add plain user data in teams/members request

Reviewed-on: #2

API/API.csproj.user

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <PropertyGroup>
+    <ActiveDebugProfile>https</ActiveDebugProfile>
+  </PropertyGroup>
+</Project>

API/Auth/Authentication.cs

@@ -1,5 +1,7 @@
 using System.IdentityModel.Tokens.Jwt;
 using System.Security.Claims;
+using System.Security.Cryptography;
+using Microsoft.AspNetCore.Cryptography.KeyDerivation;
 using Microsoft.IdentityModel.Tokens;
 
 namespace API.Auth;
@@ -25,5 +27,4 @@ public static class Authentication
         return ("Bearer " + jwt, expirationDate);
     }
     
-
 }

API/Controllers/Admin/TeamsAdminController.cs

@@ -5,8 +5,13 @@ using Services;
 
 namespace API.Controllers.Admin;
 
+
+/// <summary>
+/// WARNING: This controller does not requires the requester to be authenticated, see https://codefirst.iut.uca.fr/git/IQBall/Server-Panel/issues/2
+/// </summary>
+/// <param name="service"></param>
 [ApiController]
-public class TeamsAdminController(ITeamService service) : ControllerBase
+public class TeamsAdminController(ITeamService service, ILogger<TeamsAdminController> logger) : ControllerBase
 {
     public record CountTeamsResponse(int Value);
 
@@ -14,26 +19,20 @@ public class TeamsAdminController(ITeamService service) : ControllerBase
     [HttpGet("/admin/teams/count")]
     public async Task<CountTeamsResponse> CountTeams()
     {
+        logger.LogTrace("Counting teams");
         return new CountTeamsResponse(await service.CountTotalTeams());
     }
-
-    // [HttpGet("/admin/users/count")]
-    // public async Task<CountUsersResponse> CountUsers()
-    // {
-    //     return new CountUsersResponse(await service.UsersCount());
-    // }
-
+    
     [HttpGet("/admin/teams")]
-    public async Task<IEnumerable<Team>> ListTeams(
+    public Task<IEnumerable<Team>> ListTeams(
         [Range(0, int.MaxValue, ErrorMessage = "Only positive number allowed")]
         int start,
         [Range(0, int.MaxValue, ErrorMessage = "Only positive number allowed")]
         int n
     )
     {
-        var result = await service.ListTeams();
-
-        return result.Skip(start).Take(n);
+        logger.LogTrace("Listing teams");
+        return service.ListTeams(start, n);
     }
 
     public record AddTeamRequest(string Name, string Picture, string FirstColor, string SecondColor);
@@ -41,17 +40,19 @@ public class TeamsAdminController(ITeamService service) : ControllerBase
     [HttpPost("/admin/teams")]
     public async Task<IActionResult> AddTeam([FromBody] AddTeamRequest req)
     {
+        logger.LogTrace("Adding teams");
         var team = await service.AddTeam(req.Name, req.Picture, req.FirstColor, req.SecondColor);
 
         return Ok(team);
     }
 
-    public record UpdateTeamRequest(int Id, string Name, string Picture, string MainColor, string SecondaryColor);
+    public record UpdateTeamRequest(string Name, string Picture, string MainColor, string SecondaryColor);
 
     [HttpPut("/admin/teams/{teamId:int}")]
-    public async Task<IActionResult> UpdateTeam([FromBody] UpdateTeamRequest req)
+    public async Task<IActionResult> UpdateTeam(int teamId, [FromBody] UpdateTeamRequest req)
     {
-        await service.UpdateTeam(new Team(req.Id, req.Name, req.Picture, req.MainColor, req.SecondaryColor));
+        logger.LogTrace("Updating teams");
+        await service.UpdateTeam(new Team(teamId, req.Name, req.Picture, req.MainColor, req.SecondaryColor));
 
         return Ok();
     }
@@ -61,6 +62,8 @@ public class TeamsAdminController(ITeamService service) : ControllerBase
     [HttpPost("/admin/teams/remove-all")]
     public async Task<IActionResult> DeleteTeams([FromBody] DeleteTeamsRequest req)
     {
+        logger.LogTrace("Deleting teams");
+
         await service.RemoveTeams(req.Teams);
         return Ok();
     }

API/Controllers/Admin/UsersAdminController.cs

@@ -5,10 +5,13 @@ using Services;
 
 namespace API.Controllers.Admin;
 
+/// <summary>
+/// WARNING: This controller does not requires the requester to be authenticated, see https://codefirst.iut.uca.fr/git/IQBall/Server-Panel/issues/2
+/// </summary>
+/// <param name="service"></param>
 [ApiController]
-public class UsersAdminController(IUserService service) : ControllerBase
+public class UsersAdminController(IUserService service, ILogger<UsersAdminController> logger) : ControllerBase
 {
-
     public record CountUsersResponse(int Value);
 
 
@@ -18,20 +21,17 @@ public class UsersAdminController(IUserService service) : ControllerBase
         string search
     )
     {
+        logger.LogTrace("Counting Users");
         return new CountUsersResponse(await service.UsersCount(search));
     }
 
     [HttpGet("/admin/users/count")]
     public async Task<CountUsersResponse> CountUsers()
     {
+        logger.LogTrace("Counting Users");
         return new CountUsersResponse(await service.UsersCount());
     }
-
-    // [HttpGet("/admin/users/count")]
-    // public async Task<CountUsersResponse> CountUsers()
-    // {
-    //     return new CountUsersResponse(await service.UsersCount());
-    // }
+    
 
     [HttpGet("/admin/users")]
     public async Task<IEnumerable<User>> ListUsers(
@@ -43,11 +43,10 @@ public class UsersAdminController(IUserService service) : ControllerBase
         string? search
     )
     {
-        var result = search != null
-            ? await service.ListUsers(search)
-            : await service.ListUsers();
+        logger.LogTrace("Listing Users");
 
-        return result.Skip(start).Take(n);
+        var result = await service.ListUsers(start, n, search);
+        return result;
     }
 
     [HttpGet("/admin/users/{id:int}")]
@@ -56,6 +55,8 @@ public class UsersAdminController(IUserService service) : ControllerBase
         int id
     )
     {
+        logger.LogTrace("Getting a specific User ({})", id);
+
         var result = await service.GetUser(id);
         if (result == null)
             return NotFound();
@@ -77,7 +78,10 @@ public class UsersAdminController(IUserService service) : ControllerBase
     [HttpPost("/admin/users")]
     public Task<User> AddUser([FromBody] AddUserRequest req)
     {
-        return service.CreateUser(req.Username, req.Email, req.Password, UsersController.DefaultProfilePicture, req.IsAdmin);
+        logger.LogTrace("Adding a User");
+
+        return service.CreateUser(req.Username, req.Email, req.Password, UsersController.DefaultProfilePicture,
+            req.IsAdmin);
     }
 
     public record RemoveUsersRequest(int[] Identifiers);
@@ -85,6 +89,8 @@ public class UsersAdminController(IUserService service) : ControllerBase
     [HttpPost("/admin/users/remove-all")]
     public async Task<IActionResult> RemoveUsers([FromBody] RemoveUsersRequest req)
     {
+        logger.LogTrace("Removing Users");
+
         await service.RemoveUsers(req.Identifiers);
         return Ok();
     }
@@ -106,12 +112,15 @@ public class UsersAdminController(IUserService service) : ControllerBase
     {
         try
         {
-            await service.UpdateUser(new User(id, req.Username, req.Email, UsersController.DefaultProfilePicture, req.IsAdmin));
+            logger.LogTrace("Updating Users");
+
+            await service.UpdateUser(new User(id, req.Username, req.Email, UsersController.DefaultProfilePicture,
+                req.IsAdmin));
             return Ok();
         }
         catch (ServiceException e)
         {
-            return BadRequest(e.Failures);
+            return BadRequest(e.FailuresMessages());
         }
     }
 }

API/Controllers/AuthenticationController.cs

@@ -1,10 +1,10 @@
 using System.ComponentModel.DataAnnotations;
 using System.IdentityModel.Tokens.Jwt;
 using System.Security.Claims;
-using System.Security.Cryptography;
 using System.Text;
 using API.Auth;
 using API.Validation;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.IdentityModel.Tokens;
 using Model;
@@ -16,7 +16,15 @@ namespace API.Controllers;
 public class AuthenticationController(IUserService service, IConfiguration config) : ControllerBase
 {
     private readonly SymmetricSecurityKey _key = new(Encoding.UTF8.GetBytes(config["JWT:Key"]!));
-
+    
+    [HttpGet("/auth/keep-alive")]
+    [Authorize]
+    public void KeepAlive()
+    {
+        
+    }
+    
+    
     public record GenerateTokenRequest(
         [MaxLength(256, ErrorMessage = "Email address is too wide")]
         [EmailAddress]
@@ -25,7 +33,7 @@ public class AuthenticationController(IUserService service, IConfiguration confi
         string Password
     );
 
-    private record AuthenticationResponse(String Token, DateTime ExpirationDate);
+    private record AuthenticationResponse(String Token, long ExpirationDate);
 
     [HttpPost("/auth/token")]
     public async Task<IActionResult> GenerateToken([FromBody] GenerateTokenRequest req)
@@ -39,12 +47,13 @@ public class AuthenticationController(IUserService service, IConfiguration confi
             });
 
         var (jwt, expirationDate) = GenerateJwt(user);
-        return Ok(new AuthenticationResponse(jwt, expirationDate));
+        return Ok(new AuthenticationResponse(jwt, expirationDate.ToFileTimeUtc()));
     }
 
 
     public record RegisterAccountRequest(
-        [MaxLength(256, ErrorMessage = "name is longer than 256")]
+        [StringLength(256, MinimumLength = 4, ErrorMessage = "password length must be between 4 and 256")]
+        [Name]
         string Username,
         [MaxLength(256, ErrorMessage = "email is longer than 256")]
         [EmailAddress]
@@ -62,8 +71,7 @@ public class AuthenticationController(IUserService service, IConfiguration confi
                 { "email", ["The email address already exists"] }
             });
         }
-
-
+        
         var user = await service.CreateUser(
             req.Username,
             req.Email,
@@ -73,7 +81,7 @@ public class AuthenticationController(IUserService service, IConfiguration confi
         );
 
         var (jwt, expirationDate) = GenerateJwt(user);
-        return Ok(new AuthenticationResponse(jwt, expirationDate));
+        return Ok(new AuthenticationResponse(jwt, expirationDate.ToFileTimeUtc()));
     }
 
 
@@ -90,4 +98,6 @@ public class AuthenticationController(IUserService service, IConfiguration confi
 
         return Authentication.GenerateJwt(_key, claims);
     }
+
+    
 }

API/Controllers/TacticsController.cs

@@ -26,7 +26,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
         [FromBody] UpdateNameRequest req)
     {
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -41,7 +41,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     public async Task<IActionResult> GetTacticInfo(int tacticId)
     {
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -57,7 +57,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     public async Task<IActionResult> GetTacticStepsRoot(int tacticId)
     {
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -74,7 +74,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
         [AllowedValues("PLAIN", "HALF")] string CourtType
     );
 
-    public record CreateNewResponse(int Id);
+    public record CreateNewResponse(int Id, int RootStepId);
 
     [HttpPost("/tactics")]
     [Authorize]
@@ -88,8 +88,8 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
             throw new ArgumentOutOfRangeException("for req.CourtType");
         }
 
-        var id = await service.AddTactic(userId, req.Name, courtType);
-        return new CreateNewResponse(id);
+        var (id, rootId) = await service.AddTactic(userId, req.Name, courtType);
+        return new CreateNewResponse(id, rootId);
     }
 
     public record AddStepRequest(int ParentId, object Content);
@@ -110,7 +110,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     {
         var userId = accessor.CurrentUserId(HttpContext);
 
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -125,7 +125,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     {
         var userId = accessor.CurrentUserId(HttpContext);
 
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -142,7 +142,7 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
     public async Task<IActionResult> SaveStepContent(int tacticId, int stepId, [FromBody] SaveStepContentRequest req)
     { 
         var userId = accessor.CurrentUserId(HttpContext);
-        if (!await service.HasAnyRights(userId, tacticId))
+        if (!await service.IsOwnerOf(userId, tacticId))
         {
             return Unauthorized();
         }
@@ -150,4 +150,28 @@ public class TacticController(ITacticService service, IContextAccessor accessor)
         var found = await service.SetTacticStepContent(tacticId, stepId, JsonSerializer.Serialize(req.Content));
         return found ? Ok() : NotFound();
     }
+
+    public record CanEditResponse(bool CanEdit);
+
+    [HttpGet("/tactics/{tacticId:int}/can-edit")]
+    [Authorize]
+    public async Task<CanEditResponse> CanEdit(int tacticId)
+    {
+        var userId = accessor.CurrentUserId(HttpContext);
+        return new CanEditResponse(await service.IsOwnerOf(userId, tacticId));
+    }
+
+
+    [HttpDelete("/tactics/{tacticId:int}")]
+    [Authorize]
+    public async Task<IActionResult> RemoveTactic(int tacticId)
+    {
+        var userId = accessor.CurrentUserId(HttpContext);
+        if (!await service.IsOwnerOf(userId, tacticId))
+        {
+            return Unauthorized();
+        }
+
+        return await service.RemoveTactic(tacticId) ? Ok() : NotFound();
+    }
 }

API/Controllers/TeamsController.cs

@@ -1,5 +1,6 @@
 using System.ComponentModel.DataAnnotations;
 using API.Context;
+using API.DTO;
 using API.Validation;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
@@ -10,13 +11,20 @@ namespace API.Controllers;
 
 [ApiController]
 [Authorize]
-public class TeamsController(ITeamService service, IContextAccessor accessor) : ControllerBase
+public class TeamsController(
+    ITeamService service,
+    ITacticService tactics,
+    IUserService users,
+    IContextAccessor accessor
+) : ControllerBase
 {
     public record CreateTeamRequest(
         [Name] string Name,
         [Url] string Picture,
-        [RegularExpression("^#[0-9A-F]{6}$")] string FirstColor,
-        [RegularExpression("^#[0-9A-F]{6}$")] string SecondColor
+        [RegularExpression("^#[0-9A-Fa-f]{6}$")]
+        string FirstColor,
+        [RegularExpression("^#[0-9A-Fa-f]{6}$")]
+        string SecondColor
     );
 
