hrms-api-backend/BMA.EHR.Placement.Service/Controllers/PlacementTransferController.cs

using BMA.EHR.Application.Repositories;
using BMA.EHR.Application.Repositories.MessageQueue;
using BMA.EHR.Domain.Common;
using BMA.EHR.Domain.Extensions;
using BMA.EHR.Domain.Models.Placement;
using BMA.EHR.Domain.Shared;
using BMA.EHR.Infrastructure.Persistence;
using BMA.EHR.Placement.Service.Requests;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;
using Newtonsoft.Json;
using Swashbuckle.AspNetCore.Annotations;
using System.Net.Http.Headers;
using System.Security.Claims;
using Newtonsoft.Json.Linq;

namespace BMA.EHR.Placement.Service.Controllers
{
    [Route("api/v{version:apiVersion}/placement/transfer")]
    [ApiVersion("1.0")]
    [ApiController]
    [Produces("application/json")]
    [Authorize]
    [SwaggerTag("ระบบคำขอโอน")]
    public class PlacementTransferController : BaseController
    {
        private readonly PlacementRepository _repository;
        private readonly NotificationRepository _repositoryNoti;
        private readonly ApplicationDBContext _context;
        private readonly MinIOService _documentService;
        private readonly IHttpContextAccessor _httpContextAccessor;
        private readonly IConfiguration _configuration;
        private readonly PermissionRepository _permission;

        public PlacementTransferController(PlacementRepository repository,
                                   NotificationRepository repositoryNoti,
                                   ApplicationDBContext context,
                                   MinIOService documentService,
                                   IHttpContextAccessor httpContextAccessor,
                                   IConfiguration configuration,
                                   PermissionRepository permission)
        {
            _repository = repository;
            _repositoryNoti = repositoryNoti;
            _context = context;
            _documentService = documentService;
            _httpContextAccessor = httpContextAccessor;
            _configuration = configuration;
            _permission = permission;
        }

        #region " Properties "

        private string? UserId => _httpContextAccessor?.HttpContext?.User?.FindFirst(ClaimTypes.NameIdentifier)?.Value;

        private string? FullName => _httpContextAccessor?.HttpContext?.User?.FindFirst("name")?.Value;
        private string? token => _httpContextAccessor?.HttpContext?.Request.Headers["Authorization"];

        private bool? PlacementAdmin => _httpContextAccessor?.HttpContext?.User?.IsInRole("placement1");

        #endregion

        /// <summary>
        /// list รายการคำขอโอนของ User
        /// </summary>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpGet("user")]
        public async Task<ActionResult<ResponseObject>> GetListByProfile()
        {
            var apiUrl = $"{_configuration["API"]}/org/profile/keycloak/position";
            using (var client = new HttpClient())
            {
                client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token.Replace("Bearer ", ""));
                client.DefaultRequestHeaders.Add("api_key", _configuration["API_KEY"]);
                var _req = new HttpRequestMessage(HttpMethod.Get, apiUrl);
                var _res = await client.SendAsync(_req);
                var _result = await _res.Content.ReadAsStringAsync();

                var org = JsonConvert.DeserializeObject<OrgRequest>(_result);

                if (org == null || org.result == null)
                    return Error("ไม่พบหน่วยงานของผู้ใช้งานคนนี้", 404);

