public DataAccessGraphQLSchema(IServiceProvider services)
: base(services)
{
this.Query = ServiceProviderExtensions.GetRequiredService <RootGraphQLQuery>(services);
this.Mutation = ServiceProviderExtensions.GetRequiredService <RootGraphQLMutation>(services);
}
public IFilterMetadata CreateInstance(IServiceProvider serviceProvider)
{
return(new ValidateHeaderAntiForgeryTokenAuthorizationFilter(
ServiceProviderExtensions.GetRequiredService <IAntiforgery>(serviceProvider),
ServiceProviderExtensions.GetRequiredService <IOptions <AntiforgeryOptions> >(serviceProvider)));
}
public virtual async Task OnAuthorizationAsync(AuthorizationContext context)
{
if (context == null)
{
throw new ArgumentNullException(nameof(context));
}
// Allow Anonymous skips all authorization
if (context.Filters.Any(item => item is IAllowAnonymousFilter))
{
return;
}
var httpContext = context.HttpContext;
// Check if Request is from Documentation Generator
string documentationApiKey = httpContext.Request.Query[DocumentationApiKey];
if (!string.IsNullOrEmpty(documentationApiKey))
{
if (documentationApiKey.Equals(DocumentationApiValue, StringComparison.InvariantCultureIgnoreCase))
{
return;
}
context.Result = HttpResponseHelper.BadRequest($"Invalid value for {DocumentationApiKey}.");
return;
}
StringValues header;
var headerExists = httpContext.Request.Headers.TryGetValue(SessionHeaderName, out header);
// Check if Session Header exists
if (!headerExists)
{
context.Result = HttpResponseHelper.Unauthorized($"No {SessionHeaderName} Header found.");
return;
}
Guid token;
var isValidGuid = Guid.TryParse(header.FirstOrDefault(), out token);
// Token value must be valid Guid
if (!isValidGuid)
{
context.Result = HttpResponseHelper.Unauthorized($"Invalid {SessionHeaderName} Header.");
return;
}
var localSession = SessionExtensions.GetObjectFromJson <Session>(httpContext.Session, "__session");
// If 'active' session already exists skip DB call
if (localSession != null && localSession.Id.Equals(token) && localSession.Player != null)
{
return;
}
var db =
ServiceProviderExtensions.GetRequiredService <SocialGamificationAssetContext>(
httpContext.RequestServices);
if (db == null)
{
context.Result =
HttpResponseHelper.ErrorContentResult(
"Unable to connect with requested Database service.",
StatusCodes.Status503ServiceUnavailable);
return;
}
var session = await db.Sessions.Where(s => s.Id.Equals(token)).Include(s => s.Player).FirstOrDefaultAsync();
// Find Session
if (session == null)
{
context.Result = HttpResponseHelper.NotFound($"Session {token} is Invalid.");
return;
}
// Set right Session
SessionExtensions.SetObjectAsJson(httpContext.Session, "__session", session);
}