Consumer API: Create identity deletion process as owner; create identity deletion process as support; deletion process approval

AdminUi/src/AdminUi/ClientApp/src/app/components/quotas/tier/create-tier-dialog/create-tier-dialog.component.ts

@@ -29,7 +29,8 @@ export class CreateTierDialogComponent {
             name: "",
             quotas: [],
             isDeletable: false,
-            numberOfIdentities: 0
+            numberOfIdentities: 0,
+            isReadOnly: false
         } as Tier;
     }
 
@@ -58,7 +59,8 @@ export class CreateTierDialogComponent {
                     name: data.result.name,
                     quotas: [],
                     numberOfIdentities: data.result.numberOfIdentities,
-                    isDeletable: data.result.isDeletable
+                    isDeletable: data.result.isDeletable,
+                    isReadOnly: false
                 } as Tier;
 
                 this.snackBar.open("Successfully added tier.", "Dismiss", {

AdminUi/src/AdminUi/ClientApp/src/app/components/quotas/tier/tier-edit/tier-edit.component.html

@@ -17,7 +17,7 @@ <h2 class="header-title">{{ headerEdit }}</h2>
                 </mat-form-field>
                 <mat-form-field class="full-width">
                     <mat-label>Name</mat-label>
-                    <input matInput required [(ngModel)]="tier.name" [disabled]="disabled || editMode" />
+                    <input matInput required [(ngModel)]="tier.name" [disabled]="isNameInputDisabled()" />
                     <mat-error>You must enter a value</mat-error>
                 </mat-form-field>
             </div>
@@ -34,10 +34,10 @@ <h2 class="header-title">{{ headerEdit }}</h2>
                 </mat-panel-description>
             </mat-expansion-panel-header>
             <div class="action-buttons">
-                <button mat-mini-fab color="warn" (click)="openConfirmationDialogQuotaDeletion()" [disabled]="selectionQuotas.selected.length === 0">
+                <button mat-mini-fab color="warn" (click)="openConfirmationDialogQuotaDeletion()" [disabled]="isQuotaDeletionDisabled()">
                     <mat-icon>delete</mat-icon>
                 </button>
-                <button mat-mini-fab color="primary" (click)="openAssignQuotaDialog()" [disabled]="!tier.id">
+                <button mat-mini-fab color="primary" (click)="openAssignQuotaDialog()" [disabled]="isQuotaAssignmentDisabled()">
                     <mat-icon>add</mat-icon>
                 </button>
             </div>
@@ -47,6 +47,7 @@ <h2 class="header-title">{{ headerEdit }}</h2>
                         <mat-checkbox
                             (change)="$event ? toggleAllRowsQuotas() : null"
                             [checked]="selectionQuotas.hasValue() && isAllSelected()"
+                            [disabled]="tier.isReadOnly"
                             color="primary"
                             [indeterminate]="selectionQuotas.hasValue() && !isAllSelected()"
                             [aria-label]="checkboxLabelQuotas()">
@@ -56,6 +57,7 @@ <h2 class="header-title">{{ headerEdit }}</h2>
                         <mat-checkbox
                             (click)="$event.stopPropagation()"
                             (change)="$event ? selectionQuotas.toggle(row) : null"
+                            [disabled]="tier.isReadOnly"
                             [checked]="selectionQuotas.isSelected(row)"
                             color="primary"
                             [aria-label]="checkboxLabelQuotas(i, row)">

AdminUi/src/AdminUi/ClientApp/src/app/components/quotas/tier/tier-edit/tier-edit.component.ts

@@ -1,15 +1,15 @@
+import { SelectionModel } from "@angular/cdk/collections";
 import { Component } from "@angular/core";
 import { MatDialog, MatDialogRef } from "@angular/material/dialog";
 import { MatSnackBar } from "@angular/material/snack-bar";
 import { ActivatedRoute, Router } from "@angular/router";
+import { Observable, forkJoin } from "rxjs";
+import { ConfirmationDialogComponent } from "src/app/components/shared/confirmation-dialog/confirmation-dialog.component";
 import { QuotasService, TierQuota } from "src/app/services/quotas-service/quotas.service";
 import { Tier, TierService } from "src/app/services/tier-service/tier.service";
+import { HttpErrorResponseWrapper } from "src/app/utils/http-error-response-wrapper";
 import { HttpResponseEnvelope } from "src/app/utils/http-response-envelope";
 import { AssignQuotaData, AssignQuotasDialogComponent } from "../../assign-quotas-dialog/assign-quotas-dialog.component";
-import { SelectionModel } from "@angular/cdk/collections";
-import { ConfirmationDialogComponent } from "src/app/components/shared/confirmation-dialog/confirmation-dialog.component";
-import { Observable, forkJoin } from "rxjs";
-import { HttpErrorResponseWrapper } from "src/app/utils/http-error-response-wrapper";
 
