OrderController.cs

using BusinessLayer.DTOs.OrderDTOs;
using BusinessLayer.Services.Interfaces;
using Microsoft.AspNetCore.Mvc;

namespace WebAPI.Controllers;

[Route("api/[controller]")]
[ApiController]
public class OrderController : ControllerBase
{
    private readonly IOrderService _orderService;

    public OrderController(IOrderService orderService)
    {
        _orderService = orderService;
    }

    [HttpGet]
    public async Task<ActionResult<IEnumerable<ResponseOrderDto>>> GetOrders(
        [FromQuery] GetManyOrderDto getManyOrdersDto
    )
    {
        var orders = await _orderService.GetAllAsync(getManyOrdersDto);

        return Ok(orders);
    }

    [HttpGet("{id}")]
    public async Task<ActionResult<ResponseOrderDto>> GetOrder(int id)
    {
        var responseOrderData = await _orderService.GetOrderByIdAsync(id);

        if (responseOrderData == null)
        {
            return NotFound();
        }

        return responseOrderData;
    }

    // TODO: Protect for admin access only
    [HttpPut]
    public async Task<IActionResult> PutOrder([FromBody] UpdateOrderDto updateOrderDto)
    {
        var oldUpdatedOrder = await _orderService.UpdateOrderAsync(updateOrderDto);
        if (oldUpdatedOrder == null)
        {
            return NotFound();
        }

        return Ok(oldUpdatedOrder);
    }

    [HttpPost]
    public async Task<ActionResult<ResponseOrderDto>> PostOrder([FromBody] AddOrderDto addOrderDto)
    {
        var newOrder = await _orderService.AddOrderAsync(addOrderDto);

        if (newOrder == null)
        {
            return NotFound();
        }

        return Ok(newOrder);
    }

    [HttpDelete("{id}")]
    public async Task<IActionResult> DeleteOrder(int id)
    {
        var deletedOrder = await _orderService.DeleteOrderByIdAsync(id);
        if (deletedOrder == null)
        {
            return NotFound();
        }

        return Ok(deletedOrder);
    }
}