     [HttpPost("/teams")]
@@ -28,10 +36,39 @@ public class TeamsController(ITeamService service, IContextAccessor accessor) :
         return Ok(team);
     }
 
+    [HttpGet("/teams/{id:int}")]
+    public async Task<IActionResult> GetTeam(int id)
+    {
+        var team = await service.GetTeam(id);
+        return team == null ? NotFound() : Ok(team);
+    }
+
+
     [HttpGet("/teams/{teamId:int}/members")]
-    public IActionResult GetMembersOf(int teamId)
+    public async Task<IActionResult> GetMembersOf(int teamId)
     {
-        return Ok(service.GetMembersOf(teamId));
+        var accessibility =
+            await service.EnsureAccessibility(accessor.CurrentUserId(HttpContext), teamId, MemberRole.Player);
+
+        switch (accessibility)
+        {
+            case ITeamService.TeamAccessibility.Authorized:
+                var members = (await service.GetMembersOf(teamId)).ToList();
+
+                var membersDto = new List<MemberDto>();
+
+                foreach (var m in members)
+                {
+                    membersDto.Add(new MemberDto((await users.GetUser(m.UserId))!, m.Role));
+                }
+
+                return Ok(membersDto);
+            case ITeamService.TeamAccessibility.NotFound:
+            case ITeamService.TeamAccessibility.Unauthorized:
+                return NotFound();
+            default: //unreachable
+                return Problem();
+        }
     }
 
     public record AddMemberRequest(
@@ -47,8 +84,26 @@ public class TeamsController(ITeamService service, IContextAccessor accessor) :
             throw new Exception($"Unable to convert string input '{req.Role}' to a role enum variant.");
         }
 
+        var accessibility =
+            await service.EnsureAccessibility(accessor.CurrentUserId(HttpContext), teamId, MemberRole.Coach);
+
+        switch (accessibility)
+        {
+            case ITeamService.TeamAccessibility.Authorized:
+            {
+                var result = await service.AddMember(teamId, req.UserId, role);
+
+                if (result == null)
+                    return Forbid();
 
-        return Ok(await service.AddMember(teamId, req.UserId, role));
+                return Ok(result);
+            }
+            case ITeamService.TeamAccessibility.NotFound:
+            case ITeamService.TeamAccessibility.Unauthorized:
+                return NotFound();
+            default: //unreachable
+                return Problem();
+        }
     }
 
 
@@ -64,14 +119,90 @@ public class TeamsController(ITeamService service, IContextAccessor accessor) :
             throw new Exception($"Unable to convert string input '{req.Role}' to a role enum variant.");
         }
 
-        var updated = await service.UpdateMember(new Member(teamId, userId, role));
-        return updated ? Ok() : NotFound();
+        var accessibility =
+            await service.EnsureAccessibility(accessor.CurrentUserId(HttpContext), teamId, MemberRole.Coach);
+
+        switch (accessibility)
+        {
+            case ITeamService.TeamAccessibility.Authorized:
+            {
+                var updated = await service.UpdateMember(new Member(teamId, userId, role));
+                return updated ? Ok() : NotFound();
+            }
+            case ITeamService.TeamAccessibility.NotFound:
+            case ITeamService.TeamAccessibility.Unauthorized:
+                return NotFound();
+            default: //unreachable
+                return Problem();
+        }
     }
 
     [HttpDelete("/team/{teamId:int}/members/{userId:int}")]
     public async Task<IActionResult> RemoveMember(int teamId, int userId)
     {
-        var removed = await service.RemoveMember(teamId, userId);
-        return removed ? Ok() : NotFound();
+        var accessibility =
+            await service.EnsureAccessibility(accessor.CurrentUserId(HttpContext), teamId, MemberRole.Coach);
+
+        switch (accessibility)
+        {
+            case ITeamService.TeamAccessibility.Authorized:
+            {
+                var removed = await service.RemoveMember(teamId, userId);
+                return removed ? Ok() : NotFound();
+            }
+            case ITeamService.TeamAccessibility.NotFound:
+            case ITeamService.TeamAccessibility.Unauthorized:
+                return NotFound();
+            default: //unreachable
+                return Problem();
+        }
+    }
+
+    public record ShareTacticToTeamRequest(
+        int TacticId,
+        int TeamId
+    );
+
+    [HttpPost("/team/share-tactic")]
+    public async Task<IActionResult> ShareTactic([FromBody] ShareTacticToTeamRequest sharedTactic)
+    {
+        var userId = accessor.CurrentUserId(HttpContext);
+        var success = await tactics.ShareTactic(sharedTactic.TacticId, null, sharedTactic.TeamId);
+
+        return success ? Ok() : BadRequest();
+    }
+
+    [HttpDelete("/tactics/shared/{tacticId:int}/team/{teamId:int}")]
+    public async Task<IActionResult> UnshareTactic(int tacticId, int teamId)
+    {
+        var currentUserId = accessor.CurrentUserId(HttpContext);
+        var tactic = await tactics.GetTactic(tacticId);
+
+        if (tactic == null)
+        {
+            return NotFound();
+        }
+
+        if (currentUserId != tactic.OwnerId)
+        {
+            return Unauthorized();
+        }
+
+        var success = await tactics.UnshareTactic(tacticId, null, teamId);
+        return success ? Ok() : NotFound();
+    }
+
+    [HttpGet("/tactics/shared/team/{teamId:int}")]
+    public async Task<IActionResult> GetSharedTacticsToTeam(int teamId)
+    {
+        var currentUserId = accessor.CurrentUserId(HttpContext);
+
+        if (!await service.IsUserInTeam(currentUserId, teamId))
+        {
+            return Unauthorized();
+        }
+
+        var sharedTactics = await service.GetSharedTacticsToTeam(teamId);
+        return sharedTactics != null ? Ok(sharedTactics) : NotFound();
     }
 }

API/Controllers/UsersController.cs

@@ -1,12 +1,15 @@
+using System.ComponentModel.DataAnnotations;
 using System.Runtime.CompilerServices;
 using API.Context;
 using API.DTO;
+using API.Validation;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Model;
 using Services;
 
 [assembly: InternalsVisibleTo("UnitTests")]
+
 namespace API.Controllers;
 
 [ApiController]
@@ -35,4 +38,102 @@ public class UsersController(IUserService users, ITeamService teams, ITacticServ
         var userTactics = await tactics.ListTacticsOf(userId);
         return new GetUserDataResponse(userTeams.ToArray(), userTactics.Select(t => t.ToDto()).ToArray());
     }
+
+    
+    public record ChangeUserInformationRequest(
+        [EmailAddress] string? Email = null,
+        [Name] string? Name = null,
+        [StringLength(1024)] string? ProfilePicture = null,
+        [StringLength(256, MinimumLength = 4, ErrorMessage = "password length must be between 4 and 256")]
+        string? Password = null
+    );
+
+    [HttpPut("/user")]
+    [Authorize]
+    public async Task<IActionResult> ChangeUserInformation([FromBody] ChangeUserInformationRequest req)
+    {
+        var userId = accessor.CurrentUserId(HttpContext);
+        var currentUser = (await users.GetUser(userId))!;
+
+        try
+        {
+            await users.UpdateUser(
+                new User(
+                    userId,
+                    req.Name ?? currentUser.Name,
+                    req.Email ?? currentUser.Email,
+                    req.ProfilePicture ?? currentUser.ProfilePicture,
+                    currentUser.IsAdmin
+                ),
+                req.Password
+            );
+        } catch (ServiceException e)
+        {
+            return BadRequest(e.FailuresMessages());
+        }
+
+
+        return Ok();
+    }
+
+    public record ShareTacticToUserRequest(
+        int TacticId,
+        int UserId
+    );
+
+    [HttpPost("/user/share-tactic")]
+    [Authorize]
+    public async Task<IActionResult> ShareTactic([FromBody] ShareTacticToUserRequest sharedTactic)
+    {
+        var currentUserId = accessor.CurrentUserId(HttpContext);
+        var tactic = await tactics.GetTactic(sharedTactic.TacticId);
+
+        if (tactic == null)
+        {
+            return NotFound();
+        }
+
+        if (currentUserId != tactic.OwnerId)
+        {
+            return Unauthorized();
+        }
+
+        var result = await tactics.ShareTactic(sharedTactic.TacticId, sharedTactic.UserId, null);
+        return result ? Ok() : NotFound();
+    }
+
+    [HttpDelete("/tactics/shared/{tacticId:int}/user/{userId:int}")]
+    [Authorize]
+    public async Task<IActionResult> UnshareTactic(int tacticId, int userId)
+    {
+        var currentUserId = accessor.CurrentUserId(HttpContext);
+        var tactic = await tactics.GetTactic(tacticId);
+
+        if (tactic == null)
+        {
+            return NotFound();
+        }
+
+        if (currentUserId != tactic.OwnerId)
+        {
+            return Unauthorized();
+        }
+
+        var success = await tactics.UnshareTactic(tacticId, userId, null);
+        return success ? Ok() : NotFound();
+    }
+
+    [HttpGet("/tactics/shared/user/{userId:int}")]
+    [Authorize]
+    public async Task<IActionResult> GetSharedTacticsToUser(int userId)
+    {
+        var currentUserId = accessor.CurrentUserId(HttpContext);
+        if (currentUserId != userId)
+        {
+            return Unauthorized();
+        }
+
+        var sharedTactics = await users.GetSharedTacticsToUser(userId);
+        return Ok(sharedTactics);
+    }
 }

API/DTO/MemberDto.cs

@@ -0,0 +1,5 @@
+using Model;
+
+namespace API.DTO;
+
+public record MemberDto(User User, MemberRole Role);

API/Program.cs

@@ -101,7 +101,7 @@ app.Use((context, next) =>
     var (jwt, expirationDate) = Authentication.GenerateJwt(key, context.User.Claims);
     context.Response.Headers["Next-Authorization"] = jwt;
     context.Response.Headers["Next-Authorization-Expiration-Date"] =
-        expirationDate.ToString(CultureInfo.InvariantCulture);
+        expirationDate.ToFileTimeUtc().ToString();
     context.Response.Headers.AccessControlExposeHeaders = "Next-Authorization, Next-Authorization-Expiration-Date";
     return next.Invoke();
 });

API/Validation/NameAttribute.cs

@@ -9,6 +9,9 @@ public partial class NameAttribute : ValidationAttribute
     {
         var name = context.DisplayName;
 
+        if (value is null)
+            return ValidationResult.Success;
+        
         if (value is not string str)
         {
             return new ValidationResult($"{name} should be a string.");

APIConsole/APIConsole.csproj

@@ -0,0 +1,14 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+    <PropertyGroup>
+        <OutputType>Exe</OutputType>
+        <TargetFramework>net8.0</TargetFramework>
+        <ImplicitUsings>enable</ImplicitUsings>
+        <Nullable>enable</Nullable>
+    </PropertyGroup>
+
+    <ItemGroup>
+      <ProjectReference Include="..\API\API.csproj" />
+    </ItemGroup>
+
+</Project>

APIConsole/AuthenticationControllerConsole.cs

@@ -0,0 +1,37 @@
+using API.Controllers;
+using DbServices;
+using Microsoft.AspNetCore.Identity.Data;
+using Microsoft.Extensions.Configuration;
+using Services;
+
+namespace APIConsole
+{
+    public class AuthenticationControllerConsole
+    {
+        private AuthenticationController _controller;
+
+        public AuthenticationControllerConsole()
+        {
+            AppContext.AppContext context = new AppContext.AppContext();
+            IUserService users = new DbUserService(context);
+            IConfiguration config = new ConfigurationBuilder().AddJsonFile("appsettings.json").Build();
+            _controller = new AuthenticationController(users, config);
+        }
+
+        public async void RegisterAccountTest()
+        {
+            var result =
+                await _controller.RegisterAccount(
+                    new AuthenticationController.RegisterAccountRequest("test", "test@mail.com", "123456"));
+            Console.WriteLine($"RegisterAccount Result: {result}");
+        }
+
+        public async void GenerateTokenTest()
+        {
+            var result =
+                await _controller.GenerateToken(
+                    new AuthenticationController.GenerateTokenRequest("test@mail.com", "123456"));
+            Console.WriteLine($"GenerateToken Result: {result}");
+        }
+    }
+}

APIConsole/Program.cs

@@ -0,0 +1,49 @@
+namespace APIConsole
+{
+    class Program
+    {
+        static void Main(string[] args)
+        {
+            var userConsole = new UsersControllerConsole();
+            var teamConsole = new TeamsControllerConsole();
+            var tacticConsole = new TacticsControllerConsole();
+            var authConsole = new AuthenticationControllerConsole();
+            var userAdminConsole = new UsersAdminControllerConsole();
+            var teamAdminConsole = new TeamsAdminControllerConsole();
+            
+            userConsole.GetUserTest();
+            userConsole.GetUserDataTest();
+            
+            teamConsole.GetMembersOfTest();
+            teamConsole.CreateTeamTest();
+            teamConsole.AddMemberTest();
+            teamConsole.UpdateMemberTest();
+            teamConsole.RemoveMemberTest();
+            
+            tacticConsole.UpdateNameTest();
+            tacticConsole.GetTacticInfoTest();
+            tacticConsole.GetTacticStepsRootTest();
+            tacticConsole.CreateTacticTest();
+            tacticConsole.GetStepContentTest();
+            tacticConsole.RemoveStepTest();
+            tacticConsole.SaveStepContentTest();
+            
+            authConsole.RegisterAccountTest();
+            authConsole.GenerateTokenTest();
+            
+            userAdminConsole.CountUsersTest();
+            userAdminConsole.ListUsersTest();
+            userAdminConsole.GetUserTest();
+            userAdminConsole.AddUserTest();
+            userAdminConsole.RemoveUserTest();
+            userAdminConsole.UpdateUserTest();
+            
+            teamAdminConsole.CountTeamsTest();
+            teamAdminConsole.ListTeamsTest();
+            teamAdminConsole.AddTeamTest();
+            teamAdminConsole.UpdateTeamTest();
+            teamAdminConsole.DeleteTeamTest();
+
+        }
+    }
+}