 @Component({
     selector: "app-tier-edit",
@@ -24,7 +24,6 @@ export class TierEditComponent {
     public selectionQuotas: SelectionModel<TierQuota>;
     public quotasTableDisplayedColumns: string[];
     public tierId?: string;
-    public disabled: boolean;
     public editMode: boolean;
     public tier: Tier;
     public loading: boolean;
@@ -47,12 +46,12 @@ export class TierEditComponent {
         this.quotasTableDisplayedColumns = ["select", "metricName", "max", "period"];
         this.editMode = false;
         this.loading = true;
-        this.disabled = false;
         this.tier = {
             id: "",
             name: "",
             quotas: [],
             isDeletable: false,
+            isReadOnly: false,
             numberOfIdentities: 0
         } as Tier;
     }
@@ -76,7 +75,6 @@ export class TierEditComponent {
         this.tierService.getTierById(this.tierId!).subscribe({
             next: (data: HttpResponseEnvelope<Tier>) => {
                 this.tier = data.result;
-                this.tier.isDeletable = this.tier.name !== "Basic";
             },
             complete: () => (this.loading = false),
             error: (err: any) => {
@@ -246,4 +244,16 @@ export class TierEditComponent {
         }
         return `${this.selectionQuotas.isSelected(row) ? "deselect" : "select"} row ${index + 1}`;
     }
+
+    public isNameInputDisabled(): boolean {
+        return this.editMode || this.tier.isReadOnly;
+    }
+
+    public isQuotaDeletionDisabled(): boolean {
+        return this.selectionQuotas.selected.length === 0 || this.tier.isReadOnly;
+    }
+
+    public isQuotaAssignmentDisabled(): boolean {
+        return this.tier.id === "" || this.tier.isReadOnly;
+    }
 }

AdminUi/src/AdminUi/ClientApp/src/app/services/tier-service/tier.service.ts

@@ -1,6 +1,6 @@
 import { HttpClient } from "@angular/common/http";
 import { Injectable } from "@angular/core";
-import { Observable } from "rxjs";
+import { Observable, map } from "rxjs";
 import { HttpResponseEnvelope } from "src/app/utils/http-response-envelope";
 import { PagedHttpResponseEnvelope } from "src/app/utils/paged-http-response-envelope";
 import { environment } from "src/environments/environment";
@@ -11,6 +11,9 @@ import { TierQuota } from "../quotas-service/quotas.service";
 })
 export class TierService {
     private readonly apiUrl: string;
+    private static readonly QUEUED_FOR_DELETION_TIER_ID = "TIR00000000000000001";
+    private static readonly BASIC_TIER_NAME = "Basic";
+
     public constructor(private readonly http: HttpClient) {
         this.apiUrl = `${environment.apiUrl}/Tiers`;
     }
@@ -20,7 +23,13 @@ export class TierService {
     }
 
     public getTierById(id: string): Observable<HttpResponseEnvelope<Tier>> {
-        return this.http.get<HttpResponseEnvelope<Tier>>(`${this.apiUrl}/${id}`);
+        return this.http.get<HttpResponseEnvelope<Tier>>(`${this.apiUrl}/${id}`).pipe(
+            map((responseEnvelope: HttpResponseEnvelope<Tier>) => {
+                responseEnvelope.result.isDeletable = responseEnvelope.result.name !== TierService.BASIC_TIER_NAME && responseEnvelope.result.id !== TierService.QUEUED_FOR_DELETION_TIER_ID;
+                responseEnvelope.result.isReadOnly = responseEnvelope.result.id === TierService.QUEUED_FOR_DELETION_TIER_ID;
+                return responseEnvelope;
+            })
+        );
     }
 
     public createTier(tier: Tier): Observable<HttpResponseEnvelope<Tier>> {
@@ -41,6 +50,7 @@ export interface Tier {
     name: string;
     quotas: TierQuota[];
     isDeletable: boolean;
+    isReadOnly: boolean;
     numberOfIdentities: number;
 }
 

