Notes

public async Task<object> PushDataToPricing(string id, string submissionId, int version)
{
int quoteId = 0;
string reqBody = "";
object dynamicObj = new object();

// Get Bearer Token
var bearerToken = await GetMulesoftToken();
var maskedToken = MaskToken(bearerToken); // ✅ Sanitize before logging
_logger.LogInformation("APIM Token Received (masked): " + maskedToken);

if (!string.IsNullOrEmpty(bearerToken))
{
try
{
int raf_version = await GetRafVersionFromSubmissionMasterAsync(submissionId);
var subDetails = await _cosmosDbService.GetSubmissionDetailsByIdAsync(submissionId, version);
_logger.LogInformation("Submission Summary Extracted");

var submission_summary = await _cosmosDbService.GetSubmissionSummaryByIdAsync(submissionId, version);
_logger.LogInformation("Submission Details Extracted");

var client = new HttpClient();
string revenueSize = submission_summary?.client?.annual_revenue;
var cyberDomainData = await GetCyberDomainData(revenueSize);

var results = new List<PromptOutput>();
var query = new QueryDefinition(CosmosQueries.SQL_CORE_EVAL_PREVIOUS_VERSION_V2)
.WithParameter("@submissionId", submissionId)
.WithParameter("@version", version);

_logger.LogInformation($"Pricing Query For Execution: {query.QueryText}");
var iterator = _promptOutputConatiner.GetItemQueryIterator<PromptOutput>(query);
while (iterator.HasMoreResults)
{
var response = await iterator.ReadNextAsync();
results.AddRange(response.Resource);
}

var ppr = await PreparePricingPushRequestV2(results, subDetails, raf_version, submission_summary, cyberDomainData);
reqBody = JsonConvert.SerializeObject(ppr);

_logger.LogInformation($"RuleBook Push Request Payload : {reqBody}");

client.DefaultRequestHeaders.Authorization = new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", bearerToken);
var content = new StringContent(reqBody, Encoding.UTF8, "application/json");

var pushRes = await client.PostAsync(_apimEndpoint, content);
string pushResBody = await pushRes.Content.ReadAsStringAsync();
dynamic res = JsonConvert.DeserializeObject(pushResBody);

if (pushRes.IsSuccessStatusCode)
{
string rulebookQuoteReference = res?.RulebookQuoteReference;
string recordEntryGuidStr = res?.RecordEntryGuid;
Guid? recordEntryGuid = Guid.TryParse(recordEntryGuidStr, out var guid) ? guid : null;

await _cosmosDbService.UpdateQuoteLogFieldsAsync(
id,
recordEntryGuidStr,
rulebookQuoteReference,
null,
null,
DateTime.UtcNow,
DateTime.UtcNow
);

// Save success log
var historyLog = new Quotelog
{
id = Guid.NewGuid().ToString(),
RecordEntryGuid = recordEntryGuid,
RulebookQuoteReference = rulebookQuoteReference,
ErrorCode = null,
ErrorMessage = null,
ErrorDescription = null,
RequestDateTime = DateTime.UtcNow,
ResponseDateTime = DateTime.UtcNow
};
await _cosmosDbService.InsertQuoteHistoryLogAsync(historyLog);

dynamicObj = new
{
RecordEntryGuid = recordEntryGuidStr,
RulebookQuoteReference = rulebookQuoteReference
};
}
else
{
string errorCode = res?.errorCode;
string errorDescription = res?.errorDescription;

_logger.LogError("Error pushing to Rulebook " + pushResBody);

await _cosmosDbService.UpdateQuoteLogFieldsAsync(
id,
null,
null,
errorCode,
errorDescription,
DateTime.UtcNow,
DateTime.UtcNow
);

// Save error log
var historyLog = new Quotelog
{
id = Guid.NewGuid().ToString(),
RecordEntryGuid = null,
RulebookQuoteReference = null,
ErrorCode = errorCode,
ErrorMessage = errorDescription,
ErrorDescription = errorDescription,
RequestDateTime = DateTime.UtcNow,
ResponseDateTime = DateTime.UtcNow
};
await _cosmosDbService.InsertQuoteHistoryLogAsync(historyLog);

dynamicObj = new
{
errorCode = errorCode,
errorMessage = errorDescription,
errorDescription = errorDescription,
DateTime.UtcNow
};
}
}
catch (Exception error)
{
_logger.LogError($"Rulebook Exception: {error}");
_logger.LogInformation($"Rulebook Push Request Payload : {reqBody}");

// Save exception log
var historyLog = new Quotelog
{
id = Guid.NewGuid().ToString(),
RecordEntryGuid = null,
RulebookQuoteReference = null,
ErrorCode = "Exception",
ErrorMessage = error.Message,
ErrorDescription = error.ToString(),
RequestDateTime = DateTime.UtcNow,
ResponseDateTime = DateTime.UtcNow
};
await _cosmosDbService.InsertQuoteHistoryLogAsync(historyLog);

}
}
else
{
_logger.LogCritical("APIM Token NOT Received");

// Save token failure log
var historyLog = new Quotelog
{
RecordEntryGuid = null,
RulebookQuoteReference = null,
ErrorCode = "TOKEN_FAILURE",
ErrorMessage = "Bearer token was null or empty.",
ErrorDescription = "Could not fetch APIM bearer token.",
RequestDateTime = DateTime.UtcNow,
ResponseDateTime = DateTime.UtcNow
};
await _cosmosDbService.InsertQuoteHistoryLogAsync(historyLog);
_logger.LogInformation("Saving quote history: " + JsonConvert.SerializeObject(historyLog));

}

return dynamicObj;
}

/// <summary>
/// ✅ Helper to mask token before logging (prevents vulnerability)
/// </summary>
private string MaskToken(string token)
{
if (string.IsNullOrEmpty(token) || token.Length <= 8)
return "****";

return token.Substring(0, 4) + new string('*', token.Length - 8) + token.Substring(token.Length - 4);
}