APIConsole/TacticsControllerConsole.cs

@@ -0,0 +1,64 @@
+using API.Context;
+using API.Controllers;
+using DbServices;
+using Services;
+
+namespace APIConsole
+{
+    public class TacticsControllerConsole
+    {
+        private TacticController _controller;
+
+        public TacticsControllerConsole()
+        {
+            AppContext.AppContext context = new AppContext.AppContext();
+            ITacticService tactics = new DbTacticService(context);
+            IContextAccessor accessor = new HttpContextAccessor();
+            _controller = new TacticController(tactics, accessor);
+        }
+
+        public async void UpdateNameTest()
+        {
+            var result = await _controller.UpdateName(1, new TacticController.UpdateNameRequest("NewName"));
+            Console.WriteLine($"UpdateName Result: {result}");
+        }
+        
+        public async void GetTacticInfoTest()
+        {
+            var result = await _controller.GetTacticInfo(1);
+            Console.WriteLine($"GetTacticInfo Result: {result}");
+        }
+        
+        public async void GetTacticStepsRootTest()
+        {
+            var result = await _controller.GetTacticStepsRoot(1);
+            Console.WriteLine($"GetTacticStepsRoot Result: {result}");
+        }
+        
+        public async void CreateTacticTest()
+        {
+            var result = await _controller.CreateNew(new TacticController.CreateNewRequest("NewTactic", "PLAIN"));
+            Console.WriteLine($"CreateTactic Result: {result}");
+        }
+        
+        public async void GetStepContentTest()
+        {
+            var result = await _controller.GetStepContent(1, 1);
+            Console.WriteLine($"GetStepContent Result: {result}");
+        }
+        
+        public async void RemoveStepTest()
+        {
+            var result = await _controller.RemoveStep(1, 1);
+            Console.WriteLine($"RemoveStep Result: {result}");
+        }
+        
+        public async void SaveStepContentTest()
+        {
+            var result = await _controller.SaveStepContent(1, 1, new TacticController.SaveStepContentRequest("NewContent"));
+            Console.WriteLine($"SaveStepContent Result: {result}");
+        }
+        
+
+    }
+}

APIConsole/TeamsAdminControllerConsole.cs

@@ -0,0 +1,53 @@
+using API.Controllers.Admin;
+using DbServices;
+using Microsoft.Extensions.Logging;
+using Services;
+
+namespace APIConsole
+{
+    public class TeamsAdminControllerConsole
+    {
+        private TeamsAdminController _controller;
+
+        public TeamsAdminControllerConsole()
+        {
+            AppContext.AppContext context = new AppContext.AppContext();
+            ITeamService teams = new DbTeamService(context);
+            ILoggerFactory loggerFactory = LoggerFactory.Create(builder => builder.AddConsole());
+            ILogger<TeamsAdminController> logger = loggerFactory.CreateLogger<TeamsAdminController>();
+            _controller = new TeamsAdminController(teams, logger);
+        }
+
+        public async void CountTeamsTest()
+        {
+            var result = await _controller.CountTeams();
+            Console.WriteLine($"CountTeams Result: {result}");
+        }
+        
+        public async void ListTeamsTest()
+        {
+            var result = await _controller.ListTeams(0, 10);
+            Console.WriteLine($"ListTeams Result: {result}");
+        }
+        
+        public async void AddTeamTest()
+        {
+            var result =
+                await _controller.AddTeam(new TeamsAdminController.AddTeamRequest("Lakers", "https://upload.wikimedia.org/wikipedia/commons/thumb/3/3c/Los_Angeles_Lakers_logo.svg/2560px-Los_Angeles_Lakers_logo.svg.png", "#FFFFFF", "#000000"));
+            Console.WriteLine($"AddTeam Result: {result}");
+        }
+        
+        public async void UpdateTeamTest()
+        {
+            var result =
+                await _controller.UpdateTeam(1, new TeamsAdminController.UpdateTeamRequest("Lakers", "https://upload.wikimedia.org/wikipedia/commons/thumb/3/3c/Los_Angeles_Lakers_logo.svg/2560px-Los_Angeles_Lakers_logo.svg.png", "#999999", "#000000"));
+            Console.WriteLine($"UpdateTeam Result: {result}");
+        }
+
+        public async void DeleteTeamTest()
+        {
+            var result = await _controller.DeleteTeams(new TeamsAdminController.DeleteTeamsRequest([1]));
+            Console.WriteLine($"RemoveTeam Result: {result}");
+        }
+    }
+}

APIConsole/TeamsControllerConsole.cs

@@ -0,0 +1,55 @@
+using System;
+using API.Context;
+using API.Controllers;
+using API.DTO;
+using DbServices;
+using Model;
+using Services;
+
+namespace APIConsole
+{
+    public class TeamsControllerConsole
+    {
+        private TeamsController _controller;
+
+        public TeamsControllerConsole()
+        {
+            AppContext.AppContext context = new AppContext.AppContext();
+            ITeamService teams = new DbTeamService(context);
+            ITacticService tactics = new DbTacticService(context);
+            IUserService users = new DbUserService(context);
+            IContextAccessor accessor = new HttpContextAccessor();
+            _controller = new TeamsController(teams, tactics, users, accessor);
+        }
+
+        public async void GetMembersOfTest()
+        {
+            var result = await _controller.GetMembersOf(1);
+            Console.WriteLine($"GetMembersOf Result: {result}");
+        }
+        
+        public async void CreateTeamTest()
+        {
+            var result = await _controller.CreateTeam(new TeamsController.CreateTeamRequest("Lakers", "https://upload.wikimedia.org/wikipedia/commons/thumb/3/3c/Los_Angeles_Lakers_logo.svg/2560px-Los_Angeles_Lakers_logo.svg.png", "#FFFFFF", "#000000"));
+            Console.WriteLine($"CreateTeam Result: {result}");
+        }
+        
+        public async void AddMemberTest()
+        {
+            var result = await _controller.AddMember(1, new TeamsController.AddMemberRequest(1, "PLAYER"));
+            Console.WriteLine($"AddMember Result: {result}");
+        }
+        
+        public async void UpdateMemberTest()
+        {
+            var result = await _controller.UpdateMember(1, 1, new TeamsController.UpdateMemberRequest("COACH"));
+            Console.WriteLine($"UpdateMember Result: {result}");
+        }
+        
+        public async void RemoveMemberTest()
+        {
+            var result = await _controller.RemoveMember(1, 1);
+            Console.WriteLine($"RemoveMember Result: {result}");
+        }
+    }
+}

APIConsole/UsersAdminControllerConsole.cs

@@ -0,0 +1,60 @@
+using API.Controllers.Admin;
+using DbServices;
+using Microsoft.Extensions.Logging;
+using Services;
+
+namespace APIConsole
+{
+    public class UsersAdminControllerConsole
+    {
+        private UsersAdminController _controller;
+
+        public UsersAdminControllerConsole()
+        {
+            AppContext.AppContext context = new AppContext.AppContext();
+            IUserService users = new DbUserService(context);
+            ILoggerFactory loggerFactory = LoggerFactory.Create(builder => builder.AddConsole());
+            ILogger<UsersAdminController> logger = loggerFactory.CreateLogger<UsersAdminController>();
+            _controller = new UsersAdminController(users, logger);
+        }
+
+        public async void CountUsersTest()
+        {
+            var result = await _controller.CountUsers();
+            Console.WriteLine($"CountUsers Result: {result}");
+        }
+        
+        public async void ListUsersTest()
+        {
+            var result = await _controller.ListUsers(0, 10, null);
+            Console.WriteLine($"ListUsers Result: {result}");
+        }
+        
+        public async void GetUserTest()
+        {
+            var result = await _controller.GetUser(1);
+            Console.WriteLine($"GetUser Result: {result}");
+        }
+
+        public async void AddUserTest()
+        {
+            var result =
+                await _controller.AddUser(new UsersAdminController.AddUserRequest("test", "123456", "test@mail.com"));
+            Console.WriteLine($"AddUser Result: {result}");
+        }
+        
+        public async void RemoveUserTest()
+        {
+            var result = await _controller.RemoveUsers(new UsersAdminController.RemoveUsersRequest([1]));
+            Console.WriteLine($"RemoveUser Result: {result}");
+        }
+
+        public async void UpdateUserTest()
+        {
+            var result =
+                await _controller.UpdateUser(1, new UsersAdminController.UpdateUserRequest("testtest", "123456", false));
+            Console.WriteLine($"UpdateUser Result: {result}");
+        }
+
+    }
+}

APIConsole/UsersControllerConsole.cs

@@ -0,0 +1,36 @@
+using API.Context;
+using API.Controllers;
+using DbServices;
+using Services;
+
+namespace APIConsole
+{
+    public class UsersControllerConsole
+    {
+        private UsersController _controller;
+
+        public UsersControllerConsole()
+        {
+            AppContext.AppContext context = new AppContext.AppContext();
+            IUserService users = new DbUserService(context);
+            ITeamService teams = new DbTeamService(context);
+            ITacticService tactics = new DbTacticService(context);
+            IContextAccessor accessor = new HttpContextAccessor();
+
+            _controller = new UsersController(users, teams, tactics, accessor);
+        }
+
+        public async void GetUserTest()
+        {
+            var result = await _controller.GetUser();
+            Console.WriteLine($"GetUser Result: {result}");
+        }
+
+        public async void GetUserDataTest()
+        {
+            var result = await _controller.GetUserData();
+            Console.WriteLine($"GetUserData Result: {result}");
+        }
+        
+    }
+}

AppContext/AppContext.cs

@@ -13,7 +13,9 @@ public class AppContext : DbContext
     public DbSet<TeamEntity> Teams { get; init; }
     public DbSet<MemberEntity> Members { get; init; }
     public DbSet<TacticStepEntity> TacticSteps { get; set; }
+    public DbSet<SharedTacticEntity> SharedTactics { get; set; }
 
+    
     public AppContext()
     {
         
@@ -26,48 +28,27 @@ public class AppContext : DbContext
 
     protected override void OnConfiguring(DbContextOptionsBuilder optionsBuilder)
     {
-        base.OnConfiguring(optionsBuilder);
-        if (optionsBuilder.IsConfigured)
+        if (!optionsBuilder.IsConfigured)
         {
-            return;
+            var pgsqliteDsn = Environment.GetEnvironmentVariable("PGSQL_DSN");
+
+            if (pgsqliteDsn != null)
+            {
+                optionsBuilder.UseNpgsql(pgsqliteDsn);
+            }
+            else
+            {
+                optionsBuilder.UseSqlite("Data Source=database.db");
+            }
         }
-        
-        var pgsqliteDsn = Environment.GetEnvironmentVariable("PGSQL_DSN");
-
-        if (pgsqliteDsn != null)
-        {
-            optionsBuilder.UseNpgsql(pgsqliteDsn);
-        }
-        else
-        {
-            optionsBuilder.UseSqlite("Data Source=database.db");
-        }
-
     }
 
     protected override void OnModelCreating(ModelBuilder builder)
     {
         base.OnModelCreating(builder);
-        builder.Entity<UserEntity>()
-            .Property(e => e.Password)
-            .HasConversion(
-                v => HashString(v),
-                v => v
-            );
-
         builder.Entity<MemberEntity>()
             .HasKey("UserId", "TeamId");
     }
 
-    private static string HashString(string str)
-    {
-        byte[] salt = RandomNumberGenerator.GetBytes(128 / 8);
-        return Convert.ToBase64String(KeyDerivation.Pbkdf2(
-            password: str,
-            salt,
-            prf: KeyDerivationPrf.HMACSHA256,
-            iterationCount: 50000,
-            numBytesRequested: 256 / 8
-        ));
-    }
+
 }

AppContext/AppContext.csproj

@@ -9,7 +9,6 @@
 
     <ItemGroup>
       <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.0" />
-      <PackageReference Include="Microsoft.AspNetCore.Cryptography.KeyDerivation" Version="8.0.0" />
       <PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.0" />
       <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.0">
         <PrivateAssets>all</PrivateAssets>

AppContext/Entities/SharedTacticEntity.cs

@@ -0,0 +1,12 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace AppContext.Entities
+{
+    public class SharedTacticEntity
+    {
+        [Key] public int Id { get; set; }
+        public int TacticId { get; set; }
+        public int? SharedWithUserId { get; set; }
+        public int? SharedWithTeamId { get; set; }
+    }
+}

AppContext/Entities/UserEntity.cs

@@ -7,6 +7,7 @@ public class UserEntity
     [Key] public int Id { get; set; }
 
     public required string Password { get; set; }
+    public required byte[] PasswordSalt { get; set; }
     public required string Name { get; set; }
     public required string Email { get; set; }
     public required string ProfilePicture { get; set; }

Converters/ModelToEntities.cs

@@ -22,7 +22,7 @@ public static class EntitiesToModels
             entity.Id,
             entity.ParentId,
             steps.Where(s =>s.TacticId == entity.TacticId && s.ParentId == entity.Id)
-                .AsEnumerable()
+                .ToList()
                 .Select(e => e.ToModel(steps)),
             entity.JsonContent
         );
@@ -37,4 +37,9 @@ public static class EntitiesToModels
     {
         return new Member(entity.TeamId, entity.UserId, entity.Role);
     }
+    
+    public static SharedTactic ToModel(this SharedTacticEntity entity)
+    {
+        return new SharedTactic(entity.Id, entity.TacticId, entity.SharedWithUserId, entity.SharedWithTeamId);
+    }
 }

DbServices/DbServices.csproj

@@ -10,6 +10,7 @@
       <ProjectReference Include="..\AppContext\AppContext.csproj" />
       <ProjectReference Include="..\Converters\Converters.csproj" />
       <ProjectReference Include="..\Services\Services.csproj" />
+      <ProjectReference Include="..\Utils\Utils.csproj" />
     </ItemGroup>
 
 </Project>

DbServices/DbTacticService.cs

@@ -18,7 +18,7 @@ public class DbTacticService(AppContext.AppContext context) : ITacticService
         );
     }
 
