books/backend/Books.Api/Infrastructure/FileStorage/IFileStorageService.cs
Nicolaj Hartmann 8096a19081 Audit v4: VAT calc, SAF-T compliance, security hardening, frontend quality
Backend (17 files):
- VAT: REP 25% deductibility (§42), EU reverse charge double-entry (IEUV/IEUY/IVY),
  IVY rate 0%→25%, VatReport Box C/D populated, Basis1 from real revenue
- SAF-T: correct OECD namespace, closing balance net calc, zero-amount fallback,
  credit note auto-numbering (§52)
- Security: BankingController CSRF state token + company auth check,
  attachment canonical path traversal check, discount 0-100% validation,
  deactivated product/customer update guard
- Quality: redact bank API logs, remove dead code (VatCalcService,
  PaymentMatchingService), CompanyAggregate IEmit interfaces, fix URL encoding

Frontend (15 files):
- Fix double "kr." in AmountText and Dashboard Statistic components
- Fix UserSettings Switch defaultChecked desync with Form state
- Remove dual useCompany/useCompanyStore pattern (Dashboard, Moms, Bank)
- Correct SKAT VAT deadline calculation per period type
- Add half-yearly/yearly VAT period options
- Guard console.error with import.meta.env.DEV
- Use shared formatDate in BankConnectionsTab
- Remove dead NONE vatCode check, purge 7 legacy VAT codes from type union
- Migrate S25→U25, K25→I25 across all pages

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-06 01:38:52 +01:00

68 lines
2.5 KiB
C#

namespace Books.Api.Infrastructure.FileStorage;
/// <summary>
/// Service for storing and retrieving attachment files.
/// Abstraction allows switching between local storage and cloud blob storage.
/// </summary>
public interface IFileStorageService
{
/// <summary>
/// Store a file and return the storage path.
/// </summary>
/// <param name="companyId">Company ID for organizing files</param>
/// <param name="fileName">Original filename</param>
/// <param name="contentType">MIME type</param>
/// <param name="content">File content stream</param>
/// <param name="cancellationToken">Cancellation token</param>
/// <returns>Storage path for the file</returns>
Task<StorageResult> StoreAsync(
string companyId,
string fileName,
string contentType,
Stream content,
CancellationToken cancellationToken = default);
/// <summary>
/// Retrieve a file by its storage path.
/// </summary>
/// <param name="storagePath">Storage path returned from StoreAsync</param>
/// <param name="cancellationToken">Cancellation token</param>
/// <returns>File content and metadata</returns>
Task<FileResult> GetAsync(string storagePath, CancellationToken cancellationToken = default);
/// <summary>
/// Delete a file from storage.
/// </summary>
/// <param name="storagePath">Storage path to delete</param>
/// <param name="cancellationToken">Cancellation token</param>
Task DeleteAsync(string storagePath, CancellationToken cancellationToken = default);
/// <summary>
/// Get a URL for downloading/viewing a file.
/// May return a signed URL with expiration for cloud storage.
/// </summary>
/// <param name="storagePath">Storage path</param>
/// <param name="expiresIn">URL expiration time</param>
/// <returns>Download URL</returns>
string GetDownloadUrl(string storagePath, TimeSpan? expiresIn = null);
/// <summary>
/// Gets the base storage path for canonical path validation.
/// </summary>
string GetBasePath();
}
public record StorageResult
{
public required string StoragePath { get; init; }
public required string StoredFileName { get; init; }
public required long FileSize { get; init; }
}
public record FileResult
{
public required Stream Content { get; init; }
public required string ContentType { get; init; }
public required string FileName { get; init; }
public required long FileSize { get; init; }
}