                var placementTransfers = await _context.PlacementTransfers.AsQueryable()
                            .Where(x => x.profileId == org.result.profileId)
                            .OrderByDescending(x => x.CreatedAt)
                            .Select(p => new
                            {
                                p.Id,
                                p.profileId,
                                p.prefix,
                                p.firstName,
                                p.lastName,
                                p.rootOld,
                                p.rootOldId,
                                p.rootShortNameOld,
                                p.child1Old,
                                p.child1OldId,
                                p.child1ShortNameOld,
                                p.child2Old,
                                p.child2OldId,
                                p.child2ShortNameOld,
                                p.child3Old,
                                p.child3OldId,
                                p.child3ShortNameOld,
                                p.child4Old,
                                p.child4OldId,
                                p.child4ShortNameOld,
                                p.posMasterNoOld,
                                p.posTypeOldId,
                                p.posTypeNameOld,
                                p.posLevelOldId,
                                p.posLevelNameOld,
                                p.CreatedAt,
                                p.Organization,
                                p.Reason,
                                p.Status,
                                p.Date,
                                salary = p.AmountOld,
                                p.PositionTypeOld,
                                p.PositionLevelOld,
                                p.PositionNumberOld,
                                p.OrganizationPositionOld,
                                p.IsActive,
                            })
                            .ToListAsync();
                //if (keyword != "")
                //{
                //    var data = placementTransfers.Where(x =>
                //            (x.OrganizationPositionOld != null && x.OrganizationPositionOld.Contains(keyword)) ||
                //            (x.rootShortNameOld != null && x.rootShortNameOld.Contains(keyword)) ||
                //            (x.PositionNumberOld != null && x.PositionNumberOld.Contains(keyword)) ||
                //            (x.posTypeNameOld != null && x.posTypeNameOld.Contains(keyword)) ||
                //            (x.posLevelNameOld != null && x.posLevelNameOld.Contains(keyword)) ||
                //            (x.Organization != null && x.Organization.Contains(keyword))
                //            )
                //            .OrderByDescending(x => x.CreatedAt)
                //                .Skip((page - 1) * pageSize)
                //                .Take(pageSize)
                //           .ToList();

                //    placementTransfers = data;
                //}
                return Success(placementTransfers);
            }
        }

        /// <summary>
        /// list รายการคำขอโอนของ Admin
        /// </summary>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpGet()]
        public async Task<ActionResult<ResponseObject>> GetListByAdmin()
        // public async Task<ActionResult<ResponseObject>> GetListByAdmin(int page = 1, int pageSize = 10, string keyword = "")
        {
            var getPermission = await _permission.GetPermissionAPIAsync("LIST", "SYS_TRANSFER_REQ");
            var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
            if (jsonData["status"]?.ToString() != "200")
            {
                return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
            }
            var rootId = "";
            var child1Id = "";
            var child2Id = "";
            var child3Id = "";
            var child4Id = "";
            var apiUrl = $"{_configuration["API"]}/org/profile/keycloak/position";
            using (var client = new HttpClient())
            {
                client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token.Replace("Bearer ", ""));
                client.DefaultRequestHeaders.Add("api_key", _configuration["API_KEY"]);
                var _req = new HttpRequestMessage(HttpMethod.Get, apiUrl);
                var _res = await client.SendAsync(_req);
                var _result = await _res.Content.ReadAsStringAsync();

                var org = JsonConvert.DeserializeObject<OrgRequest>(_result);

                if (org == null || org.result == null)
                    return Error("ไม่พบหน่วยงานของผู้ใช้งานคนนี้", 404);
                rootId = org.result.rootId == null ? "" : org.result.rootId;
                child1Id = org.result.child1Id == null ? "" : org.result.child1Id;
                child2Id = org.result.child2Id == null ? "" : org.result.child2Id;
                child3Id = org.result.child3Id == null ? "" : org.result.child3Id;
                child4Id = org.result.child4Id == null ? "" : org.result.child4Id;

                var placementTransfers = await _context.PlacementTransfers.AsQueryable()
                            .OrderByDescending(x => x.CreatedAt)
                            .Where(x => PlacementAdmin == true ? true : (rootId == "" ? true : (child1Id == "" ? x.rootOldId == rootId : (child2Id == "" ? x.child1OldId == child1Id : (child3Id == "" ? x.child2OldId == child2Id : (child4Id == "" ? x.child3OldId == child3Id : x.child4OldId == child4Id))))))
                            .Select(p => new
                            {
                                p.Id,
                                p.profileId,
                                p.prefix,
                                p.firstName,
                                p.lastName,
                                p.rootOld,
                                p.rootOldId,
                                p.rootShortNameOld,
                                p.child1Old,
                                p.child1OldId,
                                p.child1ShortNameOld,
                                p.child2Old,
                                p.child2OldId,
                                p.child2ShortNameOld,
                                p.child3Old,
                                p.child3OldId,
                                p.child3ShortNameOld,
                                p.child4Old,
                                p.child4OldId,
                                p.child4ShortNameOld,
                                p.PositionOld,
                                p.posMasterNoOld,
                                p.posTypeOldId,
                                p.posTypeNameOld,
                                p.posLevelOldId,
                                p.posLevelNameOld,
                                p.CreatedAt,
                                p.Organization,
                                p.Reason,
                                p.Status,
                                p.Date,
                                salary = p.AmountOld,
                                p.PositionTypeOld,
                                p.PositionLevelOld,
                                p.PositionNumberOld,
                                p.OrganizationPositionOld,
                                p.IsActive,
                            })
                            .ToListAsync();