-    public async Task<bool> HasAnyRights(int userId, int tacticId)
+    public async Task<bool> IsOwnerOf(int userId, int tacticId)
     {
         var tacticEntity = await context.Tactics.FirstOrDefaultAsync(u => u.Id == tacticId);
         if (tacticEntity == null)
@@ -27,7 +27,7 @@ public class DbTacticService(AppContext.AppContext context) : ITacticService
         return tacticEntity.OwnerId == userId;
     }
 
-    public async Task<int> AddTactic(int userId, string name, CourtType courtType)
+    public async Task<(int, int)> AddTactic(int userId, string name, CourtType courtType)
     {
         var tacticEntity = new TacticEntity
         {
@@ -48,7 +48,8 @@ public class DbTacticService(AppContext.AppContext context) : ITacticService
         await context.TacticSteps.AddAsync(stepEntity);
         await context.SaveChangesAsync();
 
-        return tacticEntity.Id;
+        
+        return (tacticEntity.Id, stepEntity.Id);
     }
 
     public async Task<bool> UpdateName(int tacticId, string name)
@@ -158,4 +159,51 @@ public class DbTacticService(AppContext.AppContext context) : ITacticService
 
         return await context.SaveChangesAsync() > 0;
     }
+
+    public async Task<bool> ShareTactic(int tacticId, int? userId, int? teamId)
+    {
+        var sharedTactic = new SharedTacticEntity
+        {
+            TacticId = tacticId,
+            SharedWithUserId = userId,
+            SharedWithTeamId = teamId
+        };
+
+        await context.SharedTactics.AddAsync(sharedTactic);
+        return await context.SaveChangesAsync() > 0;
+    }
+
+    public async Task<bool> UnshareTactic(int tacticId, int? userId, int? teamId)
+    {
+        SharedTacticEntity? sharedTactic = null;
+        if (userId.HasValue)
+        {
+            sharedTactic = await context.SharedTactics
+                .FirstOrDefaultAsync(st => st.TacticId == tacticId && st.SharedWithUserId == userId);
+        }
+        else if (teamId.HasValue)
+        {
+            sharedTactic = await context.SharedTactics
+                .FirstOrDefaultAsync(st => st.TacticId == tacticId && st.SharedWithTeamId == teamId);
+        }
+        
+        if (sharedTactic == null)
+        {
+            return false;
+        }
+
+        context.SharedTactics.Remove(sharedTactic);
+        return await context.SaveChangesAsync() > 0;
+    }
+
+    public async Task<bool> RemoveTactic(int tacticId)
+    {
+        var removed = await context.Tactics.Where(t => t.Id == tacticId).ExecuteDeleteAsync() > 0;
+        if (!removed)
+            return false;
+
+        await context.TacticSteps.Where(s => s.TacticId == tacticId).ExecuteDeleteAsync();
+        
+        return true;
+    }
 }

DbServices/DbTeamService.cs

@@ -19,28 +19,18 @@ public class DbTeamService(AppContext.AppContext context) : ITeamService
         );
     }
 
-    public Task<IEnumerable<Team>> ListTeams(string nameNeedle)
-    {
-        return Task.FromResult(
-            context.Teams.Where(t => t.Name.ToLower().Contains(nameNeedle.ToLower()))
-                .AsEnumerable()
-                .Select(e => e.ToModel())
-        );
-    }
 
-    public Task<IEnumerable<Team>> ListTeams()
+    public Task<IEnumerable<Team>> ListTeams(int start, int count)
     {
         return Task.FromResult(
             context.Teams
+                .Skip(start)
+                .Take(count)
                 .AsEnumerable()
                 .Select(e => e.ToModel())
         );
     }
 
-    public async Task<int> CountTeams(string nameNeedle)
-    {
-        return await context.Teams.CountAsync(t => t.Name.ToLower().Contains(nameNeedle.ToLower()));
-    }
 
     public async Task<int> CountTotalTeams()
     {
@@ -62,6 +52,12 @@ public class DbTeamService(AppContext.AppContext context) : ITeamService
         return entity.ToModel();
     }
 
+    public async Task<Team?> GetTeam(int id)
+    {
+        var entity = await context.Teams.FirstOrDefaultAsync(t => t.Id == id);
+        return entity?.ToModel();
+    }
+
     public async Task RemoveTeams(params int[] teams)
     {
         await context.Teams
@@ -83,16 +79,45 @@ public class DbTeamService(AppContext.AppContext context) : ITeamService
         return await context.SaveChangesAsync() > 0;
     }
 
+    public async Task<IEnumerable<Tactic>> GetSharedTacticsToTeam(int teamId)
+    {
+        var sharedTactics = await context.SharedTactics
+            .Where(st => st.SharedWithTeamId == teamId)
+            .ToListAsync();
+
+        var tactics = new List<Tactic>();
+        foreach (var sharedTactic in sharedTactics)
+        {
+            var tactic = await context.Tactics
+                .Where(t => t.Id == sharedTactic.TacticId)
+                .Select(t => t.ToModel())
+                .FirstOrDefaultAsync();
+
+            if (tactic != null)
+            {
+                tactics.Add(tactic);
+            }
+        }
 
-    public IEnumerable<Member> GetMembersOf(int teamId)
+        return tactics;
+    }
+
+
+    public Task<IEnumerable<Member>> GetMembersOf(int teamId)
     {
-        return context.Members.Where(m => m.TeamId == teamId)
+        return Task.FromResult(context.Members
+            .Where(m => m.TeamId == teamId)
             .AsEnumerable()
-            .Select(e => e.ToModel());
+            .Select(e => e.ToModel()));
     }
 
-    public async Task<Member> AddMember(int teamId, int userId, MemberRole role)
+    public async Task<Member?> AddMember(int teamId, int userId, MemberRole role)
     {
+        if (await context.Members.AnyAsync(m => m.TeamId == teamId && m.UserId == userId))
+        {
+            return null;
+        }
+
         await context.Members.AddAsync(new MemberEntity
         {
             TeamId = teamId,
@@ -116,9 +141,29 @@ public class DbTeamService(AppContext.AppContext context) : ITeamService
 
     public async Task<bool> RemoveMember(int teamId, int userId)
     {
-        await context.Members
+        return await context.Members
             .Where(e => e.TeamId == teamId && e.UserId == userId)
-            .ExecuteDeleteAsync();
-        return await context.SaveChangesAsync() > 0;
+            .ExecuteDeleteAsync() > 0;
+    }
+
+
+    public async Task<ITeamService.TeamAccessibility> EnsureAccessibility(int userId, int teamId, MemberRole role)
+    {
+        var member = await context.Members.FirstOrDefaultAsync(e => e.TeamId == teamId && e.UserId == userId);
+        if (member == null)
+            return ITeamService.TeamAccessibility.NotFound;
+
+        if (member.Role == role || role == MemberRole.Player)
+            return ITeamService.TeamAccessibility.Authorized;
+
+        return role == MemberRole.Coach
+            ? ITeamService.TeamAccessibility.Authorized
+            : ITeamService.TeamAccessibility.Unauthorized;
+    }
+    
+    public async Task<bool> IsUserInTeam(int userId, int teamId)
+    {
+        return await context.Members
+            .AnyAsync(m => m.TeamId == teamId && m.UserId == userId);
     }
 }

DbServices/DbUserService.cs

@@ -20,20 +20,17 @@ public class DbUserService(AppContext.AppContext context) : IUserService
         return context.Users.CountAsync();
     }
 
-    public Task<IEnumerable<User>> ListUsers(string nameNeedle)
+    public Task<IEnumerable<User>> ListUsers(int start, int count, string? nameNeedle = null)
     {
-        return Task.FromResult(
-            context.Users
-                .Where(n => n.Name.ToLower().Contains(nameNeedle.ToLower()))
-                .AsEnumerable()
-                .Select(e => e.ToModel())
-        );
-    }
+        IQueryable<UserEntity> request = context.Users;
+
+        if (nameNeedle != null)
+            request = request.Where(u => u.Name.ToLower().Contains(nameNeedle.ToLower()));
 
-    public Task<IEnumerable<User>> ListUsers()
-    {
         return Task.FromResult(
-            context.Users
+            request
+                .Skip(start)
+                .Take(count)
                 .AsEnumerable()
                 .Select(e => e.ToModel())
         );
@@ -48,15 +45,23 @@ public class DbUserService(AppContext.AppContext context) : IUserService
     {
         return (await context.Users.FirstOrDefaultAsync(e => e.Email == email))?.ToModel();
     }
-    
-    public async Task<User> CreateUser(string username, string email, string password, string profilePicture,
-        bool isAdmin)
+
+    public async Task<User> CreateUser(
+        string username,
+        string email,
+        string password,
+        string profilePicture,
+        bool isAdmin
+    )
     {
+        var (passwordHash, salt) = Hashing.HashString(password);
+
         var userEntity = new UserEntity
         {
             Name = username,
             Email = email,
-            Password = password,
+            Password = passwordHash,
+            PasswordSalt = salt,
             ProfilePicture = profilePicture,
             IsAdmin = isAdmin
         };
@@ -69,29 +74,72 @@ public class DbUserService(AppContext.AppContext context) : IUserService
 
     public async Task<bool> RemoveUsers(params int[] identifiers)
     {
-        return await context.Users.Where(u => identifiers.Contains(u.Id)).ExecuteDeleteAsync() > 0;
+        return await context
+            .Users
+            .Where(u => identifiers.Contains(u.Id))
+            .ExecuteDeleteAsync() > 0;
     }
 
-    public async Task UpdateUser(User user)
+    public async Task UpdateUser(User user, string? password = null)
     {
         var entity = await context.Users.FirstOrDefaultAsync(e => e.Id == user.Id);
         if (entity == null)
             throw new ServiceException(Failure.NotFound("User not found"));
 
+        var emailEntity = await context.Users.FirstOrDefaultAsync(e => e.Email == user.Email);
+        if (emailEntity != null && emailEntity.Id != entity.Id)
+        {
+            throw new ServiceException(new Failure("email conflict", "this provided email is used by another account"));
+        }
+        
         entity.ProfilePicture = user.ProfilePicture;
         entity.Name = user.Name;
         entity.Email = user.Email;
         entity.Id = user.Id;
         entity.IsAdmin = user.IsAdmin;
-        
+
+        if (password != null)
+        {
+            var (passwordHash, salt) = Hashing.HashString(password);
+            entity.Password = passwordHash;
+            entity.PasswordSalt = salt;
+        }
+
         await context.SaveChangesAsync();
     }
 
     public async Task<User?> Authorize(string email, string password)
     {
-        return (await context
-                .Users
-                .FirstOrDefaultAsync(u => u.Email == email))
-            ?.ToModel();
+        var entity = await context
+            .Users
+            .FirstOrDefaultAsync(u => u.Email == email);
+
+        if (entity == null)
+            return null;
+
+        return Hashing.PasswordsMatches(entity.Password, password, entity.PasswordSalt) ? entity.ToModel() : null;
+    }
+
+    public async Task<IEnumerable<Tactic>> GetSharedTacticsToUser(int userId)
+    {
+        var sharedTactics = await context.SharedTactics
+            .Where(st => st.SharedWithUserId == userId)
+            .ToListAsync();
+
+        var tactics = new List<Tactic>();
+        foreach (var sharedTactic in sharedTactics)
+        {
+            var tactic = await context.Tactics
+                .Where(t => t.Id == sharedTactic.TacticId)
+                .Select(t => t.ToModel())
+                .FirstOrDefaultAsync();
+
+            if (tactic != null)
+            {
+                tactics.Add(tactic);
+            }
+        }
+
+        return tactics;
     }
 }

DbServices/Security.cs

@@ -1,3 +1,6 @@
+using System.Security.Cryptography;
+using Microsoft.AspNetCore.Cryptography.KeyDerivation;
+
 namespace DbServices;
 
 public class Security

EFConsole/EFConsole.csproj

@@ -0,0 +1,25 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+    <PropertyGroup>
+        <OutputType>Exe</OutputType>
+        <TargetFramework>net8.0</TargetFramework>
+        <ImplicitUsings>enable</ImplicitUsings>
+        <Nullable>enable</Nullable>
+    </PropertyGroup>
+
+    <ItemGroup>
+      <ProjectReference Include="..\DbServices\DbServices.csproj" />
+      <ProjectReference Include="..\Model\Model.csproj" />
+      <ProjectReference Include="..\StubContext\StubContext.csproj" />
+    </ItemGroup>
+
+    <ItemGroup>
+      <PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.0" />
+      <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.0">
+        <PrivateAssets>all</PrivateAssets>
+        <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      </PackageReference>
+      <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="8.0.0" />
+    </ItemGroup>
+
+</Project>

