user factory methods and business logic.
/// </summary>
[TestClass]
public class UserTests
{
#region Factory Method Tests
[TestMethod]
[TestCategory("Factory")]
public void Create_WithValidParameters_ReturnsUser()
{
// Arrange
string username = "testuser";
string email = "test@example.com";
string passwordHash = "hashed-password";
// Act
var user = User.Create(username, email, passwordHash);
// Assert
Assert.IsNotNull(user);
Assert.AreEqual(username, user.Username);
Assert.AreEqual(email, user.Email);
Assert.AreEqual(passwordHash, user.PasswordHash);
Assert.AreEqual("A1", user.CurrentLevel);
Assert.AreEqual(0, user.Streak);
Assert.AreEqual(0, user.TotalPoints);
Assert.IsNotNull(user.CreatedAt);
Assert.IsTrue(user.CreatedAt <= DateTime.UtcNow);
}
[TestMethod]
[TestCategory("Factory")]
public void Create_WithEmptyPasswordHash_ReturnsUser()
{
// Arrange
string username = "testuser";
string email = "test@example.com";
string passwordHash = "";
// Act
var user = User.Create(username, email, passwordHash);
// Assert
Assert.IsNotNull(user);
Assert.AreEqual(passwordHash, user.PasswordHash);
}
[TestMethod]
[TestCategory("Factory")]
public void Create_LowercasesEmail()
{
// Arrange
string username = "testuser";
string email = "TEST@EXAMPLE.COM";
string passwordHash = "hashed-password";
// Act
var user = User.Create(username, email, passwordHash);
// Assert
Assert.AreEqual("test@example.com", user.Email);
}
[TestMethod]
[TestCategory("Factory")]
public void Create_WithMixedCaseUsername_PreservesUsernameCase()
{
// Arrange
string username = "TestUser123";
string email = "test@example.com";
string passwordHash = "hashed-password";
// Act
var user = User.Create(username, email, passwordHash);
// Assert
Assert.AreEqual(username, user.Username);
}
#endregion
#region ChangePassword Method Tests
[TestMethod]
[TestCategory("Behavior")]
public void ChangePassword_WithValidHash_UpdatesPassword()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "initial-hash");
string newHash = "new-hashed-password";
// Act
user.ChangePassword(newHash);
// Assert
Assert.AreEqual(newHash, user.PasswordHash);
}
[TestMethod]
[TestCategory("Behavior")]
public void ChangePassword_WithEmptyHash_UpdatesPassword()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "initial-hash");
// Act
user.ChangePassword("");
// Assert
Assert.AreEqual("", user.PasswordHash);
}
[TestMethod]
[TestCategory("Behavior")]
public void ChangePassword_MultipleTimes_UpdatesCorrectly()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash1");
// Act
user.ChangePassword("hash2");
user.ChangePassword("hash3");
// Assert
Assert.AreEqual("hash3", user.PasswordHash);
}
#endregion
#region ChangeEmail Method Tests
[TestMethod]
[TestCategory("Behavior")]
public void ChangeEmail_WithValidEmail_UpdatesEmail()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
var newEmail = "new@example.com";
// Act
user.ChangeEmail(newEmail);
// Assert
Assert.AreEqual("new@example.com", user.Email);
}
[TestMethod]
[TestCategory("Behavior")]
public void ChangeEmail_LowercasesEmail()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act
user.ChangeEmail("UPPERCASE@EXAMPLE.COM");
// Assert
Assert.AreEqual("uppercase@example.com", user.Email);
}
[TestMethod]
[TestCategory("Behavior")]
public void ChangeEmail_WithMixedCase_Values()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act
user.ChangeEmail("TeSt@ExAmPlE.cOm");
// Assert
Assert.AreEqual("test@example.com", user.Email);
}
[TestMethod]
[TestCategory("Behavior")]