AdminUi/src/AdminUi/Controllers/IdentitiesController.cs

@@ -1,8 +1,9 @@
-using Backbone.AdminUi.Infrastructure.Persistence.Database;
+using Backbone.BuildingBlocks.API;
 using Backbone.BuildingBlocks.API.Mvc;
 using Backbone.BuildingBlocks.API.Mvc.ControllerAttributes;
-using Backbone.Modules.Devices.Application;
 using Backbone.Modules.Devices.Application.Devices.DTOs;
+using Backbone.Modules.Devices.Application.Identities.Commands.CreateIdentity;
+using Backbone.Modules.Devices.Application.Identities.Commands.StartDeletionProcessAsSupport;
 using Backbone.Modules.Devices.Application.Identities.Commands.UpdateIdentity;
 using Backbone.Modules.Quotas.Application.DTOs;
 using Backbone.Modules.Quotas.Application.Identities.Commands.CreateQuotaForIdentity;
@@ -11,7 +12,6 @@
 using MediatR;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
-using Microsoft.Extensions.Options;
 using GetIdentityQueryDevices = Backbone.Modules.Devices.Application.Identities.Queries.GetIdentity.GetIdentityQuery;
 using GetIdentityQueryQuotas = Backbone.Modules.Quotas.Application.Identities.Queries.GetIdentity.GetIdentityQuery;
 using GetIdentityResponseDevices = Backbone.Modules.Devices.Application.Identities.Queries.GetIdentity.GetIdentityResponse;
@@ -23,14 +23,8 @@ namespace Backbone.AdminUi.Controllers;
 [Authorize("ApiKey")]
 public class IdentitiesController : ApiControllerBase
 {
-    private readonly AdminUiDbContext _adminUiDbContext;
-    private readonly ApplicationOptions _options;
-
-    public IdentitiesController(
-        IMediator mediator, IOptions<ApplicationOptions> options, AdminUiDbContext adminUiDbContext) : base(mediator)
+    public IdentitiesController(IMediator mediator) : base(mediator)
     {
-        _adminUiDbContext = adminUiDbContext;
-        _options = options.Value;
     }
 
     [HttpPost("{identityAddress}/Quotas")]
@@ -86,6 +80,40 @@ public async Task<IActionResult> UpdateIdentity([FromRoute] string identityAddre
         await _mediator.Send(command, cancellationToken);
         return NoContent();
     }
+
+    [HttpPost]
+    [ProducesResponseType(typeof(HttpResponseEnvelopeResult<CreateIdentityResponse>), StatusCodes.Status201Created)]
+    [ProducesError(StatusCodes.Status400BadRequest)]
+    public async Task<IActionResult> CreateIdentity(CreateIdentityRequest request, CancellationToken cancellationToken)
+    {
+        var command = new CreateIdentityCommand
+        {
+            ClientId = request.ClientId,
+            DevicePassword = request.DevicePassword,
+            IdentityPublicKey = request.IdentityPublicKey,
+            IdentityVersion = request.IdentityVersion,
+            SignedChallenge = new SignedChallengeDTO
+            {
+                Challenge = request.SignedChallenge.Challenge,
+                Signature = request.SignedChallenge.Signature
+            },
+            ShouldValidateChallenge = false
+        };
+
+        var response = await _mediator.Send(command, cancellationToken);
+
+        return Created(response);
+    }
+
+    [HttpPost("{address}/DeletionProcesses")]
+    [ProducesResponseType(StatusCodes.Status201Created)]
+    [ProducesError(StatusCodes.Status400BadRequest)]
+    [ProducesError(StatusCodes.Status404NotFound)]
+    public async Task<IActionResult> StartDeletionProcessAsSupport([FromRoute] string address, CancellationToken cancellationToken)
+    {
+        var response = await _mediator.Send(new StartDeletionProcessAsSupportCommand(address), cancellationToken);
+        return Created("", response);
+    }
 }
 