                // if (keyword != "")
                // {
                //     var data = placementTransfers.Where(x =>
                //             (x.prefix != null && x.prefix.Contains(keyword)) ||
                //             (x.firstName != null && x.firstName.Contains(keyword)) ||
                //             (x.lastName != null && x.lastName.Contains(keyword)) ||
                //             (x.posTypeNameOld != null && x.posTypeNameOld.Contains(keyword)) ||
                //             (x.posLevelNameOld != null && x.posLevelNameOld.Contains(keyword)))
                //         .OrderByDescending(x => x.CreatedAt)
                //         .Skip((page - 1) * pageSize)
                //         .Take(pageSize)
                //         .ToList();

                //     placementTransfers = data;
                // }

                return Success(placementTransfers);
            }
        }

        /// <summary>
        /// get รายละเอียดคำขอโอน
        /// </summary>
        /// <param name="id">Id คำขอโอน</param>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpGet("user/{id:length(36)}")]
        public async Task<ActionResult<ResponseObject>> GetDetailByUser(Guid id)
        {
            var data = await _context.PlacementTransfers.AsQueryable()
                        .Where(x => x.Id == id)
                        .Select(p => new
                        {
                            p.Id,
                            p.profileId,
                            p.prefix,
                            p.firstName,
                            p.lastName,
                            p.rootOld,
                            p.rootOldId,
                            p.rootShortNameOld,
                            p.child1Old,
                            p.child1OldId,
                            p.child1ShortNameOld,
                            p.child2Old,
                            p.child2OldId,
                            p.child2ShortNameOld,
                            p.child3Old,
                            p.child3OldId,
                            p.child3ShortNameOld,
                            p.child4Old,
                            p.child4OldId,
                            p.child4ShortNameOld,
                            p.posMasterNoOld,
                            p.posTypeOldId,
                            p.posTypeNameOld,
                            p.posLevelOldId,
                            p.posLevelNameOld,
                            p.Reason,
                            p.Status,
                            p.Organization,
                            p.Date,
                            salary = p.AmountOld,
                            p.CreatedAt,
                            p.PositionTypeOld,
                            p.PositionLevelOld,
                            p.PositionNumberOld,
                            p.OrganizationPositionOld,
                            p.PositionOld,
                            PlacementTransferDocs = p.PlacementTransferDocs.Where(d => d.Document != null).Select(d => new { d.Document.Id, d.Document.FileName }),
                        })
                       .FirstOrDefaultAsync();
            if (data == null)
                return Error(GlobalMessages.DataNotFound, 404);

            var placementTransferDocs = new List<dynamic>();
            foreach (var doc in data.PlacementTransferDocs)
            {
                var _doc = new
                {
                    FileName = doc.FileName,
                    PathName = await _documentService.ImagesPath(doc.Id)
                };
                placementTransferDocs.Add(_doc);
            }
            var _data = new
            {
                data.Id,
                data.profileId,
                data.prefix,
                data.firstName,
                data.lastName,
                data.rootOld,
                data.rootOldId,
                data.rootShortNameOld,
                data.child1Old,
                data.child1OldId,
                data.child1ShortNameOld,
                data.child2Old,
                data.child2OldId,
                data.child2ShortNameOld,
                data.child3Old,
                data.child3OldId,
                data.child3ShortNameOld,
                data.child4Old,
                data.child4OldId,
                data.child4ShortNameOld,
                data.posMasterNoOld,
                data.posTypeOldId,
                data.posTypeNameOld,
                data.posLevelOldId,
                data.posLevelNameOld,
                data.Reason,
                data.Status,
                data.Organization,
                data.Date,
                data.salary,
                data.CreatedAt,
                data.PositionTypeOld,
                data.PositionLevelOld,
                data.PositionNumberOld,
                data.OrganizationPositionOld,
                data.PositionOld,
                Docs = placementTransferDocs,
            };