public void ChangeEmail_WithNullEmail_UpdatesEmailToEmpty()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act - Note: This won't throw, it will just set to empty string
user.ChangeEmail(null!);
// Assert
Assert.AreEqual("", user.Email);
}
[TestMethod]
[TestCategory("Behavior")]
public void ChangeEmail_WithEmptyString_SetsEmptyEmail()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act
user.ChangeEmail("");
// Assert
Assert.AreEqual("", user.Email);
}
#endregion
#region Gamification Methods Tests
[TestMethod]
[TestCategory("Gamification")]
public void AddPoints_IncreasesTotalPoints()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
int initialPoints = user.TotalPoints;
// Act
user.AddPoints(10);
// Assert
Assert.AreEqual(initialPoints + 10, user.TotalPoints);
}
[TestMethod]
[TestCategory("Gamification")]
public void AddPoints_MultipleTimes_AccumulatesCorrectly()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act
user.AddPoints(10);
user.AddPoints(20);
user.AddPoints(30);
// Assert
Assert.AreEqual(60, user.TotalPoints);
}
[TestMethod]
[TestCategory("Gamification")]
public void AddPoints_WithNegativePoints_DecreasesTotal()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
user.AddPoints(100);
// Act
user.AddPoints(-10);
// Assert
Assert.AreEqual(90, user.TotalPoints);
}
[TestMethod]
[TestCategory("Gamification")]
public void UpdateStreak_SetsNewStreak()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act
user.UpdateStreak(5);
// Assert
Assert.AreEqual(5, user.Streak);
}
[TestMethod]
[TestCategory("Gamification")]
public void UpdateStreak_WithZero_ResetsStreak()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
user.UpdateStreak(10);
// Act
user.UpdateStreak(0);
// Assert
Assert.AreEqual(0, user.Streak);
}
[TestMethod]
[TestCategory("Gamification")]
public void UpdateLevel_SetsNewLevel()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act
user.UpdateLevel("B1");
// Assert
Assert.AreEqual("B1", user.CurrentLevel);
}
[TestMethod]
[TestCategory("Gamification")]
public void UpdateLevel_ToHigherLevel_UpdatesCorrectly()
{
// Arrange
var user = User.Create("testuser", "test@example.com", "hash");
// Act
user.UpdateLevel("A2");
user.UpdateLevel("B1");
user.UpdateLevel("C1");
// Assert
Assert.AreEqual("C1", user.CurrentLevel);
}
#endregion
#region Property Tests
[TestMethod]
[TestCategory("Property")]
public void Id_HasDefaultValueOfZero()
{
// Arrange & Act
var user = User.Create("testuser", "test@example.com", "hash");
// Assert
Assert.AreEqual(0, user.Id);
}
[TestMethod]
[TestCategory("Property")]
public void Username_HasPrivateSetter()
{
// Arrange
var username = "testuser";
// Act
var user = User.Create(username, "test@example.com", "hash");
// Assert
Assert.AreEqual(username, user.Username);
}
[TestMethod]
[TestCategory("Property")]
public void Email_HasPrivateSetter()
{
// Arrange
var email = "test@example.com";
// Act
var user = User.Create("testuser", email, "hash");
// Assert
Assert.AreEqual(email, user.Email);
}
[TestMethod]
[TestCategory("Property")]
public void PasswordHash_HasPrivateSetter()
{
// Arrange
var passwordHash = "hashed-password-123";
// Act
var user = User.Create("testuser", "test@example.com", passwordHash);
// Assert
Assert.AreEqual(passwordHash, user.PasswordHash);
}
[TestMethod]
[TestCategory("Property")]
public void CurrentLevel_HasDefaultValueOf_A1()
{
// Arrange & Act
var user = User.Create("testuser", "test@example.com", "hash");
// Assert
Assert.AreEqual("A1", user.CurrentLevel);
}
[TestMethod]
[TestCategory("Property")]
public void Streak_HasDefaultValueOfZero()
{
// Arrange & Act