EFConsole/MembersConsole.cs

@@ -0,0 +1,88 @@
+using System;
+using System.Linq;
+using AppContext.Entities;
+using Model;
+
+namespace EFConsole
+{
+    public class MembersConsole
+    {
+        public static void TestAddMember(AppContext.AppContext db)
+        {
+            var newMember = new MemberEntity
+            {
+                TeamId = 1,
+                UserId = 1,
+                Role = MemberRole.Player
+            };
+
+            db.Members.Add(newMember);
+            db.SaveChanges();
+
+            Console.WriteLine("Membre ajouté avec succès !");
+        }
+
+        public static void TestGetAllMembers(AppContext.AppContext db)
+        {
+            var members = db.Members.ToList();
+            Console.WriteLine("Liste des membres :");
+            foreach (var member in members)
+            {
+                Console.WriteLine($"ID Équipe : {member.TeamId}, ID Utilisateur : {member.UserId}, Rôle : {member.Role}");
+            }
+        }
+
+        public static void TestGetMembersByTeamId(AppContext.AppContext db, int teamId)
+        {
+            var members = db.Members.Where(m => m.TeamId == teamId).ToList();
+            Console.WriteLine($"Membres de l'équipe avec ID {teamId} :");
+            foreach (var member in members)
+            {
+                Console.WriteLine($"ID Équipe : {member.TeamId}, ID Utilisateur : {member.UserId}, Rôle : {member.Role}");
+            }
+        }
+
+        public static void TestGetMembersByUserId(AppContext.AppContext db, int userId)
+        {
+            var members = db.Members.Where(m => m.UserId == userId).ToList();
+            Console.WriteLine($"Membres associés à l'utilisateur avec ID {userId} :");
+            foreach (var member in members)
+            {
+                Console.WriteLine($"ID Équipe : {member.TeamId}, ID Utilisateur : {member.UserId}, Rôle : {member.Role}");
+            }
+        }
+
+        public static void TestUpdateMemberRole(AppContext.AppContext db, int teamId, int memberId, MemberRole newRole)
+        {
+            var memberToUpdate = db.Members.FirstOrDefault(m => m.TeamId == teamId && m.UserId == memberId); // Trouver le membre dans l'équipe spécifiée
+            if (memberToUpdate != null)
+            {
+                memberToUpdate.Role = newRole;
+                db.SaveChanges();
+                Console.WriteLine("Rôle du membre mis à jour avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucun membre trouvé dans l'équipe avec l'ID {teamId} et l'ID utilisateur {memberId}.");
+            }
+        }
+
+
+        public static void TestRemoveMember(AppContext.AppContext db, int teamId, int memberId)
+        {
+            var memberToDelete = db.Members.FirstOrDefault(m => m.TeamId == teamId && m.UserId == memberId); // Trouver le membre dans l'équipe spécifiée
+            if (memberToDelete != null)
+            {
+                db.Members.Remove(memberToDelete); // Supprimer le membre
+                db.SaveChanges();
+                Console.WriteLine("Membre supprimé avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucun membre trouvé dans l'équipe avec l'ID {teamId} et l'ID utilisateur {memberId} pour la suppression.");
+            }
+        }
+
+
+    }
+}

EFConsole/Program.cs

@@ -0,0 +1,85 @@
+using Model;
+using StubContext;
+
+namespace EFConsole
+{
+    class Program
+    {
+        static void Main(string[] args)
+        {
+            Console.OutputEncoding = System.Text.Encoding.UTF8;
+
+            try
+            {
+                using (AppContext.AppContext db = new StubAppContext())
+                {
+                    TestUserMethods(db);
+                    TestTacticMethods(db);
+                    TestTeamMethods(db);
+                    TestMemberMethods(db);
+                    TestTacticsStepMethods(db);
+                }
+            }
+            catch (Exception ex)
+            {
+                Console.WriteLine($"Une erreur s'est produite : {ex.Message}");
+
+                if (ex.InnerException != null)
+                {
+                    Console.WriteLine($"Détails de l'exception interne : {ex.InnerException.Message}");
+                }
+            }
+        }
+
+        static void TestUserMethods(AppContext.AppContext db)
+        {
+            UsersConsole.TestAddUser(db);
+            UsersConsole.TestGetAllUsers(db);
+            UsersConsole.TestFindUserByMail(db, "maxime@mail.com");
+            UsersConsole.TestUpdateUser(db);
+            UsersConsole.TestDeleteUser(db);
+            UsersConsole.TestSearchUsersByName(db, "Pierre");
+            UsersConsole.TestGetTacticsOfAllUsers(db);
+            UsersConsole.TestGetTacticsOfOneUser(db, 1);
+        }
+
+        static void TestTacticMethods(AppContext.AppContext db)
+        {
+            TacticsConsole.TestAddTactic(db);
+            TacticsConsole.TestGetAllTactics(db);
+            TacticsConsole.TestFindTacticById(db, 1);
+            TacticsConsole.TestUpdateTactic(db, 1, "Nouveau nom");
+            TacticsConsole.TestDeleteTactic(db, 1);
+            TacticsConsole.TestGetTacticsByOwner(db, 1);
+        }
+        
+        static void TestTeamMethods(AppContext.AppContext db)
+        {
+            TeamsConsole.TestAddTeam(db);
+            TeamsConsole.TestGetAllTeams(db);
+            TeamsConsole.TestGetTeamMembers(db, 1);
+            TeamsConsole.TestUpdateTeam(db, 1, "Nouveau nom", "Nouvelle image", "#FF0000", "#00FF00");
+            TeamsConsole.TestDeleteTeam(db, 1);
+        }
+        
+        static void TestMemberMethods(AppContext.AppContext db)
+        {
+            MembersConsole.TestAddMember(db);
+            MembersConsole.TestGetAllMembers(db);
+            MembersConsole.TestGetMembersByTeamId(db, 1);
+            MembersConsole.TestGetMembersByUserId(db, 1);
+            MembersConsole.TestUpdateMemberRole(db, 1, 1, MemberRole.Coach);
+            MembersConsole.TestRemoveMember(db, 1, 1);
+        }
+        
+        static void TestTacticsStepMethods(AppContext.AppContext db)
+        {
+            TacticsStepConsole.TestAddTacticStep(db);
+            TacticsStepConsole.TestGetAllTacticSteps(db);
+            TacticsStepConsole.TestGetTacticStepsByTacticId(db, 1);
+            TacticsStepConsole.TestUpdateTacticStepContent(db, 1, "test content");
+            TacticsStepConsole.TestDeleteTacticStep(db, 1);
+        }
+
+    }
+}

EFConsole/TacticsConsole.cs

@@ -0,0 +1,89 @@
+using System;
+using System.Linq;
+using AppContext.Entities;
+using Model;
+
+namespace EFConsole
+{
+    class TacticsConsole
+    {
+        internal static void TestAddTactic(AppContext.AppContext db)
+        {
+            var newTactic = new TacticEntity
+            {
+                Name = "Nouvelle tactique",
+                CreationDate = DateTime.Now,
+                OwnerId = 1,
+                Type = CourtType.Plain
+            };
+
+            db.Tactics.Add(newTactic);
+            db.SaveChanges();
+
+            Console.WriteLine("Tactique ajoutée avec succès !");
+        }
+
+        internal static void TestGetAllTactics(AppContext.AppContext db)
+        {
+            var tactics = db.Tactics.ToList();
+            Console.WriteLine("Liste des tactiques :");
+            foreach (var tactic in tactics)
+            {
+                Console.WriteLine($"ID : {tactic.Id}, Nom : {tactic.Name}, Date de création : {tactic.CreationDate}");
+            }
+        }
+
+        internal static void TestFindTacticById(AppContext.AppContext db, int tacticId)
+        {
+            var tactic = db.Tactics.FirstOrDefault(t => t.Id == tacticId);
+            if (tactic != null)
+            {
+                Console.WriteLine($"Tactique trouvée avec l'ID {tacticId}: Nom : {tactic.Name}, Date de création : {tactic.CreationDate}");
+            }
+            else
+            {
+                Console.WriteLine($"Aucune tactique trouvée avec l'ID {tacticId}");
+            }
+        }
+
+        internal static void TestUpdateTactic(AppContext.AppContext db, int tacticId, string newName)
+        {
+            var tacticToUpdate = db.Tactics.FirstOrDefault(t => t.Id == tacticId);
+            if (tacticToUpdate != null)
+            {
+                tacticToUpdate.Name = newName;
+                db.SaveChanges();
+                Console.WriteLine($"Tactique mise à jour avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucune tactique trouvée avec l'ID {tacticId}");
+            }
+        }
+
+        internal static void TestDeleteTactic(AppContext.AppContext db, int tacticId)
+        {
+            var tacticToDelete = db.Tactics.FirstOrDefault(t => t.Id == tacticId);
+            if (tacticToDelete != null)
+            {
+                db.Tactics.Remove(tacticToDelete);
+                db.SaveChanges();
+                Console.WriteLine($"Tactique supprimée avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucune tactique trouvée avec l'ID {tacticId}");
+            }
+        }
+        
+        internal static void TestGetTacticsByOwner(AppContext.AppContext db, int ownerId)
+        {
+            var tactics = db.Tactics.Where(t => t.OwnerId == ownerId).ToList();
+            Console.WriteLine($"Tactiques de l'utilisateur avec l'ID {ownerId} :");
+            foreach (var tactic in tactics)
+            {
+                Console.WriteLine($"ID : {tactic.Id}, Nom : {tactic.Name}, Date de création : {tactic.CreationDate}");
+            }
+        }
+    }
+}

EFConsole/TacticsStepConsole.cs

@@ -0,0 +1,75 @@
+using System;
+using System.Linq;
+using AppContext.Entities;
+using Model;
+
+namespace EFConsole
+{
+    public class TacticsStepConsole
+    {
+        public static void TestAddTacticStep(AppContext.AppContext db)
+        {
+            var newTacticStep = new TacticStepEntity
+            {
+                ParentId = 1,
+                TacticId = 1,
+                JsonContent = "{}"
+            };
+
+            db.TacticSteps.Add(newTacticStep);
+            db.SaveChanges();
+
+            Console.WriteLine("Étape de tactique ajoutée avec succès !");
+        }
+
+        public static void TestGetAllTacticSteps(AppContext.AppContext db)
+        {
+            var tacticSteps = db.TacticSteps.ToList();
+            Console.WriteLine("Liste des étapes de tactique :");
+            foreach (var tacticStep in tacticSteps)
+            {
+                Console.WriteLine($"ID : {tacticStep.Id}, ID Tactique : {tacticStep.TacticId}, Contenu JSON : {tacticStep.JsonContent}");
+            }
+        }
+
+        public static void TestGetTacticStepsByTacticId(AppContext.AppContext db, int tacticId)
+        {
+            var tacticSteps = db.TacticSteps.Where(ts => ts.TacticId == tacticId).ToList();
+            Console.WriteLine($"Étapes de tactique pour la tactique avec l'ID {tacticId} :");
+            foreach (var tacticStep in tacticSteps)
+            {
+                Console.WriteLine($"ID : {tacticStep.Id}, ID Tactique : {tacticStep.TacticId}, Contenu JSON : {tacticStep.JsonContent}");
+            }
+        }
+
+        public static void TestUpdateTacticStepContent(AppContext.AppContext db, int tacticStepId, string newContent)
+        {
+            var tacticStepToUpdate = db.TacticSteps.FirstOrDefault(ts => ts.Id == tacticStepId);
+            if (tacticStepToUpdate != null)
+            {
+                tacticStepToUpdate.JsonContent = newContent;
+                db.SaveChanges();
+                Console.WriteLine("Contenu de l'étape de tactique mis à jour avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucune étape de tactique trouvée avec l'ID {tacticStepId} pour la mise à jour du contenu.");
+            }
+        }
+
+        public static void TestDeleteTacticStep(AppContext.AppContext db, int tacticStepId)
+        {
+            var tacticStepToDelete = db.TacticSteps.FirstOrDefault(ts => ts.Id == tacticStepId);
+            if (tacticStepToDelete != null)
+            {
+                db.TacticSteps.Remove(tacticStepToDelete);
+                db.SaveChanges();
+                Console.WriteLine("Étape de tactique supprimée avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucune étape de tactique trouvée avec l'ID {tacticStepId} pour la suppression.");
+            }
+        }
+    }
+}

EFConsole/TeamsConsole.cs

@@ -0,0 +1,85 @@
+using System;
+using System.Linq;
+using AppContext.Entities;
+
+namespace EFConsole
+{
+    class TeamsConsole
+    {
+        internal static void TestAddTeam(AppContext.AppContext db)
+        {
+            var newTeam = new TeamEntity
+            {
+                Name = "Nouvelle équipe",
+                Picture = "https://cdn.pixabay.com/photo/2015/10/05/22/37/blank-profile-picture-973460_960_720.png",
+                MainColor = "#0000FF",
+                SecondColor = "#FFFFFF"
+            };
+
+            db.Teams.Add(newTeam);
+            db.SaveChanges();
+
+            Console.WriteLine("Équipe ajoutée avec succès !");
+        }
+
+        internal static void TestGetAllTeams(AppContext.AppContext db)
+        {
+            var teams = db.Teams.ToList();
+            Console.WriteLine("Liste des équipes :");
+            foreach (var team in teams)
+            {
+                Console.WriteLine($"ID : {team.Id}, Nom : {team.Name}, Image : {team.Picture}, Couleur principale : {team.MainColor}, Couleur secondaire : {team.SecondColor}");
+            }
+        }
+
+        internal static void TestGetTeamMembers(AppContext.AppContext db, int teamId)
+        {
+            var team = db.Teams.FirstOrDefault(t => t.Id == teamId);
+            if (team != null)
+            {
+                Console.WriteLine($"Membres de l'équipe '{team.Name}' :");
+                foreach (var member in team.Members)
+                {
+                    Console.WriteLine($"ID : {member.UserId}, Nom : {member.User?.Name}, Rôle : {member.Role}");
+                }
+            }
+            else
+            {
+                Console.WriteLine($"Aucune équipe trouvée avec l'ID : {teamId}");
+            }
+        }
+
+        internal static void TestUpdateTeam(AppContext.AppContext db, int teamId, string newName, string newPicture, string newMainColor, string newSecondColor)
+        {
+            var teamToUpdate = db.Teams.FirstOrDefault(t => t.Id == teamId);
+            if (teamToUpdate != null)
+            {
+                teamToUpdate.Name = newName;
+                teamToUpdate.Picture = newPicture;
+                teamToUpdate.MainColor = newMainColor;
+                teamToUpdate.SecondColor = newSecondColor;
+                db.SaveChanges();
+                Console.WriteLine("Équipe mise à jour avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucune équipe trouvée avec l'ID : {teamId}");
+            }
+        }
+
+        internal static void TestDeleteTeam(AppContext.AppContext db, int teamId)
+        {
+            var teamToDelete = db.Teams.FirstOrDefault(t => t.Id == teamId);
+            if (teamToDelete != null)
+            {
+                db.Teams.Remove(teamToDelete);
+                db.SaveChanges();
+                Console.WriteLine("Équipe supprimée avec succès !");
+            }
+            else
+            {
+                Console.WriteLine($"Aucune équipe trouvée avec l'ID : {teamId}");
+            }
+        }
+    }
+}

