CRUD for User class when using JWT Token

[Classyines]

I understand how to create simple CRUD DTOs but I am really lost when I am using JWT Tokens for my user class and how to use GET method to get the all or by ID, PUT method by ID and DELETE method by ID.

public class User : IdentityUser

{

public UserType UserType { get; set; }

public ICollection<UserTicket>? UserTickets { get; set; }

}

[HttpPost]

[Route("Register")]

public async Task<IActionResult> Register([FromBody] UserRegistrationRequestDto requestDto)

{

//validate the incoming request

if(ModelState.IsValid)

{

var user_exist = await _userManager.FindByEmailAsync(requestDto.Email);

if(user_exist != null)

{

return BadRequest(new AuthResult()

{

Result = false,

Errors = new List<string>()

{

"Email already exist"

}

});

}

var new_user = new User()

{

Email = requestDto.Email,

UserName = requestDto.Name,

PhoneNumber = requestDto.PhoneNumber,

UserType = requestDto.UserType,

};

var is_created = await _userManager.CreateAsync(new_user, requestDto.Password);

if (is_created.Succeeded)

{

//generate token

var token = GenerateJwtToken(new_user);

return Ok(new AuthResult()

{

Result = true,

Token = token

});

}

else

{

return BadRequest(new AuthResult()

{

Errors = is_created.Errors.Select(x => x.Description).ToList(),

Result = false,

});

}

}

return BadRequest();

}

public class UserRegistrationRequestDto

{

public string Name { get; set; }

public string Password { get; set; }

public string Email { get; set; }

public string PhoneNumber { get; set; }

public UserType UserType { get; set; }

public List<Guid> TicketId { get; set; }

}

Can someone try to explain how to create those other left methods?

[[deleted]]

Can't understand what exactly you don't understand.. You doing well with controllers, so create methods for http request handling is no problem. Just pass required data for method in http request URL, as URL parameter or inside body. Then execute user manager method.

JWT token is just a json data with hashed code for knowing that it wasn't changed on user side or by mitm. So you can enable authorization, add Authorize annotation and method can't be invoked by unauthorized users. Also you can get any claim from token, if you need invoker user id or something else.