var user = User.Create("testuser", "test@example.com", "hash");
// Assert
Assert.AreEqual(0, user.Streak);
}
[TestMethod]
[TestCategory("Property")]
public void TotalPoints_HasDefaultValueOfZero()
{
// Arrange & Act
var user = User.Create("testuser", "test@example.com", "hash");
// Assert
Assert.AreEqual(0, user.TotalPoints);
}
[TestMethod]
[TestCategory("Property")]
public void CreatedAt_IsSetToCurrentTime()
{
// Arrange
var beforeCreation = DateTime.UtcNow;
// Act
var user = User.Create("testuser", "test@example.com", "hash");
var afterCreation = DateTime.UtcNow;
// Assert
Assert.IsTrue(user.CreatedAt >= beforeCreation);
Assert.IsTrue(user.CreatedAt <= afterCreation);
}
#endregion
}

54
docker-compose.yml
View file

@ -1,54 +0,0 @@
services:
# PostgreSQL Database service
db:
image: postgres:15-alpine
container_name: deutschlernen-db
environment:
POSTGRES_DB: DeutschLernen
POSTGRES_USER: postgres
POSTGRES_PASSWORD: postgres
volumes:
- postgres_data:/var/lib/postgresql/data
ports:
- "5432:5432"
healthcheck:
test: ["CMD-SHELL", "pg_isready -U postgres -d DeutschLernen"]
interval: 10s
timeout: 5s
retries: 5
restart: unless-stopped
# Backend API
backend:
build:
context: ./GermanApp
dockerfile: Dockerfile
container_name: deutschlernen-backend
environment:
ASPNETCORE_ENVIRONMENT: Development
ASPNETCORE_URLS: http://+:8080
ConnectionStrings__DefaultConnection: Host=db;Port=5432;Database=DeutschLernen;Username=postgres;Password=postgres
depends_on:
db:
condition: service_healthy
ports:
- "8080:8080"
restart: unless-stopped
# Frontend
frontend:
build:
context: ./german-app-frontend
dockerfile: Dockerfile
container_name: deutschlernen-frontend
environment:
NODE_ENV: production
depends_on:
backend:
condition: service_started
ports:
- "3000:3000"
restart: unless-stopped
volumes:
postgres_data:

24
docs/ROADMAP.md
View file

@ -34,8 +34,8 @@ Establish the technical foundation for the entire application, including backend
### Features
| # | Feature | Description | Hours | Status | Dependencies |
|---|---------|-------------|-------|--------|--------------|
| 1.1 | [Infrastructure Setup](features/infrastructure-setup.md) | .NET project, PostgreSQL, Docker, CI/CD | 10-14h | ✅ Complete | None |
| 1.2 | [User Authentication](features/user-authentication.md) | JWT-based auth with ASP.NET Core Identity | 4-6h | ✅ Complete | 1.1 |
| 1.1 | [Infrastructure Setup](features/infrastructure-setup.md) | .NET project, PostgreSQL, Docker, CI/CD | 10-14h | ⏳ Planned | None |
| 1.2 | [User Authentication](features/user-authentication.md) | JWT-based auth with ASP.NET Core Identity | 4-6h | ⏳ Planned | 1.1 |
### Deliverables
- ✅ Working .NET 9.0 backend project
@ -265,11 +265,11 @@ Implement the complete React + TypeScript frontend application with all UI compo
| Phase | Duration | Hours | Features | Status |
|-------|----------|-------|----------|--------|
| Phase 1: Foundation | 2 weeks | 30-42h | 2 | 🚀 In Progress (1.1 ✅, 1.2 🚀) |
| Phase 1: Foundation | 2 weeks | 30-42h | 2 | ⏳ Planned |
| Phase 2: Core Backend | 2 weeks | 42-58h | 4 | ⏳ Planned |
| Phase 3: Content & Features | 2 weeks | 30-42h | 2 | ⏳ Planned |
| Phase 4: Frontend | 2 weeks | 10-16h | 1 | ⏳ Planned |
| **Total** | **8 weeks** | **112-158h** | **9** | 🚀 In Progress |
| **Total** | **8 weeks** | **112-158h** | **9** | ⏳ Planned |
**For a small team (2-3 developers):** ~4-5 weeks
**For a solo developer:** ~8-10 weeks
@ -328,20 +328,18 @@ Week 9-10: Testing, Polish, Bug Fixes (20h)
### Milestone 1: Foundation Complete (End of Week 2)
**Success Metrics:**
- [x] Backend project builds and runs
