118 lines
4.7 KiB
C#
118 lines
4.7 KiB
C#
using System;
|
|
using System.Collections.Generic;
|
|
using System.Net;
|
|
using System.Security.Authentication;
|
|
using System.Security.Claims;
|
|
using System.Text.Encodings.Web;
|
|
using System.Threading.Tasks;
|
|
|
|
using ASC.Common;
|
|
using ASC.Core;
|
|
using ASC.Security.Cryptography;
|
|
|
|
using Microsoft.AspNetCore.Authentication;
|
|
using Microsoft.Extensions.DependencyInjection;
|
|
using Microsoft.Extensions.Logging;
|
|
using Microsoft.Extensions.Options;
|
|
|
|
namespace ASC.Api.Core.Auth
|
|
{
|
|
[Scope(Additional = typeof(ConfirmAuthHandlerExtension))]
|
|
public class ConfirmAuthHandler : AuthenticationHandler<AuthenticationSchemeOptions>
|
|
{
|
|
private readonly SecurityContext _securityContext;
|
|
private readonly UserManager _userManager;
|
|
private readonly IServiceProvider _serviceProvider;
|
|
|
|
public ConfirmAuthHandler(
|
|
IOptionsMonitor<AuthenticationSchemeOptions> options,
|
|
ILoggerFactory logger,
|
|
UrlEncoder encoder,
|
|
ISystemClock clock) :
|
|
base(options, logger, encoder, clock)
|
|
{ }
|
|
|
|
public ConfirmAuthHandler(
|
|
IOptionsMonitor<AuthenticationSchemeOptions> options,
|
|
ILoggerFactory logger,
|
|
UrlEncoder encoder,
|
|
ISystemClock clock,
|
|
SecurityContext securityContext,
|
|
UserManager userManager,
|
|
IServiceProvider serviceProvider) :
|
|
base(options, logger, encoder, clock)
|
|
{
|
|
_securityContext = securityContext;
|
|
_userManager = userManager;
|
|
_serviceProvider = serviceProvider;
|
|
}
|
|
|
|
protected override Task<AuthenticateResult> HandleAuthenticateAsync()
|
|
{
|
|
using var scope = _serviceProvider.CreateScope();
|
|
|
|
var emailValidationKeyHelper = scope.ServiceProvider.GetService<EmailValidationKeyModelHelper>();
|
|
var emailValidationKeyModel = emailValidationKeyHelper.GetModel();
|
|
|
|
if (!emailValidationKeyModel.Type.HasValue)
|
|
{
|
|
return _securityContext.IsAuthenticated
|
|
? Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(Context.User, new AuthenticationProperties(), Scheme.Name)))
|
|
: Task.FromResult(AuthenticateResult.Fail(new AuthenticationException(HttpStatusCode.Unauthorized.ToString())));
|
|
}
|
|
|
|
EmailValidationKeyProvider.ValidationResult checkKeyResult;
|
|
try
|
|
{
|
|
checkKeyResult = emailValidationKeyHelper.Validate(emailValidationKeyModel);
|
|
}
|
|
catch (ArgumentNullException)
|
|
{
|
|
checkKeyResult = EmailValidationKeyProvider.ValidationResult.Invalid;
|
|
}
|
|
|
|
var claims = new List<Claim>()
|
|
{
|
|
new Claim(ClaimTypes.Role, emailValidationKeyModel.Type.ToString())
|
|
};
|
|
|
|
if (checkKeyResult == EmailValidationKeyProvider.ValidationResult.Ok)
|
|
{
|
|
Guid userId;
|
|
if (!_securityContext.IsAuthenticated)
|
|
{
|
|
if (emailValidationKeyModel.UiD.HasValue && !emailValidationKeyModel.UiD.Equals(Guid.Empty))
|
|
userId = emailValidationKeyModel.UiD.Value;
|
|
else
|
|
{
|
|
if(emailValidationKeyModel.Type == Web.Studio.Utility.ConfirmType.EmailActivation
|
|
|| emailValidationKeyModel.Type == Web.Studio.Utility.ConfirmType.EmpInvite
|
|
|| emailValidationKeyModel.Type == Web.Studio.Utility.ConfirmType.LinkInvite)
|
|
userId = ASC.Core.Configuration.Constants.CoreSystem.ID;
|
|
else
|
|
userId = _userManager.GetUserByEmail(emailValidationKeyModel.Email).ID;
|
|
}
|
|
}
|
|
else
|
|
userId = _securityContext.CurrentAccount.ID;
|
|
|
|
_securityContext.AuthenticateMeWithoutCookie(userId, claims);
|
|
}
|
|
|
|
var result = checkKeyResult switch
|
|
{
|
|
EmailValidationKeyProvider.ValidationResult.Ok => AuthenticateResult.Success(new AuthenticationTicket(Context.User, new AuthenticationProperties(), Scheme.Name)),
|
|
_ => AuthenticateResult.Fail(new AuthenticationException(HttpStatusCode.Unauthorized.ToString()))
|
|
};
|
|
|
|
return Task.FromResult(result);
|
|
}
|
|
}
|
|
|
|
public class ConfirmAuthHandlerExtension
|
|
{
|
|
public static void Register(DIHelper services) =>
|
|
services.TryAdd<EmailValidationKeyModelHelper>();
|
|
}
|
|
}
|