Start work on this

Author: hhvrc

API/Controller/Account/VerifyEmail.cs

@@ -0,0 +1,25 @@
+using System.Net.Mime;
+using Microsoft.AspNetCore.Mvc;
+using Asp.Versioning;
+using OpenShock.API.Models.Requests;
+using OpenShock.Common.Problems;
+
+namespace OpenShock.API.Controller.Account;
+
+public sealed partial class AccountController
+{
+    /// <summary>
+    /// Verify account email
+    /// </summary>
+    /// <response code="200"></response>
+    [HttpPost("verify/email")]
+    [ProducesResponseType(StatusCodes.Status200OK)]
+    [ProducesResponseType<OpenShockProblem>(StatusCodes.Status403Forbidden, MediaTypeNames.Application.Json)]
+    [MapToApiVersion("2")]
+    public async Task<IActionResult> EmailVerify([FromBody] AccountVerifyEmailRequest body, CancellationToken cancellationToken)
+    {
+        bool ok = await _accountService.TryVerifyEmailAsync(body.Secret, cancellationToken);
+        
+        return Ok();
+    }
+}

API/Models/Requests/AccountVerifyEmailRequest.cs

@@ -0,0 +1,6 @@
+namespace OpenShock.API.Models.Requests;
+
+public sealed class AccountVerifyEmailRequest
+{
+    public required string Secret { get; set; }
+}

API/Services/Account/AccountService.cs

@@ -118,7 +118,7 @@ public async Task<OneOf<Success<User>, AccountWithEmailOrUsernameExists>> Create
         await _db.SaveChangesAsync();
 
         await _emailService.VerifyEmail(new Contact(email, username),
-            new Uri(_frontendConfig.BaseUrl, $"/#/account/activate/{user.Id}/{secret}"));
+            new Uri(_frontendConfig.BaseUrl, $"/account/activate/{user.Id}/{secret}"));
         return new Success<User>(user);
     }
 
@@ -404,6 +404,23 @@ public async Task<OneOf<Success, AccountDeactivated, NotFound>> ChangePasswordAs
         return new Success();
     }
 
+    public async Task<bool> TryVerifyEmailAsync(string secret, CancellationToken cancellationToken = default)
+    {
+        var hash = HashingUtils.HashToken(secret);
+        
+        var user = await _db.Users
+            .Include(u => u.UserActivationRequest)
+            .FirstOrDefaultAsync(x => x.UserActivationRequest != null && x.UserActivationRequest.SecretHash == hash, cancellationToken);
+        if (user?.UserActivationRequest is null) return false;
+        
+        user.ActivatedAt = DateTime.UtcNow;
+        
+        _db.UserActivationRequests.Remove(user.UserActivationRequest);
+        
+        await _db.SaveChangesAsync(cancellationToken);
+
+        return true;
+    }
 
     private async Task<bool> CheckPassword(string password, User user)
     {

API/Services/Account/IAccountService.cs

@@ -94,6 +94,14 @@ public interface IAccountService
     /// <param name="newPassword"></param>
     /// <returns></returns>
     public Task<OneOf<Success, AccountDeactivated, NotFound>> ChangePasswordAsync(Guid userId, string newPassword);
+
+    /// <summary>
+    /// 
+    /// </summary>
+    /// <param name="secret"></param>
+    /// <param name="cancellationToken"></param>
+    /// <returns></returns>
+    Task<bool> TryVerifyEmailAsync(string secret, CancellationToken cancellationToken = default);
 }
 
 public readonly record struct AccountDeactivated;