EFConsole/UsersConsole.cs

@@ -0,0 +1,121 @@
+using Microsoft.EntityFrameworkCore;
+
+namespace EFConsole;
+
+
+class UsersConsole
+{
+    internal static void TestAddUser(AppContext.AppContext db)
+    {
+        var newUser = new AppContext.Entities.UserEntity
+        {
+            Name = "Pierre",
+            Email = "pierre@mail.com",
+            Password = "123456",
+            PasswordSalt = [1],
+            ProfilePicture = "https://cdn.pixabay.com/photo/2015/10/05/22/37/blank-profile-picture-973460_960_720.png",
+            IsAdmin = false
+        };
+        
+        db.Users.Add(newUser);
+        db.SaveChanges();
+
+        Console.WriteLine("Utilisateur ajouté avec succès !");
+    }
+
+    internal static void TestGetAllUsers(AppContext.AppContext db)
+    {
+        var users = db.Users.ToList();
+        Console.WriteLine("Liste des utilisateurs :");
+        foreach (var user in users)
+        {
+            Console.WriteLine($"ID : {user.Id}, Nom : {user.Name}, Email : {user.Email}");
+        }
+    }
+
+    internal static void TestFindUserByMail(AppContext.AppContext db, string userEmail)
+    {
+        var userByEmail = db.Users.FirstOrDefault(u => u.Email == userEmail);
+        if (userByEmail != null)
+        {
+            Console.WriteLine($"Utilisateur trouvé par email : {userByEmail.Name}");
+        }
+        else
+        {
+            Console.WriteLine($"Aucun utilisateur trouvé avec l'email : {userEmail}");
+        }
+    }
+
+    internal static void TestUpdateUser(AppContext.AppContext db)
+    {
+        var userToUpdate = db.Users.FirstOrDefault(u => u.Name == "Pierre");
+        if (userToUpdate != null)
+        {
+            userToUpdate.Name = "Paul";
+            db.SaveChanges();
+            Console.WriteLine("Utilisateur mis à jour avec succès !");
+        }
+        else
+        {
+            Console.WriteLine("Utilisateur non trouvé pour la mise à jour.");
+        }
+    }
+
+    internal static void TestDeleteUser(AppContext.AppContext db)
+    {
+        var userToDelete = db.Users.FirstOrDefault(u => u.Name == "Paul");
+        if (userToDelete != null)
+        {
+            db.Users.Remove(userToDelete);
+            db.SaveChanges();
+            Console.WriteLine("Utilisateur supprimé avec succès !");
+        }
+        else
+        {
+            Console.WriteLine("Utilisateur non trouvé pour la suppression.");
+        }
+    }
+
+    internal static void TestSearchUsersByName(AppContext.AppContext db, string userName)
+    {
+        var usersByName = db.Users.Where(u => u.Name == userName).ToList();
+        Console.WriteLine($"Utilisateurs avec le nom '{userName}' :");
+        foreach (var user in usersByName)
+        {
+            Console.WriteLine($"ID : {user.Id}, Nom : {user.Name}, Email : {user.Email}");
+        }
+    }
+    
+    internal static void TestGetTacticsOfAllUsers(AppContext.AppContext db)
+    {
+        Console.WriteLine("Récupération des tactiques de tous les utilisateurs :");
+
+        var users = db.Users.Include(u => u.Tactics).ToList();
+        foreach (var user in users)
+        {
+            Console.WriteLine($"Tactiques de l'utilisateur {user.Name}:");
+            foreach (var tactic in user.Tactics)
+            {
+                Console.WriteLine($"\tID : {tactic.Id}, Nom : {tactic.Name}, Date de création : {tactic.CreationDate}");
+            }
+        }
+    }
+
+    internal static void TestGetTacticsOfOneUser(AppContext.AppContext db, int userId)
+    {
+        var user = db.Users.Include(u => u.Tactics).FirstOrDefault(u => u.Id == userId);
+        if (user != null)
+        {
+            Console.WriteLine($"Récupération des tactiques de l'utilisateur {user.Name}:");
+            foreach (var tactic in user.Tactics)
+            {
+                Console.WriteLine($"\tID : {tactic.Id}, Nom : {tactic.Name}, Date de création : {tactic.CreationDate}");
+            }
+        }
+        else
+        {
+            Console.WriteLine($"Aucun utilisateur trouvé avec l'ID : {userId}");
+        }
+    }
+
+}

Model/SharedTactic.cs

@@ -0,0 +1,3 @@
+namespace Model;
+
+public record SharedTactic(int Id, int TacticId, int? SharedWithUserId, int? SharedWithTeamId);

Services/Failures/Failure.cs

@@ -7,8 +7,5 @@ public record Failure(string Name, string Message)
         return new("not found", message);
     }
     
-    public static Failure Forbidden(string message)
-    {
-        return new("forbidden", message);
-    }
+
 }

Services/ITacticService.cs

@@ -2,25 +2,101 @@ using Model;
 
 namespace Services;
 
+/// <summary>
+/// Represents a service interface for managing tactics.
+/// </summary>
 public interface ITacticService
 {
+    /// <summary>
+    /// Retrieves a list of tactics owned by the specified user.
+    /// </summary>
+    /// <param name="userId">The ID of the user.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains a list of tactics.</returns>
+    Task<IEnumerable<Tactic>> ListTacticsOf(int userId);
 
-    public Task<IEnumerable<Tactic>> ListTacticsOf(int userId);
-    
-    public Task<bool> HasAnyRights(int userId, int tacticId);
+    /// <summary>
+    /// Checks if the userId corresponds to the tactic's owner identifier
+    /// </summary>
+    /// <param name="userId">The ID of the user.</param>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains a boolean indicating whether the user has rights.</returns>
+    Task<bool> IsOwnerOf(int userId, int tacticId);
 
+    /// <summary>
+    /// Adds a new tactic for the specified user.
+    /// </summary>
+    /// <param name="userId">The ID of the user.</param>
+    /// <param name="name">The name of the tactic.</param>
+    /// <param name="courtType">The type of court.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains the ID of the newly added tactic.</returns>
+    Task<(int, int)> AddTactic(int userId, string name, CourtType courtType);
 
-    public Task<int> AddTactic(int userId, string name, CourtType courtType);
+    /// <summary>
+    /// Updates the name of the specified tactic.
+    /// </summary>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <param name="name">The new name of the tactic.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains a boolean indicating whether the update was successful.</returns>
+    Task<bool> UpdateName(int tacticId, string name);
 
-    public Task<bool> UpdateName(int tacticId, string name);
-    public Task<bool> SetTacticStepContent(int tacticId, int stepId, string json);
-    public Task<string?> GetTacticStepContent(int tacticId, int stepId);
+    /// <summary>
+    /// Sets the content of a tactic step.
+    /// </summary>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <param name="stepId">The ID of the step.</param>
+    /// <param name="json">The JSON content to set.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains a boolean indicating whether the operation was successful.</returns>
+    Task<bool> SetTacticStepContent(int tacticId, int stepId, string json);
 
-    public Task<Tactic?> GetTactic(int tacticId);
+    /// <summary>
+    /// Retrieves the content of a tactic step.
+    /// </summary>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <param name="stepId">The ID of the step.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains the JSON content of the step.</returns>
+    Task<string?> GetTacticStepContent(int tacticId, int stepId);
 
-    public Task<TacticStep> GetRootStep(int tacticId);
-    
-    public Task<IEnumerable<Tactic>> ListUserTactics(int userId);
-    public Task<int?> AddTacticStep(int tacticId, int parentStepId, string initialJson);
-    public Task<bool> RemoveTacticStep(int tacticId, int stepId);
+
+    public Task<bool> ShareTactic(int tacticId, int? userId, int? teamId);
+    public Task<bool> UnshareTactic(int tacticId, int? userId, int? teamId);
+
+    /// <summary>
+    /// Retrieves the root step of the specified tactic.
+    /// </summary>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains the root step of the tactic.</returns>
+    Task<TacticStep> GetRootStep(int tacticId);
+
+    /// <summary>
+    /// Retrieves the tactic with the specified ID.
+    /// </summary>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains the tactic.</returns>
+    Task<Tactic?> GetTactic(int tacticId);
+
+    /// <summary>
+    /// Retrieves a list of tactics owned by the specified user.
+    /// </summary>
+    /// <param name="userId">The ID of the user.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains a list of tactics.</returns>
+    Task<IEnumerable<Tactic>> ListUserTactics(int userId);
+
+    /// <summary>
+    /// Adds a new step to the specified tactic.
+    /// </summary>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <param name="parentStepId">The ID of the parent step.</param>
+    /// <param name="initialJson">The initial JSON content of the step.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains the ID of the newly added step.</returns>
+    Task<int?> AddTacticStep(int tacticId, int parentStepId, string initialJson);
+
+    /// <summary>
+    /// Removes the specified step from the tactic, along with its child steps if any.
+    /// </summary>
+    /// <param name="tacticId">The ID of the tactic.</param>
+    /// <param name="stepId">The ID of the step to remove.</param>
+    /// <returns>A task that represents the asynchronous operation. The task result contains a boolean indicating whether the removal was successful.</returns>
+    Task<bool> RemoveTacticStep(int tacticId, int stepId);
+
+    Task<bool> RemoveTactic(int tacticId);
 }

Services/ITeamService.cs

@@ -2,25 +2,92 @@ using Model;
 
 namespace Services;
 
+/// <summary>
+/// Represents a service for managing teams.
+/// </summary>
 public interface ITeamService
 {
-    public Task<IEnumerable<Team>> ListTeamsOf(int userId);
+    /// <summary>
+    /// Lists all teams associated with the specified <paramref name="userId"/>.
+    /// </summary>
+    Task<IEnumerable<Team>> ListTeamsOf(int userId);
 
+    /// <summary>
+    /// Lists a range of teams.
+    /// </summary>
+    Task<IEnumerable<Team>> ListTeams(int start, int count);
 
-    public Task<IEnumerable<Team>> ListTeams();
-    public Task<int> CountTotalTeams();
+    /// <summary>
+    /// Retrieves the total count of teams.
+    /// </summary>
+    Task<int> CountTotalTeams();
 
-    public Task<Team> AddTeam(string name, string picture, string firstColor, string secondColor);
-    public Task RemoveTeams(params int[] teams);
+    /// <summary>
+    /// Adds a new team.
+    /// </summary>
+    Task<Team> AddTeam(string name, string picture, string firstColor, string secondColor);
+    
+    Task<Team?> GetTeam(int id);
 
-    public IEnumerable<Member> GetMembersOf(int teamId);
+    /// <summary>
+    /// Removes one or more teams.
+    /// </summary>
+    Task RemoveTeams(params int[] teams);
 
-    public Task<Member> AddMember(int teamId, int userId, MemberRole role);
-    
-    public Task<bool> UpdateMember(Member member);
+    /// <summary>
+    /// Updates an existing team.
+    /// </summary>
+    Task<bool> UpdateTeam(Team team);
 
-    public Task<bool> RemoveMember(int teamId, int userId);
+    /// <summary>
+    /// Retrieves the members of the specified team.
+    /// </summary>
+    Task<IEnumerable<Member>> GetMembersOf(int teamId);
+
+    /// <summary>
+    /// Adds a new member to the team.
+    /// </summary>
+    Task<Member?> AddMember(int teamId, int userId, MemberRole role);
+
+    /// <summary>
+    /// Updates the role of a member within the team.
+    /// </summary>
+    Task<bool> UpdateMember(Member member);
+
+    /// <summary>
+    /// Removes a member from the team.
+    /// </summary>
+    Task<bool> RemoveMember(int teamId, int userId);
+
+
+    enum TeamAccessibility
+    {
+        /**
+         * The Team or the user is not found
+         */
+        NotFound,
+
+        /**
+         * Accessibility not granted
+         */
+        Unauthorized,
+
+        /**
+         * Accessibility granted
+         */
+        Authorized
+    }
+ 
+    public Task<IEnumerable<Tactic>> GetSharedTacticsToTeam(int teamId);
+
+    public Task<bool> IsUserInTeam(int userId, int teamId);
+
+
+    /**
+     * Ensures that the given user identifier van perform an operation that requires the given role permission.
+     * The returned result is the different kind of accessibility the service can grant to the user, based on its actual role inside the
+     * given team.
+     */
+    public Task<TeamAccessibility> EnsureAccessibility(int userId, int teamId, MemberRole role);
 
-    public Task<bool> UpdateTeam(Team team);
-    
 }

Services/ServiceException.cs

@@ -10,4 +10,11 @@ public class ServiceException : Exception
     {
         Failures = new List<Failure>(failures);
     }
+
+    public Dictionary<string, string[]> FailuresMessages()
+    {
+        return Failures.GroupBy(f => f.Name)
+            .Select(f => (f.Key, f.Select(f => f.Message).ToArray()))
+            .ToDictionary();
+    }
 }

Services/UserService.cs

@@ -2,24 +2,57 @@
 
 namespace Services;
 
+/// <summary>
+/// Represents a service for managing users.
+/// </summary>
 public interface IUserService
 {
-
+    /// <summary>
+    /// Retrieves the count of users whose names contain the specified needle.
+    /// </summary>
     Task<int> UsersCount(string nameNeedle);
+
+    /// <summary>
+    /// Retrieves the total count of users.
+    /// </summary>
     Task<int> UsersCount();
-    
-    Task<IEnumerable<User>> ListUsers(string nameNeedle);
-    Task<IEnumerable<User>> ListUsers();
 
+    /// <summary>
+    /// Lists a range of users, optionally filtering by name.
+    /// </summary>
+    Task<IEnumerable<User>> ListUsers(int start, int count, string? nameNeedle = null);
+
+    /// <summary>
+    /// Retrieves the user with the specified ID.
+    /// </summary>
     Task<User?> GetUser(int id);
+
+    /// <summary>
+    /// Retrieves the user with the specified email.
+    /// </summary>
     Task<User?> GetUser(string email);
 
+    /// <summary>
+    /// Creates a new user.
+    /// </summary>
     Task<User> CreateUser(string username, string email, string password, string profilePicture, bool isAdmin);
 
+    /// <summary>
+    /// Removes one or more users.
+    /// </summary>
     Task<bool> RemoveUsers(params int[] identifiers);
 
