Upload images

FIT5032-Assignment/Controllers/AppointmentsController.cs

@@ -16,9 +16,24 @@ using Org.BouncyCastle.Security;
 using System.IO;
 using System.Security.Cryptography;
 using System.Globalization;
+using RestSharp.Authenticators;
+using RestSharp;
+using System.Runtime.CompilerServices;
+using System.Threading.Tasks;
+using Newtonsoft.Json;
 
 namespace FIT5032_Assignment.Controllers {
   public class AppointmentsController : Controller {
+    public class PassageUserAPI {
+      public PassageUserEntity User { get; set; }
+    }
+
+    public class PassageUserEntity {
+      public string CreatedAt { get; set; }
+      public string Email { get; set; }
+      public bool EmailVerified { get; set; }
+    }
+
     private Database1Entities db = new Database1Entities();
 
     // Login check
@@ -331,40 +346,178 @@ namespace FIT5032_Assignment.Controllers {
       }
     }
 
-    // GET: Appointments/Edit/5
+    // GET: Appointments/UploadImage/uuid
-    public ActionResult Edit(int id) {
+    public ActionResult UploadImage(string id) {
-      return View();
+      // Check login
-    }
+      if (Request.Cookies["psg_auth_token"] == null) {
-
+        // Redirect to home page
-    // POST: Appointments/Edit/5
-    [HttpPost]
-    public ActionResult Edit(int id, FormCollection collection) {
-      try {
-        // TODO: Add update logic here
-
         return RedirectToAction("Index");
       }
-      catch {
+      var user = psgCredentialVerify(Request.Cookies["psg_auth_token"].Value);
-        return View();
+      if (user == null) {
-      }
+        // Redirect to home page
-    }
+        Response.Cookies["psg_auth_token"].Expires = DateTime.Now.AddDays(-1);
-
-    // GET: Appointments/Delete/5
-    public ActionResult Delete(int id) {
-      return View();
-    }
-
-    // POST: Appointments/Delete/5
-    [HttpPost]
-    public ActionResult Delete(int id, FormCollection collection) {
-      try {
-        // TODO: Add delete logic here
-
         return RedirectToAction("Index");
       }
-      catch {
+      var userProfile = loginInfo(user);
+      if (userProfile == null) {
+        // Redirect to home page, and remove cookies
+        Response.Cookies["psg_auth_token"].Expires = DateTime.Now.AddDays(-1);
+        return RedirectToAction("Index");
+      }
+      // Detect user role
+      ViewBag.role = db.Users.Find(userProfile.uuid).role;
+      if (userProfile.role != 2) {
+        TempData["tip"] = "This operation is not allowed.";
+        return Redirect("/Appointments/Index");
+      }
+
+      // Check if the appointment is belong to the doctor
+      var appointment = db.Appointments.Find(id);
+      if (appointment == null) {
+        TempData["tip"] = "The appointment does not exist.";
+        return Redirect("/Appointments/Index");
+      }
+      if (appointment.responsibleBy != userProfile.uuid) {
+        TempData["tip"] = "The appointment does not exist.";
+        return Redirect("/Appointments/Index");
+      }
+
+      // Check status == 1
+      if (appointment.status != 1) {
+        TempData["tip"] = "Operation invalid";
+        return Redirect("/Appointments/Index");
+      }
+
+      ViewBag.appointment = appointment;
+      ViewBag.patient = db.Users.Find(appointment.patient);
       return View();
     }
+
+    [HttpPost]
+    public async Task<ActionResult> UploadImage(HttpPostedFileBase image, string appointmentUuid) {
+      try {
+        // Check login
+        if (Request.Cookies["psg_auth_token"] == null) {
+          // Redirect to home page
+          return RedirectToAction("Index");
+        }
+        var user = psgCredentialVerify(Request.Cookies["psg_auth_token"].Value);
+        if (user == null) {
+          // Redirect to home page
+          Response.Cookies["psg_auth_token"].Expires = DateTime.Now.AddDays(-1);
+          return RedirectToAction("Index");
+        }
+        var userProfile = loginInfo(user);
+        if (userProfile == null) {
+          // Redirect to home page, and remove cookies
+          Response.Cookies["psg_auth_token"].Expires = DateTime.Now.AddDays(-1);
+          return RedirectToAction("Index");
+        }
+        // Detect user role
+        ViewBag.role = db.Users.Find(userProfile.uuid).role;
+        if (userProfile.role != 2) {
+          TempData["tip"] = "This operation is not allowed.";
+          return Redirect("/Appointments/Index");
+        }
+
+        // Check the appointment exist & status == 1 & responsibleBy == doctor
