Get thumbnail attachment shell

example/apiCollection/Aas Repository/Product1/Get Thumbnail By Id.bru

@@ -0,0 +1,20 @@
+meta {
+  name: Get Thumbnail By Id
+  type: http
+  seq: 2
+}
+
+get {
+  url: {{DataEngineBaseUrl}}/shells/:aasIdentifier/asset-information/thumbnail
+  body: none
+  auth: inherit
+}
+
+params:path {
+  aasIdentifier: {{aasIdentifier-1}}
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

example/apiCollection/Aas Repository/Product2/Get Thumbnail By Id.bru

@@ -0,0 +1,20 @@
+meta {
+  name: Get Thumbnail By Id
+  type: http
+  seq: 2
+}
+
+get {
+  url: {{DataEngineBaseUrl}}/shells/:aasIdentifier/asset-information/thumbnail
+  body: none
+  auth: inherit
+}
+
+params:path {
+  aasIdentifier: {{aasIdentifier-2}}
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

example/apiCollection/Aas Repository/Product3/Get Thumbnail By Id.bru

@@ -0,0 +1,20 @@
+meta {
+  name: Get Thumbnail By Id
+  type: http
+  seq: 2
+}
+
+get {
+  url: {{DataEngineBaseUrl}}/shells/:aasIdentifier/asset-information/thumbnail
+  body: none
+  auth: inherit
+}
+
+params:path {
+  aasIdentifier: {{aasIdentifier-3}}
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

source/AAS.TwinEngine.DataEngine.ModuleTests/Api/Services/AasRepository/AasRepositoryControllerTests.cs

@@ -8,6 +8,8 @@
 using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.AasEnvironment.Providers;
 using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.Plugin;
 using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.Plugin.Providers;
+using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.Shared.Providers;
+using AAS.TwinEngine.DataEngine.DomainModel.Shared;
 using AAS.TwinEngine.DataEngine.Infrastructure.Http.Clients;
 using AAS.TwinEngine.DataEngine.ModuleTests.Common;
 using AAS.TwinEngine.DataEngine.ServiceConfiguration.Config;
@@ -26,12 +28,14 @@ public abstract class AasRepositoryControllerTests : IDisposable
 {
     private readonly ConfigTestFactory _factory;
     private readonly ITemplateProvider _mockTemplateProvider;
+    private readonly IFileContentProvider _fileContentProvider;
     private readonly HttpClient _client;
     private readonly ICreateClient _httpClientFactory;
 
     protected AasRepositoryControllerTests(string configDir)
     {
         _mockTemplateProvider = Substitute.For<ITemplateProvider>();
+        _fileContentProvider = Substitute.For<IFileContentProvider>();
         var mockPluginManifestProvider = Substitute.For<IPluginManifestProvider>();
         var mockPluginManifestConflictHandler = Substitute.For<IPluginManifestConflictHandler>();
         _httpClientFactory = Substitute.For<ICreateClient>();
@@ -42,6 +46,7 @@ protected AasRepositoryControllerTests(string configDir)
             _ = services.AddSingleton(mockPluginManifestConflictHandler);
             _ = services.AddSingleton(_httpClientFactory);
             _ = services.AddSingleton(_mockTemplateProvider);
+            _ = services.AddSingleton(_fileContentProvider);
         });
 
         _client = _factory.CreateClient();
@@ -549,6 +554,83 @@ private void SetupTemplateProvider()
             });
     }
 