-    Task UpdateUser(User user);
+    /// <summary>
+    /// Updates an existing user.
+    /// </summary>
+    Task UpdateUser(User user, string? password = null);
+    
+    
+    public Task<IEnumerable<Tactic>> GetSharedTacticsToUser(int userId);
     
-    public Task<User?> Authorize(string email, string password);
 
+    /// <summary>
+    /// Authorizes a user with the specified email and password.
+    /// </summary>
+    Task<User?> Authorize(string email, string password);
 }

StubContext/StubAppContext.cs

@@ -1,4 +1,5 @@
 using AppContext.Entities;
+using DbServices;
 using Microsoft.EntityFrameworkCore;
 using Model;
 
@@ -24,20 +25,22 @@ public class StubAppContext(DbContextOptions<AppContext> options) : AppContext(o
         var i = 0;
 
         builder.Entity<UserEntity>()
-            .HasData(users.ConvertAll(name => new UserEntity
+            .HasData(users.ConvertAll(name =>
             {
-                Id = ++i,
-                Email = $"{name}@mail.com",
-                Name = name,
-                Password = "123456",
-                IsAdmin = true,
-                ProfilePicture =
-                    "https://cdn.pixabay.com/photo/2015/10/05/22/37/blank-profile-picture-973460_960_720.png",
+                var (password, salt) = Hashing.HashString("123456");
+                return new UserEntity
+                {
+                    Id = ++i,
+                    Email = $"{name}@mail.com",
+                    Name = name,
+                    Password = password,
+                    PasswordSalt = salt,
+                    IsAdmin = true,
+                    ProfilePicture =
+                        "https://cdn.pixabay.com/photo/2015/10/05/22/37/blank-profile-picture-973460_960_720.png",
+                };
             }));
 
-        builder.Entity<MemberEntity>()
-            .HasKey("TeamId", "UserId");
-
         builder.Entity<TacticEntity>()
             .HasData(new TacticEntity
             {
@@ -56,5 +59,56 @@ public class StubAppContext(DbContextOptions<AppContext> options) : AppContext(o
                 TacticId = 1,
                 ParentId = null
             });
+        
+        builder.Entity<SharedTacticEntity>()
+            .HasData(new SharedTacticEntity
+            {
+                Id = 1,
+                TacticId = 1,
+                SharedWithUserId = 2
+            });
+
+
+        builder.Entity<TeamEntity>()
+            .HasData(new TeamEntity
+            {
+                Id = 1,
+                Name = "Lakers",
+                Picture =
+                    "https://upload.wikimedia.org/wikipedia/commons/thumb/3/3c/Los_Angeles_Lakers_logo.svg/2560px-Los_Angeles_Lakers_logo.svg.png",
+                MainColor = "#FFFFFF",
+                SecondColor = "#000000",
+            });
+        
+        builder.Entity<TeamEntity>()
+            .HasData(new TeamEntity
+            {
+                Id = 2,
+                Name = "Auvergne",
+                Picture =
+                    "https://sancy.iut.uca.fr/~lafourcade/img/photo19.jpg",
+                MainColor = "#FFFFFF",
+                SecondColor = "#000000",
+            });
+        
+        
+        builder.Entity<MemberEntity>()
+            .HasKey("TeamId", "UserId");
+
+
+        builder.Entity<MemberEntity>()
+            .HasData(
+                new MemberEntity
+                {
+                    Role = MemberRole.Coach,
+                    UserId = 1,
+                    TeamId = 1
+                }, new MemberEntity
+                {
+                    Role = MemberRole.Player,
+                    UserId = 2,
+                    TeamId = 1
+                }
+            );
     }
 }

StubContext/StubContext.csproj

@@ -9,6 +9,7 @@
 
     <ItemGroup>
       <ProjectReference Include="..\AppContext\AppContext.csproj" />
+      <ProjectReference Include="..\Utils\Utils.csproj" />
     </ItemGroup>
 
     <ItemGroup>

UnitTests/AdminTeamsControllerTest.cs

@@ -0,0 +1,112 @@
+using API.Controllers.Admin;
+using DbServices;
+using FluentAssertions;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using Model;
+using StubContext;
+
+namespace UnitTests;
+
+public class AdminTeamsControllerTest
+{
+    private static (TeamsAdminController, AppContext.AppContext) GetController()
+    {
+        var connection = new SqliteConnection("Data Source=:memory:");
+        connection.Open();
+        var context = new StubAppContext(
+            new DbContextOptionsBuilder<AppContext.AppContext>()
+                .UseSqlite(connection)
+                .Options
+        );
+        context.Database.EnsureCreated();
+        var controller = new TeamsAdminController(
+            new DbTeamService(context),
+            new LoggerFactory().CreateLogger<TeamsAdminController>()
+        );
+
+        return (controller, context);
+    }
+
+    [Fact]
+    public async void CountTeamsTest()
+    {
+        var (controller, context) = GetController();
+        (await controller.CountTeams()).Should().BeEquivalentTo(new TeamsAdminController.CountTeamsResponse(2));
+    }
+
+    [Fact]
+    public async void ListTeamsTest()
+    {
+        var (controller, context) = GetController();
+        (await controller.ListTeams(0, 5)).Should().BeEquivalentTo(new Team[]
+        {
+            new(
+                1,
+                "Lakers",
+                "https://upload.wikimedia.org/wikipedia/commons/thumb/3/3c/Los_Angeles_Lakers_logo.svg/2560px-Los_Angeles_Lakers_logo.svg.png",
+                "#FFFFFF",
+                "#000000"
+            ),
+            new(
+                2,
+                "Auvergne",
+                "https://sancy.iut.uca.fr/~lafourcade/img/photo19.jpg",
+                "#FFFFFF",
+                "#000000"
+            )
+        });
+
+        (await controller.ListTeams(3, 5)).Should()
+            .BeEquivalentTo(new Team[] { });
+    }
+
+    [Fact]
+    public async void AddTeamTest()
+    {
+        var (controller, context) = GetController();
+        (await controller.AddTeam(new ("PANPAN", "https://ih1.redbubble.net/image.2005529554.3887/bg,f8f8f8-flat,750x,075,f-pad,750x1000,f8f8f8.jpg", "#FFFFFF", "#000000")))
+            .Should()
+            .BeEquivalentTo(controller.Ok(new Team(3, "PANPAN", "https://ih1.redbubble.net/image.2005529554.3887/bg,f8f8f8-flat,750x,075,f-pad,750x1000,f8f8f8.jpg", "#FFFFFF", "#000000")));
+
+        var teamEntity = await context.Teams.FirstOrDefaultAsync(t => t.Name == "PANPAN");
+        teamEntity.Should().NotBeNull();
+        teamEntity!.Id.Should().Be(3);
+        teamEntity.Picture.Should().BeEquivalentTo("https://ih1.redbubble.net/image.2005529554.3887/bg,f8f8f8-flat,750x,075,f-pad,750x1000,f8f8f8.jpg");
+        teamEntity.MainColor.Should().BeEquivalentTo("#FFFFFF");
+        teamEntity.SecondColor.Should().BeEquivalentTo("#000000");
+    }
+    
+    
+    [Fact]
+    public async void UpdateTeamTest()
+    {
+        var (controller, context) = GetController();
+        (await controller.UpdateTeam(1, new ("PANPAN", "https://ih1.redbubble.net/image.2005529554.3887/bg,f8f8f8-flat,750x,075,f-pad,750x1000,f8f8f8.jpg", "#FFFFFF", "#000000")))
+            .Should()
+            .BeEquivalentTo(controller.Ok());
+
+        var teamEntity = await context.Teams.FirstOrDefaultAsync(t => t.Name == "PANPAN");
+        teamEntity.Should().NotBeNull();
+        teamEntity!.Id.Should().Be(1);
+        teamEntity.Picture.Should().BeEquivalentTo("https://ih1.redbubble.net/image.2005529554.3887/bg,f8f8f8-flat,750x,075,f-pad,750x1000,f8f8f8.jpg");
+        teamEntity.MainColor.Should().BeEquivalentTo("#FFFFFF");
+        teamEntity.SecondColor.Should().BeEquivalentTo("#000000");
+    }
+    
+    [Fact]
+    public async void DeleteTeamsTest()
+    {
+        var (controller, context) = GetController();
+        (await controller.DeleteTeams(new TeamsAdminController.DeleteTeamsRequest([10, 1, 2])))
+            .Should()
+            .BeEquivalentTo(controller.Ok());
+
+        (await context.Teams.CountAsync()).Should().Be(0);
+        
+        (await controller.DeleteTeams(new TeamsAdminController.DeleteTeamsRequest([10, 1, 2])))
+            .Should()
+            .BeEquivalentTo(controller.Ok());
+    }
+}

UnitTests/AdminUserControllerTest.cs

@@ -4,6 +4,7 @@ using DbServices;
 using FluentAssertions;
 using Microsoft.Data.Sqlite;
 using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
 using Model;
 using StubContext;
 
@@ -23,7 +24,7 @@ public class AdminUserControllerTest
         );
         context.Database.EnsureCreated();
         var service = new DbUserService(context);
-        return new UsersAdminController(service);
+        return new UsersAdminController(service, new LoggerFactory().CreateLogger<UsersAdminController>());
     }
 
 
@@ -122,5 +123,9 @@ public class AdminUserControllerTest
 
         var userResult = await controller.GetUser(1);
         userResult.Should().BeEquivalentTo(controller.Ok(new User(1, "maxou", "maxou@mail.com", UsersController.DefaultProfilePicture, false)));
+        
+        
+        result = await controller.UpdateUser(10, new("maxou", "maxou@mail.com", false));
+        result.Should().BeEquivalentTo(controller.BadRequest());
     }
 }

UnitTests/AuthControllerTests.cs

@@ -0,0 +1,56 @@
+using API.Controllers;
+using DbServices;
+using FluentAssertions;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Configuration;
+using Moq;
+using StubContext;
+
+namespace UnitTests;
+
+public class AuthControllerTests
+{
+    public static AuthenticationController GetController()
+    {
+        var connection = new SqliteConnection("Data Source=:memory:");
+        connection.Open();
+        var context = new StubAppContext(
+            new DbContextOptionsBuilder<AppContext.AppContext>()
+                .UseSqlite(connection)
+                .Options
+        );
+        context.Database.EnsureCreated();
+
+        var mock = new Mock<IConfiguration>();
+        mock.Setup(c => c["JWT:Key"]).Returns("qzdjnqzdjzdnjzdjqzdjzdqzdnzqdnzqdjnzqd");
+        
+        
+        var controller = new AuthenticationController(
+            new DbUserService(context),
+            mock.Object
+        );
+
+        return controller;
+    }
+
+
+    [Fact]
+    public async void GenerateTokenTest()
+    {
+        var controller = GetController();
+        var result = await controller.GenerateToken(new("maxime@mail.com", "123456"));
+        result.Should()
+            .BeAssignableTo(controller.Ok("").GetType());
+    }
+    
+    [Fact]
+    public async void RegisterTest()
+    {
+        var controller = GetController();
+        var result = await controller.RegisterAccount(new("test", "test@mail.com", "123456"));
+        result.Should()
+            .BeAssignableTo(controller.Ok("").GetType());
+    }
+    
+}

UnitTests/TacticsControllerTest.cs

@@ -2,7 +2,6 @@ using API.Controllers;
 using API.DTO;
 using DbServices;
 using FluentAssertions;
-using Microsoft.AspNetCore.Mvc;
 using Microsoft.Data.Sqlite;
 using Microsoft.EntityFrameworkCore;
 using Model;
@@ -72,7 +71,7 @@ public class TacticsControllerTest
     {
         var (controller, context) = GetController(1);
         var result = await controller.CreateNew(new("Test Tactic", "pLaIn"));
-        result.Should().BeEquivalentTo(new TacticController.CreateNewResponse(2));
+        result.Should().BeEquivalentTo(new TacticController.CreateNewResponse(2, 2));
         var tactic = await context.Tactics.FirstOrDefaultAsync(e => e.Id == 2);
         tactic.Should().NotBeNull();
         tactic!.Name.Should().BeEquivalentTo("Test Tactic");

UnitTests/TeamsControllerTest.cs

@@ -0,0 +1,100 @@
+using API.Controllers;
+using DbServices;
+using FluentAssertions;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+using Model;
+using StubContext;
+
+namespace UnitTests;
+
+public class TeamsControllerTest
+{
+    private static (TeamsController, AppContext.AppContext) GetController(int userId)
+    {
+        var connection = new SqliteConnection("Data Source=:memory:");
+        connection.Open();
+        var context = new StubAppContext(
+            new DbContextOptionsBuilder<AppContext.AppContext>()
+                .UseSqlite(connection)
+                .Options
+        );
+        context.Database.EnsureCreated();
+        var controller = new TeamsController(
+            new DbTeamService(context), 
+            new DbTacticService(context),
+            new DbUserService(context),
+            new ManualContextAccessor(userId)
+        );
+
+        return (controller, context);
+    }
+
+    [Fact]
+    public async void CreateTeamTest()
+    {
+        var (controller, context) = GetController(1);
+        var result = await controller.CreateTeam(new("Space Station", "55652433-1DB1-4778-A1FA-D56060BA1F1C", "#FFFFFF",
+            "#AAFFBB"));
+        result.Should().BeEquivalentTo(controller.Ok(new Team(3, "Space Station",
+            "55652433-1DB1-4778-A1FA-D56060BA1F1C", "#FFFFFF", "#AAFFBB")));
+        (await context.Teams.FindAsync(3))!.Name.Should().BeEquivalentTo("Space Station");
+        (await context.Members.AnyAsync(m => m.TeamId == 3 && m.UserId == 1)).Should().BeTrue();
+    }
+
+    [Fact]
+    public async void GetMembersOfTest()
+    {
+        var (controller, context) = GetController(1);
+        var result = await controller.GetMembersOf(1);
+        // result.Should().BeEquivalentTo(controller.Ok(new Member[]
+        // {
+        //     new(1, 1, MemberRole.Coach),
+        //     new(1, 2, MemberRole.Player)
+        // }));
+    }
+
+    [Fact]
+    public async void AddMemberTest()
+    {
+        var (controller, context) = GetController(1);
+        var result = await controller.AddMember(1, new(3, "COACH"));
+        result.Should().BeEquivalentTo(controller.Ok(new Member(1, 3, MemberRole.Coach)));
+
+        (await context.Members.AnyAsync(m => m.TeamId == 1 && m.UserId == 3)).Should().BeTrue();
+
+        result = await controller.AddMember(1, new(3, "COACH"));
+        result.Should().BeEquivalentTo(controller.Forbid());
+    }
+
+    [Fact]
+    public async void UpdateMemberTest()
+    {
+        var (controller, context) = GetController(1);
+        var result = await controller.UpdateMember(1, 2, new("COACH"));
+        result.Should().BeEquivalentTo(controller.Ok());
+        
+        (await context.Members.FirstAsync(m => m.TeamId == 1 && m.UserId == 2)).Role.Should().Be(MemberRole.Coach);
+        
+        result = await controller.UpdateMember(10, 2, new("COACH"));
+        result.Should().BeEquivalentTo(controller.NotFound());
+        
+        result = await controller.UpdateMember(1, 3, new("COACH"));
+        result.Should().BeEquivalentTo(controller.NotFound());
+    }
+    
+    
+    [Fact]
+    public async void RemoveMemberTest()
+    {
+        var (controller, context) = GetController(1);
+        var result = await controller.RemoveMember(1, 2);
+        result.Should().BeEquivalentTo(controller.Ok());
+        
+        result = await controller.RemoveMember(10, 2);
+        result.Should().BeEquivalentTo(controller.NotFound());
+        
+        result = await controller.RemoveMember(1, 3);
+        result.Should().BeEquivalentTo(controller.NotFound());
+    }
+}