 public class CreateQuotaForIdentityRequest
@@ -94,6 +122,7 @@ public class CreateQuotaForIdentityRequest
     public int Max { get; set; }
     public QuotaPeriod Period { get; set; }
 }
+
 public class UpdateIdentityTierRequest
 {
     public string TierId { get; set; }
@@ -104,16 +133,26 @@ public class GetIdentityResponse
     public string Address { get; set; }
     public string ClientId { get; set; }
     public byte[] PublicKey { get; set; }
-
     public string TierId { get; set; }
-
     public DateTime CreatedAt { get; set; }
-
     public byte IdentityVersion { get; set; }
-
     public int NumberOfDevices { get; set; }
-
     public IEnumerable<DeviceDTO> Devices { get; set; }
-
     public IEnumerable<QuotaDTO> Quotas { get; set; }
 }
+
+public class CreateIdentityRequest
+{
+    public required string ClientId { get; set; }
+    public required string ClientSecret { get; set; }
+    public required byte[] IdentityPublicKey { get; set; }
+    public required string DevicePassword { get; set; }
+    public required byte IdentityVersion { get; set; }
+    public required CreateIdentityRequestSignedChallenge SignedChallenge { get; set; }
+}
+
+public class CreateIdentityRequestSignedChallenge
+{
+    public required string Challenge { get; set; }
+    public required byte[] Signature { get; set; }
+}

AdminUi/test/AdminUi.Tests.Integration/API/IdentitiesApi.cs

@@ -27,4 +27,14 @@ internal async Task<HttpResponse> DeleteIndividualQuota(string identityAddress,
     {
         return await GetOData<List<IdentityOverviewDTO>>("/Identities?$expand=Tier", requestConfiguration);
     }
+
+    internal async Task<HttpResponse<StartDeletionProcessAsSupportResponse>> StartDeletionProcess(string identityAddress, RequestConfiguration requestConfiguration)
+    {
+        return await Post<StartDeletionProcessAsSupportResponse>($"/Identities/{identityAddress}/DeletionProcesses", requestConfiguration);
+    }
+
+    internal async Task<HttpResponse<CreateIdentityResponse>> CreateIdentity(RequestConfiguration requestConfiguration)
+    {
+        return await Post<CreateIdentityResponse>("/Identities", requestConfiguration);
+    }
 }

AdminUi/test/AdminUi.Tests.Integration/Features/IdentityDeletionProcess/POST.feature

@@ -0,0 +1,17 @@
+@Integration
+Feature: POST Identities/{id}/DeletionProcess
+
+Support starts a deletion process
+
+Scenario: Starting a deletion process as support
+	Given an Identity i
+	When a POST request is sent to the /Identities/{i.id}/DeletionProcesses endpoint
+	Then the response status code is 201 (Created)
+	And the response contains a Deletion Process
+
+Scenario: There can only be one active deletion process
+	Given an Identity i
+	And an active deletion process for Identity i exists
+	When a POST request is sent to the /Identities/{i.id}/DeletionProcesses endpoint
+	Then the response status code is 400 (Bad Request)
+	And the response content includes an error with the error code "error.platform.validation.device.onlyOneActiveDeletionProcessAllowed"

AdminUi/test/AdminUi.Tests.Integration/Models/CreateIdentityRequest.cs

@@ -0,0 +1,17 @@
+namespace Backbone.AdminUi.Tests.Integration.Models;
+
+public class CreateIdentityRequest
+{
+    public string ClientId { get; set; }
+    public string ClientSecret { get; set; }
+    public string IdentityPublicKey { get; set; }
+    public string DevicePassword { get; set; }
+    public byte IdentityVersion { get; set; }
+    public CreateIdentityRequestSignedChallenge SignedChallenge { get; set; }
+}
+
+public class CreateIdentityRequestSignedChallenge
+{
+    public string Challenge { get; set; }
+    public string Signature { get; set; }
+}

AdminUi/test/AdminUi.Tests.Integration/Models/CreateIdentityResponse.cs

@@ -0,0 +1,16 @@
+namespace Backbone.AdminUi.Tests.Integration.Models;
+
+public class CreateIdentityResponse
+{
+    public string Address { get; set; }
+    public DateTime CreatedAt { get; set; }
+
+    public CreateIdentityResponseDevice Device { get; set; }
+}
+
+public class CreateIdentityResponseDevice
+{
+    public string Id { get; set; }
+    public string Username { get; set; }
+    public DateTime CreatedAt { get; set; }
+}

AdminUi/test/AdminUi.Tests.Integration/Models/StartDeletionProcessAsSupportResponse.cs

@@ -0,0 +1,8 @@
+namespace Backbone.AdminUi.Tests.Integration.Models;
+
+public class StartDeletionProcessAsSupportResponse
+{
+    public string Id { get; set; }
+    public string Status { get; set; }
+    public DateTime CreatedAt { get; set; }
+}