+    [Fact]
+    public async Task GetThumbnailAsync_ShouldReturn200OKWithStream_WhenThumbnailExists()
+    {
+        const string AasIdentifier = "aHR0cHM6Ly9leGFtcGxlLmNvbS9pZHMvYWFzLzExNzBfMTE2MF8zMDUyXzY1Njg=";
+
+        var messageHandler = new FakeHttpMessageHandler((request, token) =>
+        {
+            var httpResponse = new HttpResponseMessage(HttpStatusCode.OK)
+            {
+                Content = new StringContent(TestData.CreatePluginResponseForAssetinformation())
+            };
+            return Task.FromResult(httpResponse);
+        });
+
+        using var httpClient = new HttpClient(messageHandler);
+        httpClient.BaseAddress = new Uri("https://testendpoint.com");
+
+        const string HttpClientName = $"{HttpClientNames.PluginDataProviderPrefix}TestPlugin1";
+        _ = _httpClientFactory.CreateClient(HttpClientName).Returns(httpClient);
+
+        var expectedAssetInformation = TestData.CreateAssetInformationTemplate();
+        _ = _mockTemplateProvider.GetAssetInformationTemplateAsync(Arg.Any<string>(), Arg.Any<CancellationToken>()).Returns(expectedAssetInformation);
+
+        var stream = new MemoryStream("test-bytes"u8.ToArray());
+        var fileContentResponse = new FileContentResponse(stream);
+        _ = _fileContentProvider.GetFileContentAsync(Arg.Any<string>(), Arg.Any<CancellationToken>())
+            .Returns(fileContentResponse);
+
+        var response = await _client.GetAsync($"/shells/{AasIdentifier}/asset-information/thumbnail");
+
+        Assert.Equal(HttpStatusCode.OK, response.StatusCode);
+        Assert.Equal(expectedAssetInformation.DefaultThumbnail.ContentType, response.Content.Headers.ContentType?.MediaType);
+        var bytes = await response.Content.ReadAsByteArrayAsync();
+        Assert.Equal("test-bytes"u8.ToArray(), bytes);
+    }
+
+    [Fact]
+    public async Task GetThumbnailAsync_ShouldReturn404_WhenThumbnailIsMissing()
+    {
+        const string AasIdentifier = "aHR0cHM6Ly9leGFtcGxlLmNvbS9pZHMvYWFzLzExNzBfMTE2MF8zMDUyXzY1Njg=";
+
+        var mockAssetInformationTemplate = new AssetInformation(
+            AssetKind.Instance,
+            "https://example.com/ids/asset/123",
+            [],
+            defaultThumbnail: null
+        );
+
+        var messageHandler = new FakeHttpMessageHandler((request, token) =>
+        {
+            var httpResponse = new HttpResponseMessage(HttpStatusCode.OK)
+            {
+                Content = new StringContent("""
+                    {
+                      "assetKind": "Type",
+                      "globalAssetId": "https://example.com/ids/asset/123",
+                      "specificAssetIds": [],
+                      "defaultThumbnail": null
+                    }
+                    """)
+            };
+            return Task.FromResult(httpResponse);
+        });
+
+        using var httpClient = new HttpClient(messageHandler);
+        httpClient.BaseAddress = new Uri("https://testendpoint.com");
+
+        const string HttpClientName = $"{HttpClientNames.PluginDataProviderPrefix}TestPlugin1";
+        _ = _httpClientFactory.CreateClient(HttpClientName).Returns(httpClient);
+
+        _ = _mockTemplateProvider.GetAssetInformationTemplateAsync(Arg.Any<string>(), Arg.Any<CancellationToken>()).Returns(mockAssetInformationTemplate);
+
+        var response = await _client.GetAsync($"/shells/{AasIdentifier}/asset-information/thumbnail");
+
+        Assert.Equal(HttpStatusCode.NotFound, response.StatusCode);
+    }
+
     private static string EncodeBase64Url(string plainText)
     {
         if (string.IsNullOrWhiteSpace(plainText))

source/AAS.TwinEngine.DataEngine.ModuleTests/Api/Services/SubmodelRepository/SubmodelRepositoryControllerTests.cs

@@ -8,7 +8,7 @@
 using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.AasEnvironment.Providers;
 using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.Plugin;
 using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.Plugin.Providers;
-using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.SubmodelRepository.Providers;
+using AAS.TwinEngine.DataEngine.ApplicationLogic.Services.Shared.Providers;
 using AAS.TwinEngine.DataEngine.Infrastructure.Http.Clients;
 using AAS.TwinEngine.DataEngine.ModuleTests.Common;
 

source/AAS.TwinEngine.DataEngine.UnitTests/Api/AasRepository/AasRepositoryControllerTests.cs

@@ -7,7 +7,9 @@
 using AAS.TwinEngine.DataEngine.Api.AasRepository.Requests;
 using AAS.TwinEngine.DataEngine.Api.AasRepository.Responses;
 using AAS.TwinEngine.DataEngine.Api.Shared;
+using AAS.TwinEngine.DataEngine.Api.Shared.Results;
 using AAS.TwinEngine.DataEngine.ApplicationLogic.Extensions;
+using AAS.TwinEngine.DataEngine.DomainModel.Shared;
 
 using AasCore.Aas3_1;
 
@@ -274,5 +276,32 @@ private static SubmodelRefDto CreateSubmodelRefDto()
         };
     }
 