            return Success(_data);
        }

        /// <summary>
        /// get รายละเอียดคำขอโอนเจ้าหน้าที่
        /// </summary>
        /// <param name="id">Id คำขอโอน</param>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpGet("{id:length(36)}")]
        public async Task<ActionResult<ResponseObject>> GetDetailAdmin(Guid id)
        {
            var getPermission = await _permission.GetPermissionAPIAsync("GET", "SYS_TRANSFER_REQ");
            var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
            if (jsonData["status"]?.ToString() != "200")
            {
                return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
            }
            var data = await _context.PlacementTransfers.AsQueryable()
                        .Where(x => x.Id == id)
                        .Select(p => new
                        {
                            p.Id,
                            p.profileId,
                            p.prefix,
                            p.firstName,
                            p.lastName,
                            p.rootOld,
                            p.rootOldId,
                            p.rootShortNameOld,
                            p.child1Old,
                            p.child1OldId,
                            p.child1ShortNameOld,
                            p.child2Old,
                            p.child2OldId,
                            p.child2ShortNameOld,
                            p.child3Old,
                            p.child3OldId,
                            p.child3ShortNameOld,
                            p.child4Old,
                            p.child4OldId,
                            p.child4ShortNameOld,
                            p.posMasterNoOld,
                            p.posTypeOldId,
                            p.posTypeNameOld,
                            p.posLevelOldId,
                            p.posLevelNameOld,
                            p.Reason,
                            p.Status,
                            p.Organization,
                            p.Date,
                            salary = p.AmountOld,
                            p.CreatedAt,
                            p.PositionTypeOld,
                            p.PositionLevelOld,
                            p.PositionNumberOld,
                            p.OrganizationPositionOld,
                            p.PositionOld,
                            PlacementTransferDocs = p.PlacementTransferDocs.Where(d => d.Document != null).Select(d => new { d.Document.Id, d.Document.FileName }),
                        })
                       .FirstOrDefaultAsync();
            if (data == null)
                return Error(GlobalMessages.DataNotFound, 404);

            var placementTransferDocs = new List<dynamic>();
            foreach (var doc in data.PlacementTransferDocs)
            {
                var _doc = new
                {
                    FileName = doc.FileName,
                    PathName = await _documentService.ImagesPath(doc.Id)
                };
                placementTransferDocs.Add(_doc);
            }
            var _data = new
            {
                data.Id,
                data.profileId,
                data.prefix,
                data.firstName,
                data.lastName,
                data.rootOld,
                data.rootOldId,
                data.rootShortNameOld,
                data.child1Old,
                data.child1OldId,
                data.child1ShortNameOld,
                data.child2Old,
                data.child2OldId,
                data.child2ShortNameOld,
                data.child3Old,
                data.child3OldId,
                data.child3ShortNameOld,
                data.child4Old,
                data.child4OldId,
                data.child4ShortNameOld,
                data.posMasterNoOld,
                data.posTypeOldId,
                data.posTypeNameOld,
                data.posLevelOldId,
                data.posLevelNameOld,
                data.Reason,
                data.Status,
                data.Organization,
                data.Date,
                data.salary,
                data.CreatedAt,
                data.PositionTypeOld,
                data.PositionLevelOld,
                data.PositionNumberOld,
                data.OrganizationPositionOld,
                data.PositionOld,
                Docs = placementTransferDocs,
            };

