[conluz-106] Implemented endpoint to get current authenticated user (#113)

Author: viktorKhan

src/main/java/org/lucoenergia/conluz/infrastructure/admin/user/get/GetCurrentUserController.java

@@ -0,0 +1,58 @@
+package org.lucoenergia.conluz.infrastructure.admin.user.get;
+
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.security.SecurityRequirement;
+import org.lucoenergia.conluz.domain.admin.user.User;
+import org.lucoenergia.conluz.domain.admin.user.auth.AuthService;
+import org.lucoenergia.conluz.infrastructure.admin.user.UserResponse;
+import org.lucoenergia.conluz.infrastructure.shared.web.apidocs.ApiTag;
+import org.lucoenergia.conluz.infrastructure.shared.web.apidocs.response.InternalServerErrorResponse;
+import org.lucoenergia.conluz.infrastructure.shared.web.apidocs.response.UnauthorizedErrorResponse;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Optional;
+
+/**
+ * Returns the currently authenticated user basic information
+ */
+@RestController
+@RequestMapping("/api/v1/users/current")
+public class GetCurrentUserController {
+
+    private final AuthService authService;
+
+    public GetCurrentUserController(AuthService authService) {
+        this.authService = authService;
+    }
+
+    @GetMapping
+    @Operation(
+            summary = "Get current authenticated user",
+            description = "Returns basic information about the currently authenticated user.",
+            tags = ApiTag.USERS,
+            operationId = "getCurrentUser",
+            security = @SecurityRequirement(name = "bearerToken")
+    )
+    @ApiResponses(value = {
+            @ApiResponse(
+                    responseCode = "200",
+                    description = "Query executed successfully",
+                    useReturnTypeSchema = true
+            )
+    })
+    @UnauthorizedErrorResponse
+    @InternalServerErrorResponse
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<UserResponse> getCurrentUser() {
+        Optional<User> currentUser = authService.getCurrentUser();
+        // Although the endpoint is protected, in case the authentication is missing/invalid, respond 401
+        return currentUser.map(user -> ResponseEntity.ok(new UserResponse(user)))
+                .orElseGet(() -> ResponseEntity.status(401).build());
+    }
+}

src/test/java/org/lucoenergia/conluz/infrastructure/admin/user/get/GetCurrentUserControllerTest.java

@@ -0,0 +1,46 @@
+package org.lucoenergia.conluz.infrastructure.admin.user.get;
+
+import org.junit.jupiter.api.Test;
+import org.lucoenergia.conluz.domain.admin.user.DefaultUserAdminMother;
+import org.lucoenergia.conluz.infrastructure.shared.BaseControllerTest;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpStatus;
+import org.springframework.transaction.annotation.Transactional;
+
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.result.MockMvcResultHandlers.print;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+@Transactional
+class GetCurrentUserControllerTest extends BaseControllerTest {
+
+    private static final String URL = "/api/v1/users/current";
+
+    @Test
+    void testGetCurrentUserSuccess() throws Exception {
+        String authHeader = loginAsDefaultAdmin();
+
+        mockMvc.perform(get(URL)
+                        .header(HttpHeaders.AUTHORIZATION, authHeader))
+                .andDo(print())
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.personalId").value(DefaultUserAdminMother.PERSONAL_ID))
+                .andExpect(jsonPath("$.fullName").value(DefaultUserAdminMother.FULL_NAME))
+                .andExpect(jsonPath("$.email").value(DefaultUserAdminMother.EMAIL))
+                .andExpect(jsonPath("$.role").value("ADMIN"))
+                .andExpect(jsonPath("$.enabled").value(true))
+                .andExpect(jsonPath("$.password").doesNotExist());
+    }
+
+    @Test
+    void testGetCurrentUserUnauthorizedWhenMissingToken() throws Exception {
+        mockMvc.perform(get(URL))
+                .andDo(print())
+                .andExpect(status().isUnauthorized())
+                .andExpect(jsonPath("$.timestamp").isNotEmpty())
+                .andExpect(jsonPath("$.status").value(HttpStatus.UNAUTHORIZED.value()))
+                .andExpect(jsonPath("$.message").isNotEmpty())
+                .andExpect(jsonPath("$.traceId").isNotEmpty());
+    }
+}