- [x] Database is configured and accessible
- [x] Docker containers work
- [ ] CI/CD pipeline passes (deferred per user request)
- [x] Authentication works end-to-end (JWT with refresh tokens)
- [x] Can start any Phase 2 feature
- [ ] Backend project builds and runs
- [ ] Database is configured and accessible
- [ ] Docker containers work
- [ ] CI/CD pipeline passes
- [ ] Authentication works end-to-end
- [ ] Can start any Phase 2 feature
**Exit Criteria:**
- All Phase 1 acceptance criteria met
- All Phase 1 tests passing (tests to be written)
- All Phase 1 tests passing
- All Phase 1 documentation complete
**Status:** ~80% Complete - Infrastructure Setup ✅, User Authentication 🚀 In Progress (refresh tokens implemented)
### Milestone 2: Core Backend Complete (End of Week 4)
**Success Metrics:**
- [ ] Lesson management works

112
docs/features/infrastructure-setup.md
View file

@ -1,6 +1,6 @@
# Feature: Infrastructure Setup
> **Status**: ✅ Complete
> **Status**: 🚀 In Progress
> **Priority**: High
> **Complexity**: Medium
> **Estimate**: 10-14 hours
@ -20,11 +20,11 @@ Establish the foundational infrastructure for the DeutschLernen application, inc
As a developer, I want to have a working backend and database setup so that I can begin implementing application features.
### Acceptance Criteria
- [x] .NET 9.0 backend project is created and builds successfully
- [x] PostgreSQL database is configured and accessible
- [x] Docker setup is ready for deployment (docker-compose.yml, Dockerfiles)
- [x] CI/CD pipeline is configured (.woodpecker.yml for Woodpecker CI)
- [x] Development environment is reproducible
- [ ] .NET 9.0 backend project is created and builds successfully
- [ ] PostgreSQL database is configured and accessible
- [ ] Docker setup is ready for deployment
- [ ] CI/CD pipeline is configured
- [ ] Development environment is reproducible
---
@ -85,74 +85,74 @@ As a developer, I want to have a working backend and database setup so that I ca
## 🚀 Implementation Plan
### Phase 1: Backend Project Setup (2-4 hours)
- [x] Create GermanApp .NET 9.0 Web API project
- [x] Configure appsettings.json with multiple environments
- [x] Set up Health Checks endpoint
- [x] Configure CORS for frontend
- [x] Set up OpenAPI/Swagger documentation
- [x] Configure logging (Serilog or built-in)
- [x] Create base response models and error handling middleware
- [ ] Create GermanApp .NET 9.0 Web API project
- [ ] Configure appsettings.json with multiple environments
- [ ] Set up Health Checks endpoint
- [ ] Configure CORS for frontend
- [ ] Set up OpenAPI/Swagger documentation
- [ ] Configure logging (Serilog or built-in)
- [ ] Create base response models and error handling middleware
### Phase 2: Database Setup (1-2 hours)
- [x] Design and create initial database schema
- [x] Configure Entity Framework Core with PostgreSQL
- [x] Set up database migrations
- [x] Create seed data scripts
- [x] Configure connection strings for different environments
- [ ] Design and create initial database schema
- [ ] Configure Entity Framework Core with PostgreSQL
- [ ] Set up database migrations
- [ ] Create seed data scripts
- [ ] Configure connection strings for different environments
### Phase 3: Docker Configuration (2-4 hours)
- [x] Create Dockerfile for backend
- [x] Create Dockerfile for frontend
- [x] Create docker-compose.yml with all services
- [x] Configure Docker volumes for persistent data
- [x] Set up environment variables in Docker
- [x] Test Docker build and run
