public async Task <IActionResult> Get(String sid) { if (String.IsNullOrEmpty(sid)) { return(BadRequest("No data is inputted")); } String usrName = ""; String scopeFilter = String.Empty; try { var usrObj = HIHAPIUtility.GetUserClaim(this); usrName = usrObj.Value; //var scopeObj = HIHAPIUtility.GetScopeClaim(this, HIHAPIConstants.LearnHistoryScope); //scopeFilter = HIHAPIUtility.GetScopeSQLFilter(scopeObj.Value, usrName); } catch { return(BadRequest("Not valid HTTP HEAD: User and Scope Failed!")); } if (String.IsNullOrEmpty(usrName)) { return(BadRequest("User cannot recognize")); } LearnHistoryUIViewModel vm = new LearnHistoryUIViewModel(); SqlConnection conn = null; SqlCommand cmd = null; SqlDataReader reader = null; String queryString = ""; String strErrMsg = ""; HttpStatusCode errorCode = HttpStatusCode.OK; try { vm.ParseGeneratedKey(sid); queryString = this.getSQLString(false, null, null, String.Empty, null); using (conn = new SqlConnection(Startup.DBConnectionString)) { await conn.OpenAsync(); // Check Home assignment with current user try { HIHAPIUtility.CheckHIDAssignment(conn, vm.HID, usrName); } catch (Exception) { errorCode = HttpStatusCode.BadRequest; throw; } cmd = new SqlCommand(queryString, conn); cmd.Parameters.AddWithValue("@HID", vm.HID); cmd.Parameters.AddWithValue("@USERID", vm.UserID); cmd.Parameters.AddWithValue("@OBJECTID", vm.ObjectID); cmd.Parameters.AddWithValue("@LEARNDATE", vm.LearnDate); reader = cmd.ExecuteReader(); if (reader.HasRows) { while (reader.Read()) { onDB2VM(reader, vm); // It should return one entry only! // Nevertheless, ensure the code only execute once in API layer to keep toilence of dirty DB data; break; } } else { errorCode = HttpStatusCode.NotFound; throw new Exception(); } } } catch (Exception exp) { System.Diagnostics.Debug.WriteLine(exp.Message); strErrMsg = exp.Message; if (errorCode == HttpStatusCode.OK) { errorCode = HttpStatusCode.InternalServerError; } } finally { if (reader != null) { reader.Dispose(); reader = null; } if (cmd != null) { cmd.Dispose(); cmd = null; } if (conn != null) { conn.Dispose(); conn = null; } } if (errorCode != HttpStatusCode.OK) { switch (errorCode) { case HttpStatusCode.Unauthorized: return(Unauthorized()); case HttpStatusCode.NotFound: return(NotFound()); case HttpStatusCode.BadRequest: return(BadRequest(strErrMsg)); default: return(StatusCode(500, strErrMsg)); } } // Only return the meaningful object var setting = new Newtonsoft.Json.JsonSerializerSettings { DateFormatString = HIHAPIConstants.DateFormatPattern, ContractResolver = new Newtonsoft.Json.Serialization.CamelCasePropertyNamesContractResolver() }; return(new JsonResult(vm, setting)); }