Current User: Adds Current User workspace modal

src/Umbraco.Cms.Api.Management/Controllers/User/Current/ClearAvatarCurrentUserController.cs

@@ -0,0 +1,54 @@
+using Asp.Versioning;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Umbraco.Cms.Core.Security;
+using Umbraco.Cms.Core.Services;
+using Umbraco.Cms.Core.Services.OperationStatus;
+
+namespace Umbraco.Cms.Api.Management.Controllers.User.Current;
+
+/// <summary>
+/// Controller responsible for handling requests to clear the avatar of the currently authenticated user.
+/// </summary>
+[ApiVersion("1.0")]
+public class ClearAvatarCurrentUserController : CurrentUserControllerBase
+{
+    private readonly IBackOfficeSecurityAccessor _backOfficeSecurityAccessor;
+    private readonly IUserService _userService;
+
+    /// <summary>
+    /// Initializes a new instance of the <see cref="ClearAvatarCurrentUserController"/> class.
+    /// </summary>
+    /// <param name="backOfficeSecurityAccessor">Provides access to back office security features for the current user.</param>
+    /// <param name="userService">Service for managing user-related operations.</param>
+    public ClearAvatarCurrentUserController(
+        IBackOfficeSecurityAccessor backOfficeSecurityAccessor,
+        IUserService userService)
+    {
+        _backOfficeSecurityAccessor = backOfficeSecurityAccessor;
+        _userService = userService;
+    }
+
+    /// <summary>
+    /// Removes the avatar image for the currently authenticated user.
+    /// </summary>
+    /// <param name="cancellationToken">A cancellation token to cancel the operation.</param>
+    /// <returns>An <see cref="IActionResult"/> indicating the result of the operation.</returns>
+    [MapToApiVersion("1.0")]
+    [HttpDelete("avatar")]
+    [ProducesResponseType(StatusCodes.Status200OK)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status400BadRequest)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status404NotFound)]
+    [EndpointSummary("Clears the current user's avatar.")]
+    [EndpointDescription("Removes the avatar image for the currently authenticated user.")]
+    public async Task<IActionResult> ClearAvatar(CancellationToken cancellationToken)
+    {
+        Guid userKey = CurrentUserKey(_backOfficeSecurityAccessor);
+
+        UserOperationStatus result = await _userService.ClearAvatarAsync(userKey);
+
+        return result is UserOperationStatus.Success
+            ? Ok()
+            : UserOperationStatusResult(result);
+    }
+}

src/Umbraco.Cms.Api.Management/Controllers/User/Current/SetAvatarCurrentUserController.cs

@@ -20,7 +20,6 @@ namespace Umbraco.Cms.Api.Management.Controllers.User.Current;
 public class SetAvatarCurrentUserController : CurrentUserControllerBase
 {
     private readonly IBackOfficeSecurityAccessor _backOfficeSecurityAccessor;
-    private readonly IAuthorizationService _authorizationService;
     private readonly IUserService _userService;
 
     /// <summary>
@@ -29,13 +28,15 @@ public class SetAvatarCurrentUserController : CurrentUserControllerBase
     /// <param name="backOfficeSecurityAccessor">Provides access to back office security features for the current user.</param>
     /// <param name="authorizationService">Service used to authorize user actions.</param>
     /// <param name="userService">Service for managing user-related operations.</param>
+    // TODO (V18): Remove the IAuthorizationService parameter from the constructor and the class, as it is not used in the current implementation.
     public SetAvatarCurrentUserController(
         IBackOfficeSecurityAccessor backOfficeSecurityAccessor,
+#pragma warning disable IDE0060 // Remove unused parameter
         IAuthorizationService authorizationService,
+#pragma warning restore IDE0060 // Remove unused parameter
         IUserService userService)
     {
         _backOfficeSecurityAccessor = backOfficeSecurityAccessor;
-        _authorizationService = authorizationService;
         _userService = userService;
     }
 
@@ -55,16 +56,6 @@ public async Task<IActionResult> SetAvatar(CancellationToken cancellationToken,
     {
         Guid userKey = CurrentUserKey(_backOfficeSecurityAccessor);
 
-        AuthorizationResult authorizationResult = await _authorizationService.AuthorizeResourceAsync(
-            User,
-            UserPermissionResource.WithKeys(userKey),
-            AuthorizationPolicies.UserPermissionByResource);
-
-        if (!authorizationResult.Succeeded)
-        {
-            return Forbidden();
-        }
-
         UserOperationStatus result = await _userService.SetAvatarAsync(userKey, model.File.Id);
 
         return result is UserOperationStatus.Success

src/Umbraco.Cms.Api.Management/Controllers/User/Current/UpdateCurrentUserProfileController.cs

