public ActionResult Login([FromBody] AppUserAuthVo user)
{
var accessLevel = AuthService.CheckAuthorization(user);
Context.Session.SetInt32(ParametersConst.AccessTokenName, accessLevel.AccessLevel);
Context.Session.SetInt32(ParametersConst.UserIdToken, accessLevel.UserId);
return(JsonHelper.Success(new
{
accessLevel = accessLevel.AccessLevel,
userId = accessLevel.UserId
}));
}
public AppUserVo CheckAuthorization(AppUserAuthVo u)
{
var user = UsersRepository
.GetAll()
.Include(x => x.Role)
.FirstOrDefault(x => x.Login.Equals(u.Login));
var accepted = false;
if (user != null)
{
var userPassword = HashHelper.ComputeHash(u.Password, user.Salt);
accepted = userPassword.Equals(user.Password);
}
return(accepted
? Mapper.Map <AppUserVo>(user)
: new AppUserVo {
AccessLevel = -1
});
}