            return Success(_data);
        }

        /// <summary>
        /// สร้างคำขอโอน
        /// </summary>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpPost()]
        public async Task<ActionResult<ResponseObject>> Post([FromForm] PlacementTransferRequest req)
        {
            var placementTransfer = new PlacementTransfer
            {
                Organization = req.Organization,
                Reason = req.Reason,
                Status = "WAITTING",
                CreatedFullName = FullName ?? "System Administrator",
                CreatedUserId = UserId ?? "",
                CreatedAt = DateTime.Now,
                LastUpdateFullName = FullName ?? "System Administrator",
                LastUpdateUserId = UserId ?? "",
                LastUpdatedAt = DateTime.Now,
            };
            var apiUrl = $"{_configuration["API"]}/org/profile/keycloak/position";
            using (var client = new HttpClient())
            {
                client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token.Replace("Bearer ", ""));
                client.DefaultRequestHeaders.Add("api_key", _configuration["API_KEY"]);
                var _req = new HttpRequestMessage(HttpMethod.Get, apiUrl);
                var _res = await client.SendAsync(_req);
                var _result = await _res.Content.ReadAsStringAsync();

                var org = JsonConvert.DeserializeObject<OrgRequest>(_result);

                if (org == null || org.result == null)
                    return Error("ไม่พบหน่วยงานของผู้ใช้งานคนนี้", 404);

                placementTransfer.profileId = org.result.profileId;
                placementTransfer.prefix = org.result.prefix;
                placementTransfer.firstName = org.result.firstName;
                placementTransfer.lastName = org.result.lastName;
                placementTransfer.citizenId = org.result.citizenId;
                placementTransfer.rootOld = org.result.root;
                placementTransfer.rootOldId = org.result.rootId;
                placementTransfer.rootShortNameOld = org.result.rootShortName;
                placementTransfer.child1Old = org.result.child1;
                placementTransfer.child1OldId = org.result.child1Id;
                placementTransfer.child1ShortNameOld = org.result.child1ShortName;
                placementTransfer.child2Old = org.result.child2;
                placementTransfer.child2OldId = org.result.child2Id;
                placementTransfer.child2ShortNameOld = org.result.child2ShortName;
                placementTransfer.child3Old = org.result.child3;
                placementTransfer.child3OldId = org.result.child3Id;
                placementTransfer.child3ShortNameOld = org.result.child3ShortName;
                placementTransfer.child4Old = org.result.child4;
                placementTransfer.child4OldId = org.result.child4Id;
                placementTransfer.child4ShortNameOld = org.result.child4ShortName;
                placementTransfer.posMasterNoOld = org.result.posMasterNo;
                placementTransfer.posTypeOldId = org.result.posTypeId;
                placementTransfer.posTypeNameOld = org.result.posTypeName;
                placementTransfer.posLevelOldId = org.result.posLevelId;
                placementTransfer.posLevelNameOld = org.result.posLevelName;
                placementTransfer.AmountOld = org.result.salary;
                placementTransfer.PositionOld = org.result.position;
                placementTransfer.PositionLevelOld = org.result.posLevelName;
                placementTransfer.PositionTypeOld = org.result.posTypeName;
                placementTransfer.PositionNumberOld = org.result.nodeShortName + org.result.posMasterNo;
                placementTransfer.OrganizationOld = (org.result.child4 == null ? "" : org.result.child4 + "/") +
                                                        (org.result.child3 == null ? "" : org.result.child3 + "/") +
                                                        (org.result.child2 == null ? "" : org.result.child2 + "/") +
                                                        (org.result.child1 == null ? "" : org.result.child1 + "/") +
                                                        (org.result.root == null ? "" : org.result.root);
                placementTransfer.OrganizationPositionOld = org.result.position + "-" + placementTransfer.OrganizationOld;
            }
            await _context.PlacementTransfers.AddAsync(placementTransfer);
            await _context.SaveChangesAsync();
            if (Request.Form.Files != null && Request.Form.Files.Count != 0)
            {
                foreach (var file in Request.Form.Files)
                {
                    var fileExtension = Path.GetExtension(file.FileName);