UnitTests/UserControllerTest.cs

@@ -1,7 +1,7 @@
 using API.Controllers;
-using API.DTO;
 using DbServices;
 using FluentAssertions;
+using Microsoft.AspNetCore.Mvc;
 using Microsoft.Data.Sqlite;
 using Microsoft.EntityFrameworkCore;
 using Model;
@@ -45,9 +45,51 @@ public class UsersControllerTest
     {
         var controller = GetUserController(1);
         var result = await controller.GetUserData();
-        result.Should().BeEquivalentTo(new UsersController.GetUserDataResponse(
-            [],
-            [new TacticDto(1, "New tactic", 1, "PLAIN", 1717106400000L)]
-        ));
+        // result.Should().BeEquivalentTo(new UsersController.GetUserDataResponse(
+        //     [new Team(1, "Lakers", "https://upload.wikimedia.org/wikipedia/commons/thumb/3/3c/Los_Angeles_Lakers_logo.svg/2560px-Los_Angeles_Lakers_logo.svg.png", "#FFFFFF", "#000000")],
+        //     [new TacticDto(1, "New tactic", 1, "PLAIN", 1717106400000L)]
+        // ));
     }
+    
+    [Fact]
+    public async Task ShareTacticTest()
+    {
+        var controller = GetUserController(1);
+        var result = await controller.ShareTactic(new UsersController.ShareTacticToUserRequest(1, 2));
+        result.Should().BeOfType<OkResult>();
+    }
+    
+    [Fact]
+    public async Task GetSharedTacticsToUserTest()
+    {
+        var controller = GetUserController(2);
+        var result = await controller.GetSharedTacticsToUser(2);
+
+        var okResult = result as OkObjectResult;
+        var sharedTactics = okResult!.Value as IEnumerable<Tactic>;
+        
+        sharedTactics!.Should().NotBeNull();
+        sharedTactics.Should().ContainSingle();
+
+        var tactic = sharedTactics.First();
+        tactic.Id.Should().Be(1);
+    }
+
+    [Fact]
+    public async Task UnshareTacticTest()
+    {
+        var controller = GetUserController(1);
+        var result = await controller.UnshareTactic(1, 2);
+        result.Should().BeOfType<OkResult>();
+    }
+
+    [Fact]
+    public async Task TestChangeUserInformation()
+    {
+        var controller = GetUserController(1);
+        await controller.ChangeUserInformation(new("a", "b", "c", "d"));
+        var user = await controller.GetUser();
+        user.Should().BeEquivalentTo(new User(1, "b", "a", "c", true));
+    }
+
 }

Utils/Hashing.cs

@@ -0,0 +1,35 @@
+using System.Security.Cryptography;
+using Microsoft.AspNetCore.Cryptography.KeyDerivation;
+
+namespace DbServices;
+
+public class Hashing
+{
+    public static (string, byte[]) HashString(string str)
+    {
+        byte[] salt = RandomNumberGenerator.GetBytes(128 / 8);
+        string hashed = Convert.ToBase64String(KeyDerivation.Pbkdf2(
+            password: str,
+            salt,
+            prf: KeyDerivationPrf.HMACSHA256,
+            iterationCount: 50000,
+            numBytesRequested: 256 / 8
+        ));
+
+        return (hashed, salt);
+    }
+
+    public static bool PasswordsMatches(string password, string str, byte[] salt)
+    {
+        string hashed = Convert.ToBase64String(KeyDerivation.Pbkdf2(
+            password: str,
+            salt,
+            prf: KeyDerivationPrf.HMACSHA256,
+            iterationCount: 50000,
+            numBytesRequested: 256 / 8
+        ));
+
+        return hashed == password;
+    }
+
+}

Utils/Utils.csproj

@@ -0,0 +1,13 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+    <PropertyGroup>
+        <TargetFramework>net8.0</TargetFramework>
+        <ImplicitUsings>enable</ImplicitUsings>
+        <Nullable>enable</Nullable>
+    </PropertyGroup>
+
+    <ItemGroup>
+      <PackageReference Include="Microsoft.AspNetCore.Cryptography.KeyDerivation" Version="9.0.0-preview.2.24128.4" />
+    </ItemGroup>
+
+</Project>

WebAPI.sln

@@ -16,6 +16,12 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Converters", "Converters\Co
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "UnitTests", "UnitTests\UnitTests.csproj", "{82A100BE-5610-4741-8F23-1CD653E8EFCD}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "EFConsole", "EFConsole\EFConsole.csproj", "{DC9ACDB3-83BC-4DF2-84C7-070361648975}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "APIConsole", "APIConsole\APIConsole.csproj", "{B01BD72E-15D3-4DC6-8DAC-2270A01129A9}"
+EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Utils", "Utils\Utils.csproj", "{D6FC4ED1-B4F8-4801-BC79-94627A1E6E0F}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
@@ -62,5 +68,17 @@ Global
 		{82A100BE-5610-4741-8F23-1CD653E8EFCD}.Debug|Any CPU.Build.0 = Debug|Any CPU
 		{82A100BE-5610-4741-8F23-1CD653E8EFCD}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{82A100BE-5610-4741-8F23-1CD653E8EFCD}.Release|Any CPU.Build.0 = Release|Any CPU
+		{DC9ACDB3-83BC-4DF2-84C7-070361648975}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{DC9ACDB3-83BC-4DF2-84C7-070361648975}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{DC9ACDB3-83BC-4DF2-84C7-070361648975}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{DC9ACDB3-83BC-4DF2-84C7-070361648975}.Release|Any CPU.Build.0 = Release|Any CPU
+		{B01BD72E-15D3-4DC6-8DAC-2270A01129A9}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{B01BD72E-15D3-4DC6-8DAC-2270A01129A9}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{B01BD72E-15D3-4DC6-8DAC-2270A01129A9}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{B01BD72E-15D3-4DC6-8DAC-2270A01129A9}.Release|Any CPU.Build.0 = Release|Any CPU
+		{D6FC4ED1-B4F8-4801-BC79-94627A1E6E0F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{D6FC4ED1-B4F8-4801-BC79-94627A1E6E0F}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{D6FC4ED1-B4F8-4801-BC79-94627A1E6E0F}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{D6FC4ED1-B4F8-4801-BC79-94627A1E6E0F}.Release|Any CPU.Build.0 = Release|Any CPU
 	EndGlobalSection
 EndGlobal

ci/.drone.yml

@@ -2,10 +2,26 @@ kind: pipeline
 type: docker
 name: "CI/CD"
 
-    
+
 steps:
+
+  - image: mcr.microsoft.com/dotnet/sdk:8.0
+    name: "Run Tests and sonar"
+    commands:
+      - apt update && apt install openjdk-17-jre -y
+      - dotnet tool install --global dotnet-sonarscanner
+      - dotnet tool install --global dotnet-coverage
+      - export PATH="$PATH:/root/.dotnet/tools"
+      - dotnet sonarscanner begin /k:"IQBall-WebAPI" /d:sonar.host.url="https://codefirst.iut.uca.fr/sonar" /d:sonar.login="sqp_b16ad09dcce1b9dde920e313b10c2fe85566624c" /d:sonar.cs.vscoveragexml.reportsPaths=coverage.xml
+      - dotnet build
+      - dotnet-coverage collect "dotnet test" -f xml -o coverage.xml
+      - dotnet sonarscanner end /d:sonar.login="sqp_b16ad09dcce1b9dde920e313b10c2fe85566624c"
+
+
   - image: plugins/docker
     name: "build and push docker image"
+    depends_on:
+      - "Run Tests and sonar"
     settings:
       dockerfile: ci/API.dockerfile
       context: .
@@ -17,23 +33,20 @@ steps:
         from_secret: SECRET_REGISTRY_USERNAME
       password:
         from_secret: SECRET_REGISTRY_PASSWORD
-        
+  
   # deploy staging database and server on codefirst
-  - image: eeacms/rsync:latest
+  - image: ubuntu:latest
     name: "Instantiate docker images on staging server"
     depends_on:
       - "build and push docker image"
-    environment: 
+    environment:
       PRIVATE_KEY:
         from_secret: PRIVATE_KEY
     commands:
-      - mkdir -p ~/.ssh
-      - echo "$PRIVATE_KEY" > ~/.ssh/id_rsa
-      - chmod 0600 ~/.ssh
-      - chmod 0500 ~/.ssh/id_rsa*
-      - rsync -avz -e "ssh -p 80 -o 'StrictHostKeyChecking=no'" ci/deploy_staging_server.sh iqball@maxou.dev:/srv/www/iqball/$DRONE_BRANCH/
-      - ssh -p 80 -o 'StrictHostKeyChecking=no' iqball@maxou.dev "chmod +x /srv/www/iqball/$DRONE_BRANCH/deploy_staging_server.sh && /srv/www/iqball/$DRONE_BRANCH/deploy_staging_server.sh $(echo $DRONE_BRANCH | tr / _) $DRONE_COMMIT_SHA"
-    
+      - chmod +x ci/deploy_staging_server_step.sh
+      - ci/deploy_staging_server_step.sh
+
+
 #   Deploy the production database and server on codefirst
 #  - image: hub.codefirst.iut.uca.fr/thomas.bellembois/codefirst-dockerproxy-clientdrone:latest
 #    name: "Instantiate dotnet api docker image on codefirst"

ci/deploy_staging_server.sh

@@ -3,13 +3,14 @@
 set -exu
 
 BRANCH=$1
+BRANCH_ESCAPED=$(echo $BRANCH | tr / _)
 COMMIT_SHA=$2
 
-API_CONTAINER_NAME="iqball-api-dotnet-$BRANCH"
-DB_CONTAINER_NAME="iqball-db-$BRANCH"
+API_CONTAINER_NAME="iqball-api-dotnet-$BRANCH_ESCAPED"
+DB_CONTAINER_NAME="iqball-db-$BRANCH_ESCAPED"
 
 (docker stop "$API_CONTAINER_NAME" && docker rm "$API_CONTAINER_NAME") || true
-docker volume create "iqball-migrations-$BRANCH" || true
+docker volume create "iqball-migrations-$BRANCH_ESCAPED" || true
 
 docker run -d \
   --name "$DB_CONTAINER_NAME" \
@@ -25,12 +26,12 @@ docker run --rm -t \
   --env PGSQL_DSN="Server=$DB_CONTAINER_NAME;Username=iqball;Password=1234;Database=iqball" \
   --env BRANCH="$BRANCH" \
   --env COMMIT_SHA="$COMMIT_SHA" \
-  --mount source="iqball-migrations-$BRANCH",target=/migrations \
+  --mount source="iqball-migrations-$BRANCH_ESCAPED",target=/migrations \
   --network iqball_net \
   iqball-db-init:latest
 
 
-docker pull "hub.codefirst.iut.uca.fr/maxime.batista/iqball-api-dotnet:$BRANCH"
+docker pull "hub.codefirst.iut.uca.fr/maxime.batista/iqball-api-dotnet:$BRANCH_ESCAPED"
 
 # run the API
 docker run -d \
@@ -38,7 +39,7 @@ docker run -d \
   --restart=always \
   --network iqball_net \
   --env PGSQL_DSN="Server=$DB_CONTAINER_NAME;Username=iqball;Password=1234;Database=iqball" \
-  "hub.codefirst.iut.uca.fr/maxime.batista/iqball-api-dotnet:$BRANCH"
+  "hub.codefirst.iut.uca.fr/maxime.batista/iqball-api-dotnet:$BRANCH_ESCAPED"
 
 
 

ci/deploy_staging_server_step.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+set -exu
+
+apt update && apt install rsync openssh-client -y
+
+mkdir -p ~/.ssh
+echo "$PRIVATE_KEY" > ~/.ssh/id_rsa
+chmod 0600 ~/.ssh
+chmod 0500 ~/.ssh/id_rsa*
+ssh -p 80 -o 'StrictHostKeyChecking=no' iqball@maxou.dev mkdir -p /srv/www/iqball/$DRONE_BRANCH/
+rsync -avz -e "ssh -p 80 -o 'StrictHostKeyChecking=no'" ci/deploy_staging_server.sh iqball@maxou.dev:/srv/www/iqball/$DRONE_BRANCH/
+ssh -p 80 -o 'StrictHostKeyChecking=no' iqball@maxou.dev "chmod +x /srv/www/iqball/$DRONE_BRANCH/deploy_staging_server.sh && /srv/www/iqball/$DRONE_BRANCH/deploy_staging_server.sh $DRONE_BRANCH $DRONE_COMMIT_SHA"
+