ersatztv/ErsatzTV.Application/Auth/RotateLocalAdminSecurityStampHandler.cs

using ErsatzTV.Core.Domain;
using ErsatzTV.Infrastructure.Data;
using Microsoft.EntityFrameworkCore;

namespace ErsatzTV.Application.Auth;

public class RotateLocalAdminSecurityStampHandler(IDbContextFactory<TvContext> dbContextFactory)
    : IRequestHandler<RotateLocalAdminSecurityStamp, Unit>
{
    public async Task<Unit> Handle(RotateLocalAdminSecurityStamp request, CancellationToken cancellationToken)
    {
        await using TvContext dbContext = await dbContextFactory.CreateDbContextAsync(cancellationToken);

        ConfigElement stampRow = await dbContext.ConfigElements
            .FirstOrDefaultAsync(c => c.Key == ConfigElementKey.AuthSecurityStamp.Key, cancellationToken);

        // No local admin configured → nothing to revoke.
        if (stampRow is null)
        {
            return Unit.Default;
        }

        stampRow.Value = LocalAdminHelpers.NewSecurityStamp();
        await dbContext.SaveChangesAsync(cancellationToken);

        return Unit.Default;
    }
}