                    var doc = await _documentService.UploadFileAsync(file, file.FileName);
                    var _doc = await _context.Documents.AsQueryable()
                                        .FirstOrDefaultAsync(x => x.Id == doc.Id);
                    if (_doc != null)
                    {
                        var placementTransferDoc = new PlacementTransferDoc
                        {
                            PlacementTransfer = placementTransfer,
                            Document = _doc,
                            CreatedFullName = FullName ?? "System Administrator",
                            CreatedUserId = UserId ?? "",
                            CreatedAt = DateTime.Now,
                            LastUpdateFullName = FullName ?? "System Administrator",
                            LastUpdateUserId = UserId ?? "",
                            LastUpdatedAt = DateTime.Now,
                        };
                        await _context.PlacementTransferDocs.AddAsync(placementTransferDoc);

                    }
                }
            }
            // await _repositoryNoti.PushNotificationAsync(
            //     Guid.Parse("08dbc953-6268-4e2c-80a3-aca65eedc6d0"),
            //     $"{profile.Prefix?.Name}{profile.FirstName} {profile.LastName} ได้ทำการยื่นคำขอโอน",
            //     $"{profile.Prefix?.Name}{profile.FirstName} {profile.LastName} ได้ทำการยื่นคำขอโอนไปยัง {req.Organization}",
            //             "",
            //             true
            //     );
            await _context.SaveChangesAsync();

            return Success();
        }

        /// <summary>
        /// แก้ไขคำขอโอน
        /// </summary>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpPut("{id:length(36)}")]
        public async Task<ActionResult<ResponseObject>> Put([FromBody] PlacementTransferEditRequest req, Guid id)
        {
            var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TRANSFER_REQ");
            var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
            if (jsonData["status"]?.ToString() != "200")
            {
                return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
            }
            var uppdated = await _context.PlacementTransfers
                            .FirstOrDefaultAsync(x => x.Id == id);
            if (uppdated == null)
                return Error(GlobalMessages.PlacementTransferNotFound, 404);

            uppdated.PositionNumberOld = req.PositionNumberOld;
            uppdated.OrganizationPositionOld = req.OrganizationPositionOld;
            uppdated.PositionLevelOld = req.PositionLevelOld;
            uppdated.PositionTypeOld = req.PositionTypeOld;
            uppdated.AmountOld = req.AmountOld;
            uppdated.Organization = req.Organization;
            uppdated.Reason = req.Reason;
            uppdated.Date = req.Date;
            uppdated.LastUpdateFullName = FullName ?? "System Administrator";
            uppdated.LastUpdateUserId = UserId ?? "";
            uppdated.LastUpdatedAt = DateTime.Now;
            await _context.SaveChangesAsync();

            return Success();
        }

        /// <summary>
        /// อนุมัติคำขอโอน
        /// </summary>
        /// <param name="id">Id คำขอโอน</param>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpGet("confirm/{id:length(36)}")]
        public async Task<ActionResult<ResponseObject>> AdminConfirm(Guid id)
        {
            var getPermission = await _permission.GetPermissionAPIAsync("UPDATE", "SYS_TRANSFER_REQ");
            var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
            if (jsonData["status"]?.ToString() != "200")
            {
                return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
            }

            var uppdated = await _context.PlacementTransfers
                            .FirstOrDefaultAsync(x => x.Id == id);
            if (uppdated == null)
                return Error(GlobalMessages.PlacementTransferNotFound, 404);