- [ ] Create Dockerfile for backend
- [ ] Create Dockerfile for frontend
- [ ] Create docker-compose.yml with all services
- [ ] Configure Docker volumes for persistent data
- [ ] Set up environment variables in Docker
- [ ] Test Docker build and run
### Phase 4: CI/CD Pipeline (2-4 hours)
- [x] Create Woodpecker CI pipeline (.woodpecker.yml)
- [x] Configure build, test, and deploy steps for self-hosted Woodpecker
- [x] Set up environment secrets (documented, requires Woodpecker UI setup)
- [x] Configure branch triggers for main and feature branches
- [x] Test CI/CD pipeline (configuration created and validated)
- [ ] Create GitHub Actions workflow for backend
- [ ] Configure build, test, and deploy steps
- [ ] Set up environment secrets
- [ ] Configure branch protection rules
- [ ] Test CI/CD pipeline
### Milestones
| Milestone | Date | Status |
|-----------|------|--------|
| Backend Project Created | 2025-05-31 | ✅ |
| Database Configured | 2025-05-31 | ✅ |
| Docker Setup Complete | 2025-06-05 | ✅ |
| CI/CD Pipeline Working | 2025-06-05 | ✅ |
| Backend Project Created | - | ⏳ |
| Database Configured | - | ⏳ |
| Docker Setup Complete | - | ⏳ |
| CI/CD Pipeline Working | - | ⏳ |
---
## ✅ Tasks
### Backend
- [x] Initialize .NET 9.0 Web API project
- [x] Configure Program.cs with proper middleware
- [x] Set up appsettings.Development.json, appsettings.Staging.json, appsettings.Production.json
- [x] Create HealthChecks endpoint
- [x] Configure Swagger/OpenAPI
- [x] Set up CORS policy
- [x] Configure logging
- [x] Create error handling middleware
- [x] Create base response wrappers
- [ ] Initialize .NET 9.0 Web API project
- [ ] Configure Program.cs with proper middleware
- [ ] Set up appsettings.Development.json, appsettings.Staging.json, appsettings.Production.json
- [ ] Create HealthChecks endpoint
- [ ] Configure Swagger/OpenAPI
- [ ] Set up CORS policy
- [ ] Configure logging
- [ ] Create error handling middleware
- [ ] Create base response wrappers
### Database
- [x] Install PostgreSQL locally for development
- [x] Create initial database schema
- [x] Configure EF Core DbContext
- [x] Create first migration
- [x] Apply migration to database
- [x] Create seed data for initial testing
- [ ] Install PostgreSQL locally for development
- [ ] Create initial database schema
- [ ] Configure EF Core DbContext
- [ ] Create first migration
- [ ] Apply migration to database
- [ ] Create seed data for initial testing
### Docker
- [x] Create backend Dockerfile
- [x] Create frontend Dockerfile
- [x] Create docker-compose.yml
- [x] Configure Docker volumes
- [x] Set up Docker .env file
- [x] Test Docker containers
- [ ] Create backend Dockerfile
- [ ] Create frontend Dockerfile
- [ ] Create docker-compose.yml
- [ ] Configure Docker volumes
- [ ] Set up Docker .env file
- [ ] Test Docker containers
### CI/CD
- [ ] Create .github/workflows/ directory
@ -258,10 +258,6 @@ As a developer, I want to have a working backend and database setup so that I ca
| Date | Status Change | Notes |
|------|---------------|-------|
| May 31, 2025 | Created | Initial plan based on application-plan.md |
| May 31, 2025 | Status: Planned → In Progress | Started feature implementation |
| May 31, 2025 | Phase 1 Complete | Backend project setup with Health Checks, CORS, Serilog, middleware |
| May 31, 2025 | Phase 2 Complete | PostgreSQL configured, migrations created, seed data implemented |
| Jun 05, 2025 | Phase 3 Complete | Docker containers running successfully - all services Up |
---

110
docs/features/user-authentication.md