@@ -0,0 +1,64 @@
+using Asp.Versioning;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
+using Umbraco.Cms.Api.Management.Factories;
+using Umbraco.Cms.Api.Management.ViewModels.User;
+using Umbraco.Cms.Core;
+using Umbraco.Cms.Core.Models;
+using Umbraco.Cms.Core.Models.Membership;
+using Umbraco.Cms.Core.Security;
+using Umbraco.Cms.Core.Services;
+using Umbraco.Cms.Core.Services.OperationStatus;
+
+namespace Umbraco.Cms.Api.Management.Controllers.User.Current;
+
+/// <summary>
+/// Controller responsible for update information about the currently authenticated user.
+/// </summary>
+[ApiVersion("1.0")]
+public class UpdateCurrentUserProfileController : CurrentUserControllerBase
+{
+    private readonly IUserService _userService;
+    private readonly IBackOfficeSecurityAccessor _backOfficeSecurityAccessor;
+    private readonly IUserPresentationFactory _userPresentationFactory;
+
+    /// <summary>
+    /// Initializes a new instance of the <see cref="UpdateCurrentUserProfileController"/> class, which manages user update operations in the Umbraco backoffice API.
+    /// </summary>
+    /// <param name="userService">Service for managing user data and operations.</param>
+    /// <param name="userPresentationFactory">Factory for creating user presentation models.</param>
+    /// <param name="backOfficeSecurityAccessor">Accessor for back office security context.</param>
+    public UpdateCurrentUserProfileController(
+        IUserService userService,
+        IUserPresentationFactory userPresentationFactory,
+        IBackOfficeSecurityAccessor backOfficeSecurityAccessor)
+    {
+        _userService = userService;
+        _backOfficeSecurityAccessor = backOfficeSecurityAccessor;
+        _userPresentationFactory = userPresentationFactory;
+    }
+
+    /// <summary>
+    /// Updates the current user with new details provided in the request model.
+    /// </summary>
+    /// <param name="model">The request model containing updated current user information.</param>
+    /// <returns>An <see cref="IActionResult"/> indicating the outcome of the update operation.</returns>
+    [HttpPut("profile")]
+    [MapToApiVersion("1.0")]
+    [ProducesResponseType(StatusCodes.Status200OK)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status400BadRequest)]
+    [ProducesResponseType(typeof(ProblemDetails), StatusCodes.Status404NotFound)]
+    [EndpointSummary("Updates current user profile.")]
+    [EndpointDescription("Updates current user profile with the details from the request model.")]
+    public async Task<IActionResult> UpdateCurrentUser(UpdateCurrentUserRequestModel model)
+    {
+        Guid userKey = CurrentUserKey(_backOfficeSecurityAccessor);
+
+        UserUpdateProfileModel updateModel = await _userPresentationFactory.CreateUpdateProfileModelAsync(model);
+        Attempt<IUser?, UserOperationStatus> result = await _userService.UpdateProfileAsync(userKey, updateModel);
+
+        return result.Success
+            ? Ok()
+            : UserOperationStatusResult(result.Status);
+    }
+}

src/Umbraco.Cms.Api.Management/Factories/IUserPresentationFactory.cs

@@ -31,6 +31,12 @@ public interface IUserPresentationFactory
     /// </summary>
     Task<UserUpdateModel> CreateUpdateModelAsync(Guid existingUserKey, UpdateUserRequestModel updateModel);
 
+    /// <summary>
+    /// Creates an update model for a current user based on the provided request model.
+    /// </summary>
+    // TODO V19: Remove default implementation
+    Task<UserUpdateProfileModel> CreateUpdateProfileModelAsync(UpdateCurrentUserRequestModel updateModel) => throw new NotImplementedException();
+
     /// <summary>
     /// Creates a response model for the current user based on the provided user.
     /// </summary>
@@ -56,10 +62,10 @@ public interface IUserPresentationFactory
     /// </summary>
     UserItemResponseModel CreateItemResponseModel(IUser user);
 
-/// <summary>
-/// Asynchronously creates a response model containing the calculated start nodes for the specified user.
-/// </summary>
-/// <param name="user">The user for whom to calculate start nodes.</param>
-/// <returns>A task representing the asynchronous operation. The task result contains the calculated user start nodes response model.</returns>
+    /// <summary>
+    /// Asynchronously creates a response model containing the calculated start nodes for the specified user.
+    /// </summary>
+    /// <param name="user">The user for whom to calculate start nodes.</param>
+    /// <returns>A task representing the asynchronous operation. The task result contains the calculated user start nodes response model.</returns>
     Task<CalculatedUserStartNodesResponseModel> CreateCalculatedUserStartNodesResponseModelAsync(IUser user);
 }

src/Umbraco.Cms.Api.Management/Factories/UserPresentationFactory.cs

@@ -340,4 +340,15 @@ private ISet<ReferenceByIdModel> GetKeysFromIds(IEnumerable<int>? ids, UmbracoOb
 
     private static bool HasRootAccess(IEnumerable<int>? startNodeIds)
         => startNodeIds?.Contains(Constants.System.Root) is true;
+
+    /// <inheritdoc/>
+    public Task<UserUpdateProfileModel> CreateUpdateProfileModelAsync(UpdateCurrentUserRequestModel updateModel)
+    {
+        var model = new UserUpdateProfileModel
+        {
+            LanguageIsoCode = updateModel.LanguageIsoCode
+        };
+
+        return Task.FromResult(model);
+    }
 }