public async Task <IActionResult> GetNotification(int id)
{
// Retrieves notification and user id
int userID = Tools.GetUserID(User);
Notification notification = await _repository.GetNotificationAsync(id);
// Returns notification if user owns it, otherwise returns error
if (notification.UserID == userID)
{
return(Json(new ApiNotification(notification)));
}
return(Forbid());
}
public async Task <IActionResult> Notification(int id)
{
// Retrieves notification from database and return 403 if not owner
Notification notification = await _repository.GetNotificationAsync(id);
if (Tools.GetUserID(User) != notification.UserID)
{
return(Forbid());
}
// Sets notification as read if unread
if (!notification.Read)
{
notification.Read = true;
await _repository.SaveChangesAsync();
}
// Returns view with notification
return(View(notification));
}