Die Cookie-basierte Autorisierung wurde mit DirectorySearchService eingerichtet.

2024-06-13 16:12:07 +02:00
parent 2f41a993ee
commit 5846a7433c
20 changed files with 220 additions and 67 deletions
--- a/EnvelopeGenerator.GeneratorAPI/Controllers/AuthController.cs
+++ b/EnvelopeGenerator.GeneratorAPI/Controllers/AuthController.cs
@@ -0,0 +1,111 @@
+using DigitalData.Core.Contracts.Application;
+using DigitalData.Core.DTO;
+using DigitalData.UserManager.Application.Contracts;
+using DigitalData.UserManager.Application.DTOs.User;
+using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.Extensions.Localization;
+using System.Security.Claims;
+using DigitalData.UserManager.Application.DTOs.Auth;
+using DigitalData.UserManager.Application;
+using Microsoft.AspNetCore.Authorization;
+
+namespace EnvelopeGenerator.GeneratorAPI.Controllers
+{
+    [Route("api/[controller]")]
+    [ApiController]
+    public class AuthController : ControllerBase
+    {
+        private readonly ILogger<AuthController> _logger;
+        private readonly IUserService _userService;
+        private readonly IDirectorySearchService _dirSearchService;
+        private readonly IStringLocalizer<Resource> _localizer;
+
+        public AuthController(ILogger<AuthController> logger, IUserService userService, IDirectorySearchService dirSearchService, IStringLocalizer<Resource> localizer)
+        {
+            _logger = logger;
+            _userService = userService;
+            _dirSearchService = dirSearchService;
+            _localizer = localizer;
+        }
+
+        //TODO: When a user group is created for signFlow, add a process to check if the user is in this group (like "PM_USER")
+        [HttpPost("login")]
+        public async Task<IActionResult> Login([FromBody] LogInDto login)
+        {
+            try
+            {
+                bool isValid = _dirSearchService.ValidateCredentials(login.Username, login.Password);
+
+                if (!isValid)
+                    return Unauthorized(Result.Fail().Message(_localizer[Key.UserNotFound]));
+
+                //find the user
+                var uRes = await _userService.ReadByUsernameAsync(login.Username);
+                if (!uRes.IsSuccess || uRes.Data is null)
+                {
+                    return Unauthorized(uRes);
+                }
+
+                UserReadDto user = uRes.Data;
+
+                // Create claims
+                var claims = new List<Claim>
+            {
+                new (ClaimTypes.NameIdentifier, user.Guid.ToString()),
+                new (ClaimTypes.Name, user.Username),
+                new (ClaimTypes.Surname, user.Name!),
+                new (ClaimTypes.GivenName, user.Prename!),
+                new (ClaimTypes.Email, user.Email!),
+            };
+
+                // Create claimsIdentity
+                var claimsIdentity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);
+
+                // Create authProperties
+                var authProperties = new AuthenticationProperties
+                {
+                    IsPersistent = true,
+                    AllowRefresh = true,
+                    ExpiresUtc = DateTime.UtcNow.AddMinutes(60)
+                };
+
+                // Sign in
+                await HttpContext.SignInAsync(
+                    CookieAuthenticationDefaults.AuthenticationScheme,
+                    new ClaimsPrincipal(claimsIdentity),
+                    authProperties);
+
+                _dirSearchService.SetSearchRootCache(user.Username, login.Password);
+
+                return Ok();
+            }
+            catch(Exception ex)
+            {
+                _logger.LogError(ex, "Unexpected error occurred.\n{ErrorMessage}", ex.Message);
+                return StatusCode(StatusCodes.Status500InternalServerError);
+            }
+        }
+
+        [Authorize]
+        [HttpPost("logout")]
+        public async Task<IActionResult> Logout()
+        {
+            try
+            {
+                await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+                return Ok();
+            }
+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Unexpected error occurred.\n{ErrorMessage}", ex.Message);
+                return StatusCode(StatusCodes.Status500InternalServerError);
+            }
+        }
+
+        [AllowAnonymous]
+        [HttpGet("check")]
+        public IActionResult IsAuthenticated() => Ok(User.Identity?.IsAuthenticated ?? false);
+    }
+}