            uppdated.Status = "APPROVE";
            uppdated.LastUpdateFullName = FullName ?? "System Administrator";
            uppdated.LastUpdateUserId = UserId ?? "";
            uppdated.LastUpdatedAt = DateTime.Now;
            // await _repositoryNoti.PushNotificationAsync(
            //     Guid.Parse("08dbc953-6268-4e2c-80a3-aca65eedc6d0"),
            //     $"{uppdated.Profile.Prefix?.Name}{uppdated.Profile.FirstName} {uppdated.Profile.LastName} ได้ทำการยื่นคำขอโอนได้รับการอนุมัติ",
            //     $"{uppdated.Profile.Prefix?.Name}{uppdated.Profile.FirstName} {uppdated.Profile.LastName} ได้ทำการยื่นคำขอโอนไปยัง {uppdated.Organization}ได้รับการอนุมัติ",
            //             "",
            //             true
            //     );
            // await _repositoryNoti.PushNotificationAsync(
            //     Guid.Parse("08dbca3a-8b6a-4a4e-8b23-1f62e4f30ef6"),
            //     $"{uppdated.Profile.Prefix?.Name}{uppdated.Profile.FirstName} {uppdated.Profile.LastName} ได้ทำการยื่นคำขอโอน",
            //     $"{uppdated.Profile.Prefix?.Name}{uppdated.Profile.FirstName} {uppdated.Profile.LastName} ได้ทำการยื่นคำขอโอนไปยัง {uppdated.Organization}ได้รับการอนุมัติ",
            //             "",
            //             true
            //     );
            await _context.SaveChangesAsync();

            return Success();
        }

        /// <summary>
        /// ลบคำขอโอน
        /// </summary>
        /// <param name="id">Id คำขอโอน</param>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpDelete("{id:length(36)}")]
        public async Task<ActionResult<ResponseObject>> Delete(Guid id)
        {
            var deleted = await _context.PlacementTransfers.AsQueryable()
                            .Include(x => x.PlacementTransferDocs)
                            .ThenInclude(x => x.Document)
                            .FirstOrDefaultAsync(x => x.Id == id);
            if (deleted == null)
                return NotFound();
            var placementTransferDocs = new List<dynamic>();
            foreach (var doc in deleted.PlacementTransferDocs)
            {
                if (doc.Document != null)
                    placementTransferDocs.Add(doc.Document.Id);
            }
            _context.PlacementTransferDocs.RemoveRange(deleted.PlacementTransferDocs);
            await _context.SaveChangesAsync();
            _context.PlacementTransfers.Remove(deleted);
            foreach (var doc in placementTransferDocs)
            {
                if (doc != null)
                    await _documentService.DeleteFileAsync(doc);
            }
            await _context.SaveChangesAsync();

            return Success();
        }

        /// <summary>
        /// สั่งรายชื่อไปออกคำสั่ง
        /// </summary>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpPost("report")]
        public async Task<ActionResult<ResponseObject>> PostToReport([FromBody] PlacementProfileRequest req)
        {
            var getPermission = await _permission.GetPermissionAPIAsync("CREATE", "SYS_TRANSFER_REQ");
            var jsonData = JsonConvert.DeserializeObject<JObject>(getPermission);
            if (jsonData["status"]?.ToString() != "200")
            {
                return Error(jsonData["message"]?.ToString(), StatusCodes.Status403Forbidden);
            }
            foreach (var item in req.Id)
            {
                var uppdated = await _context.PlacementTransfers
                                .FirstOrDefaultAsync(x => x.Id == item);
                if (uppdated == null)
                    continue;
                uppdated.Status = "REPORT";
                uppdated.LastUpdateFullName = FullName ?? "System Administrator";
                uppdated.LastUpdateUserId = UserId ?? "";
                uppdated.LastUpdatedAt = DateTime.Now;
            }

            await _context.SaveChangesAsync();

            return Success();
        }

        /// <summary>
        /// ส่งรายชื่อออกคำสั่ง C-PM-13
        /// </summary>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpPost("command/report")]
        public async Task<ActionResult<ResponseObject>> PostReport([FromBody] ReportPersonRequest req)
        {
            var placementProfiles = await _context.PlacementTransfers
                                            .Where(x => req.refIds.Contains(x.Id.ToString()))
                                            .ToListAsync();
            foreach (var placementProfile in placementProfiles)
            {
                // update placementstatus
                placementProfile.Status = "REPORT";
            }
            await _context.SaveChangesAsync();
            return Success();
        }