+    [Fact]
+    public async Task GetThumbnailAsync_ShouldReturnFileContentStreamResult_WhenHandlerCompletes()
+    {
+        var expectedStream = new MemoryStream("test-image"u8.ToArray());
+        var attachmentResult = new FileAttachmentResult(expectedStream, "image/png", "thumbnail.png", 100 * 1024 * 1024);
+        _handler.GetThumbnailAsync(Arg.Any<GetThumbnailRequest>(), Arg.Any<CancellationToken>())
+            .Returns(attachmentResult);
+
+        var response = await _sut.GetThumbnailAsync(AasIdentifier, CancellationToken.None);
+
+        Assert.IsType<FileContentStreamResult>(response);
+    }
+
+    [Fact]
+    public async Task GetThumbnailAsync_PassesRouteValuesToHandler()
+    {
+        _handler.GetThumbnailAsync(Arg.Any<GetThumbnailRequest>(), Arg.Any<CancellationToken>())
+            .Returns(new FileAttachmentResult(Stream.Null, "image/png", "thumbnail.png", 100 * 1024 * 1024));
+
+        await _sut.GetThumbnailAsync(AasIdentifier, CancellationToken.None);
+
+        await _handler.Received(1)
+            .GetThumbnailAsync(
+                Arg.Is<GetThumbnailRequest>(r => r.AasIdentifier == AasIdentifier),
+                Arg.Any<CancellationToken>());
+    }
 }
 
+

source/AAS.TwinEngine.DataEngine.UnitTests/Api/AasRepository/Handler/AasRepositoryHandlerTests.cs

@@ -10,6 +10,7 @@
 
 using AasCore.Aas3_1;
 
+using Microsoft.AspNetCore.Http;
 using Microsoft.Extensions.Logging;
 
 using NSubstitute;
@@ -249,6 +250,72 @@ public async Task GetSubmodelRefByIdAsync_InvalidBase64_ThrowsInvalidUserInputEx
         await Assert.ThrowsAsync<InvalidUserInputException>(() => _sut.GetSubmodelRefByIdAsync(request, CancellationToken.None));
     }
 
+    [Fact]
+    public async Task GetThumbnailAsync_ShouldReturnFileAttachmentResult()
+    {
+        var expectedResult = new FileAttachmentResult(new MemoryStream(), "image/png", "test.png", 100 * 1024 * 1024);
+        _aasRepositoryService.GetThumbnailAsync("https://example.com/aas", Arg.Any<CancellationToken>())
+            .Returns(expectedResult);
+
+        var request = new GetThumbnailRequest("aHR0cHM6Ly9leGFtcGxlLmNvbS9hYXM");
+        var result = await _sut.GetThumbnailAsync(request, CancellationToken.None);
+
+        Assert.Equal(expectedResult, result);
+    }
+
+    [Fact]
+    public async Task GetThumbnailAsync_CallsServiceWithDecodedAasIdentifier_WhenInputIsValid()
+    {
+        const string aasIdentifier = "https://example.com/aas";
+        var encodedId = aasIdentifier.EncodeBase64Url();
+        var request = new GetThumbnailRequest(encodedId);
+        var expectedResult = new FileAttachmentResult(Stream.Null, "image/png", "thumbnail.png", 100 * 1024 * 1024);
+
+        _aasRepositoryService
+            .GetThumbnailAsync(aasIdentifier, Arg.Any<CancellationToken>())
+            .Returns(expectedResult);
+
+        await _sut.GetThumbnailAsync(request, CancellationToken.None);
+
+        await _aasRepositoryService.Received(1)
+            .GetThumbnailAsync(aasIdentifier, Arg.Any<CancellationToken>());
+    }
+
+    [Fact]
+    public async Task GetThumbnailAsync_InvalidBase64AasIdentifier_ThrowsInvalidUserInputException()
+    {
+        const string invalidEncodedId = "!!invalid_base64@@";
+        var request = new GetThumbnailRequest(invalidEncodedId);
+
+        await Assert.ThrowsAsync<InvalidUserInputException>(() =>
+            _sut.GetThumbnailAsync(request, CancellationToken.None));
+    }
+
+    [Theory]
+    [InlineData("../../../etc/passwd")]
+    [InlineData("..\\..\\..\\windows\\system32")]
+    public async Task GetThumbnailAsync_MaliciousDecodedIdentifier_ThrowsInvalidUserInputException(string maliciousIdentifier)
+    {
+        var request = new GetThumbnailRequest(maliciousIdentifier.EncodeBase64Url());
+
+        await Assert.ThrowsAsync<InvalidUserInputException>(() =>
+            _sut.GetThumbnailAsync(request, CancellationToken.None));
+    }
+
+    [Fact]
+    public async Task GetThumbnailAsync_ServiceReturnsNull_ThrowsTemplateNotFoundException()
+    {
+        const string aasIdentifier = "https://example.com/aas";
+        var request = new GetThumbnailRequest(aasIdentifier.EncodeBase64Url());
+
+        _aasRepositoryService
+            .GetThumbnailAsync(aasIdentifier, Arg.Any<CancellationToken>())!
+            .Returns((FileAttachmentResult)null!);
+
+        await Assert.ThrowsAsync<TemplateNotFoundException>(() =>
+            _sut.GetThumbnailAsync(request, CancellationToken.None));
+    }
+
     private static AssetInformation CreateAssetInformation()
     {
         var thumbnail = Substitute.For<IResource>();