+        var appointment = db.Appointments.Find(appointmentUuid);
+        if (appointment == null) {
+          TempData["tip"] = "The appointment does not exist.";
+          return Redirect("/Appointments/Index");
+        }
+        if (appointment.responsibleBy != userProfile.uuid) {
+          TempData["tip"] = "The appointment does not exist.";
+          return Redirect("/Appointments/Index");
+        }
+        if (appointment.status != 1) {
+          TempData["tip"] = "Operation invalid";
+          return Redirect("/Appointments/Index");
+        }
+
+        // check uploaded file
+        if (image == null) {
+          ViewBag.tip = "Please upload a file";
+          ViewBag.appointment = appointment;
+          ViewBag.patient = db.Users.Find(appointment.patient);
+          return View();
+        }
+
+        // check format: png, jpg, jpeg
+        string[] formats = new string[] { ".png", ".jpg", ".jpeg" };
+        string extension = Path.GetExtension(image.FileName);
+        if (!formats.Contains(extension)) {
+          ViewBag.tip = "Please upload a png, jpg or jpeg file";
+          ViewBag.appointment = appointment;
+          ViewBag.patient = db.Users.Find(appointment.patient);
+          return View();
+        }
+
+        // save file
+        var fileId = Guid.NewGuid().ToString();
+        var fileName = fileId + extension;
+        var filePath = Path.Combine(Server.MapPath("~/App_Data/upload_images"), fileName);
+        image.SaveAs(filePath);
+
+        // Create image entity to database
+        var appointmentId = appointment.uuid;
+        var imageId = Guid.NewGuid().ToString();
+        var patientUuid = appointment.patient;
+        var dbImage = new Images {
+          uuid = imageId,
+          appointment = appointmentId,
+          patient = patientUuid,
+          responsibleBy = userProfile.uuid,
+          createdAt = DateTime.Now,
+          file = fileName,
+          status = 0,
+        };
+        // Change appointment status to 2
+        appointment.status = 2;
+        db.Entry(appointment).State = EntityState.Modified;
+        db.SaveChanges();
+
+        // Find patient email from Passage service
+        var credential = db.Credentials.Where(res => (res.user == patientUuid) && (res.provider == 0));
+        Trace.WriteLine(credential.First().uniqueIdCode);
+        var user_id = credential.First().uniqueIdCode;
+        var app_id = "ZHM5whW5xsZEczTn2loffzjN";
+        RestClient passageClient = new RestClient(new RestClientOptions($"https://api.passage.id/v1/apps/{app_id}"));
+        passageClient.AddDefaultHeader("Authorization", "Bearer vF4ch1wUf8.1cqOms9JMmUbqMGohlkJLzGDVlbF51D03fJnLfxwkn8kyAaVVjfvySufW9vXb3p3");
+        var psgRequest = new RestRequest($"users/{user_id}", Method.Get);
+        
+        // Send request
+        var passageResponse = await passageClient.ExecuteAsync(psgRequest);
+        Trace.WriteLine(passageResponse.Content);
+
+        // Transfer response
+        var passageResponseJson = JsonConvert.DeserializeObject<PassageUserAPI>(passageResponse.Content);
+        var patientEmail = passageResponseJson.User.Email;
+        
+        // Send attached email with mailgun
+        var doctorName = userProfile.displayName;
+        var patient = db.Users.Find(patientUuid);
+        RestClient client = new RestClient(new RestClientOptions("https://api.mailgun.net/v3/test.astrian.moe") {
+          Authenticator = new HttpBasicAuthenticator("api", "365900a7818241eafcbbf82e59cf99e8-5465e583-b4966e64"),
+        });
+        var request = new RestRequest("messages", Method.Post);
+        request.AddParameter("from", "Xpectrum <xpectrum@test.astrian.moe>");
+        request.AddParameter("to", patientEmail);
+        request.AddParameter("subject", "Xpectrum: New image available");
+        request.AddParameter("text", $"Hi {patient.displayName},\n\nDr. {doctorName} has uploaded a new image for you.\n\nPlease check the attachment.\n\nBest regards,\nXpectrum");
+        request.AddFile("attachment", filePath);
+
+        // Send request
+        var response = await client.ExecuteAsync(request);
+        Trace.WriteLine(response.Content);
+
+        TempData["tip"] = "The image has been attached to the appointment.";
+        return Redirect("/Appointments/Index");
+      } catch {
+        TempData["tip"] = "System error";
+        return Redirect("/Appointments/Index");
+      }
     }
   }
 }