        /// <summary>
        /// เอกสารแนบท้าย C-PM-13
        /// </summary>
        /// <param name="id">Record Id ของคำสั่ง</param>
        /// <param name="exportType">pdf, docx หรือ xlsx</param>
        /// <returns></returns>
        /// <response code="200">เมื่อทำการอ่านข้อมูลจาก Relational Database สำเร็จ</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpPost("command/report/attachment")]
        [AllowAnonymous]
        [ProducesResponseType(StatusCodes.Status200OK)]
        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
        public async Task<ActionResult<ResponseObject>> PostReportAttachment([FromBody] ReportPersonRequest req)
        {
            try
            {
                var report_data = await _context.PlacementTransfers
                    .Where(x => req.refIds.Contains(x.Id.ToString()))
                    .Select(p => new
                    {
                        //Seq = r.Sequence.ToString().ToThaiNumber(),
                        //CitizenId = r.CitizenId == null ? "-" : r.CitizenId.ToThaiNumber(),
                        //FullName = $"{r.Prefix}{r.FirstName} {r.LastName}",
                        Seq = "",
                        CitizenId = "",
                        FullName = "",
                        Organization = p.OrganizationPositionOld == null ? "" : p.OrganizationPositionOld,
                        PositionName = p.PositionOld == null ? "" : p.PositionOld,
                        PositionLevel = p.PositionLevelOld == null ? "" : p.PositionLevelOld,
                        PositionType = p.PositionTypeOld == null ? "" : p.PositionTypeOld,
                        PositionNumber = p.PositionNumberOld == null ? "" : p.PositionNumberOld.ToThaiNumber(),
                        Salary = p.AmountOld == null ? "" : p.AmountOld.Value.ToNumericNoDecimalText().ToThaiNumber(),
                        ActiveDate = p.Date == null ? "" : p.Date.Value.ToThaiShortDate2().ToThaiNumber(),
                        //ReceiveOrganizationName = r.Command!.ReceiveOrganizationName ?? "",
                        ReceiveOrganizationName = "",
                        Reason = p.Reason ?? ""
                    })
                    .ToListAsync();
                return Success(report_data);
            }
            catch
            {
                throw;
            }
        }

        /// <summary>
        /// ออกคำสั่ง C-PM-13
        /// </summary>
        /// <returns></returns>
        /// <response code="200"></response>
        /// <response code="400">ค่าตัวแปรที่ส่งมาไม่ถูกต้อง</response>
        /// <response code="401">ไม่ได้ Login เข้าระบบ</response>
        /// <response code="500">เมื่อเกิดข้อผิดพลาดในการทำงาน</response>
        [HttpPost("command/report/excecute")]
        public async Task<ActionResult<ResponseObject>> PostReportExecute([FromBody] ReportExecuteRequest req)
        {
            // create new profile
            foreach (var recv in req.refIds)
            {
                var data = await _context.PlacementTransfers
                                            .FirstOrDefaultAsync(x => x.Id == Guid.Parse(recv.refId));

                if (data == null)
                    throw new Exception(GlobalMessages.DataNotFound);

                var baseAPI = _configuration["API"];
                var apiUrlSalary = $"{baseAPI}/org/profile/salary";
                using (var client = new HttpClient())
                {
                    client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token.Replace("Bearer ", ""));
                    client.DefaultRequestHeaders.Add("api_key", _configuration["API_KEY"]);
                    var _req = new HttpRequestMessage(HttpMethod.Post, apiUrlSalary);
                    var _res = await client.PostAsJsonAsync(apiUrlSalary, new
                    {
                        profileId = data.profileId,
                        date = recv.commandAffectDate,
                        amount = recv.amount,
                        positionSalaryAmount = recv.positionSalaryAmount,
                        mouthSalaryAmount = recv.mouthSalaryAmount,
                        posNo = data.PositionNumberOld,
                        position = data.PositionOld,
                        positionLine = "",
                        positionPathSide = "",
                        positionExecutive = "",
                        positionType = data.PositionTypeOld,
                        positionLevel = data.PositionLevelOld,
                        refCommandNo = $"{recv.commandNo}/{recv.commandYear.ToThaiYear()}",
                        templateDoc = recv.templateDoc,
                    });
                    var _result = await _res.Content.ReadAsStringAsync();
                }

                // update placementstatus
                data.Status = "DONE";

                await _context.SaveChangesAsync();
            }
            return Success();
        }
    }
}