View file

@ -1,6 +1,6 @@
# Feature: User Authentication & Authorization
> **Status**: 🚀 In Progress (90% Complete)
> **Status**: ⏳ Planned
> **Priority**: High
> **Complexity**: Medium
> **Estimate**: 4-6 hours
@ -43,7 +43,6 @@ As a user, I want to register, login, and access my personalized learning conten
| FR-005 | Current user endpoint | Medium |
| FR-006 | Password reset functionality | Low |
| FR-007 | Email verification (optional for MVP) | Low |
| FR-008 | Token refresh mechanism | High |
### Non-Functional Requirements
- Security: Passwords hashed with bcrypt or similar
@ -92,8 +91,7 @@ Protected Endpoint:
| `/api/auth/login` | POST | Login existing user | No |
| `/api/auth/me` | GET | Get current user info | Yes |
| `/api/auth/logout` | POST | Invalidate token | Yes |
| `/api/auth/refresh` | POST | Refresh expired token | No |
| `/api/auth/revoke-refresh` | POST | Revoke a refresh token | Yes |
| `/api/auth/refresh` | POST | Refresh expired token | Yes |
### Database Schema (from application-plan.md)
```sql
@ -114,29 +112,28 @@ CREATE TABLE Users (
## 🚀 Implementation Plan
### Phase 1: Backend Authentication (3-4 hours)
- [x] Create User model and DTOs (RegisterDto, LoginDto, AuthResponse)
- [x] Configure ASP.NET Core Identity (using PasswordHasher with custom User)
- [x] Create AuthService with user registration logic
- [x] Create AuthService with user login logic
- [x] Configure JWT token generation
- [x] Create AuthController with endpoints
- [x] Add JWT authentication middleware
- [x] Configure CORS for frontend
- [x] Add [Authorize] to protected endpoints
- [ ] Create User model and DTOs (RegisterDto, LoginDto, AuthResponse)
- [ ] Configure ASP.NET Core Identity
- [ ] Create AuthService with user registration logic
- [ ] Create AuthService with user login logic
- [ ] Configure JWT token generation
- [ ] Create AuthController with endpoints
- [ ] Add JWT authentication middleware
- [ ] Configure CORS for frontend
### Phase 2: Database Integration (1-2 hours)
- [x] Update User entity to match schema
- [x] Configure EF Core user repository (via AppDbContext)
- [x] Implement password hashing (using PasswordHasher)
- [x] Create user seed data (admin user - in SeedDataExtension)
- [ ] Update User entity to match schema
- [ ] Configure EF Core user repository
- [ ] Implement password hashing
- [ ] Create user seed data (admin user)
- [ ] Test database operations
### Phase 3: Token Management (1 hour)
- [x] Configure JWT settings in appsettings.json
- [x] Implement token validation middleware (via AddJwtBearer)
- [x] Add token refresh mechanism (with RefreshToken entity, AuthService methods, AuthController endpoints)
- [x] Set up token expiration (24 hours)
- [x] Configure refresh token rotation (7-day refresh tokens, rotated on refresh)
- [ ] Configure JWT settings in appsettings.json
- [ ] Implement token validation middleware
- [ ] Add token refresh mechanism
- [ ] Set up token expiration (24 hours)
- [ ] Configure refresh token rotation
### Phase 4: Frontend Integration (Optional - if doing full stack)
- [ ] Create auth service in React
@ -148,9 +145,9 @@ CREATE TABLE Users (
### Milestones
| Milestone | Date | Status |
|-----------|------|--------|
| Backend Auth Complete | 2025-06-05 | ✅ |
| Database Integration | 2025-06-05 | ✅ |
| Token Management | 2025-06-05 | ✅ |
| Backend Auth Complete | - | ⏳ |
| Database Integration | - | ⏳ |
| Token Management | - | ⏳ |
| Frontend Integration | - | ⏳ |
---
@ -158,39 +155,32 @@ CREATE TABLE Users (
