77 lines
2.5 KiB
C#
77 lines
2.5 KiB
C#
using System.Security.Claims;
|
|
using System.Text.Encodings.Web;
|
|
using System.Text.Json;
|
|
using Femto.Api.Sessions;
|
|
using Femto.Common;
|
|
using Femto.Modules.Auth.Application;
|
|
using Femto.Modules.Auth.Application.Dto;
|
|
using Femto.Modules.Auth.Application.Interface.ValidateSession;
|
|
using Femto.Modules.Auth.Errors;
|
|
using Microsoft.AspNetCore.Authentication;
|
|
using Microsoft.Extensions.Options;
|
|
using Microsoft.OpenApi.Extensions;
|
|
|
|
namespace Femto.Api.Auth;
|
|
|
|
internal class SessionAuthenticationHandler(
|
|
IOptionsMonitor<AuthenticationSchemeOptions> options,
|
|
ILoggerFactory logger,
|
|
UrlEncoder encoder,
|
|
IAuthModule authModule,
|
|
CurrentUserContext currentUserContext
|
|
) : AuthenticationHandler<AuthenticationSchemeOptions>(options, logger, encoder)
|
|
{
|
|
protected override async Task<AuthenticateResult> HandleAuthenticateAsync()
|
|
{
|
|
var sessionId = this.Request.Cookies["session"];
|
|
if (string.IsNullOrWhiteSpace(sessionId))
|
|
return AuthenticateResult.NoResult();
|
|
|
|
var userJson = this.Request.Cookies["user"];
|
|
if (string.IsNullOrWhiteSpace(userJson))
|
|
return AuthenticateResult.Fail("Invalid user");
|
|
|
|
var user = JsonSerializer.Deserialize<UserInfo>(userJson);
|
|
|
|
if (user is null)
|
|
return AuthenticateResult.Fail("Invalid user");
|
|
|
|
var rememberMe = this.Request.Cookies["rememberme"];
|
|
|
|
try
|
|
{
|
|
var result = await authModule.Command(
|
|
new ValidateSessionCommand(sessionId, user, rememberMe)
|
|
);
|
|
|
|
var claims = new List<Claim>
|
|
{
|
|
new(ClaimTypes.Name, user.Username),
|
|
new("sub", user.Id.ToString()),
|
|
new("user_id", user.Id.ToString()),
|
|
};
|
|
|
|
claims.AddRange(user.Roles.Select(role => new Claim(ClaimTypes.Role, role.ToString())));
|
|
|
|
var identity = new ClaimsIdentity(claims, this.Scheme.Name);
|
|
var principal = new ClaimsPrincipal(identity);
|
|
|
|
this.Context.SetSession(result.SessionDto, user, Logger);
|
|
|
|
currentUserContext.CurrentUser = new CurrentUser(
|
|
user.Id,
|
|
user.Username,
|
|
result.SessionDto.SessionId,
|
|
rememberMe
|
|
);
|
|
|
|
return AuthenticateResult.Success(
|
|
new AuthenticationTicket(principal, this.Scheme.Name)
|
|
);
|
|
}
|
|
catch (InvalidSessionError)
|
|
{
|
|
return AuthenticateResult.Fail("Invalid session");
|
|
}
|
|
}
|
|
}
|