FIT5032-Assignment/FIT5032-Assignment.csproj

@@ -322,9 +322,10 @@
     <Content Include="Views\Home\ImageUpload.cshtml" />
     <Content Include="Views\Appointments\Index.cshtml" />
     <Content Include="Views\Appointments\Create.cshtml" />
-    <Content Include="Views\Appointments\CreateByDoctor.cshtml" />
+    <Content Include="Views\Appointments\UploadImage.cshtml" />
   </ItemGroup>
   <ItemGroup>
+    <Folder Include="App_Data\upload_images\" />
     <Folder Include="Views\Default\" />
     <Folder Include="Views\Test\" />
   </ItemGroup>

FIT5032-Assignment/Views/Appointments/Index.cshtml

@@ -88,7 +88,7 @@
             <a href='./Approve/@item.Item1.uuid' class="btn btn-sm btn-primary">Approve</a>
             <a href='./Cancel/@item.Item1.uuid' class="btn btn-sm btn-danger">Cancel</a>
           } else if (item.Item1.status == 1) {
-            <a href="." class="btn btn-sm btn-primary">Upload Image</a>
+            <a href="./UploadImage/@item.Item1.uuid" class="btn btn-sm btn-primary">Upload Image</a>
           }
         </td>
       </tr>

FIT5032-Assignment/Views/Appointments/UploadImage.cshtml

@@ -0,0 +1,28 @@
+@model FIT5032_Assignment.Models.ImageUploadForm
+@{
+  Layout = "~/Views/Shared/_Layout.cshtml";
+}
+
+@if (ViewBag.tip != null) {
+  <div class="alert alert-success" role="alert">
+    @ViewBag.tip
+  </div>
+}
+
+<h2>Upload image</h2>
+
+<form method="post" enctype="multipart/form-data">
+  <input type="hidden" name="appointmentUuid" value="@ViewBag.appointment.uuid" />
+  <div style="margin-bottom: 20px;">You are about to upload the image for the appointment booked by <b>@ViewBag.patient.displayName</b> in <b>@ViewBag.appointment.appointmentDate</b></div>
+  <div class="form-group">
+    <label for="image">Select the image</label>
+    <div class='input-group'>
+      <input type="file" class="form-control-file" id="image" name="image" accept="image/png, image/jpeg, image/jpg" required />
+    </div>
+  </div>
+  <button type="submit" class="btn btn-primary" style="margin-top: 20px;">Submit</button>
+</form>
+
+@section Scripts {
+  @Scripts.Render("~/bundles/jqueryval")
+}

FIT5032-Assignment/Views/Home/ImageUpload.cshtml

@@ -4,38 +4,11 @@
 }
 
 
-@using (Html.BeginForm("ImageUpload", "HomeController", FormMethod.Post, new { enctype = "multipart/form-data" })) 
+<h2>Upload image</h2>
-{
-    @Html.AntiForgeryToken()
 
-    <div class="form-horizontal">
+<form method="post">
-        <h4>Upload Image</h4>
+  @ViewBag.appointment
-        <hr />
+</form>
-        @Html.ValidationSummary(true, "", new { @class = "text-danger" })
-        <div class="form-group">
-            @Html.LabelFor(model => model.patientEmail, htmlAttributes: new { @class = "control-label col-md-2" })
-            <div class="col-md-10">
-                @Html.EditorFor(model => model.patientEmail, new { htmlAttributes = new { @class = "form-control" } })
-                @Html.ValidationMessageFor(model => model.patientEmail, "", new { @class = "text-danger" })
-            </div>
-        </div>
-
-        <div class="form-group">
-            @Html.LabelFor(model => model.imageFile, htmlAttributes: new { @class = "control-label col-md-2" })
-            <div class="col-md-10">
-                <input type="file" name="imageFile" id="imageFile" accept="image/png, image/jpeg" />
-                @Html.ValidationMessageFor(model => model.imageFile, "", new { @class = "text-danger" })
-            </div>
-        </div>
-
-
-        <div class="form-group">
-            <div class="col-md-offset-2 col-md-10">
-                <input type="submit" value="Create" class="btn btn-default" />
-            </div>
-        </div>
-    </div>
-}
 
 @section Scripts {
     @Scripts.Render("~/bundles/jqueryval")