## ✅ Tasks
### Backend
- [x] Create Models/User.cs with properties
- [x] Create Domain/Entities/User.cs with properties
- [x] Create DTOs/Auth/RegisterDto.cs
- [x] Create DTOs/Auth/LoginDto.cs
- [x] Create DTOs/Auth/AuthResponse.cs
- [x] Create DTOs/Auth/RefreshTokenResponse.cs
- [x] Create Domain/Entities/RefreshToken.cs
- [x] Create Interfaces/IAuthService.cs (with RefreshTokenAsync, RevokeRefreshTokenAsync)
- [x] Create Services/AuthService.cs (with JWT generation, refresh token methods)
- [x] Create Controllers/AuthController.cs (with /refresh, /revoke-refresh endpoints)
- [x] Configure JWT in Program.cs
- [x] Add [Authorize] attribute to protected endpoints (LessonsEndpoints)
- [x] Configure CORS policy
- [x] Write unit tests for AuthService and Domain Entities (46 tests passing)
- [x] Write integration tests for AuthController (59 tests passing)
- [ ] Create Models/User.cs with properties
- [ ] Create DTOs/Auth/RegisterDto.cs
- [ ] Create DTOs/Auth/LoginDto.cs
- [ ] Create DTOs/Auth/AuthResponse.cs
- [ ] Create Services/AuthService.cs
- [ ] Create Controllers/AuthController.cs
- [ ] Configure JWT in Program.cs
- [ ] Add [Authorize] attribute to protected endpoints
- [ ] Create AuthMiddleware.cs
- [ ] Configure CORS policy
- [ ] Write unit tests for AuthService
- [ ] Write integration tests for AuthController
### Database
- [x] Update User entity mapping (in AppDbContext)
- [ ] Create UserRepository (using DbContext directly for now)
- [x] Implement password hashing (PasswordHasher<User>)
- [x] Create migration for Users table (in InitialCreate migration)
- [x] Seed admin user (in SeedDataExtension)
- [ ] Update User entity mapping
- [ ] Create UserRepository
- [ ] Implement password hashing
- [ ] Create migration for Users table
- [ ] Seed admin user
### Token Management
- [x] Configure JWT settings (in appsettings.json)
- [x] Implement token generation (in AuthService)
- [x] Implement token validation (via AddJwtBearer)
- [x] Implement token refresh (RefreshTokenAsync, RevokeRefreshTokenAsync in AuthService)
- [x] Create RefreshToken entity with factory methods (Create, Revoke, IsExpired, IsValid)
- [x] Add refresh token storage in database (AddRefreshTokensTable migration)
- [x] Add /api/auth/refresh endpoint for token rotation
- [x] Add /api/auth/revoke-refresh endpoint for token revocation
- [x] Set token expiration (24 hours access token, 7 days refresh token)
- [ ] Configure JWT settings
- [ ] Implement token generation
- [ ] Implement token validation
- [ ] Implement token refresh
- [ ] Set token expiration
### Frontend (Optional)
- [ ] Create authService.ts
@ -319,18 +309,6 @@ CREATE TABLE Users (
| Date | Status Change | Notes |
|------|---------------|-------|
| May 31, 2025 | Created | Initial plan based on application-plan.md |
| Jun 05, 2025 | Status: Planned → In Progress | Started implementation |
| Jun 05, 2025 | Backend Auth Complete | DTOs, AuthService, AuthController, JWT configured |
| Jun 05, 2025 | Database Integration Complete | User entity, password hashing, seed data |
| Jun 05, 2025 | Token Management Complete | JWT settings, token generation/validation, refresh token mechanism |
| Jun 05, 2025 | Refresh Token Implementation Complete | RefreshToken entity, AuthService methods, AuthController endpoints, migration created |
**Remaining Tasks:**
- [ ] Write integration tests for AuthController (See Tests/TODO.md for detailed test cases)
**Note:** Unit tests for Domain Entities (User, RefreshToken) and integration tests for AuthController are complete and passing (105 tests total).
