Method AcceptAppRequest

src/Features/Apps/AppsController.cs:372–452

(string appId, [FromQuery] AppRequestPurpose purpose)

    }

    [HttpPost("/api/_apps/{appId}/requests/accept")]
    public async Task<IActionResult> AcceptAppRequest(string appId, [FromQuery] AppRequestPurpose purpose)
    {
        var user = this.GetCurrentUserIdentity();

        // get the pending request
        var request = await _db.Connection.QueryFirstOrDefaultAsync<dynamic>(
            @"SELECT r.current_owner_id, u.email as requester_email, a.name as app_name, r.purpose
              FROM app_requests r
              INNER JOIN apps a ON a.id = r.app_id
              INNER JOIN users u ON u.id = r.current_owner_id
              WHERE r.app_id = @appId 
              AND r.target_user_email = @userEmail 
              AND r.purpose = @purpose
              AND r.status = 'pending'
              AND a.deleted_at IS NULL",
            new { appId, userEmail = user.Email.ToLower(), purpose = purpose.ToString() });

        if (request == null)
            return NotFound("No pending app request found");

        using (var cn = _db.Connection) {
            cn.Open();

            using (var transaction = cn.BeginTransaction())
            {
                try
                {
                    if (purpose == AppRequestPurpose.AppOwnership)
                    {
                        // transfer ownership
                        await cn.ExecuteAsync(@"
                            UPDATE apps SET owner_id = @newOwnerId WHERE id = @appId",
                            new { appId, newOwnerId = user.Id }, transaction);

                        // add previous owner to shares
                        await cn.ExecuteAsync(@"
                            INSERT INTO app_shares (app_id, email, created_at)
                            VALUES (@appId, @email, @createdAt)
                            ON CONFLICT DO NOTHING",
                            new 
                            { 
                                appId, 
                                email = request.requester_email,
                                createdAt = DateTime.UtcNow
                            }, transaction);
                    }
                    else if (purpose == AppRequestPurpose.AppShare)
                    {
                        // add user to shares
                        await cn.ExecuteAsync(@"
                            INSERT INTO app_shares (app_id, email, created_at)
                            VALUES (@appId, @email, @createdAt)
                            ON CONFLICT DO NOTHING",
                            new 
                            { 
                                appId, 
                                email = user.Email.ToLower(),