**Note on Integration Tests:** Tests are implemented as controller tests with mocked services. Full HTTP pipeline integration tests would require WebApplicationFactory which needs Program class access in .NET 6+ minimal APIs.
---

41
german-app-frontend/.dockerignore
View file

@ -1,41 +0,0 @@
# Node modules
node_modules/
# npm cache
npm-cache/
# Dist directory (will be built in container)
dist/
# IDE
.idea/
.vscode/
*.swp
*.swo
# OS
.DS_Store
Thumbs.db
# Git
.git/
.gitignore
# Docker
Dockerfile
.dockerignore
# Logs
*.log
npm-debug.log*
# Environment files
.env
.env.local
.env.*.local
# Build output
build/
# Test coverage
coverage/

40
german-app-frontend/Dockerfile
View file

@ -1,40 +0,0 @@
# GermanApp Frontend Dockerfile
# React 19 + TypeScript + Vite Application
# Multi-stage build for production optimization
# Build context: german-app-frontend directory
# ============================================
# Build Stage
# ============================================
FROM node:20-alpine AS build
WORKDIR /app
# Copy package files
COPY package*.json ./
# Install dependencies
RUN npm ci
# Copy source files
COPY . .
# Build the application
RUN npm run build
# ============================================
# Runtime Stage
# ============================================
FROM nginx:alpine AS runtime
WORKDIR /usr/share/nginx/html
# Copy built files from build stage
COPY --from=build /app/dist .
# Copy nginx configuration
COPY nginx.conf /etc/nginx/conf.d/default.conf
# Expose port
EXPOSE 3000
# Entry point (nginx runs by default)
CMD ["nginx", "-g", "daemon off;"]

41
german-app-frontend/nginx.conf
View file

@ -1,41 +0,0 @@
server {
listen 3000;
server_name localhost;
# Root directory
root /usr/share/nginx/html;
index index.html;
# Handle React Router - return index.html for all requests
location / {
try_files $uri $uri/ /index.html;
}
# API proxy to backend (when running in Docker Compose)
location /api/ {
proxy_pass http://backend:8080;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# Health check endpoint
location /health {
access_log off;
return 200 "healthy\n";
add_header Content-Type text/plain;
}
# Error pages
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
# Cache static assets
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
expires 1y;
add_header Cache-Control "public, immutable";
}
}

8
german-app-frontend/src/App.tsx
View file

@ -1,8 +0,0 @@
export default function App() {
return (
<div>
<h1>DeutschLernen</h1>
<p>German Learning Application</p>
</div>
);
}

9
german-app-frontend/src/index.css
View file

@ -1,9 +0,0 @@
* {
margin: 0;
padding: 0;
box-sizing: border-box;
}
body {
font-family: Arial, sans-serif;
}

5
german-app-frontend/src/main.tsx
View file

@ -1,5 +0,0 @@
import { createRoot } from 'react-dom/client';
import App from './App';
import './index.css';
createRoot(document.getElementById('root')!).render(<App />);

8
nuget.config
View file

@ -1,8 +0,0 @@
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<packageSources>
<!--To inherit the global NuGet package sources remove the <clear/> line below -->
<clear />
<add key="nuget" value="https://api.nuget.org/v3/index.json" />
</packageSources>
</configuration>