public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
{
_iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus));
string clientId = string.Empty;
string clientSecret = string.Empty;
ClientDTO client = null;
if (!context.TryGetBasicCredentials(out clientId, out clientSecret))
{
context.TryGetFormCredentials(out clientId, out clientSecret);
}
if (context.ClientId == null)
{
context.Validated();
return(Task.FromResult <object>(null));
}
client = _iAuthorizationBus.FindClient(context.ClientId);
if (client == null)
{
context.SetError("invalid_clientId");
return(Task.FromResult <object>(null));
}
if (client.ApplicationType == ApplicationTypes.Client_NativeConfidentialApplication)
{
if (string.IsNullOrWhiteSpace(clientSecret))
{
context.SetError("invalid_clientId", Resources.ClientSecretShouldBeSent);
return(Task.FromResult <object>(null));
}
else
{
if (client.Secret != Helper.GetHash(clientSecret))
{
context.SetError("invalid_clientId", Resources.InvalidClientSecret);
return(Task.FromResult <object>(null));
}
}
}
if (!client.Active)
{
context.SetError("invalid_clientId", Resources.ClientInactive);
return(Task.FromResult <object>(null));
}
context.OwinContext.Set <string>("as:clientAllowedOrigin", client.AllowedOrigin);
context.OwinContext.Set <string>("as:clientRefreshTokenLifeTime", client.RefreshTokenLifeTime.ToString());
context.Validated();
return(Task.FromResult <object>(null));
}
public async Task ReceiveAsync(AuthenticationTokenReceiveContext context)
{
_iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus));
var allowedOrigin = context.OwinContext.Get <string>("as:clientAllowedOrigin");
//context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { allowedOrigin });
string hashedTokenId = Helper.GetHash(context.Token);
var refreshToken = await _iAuthorizationBus.FindRefreshToken(hashedTokenId);
if (refreshToken != null)
{
//TicketSerializer serializer = new TicketSerializer();
//context.SetTicket(serializer.Deserialize(System.Text.Encoding.Default.GetBytes(refreshToken.ProtectedTicket)));
context.DeserializeTicket(refreshToken.ProtectedTicket);
var result = await _iAuthorizationBus.RemoveRefreshToken(hashedTokenId);
}
}
public override Task GrantRefreshToken(OAuthGrantRefreshTokenContext context)
{
_iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus));
var originalClient = context.Ticket.Properties.Dictionary["as:client_id"];
var currentClinet = context.ClientId;
if (originalClient != currentClinet)
{
context.SetError("invalid_clientId", Resources.RefreshTokenIssuedToDifferentClient);
return(Task.FromResult <object>(null));
}
var newIdentity = new ClaimsIdentity(context.Ticket.Identity);
var newTicket = new AuthenticationTicket(newIdentity, context.Ticket.Properties);
context.Validated(newTicket);
return(Task.FromResult <object>(null));
}
public async Task CreateAsync(AuthenticationTokenCreateContext context)
{
_iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus));
var clientId = context.Ticket.Properties.Dictionary["as:client_id"];
if (string.IsNullOrEmpty(clientId))
{
return;
}
var refreshTokenId = Guid.NewGuid().ToString("n");
var refreshTokenLifeTime = context.OwinContext.Get <string>("as:clientRefreshTokenLifeTime");
var token = new RefreshTokenDTO()
{
Id = Helper.GetHash(refreshTokenId),
ClientId = clientId,
Subject = context.Ticket.Identity.Name,
IssuedUtc = DateTime.UtcNow,
ExpiresUtc = DateTime.UtcNow.AddMinutes(Convert.ToDouble(refreshTokenLifeTime))
};
context.Ticket.Properties.IssuedUtc = token.IssuedUtc;
context.Ticket.Properties.ExpiresUtc = token.ExpiresUtc;
//TicketSerializer serializer = new TicketSerializer();
//token.ProtectedTicket = System.Text.Encoding.Default.GetString(serializer.Serialize(context.Ticket));
token.ProtectedTicket = context.SerializeTicket();
var result = await _iAuthorizationBus.AddRefreshToken(token);
if (result)
{
context.SetToken(refreshTokenId);
}
}
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
_iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus));
var allowedOrigin = context.OwinContext.Get <string>("as:clientAllowedOrigin");
if (allowedOrigin == null)
{
allowedOrigin = "*";
}
//context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { "*" });
if (context.UserName == null || context.Password == null)
{
context.SetError("invalid_request", Resources.InvalidLoginRequest);
return;
}
var user = await _iAuthorizationBus.FindUser(context.UserName, context.Password);
if (user == null)
{
context.SetError("invalid_grant", Resources.InvalidEmailOrPassword);
return;
}
var userRoles = await _iAuthorizationBus.UserRoles(user.Id);
var identity = new ClaimsIdentity(context.Options.AuthenticationType);
identity.AddClaim(new Claim(ClaimTypes.Name, context.UserName));
identity.AddClaim(new Claim(AuthConstants.CustomClaims.UserId, user.Id));
foreach (var role in userRoles)
{
identity.AddClaim(new Claim(ClaimTypes.Role, role));
}
var props = new AuthenticationProperties(new Dictionary <string, string>
{
{
AuthConstants.CustomAuthProps.ClientId, (context.ClientId == null) ? string.Empty : context.ClientId
},
{
AuthConstants.CustomAuthProps.UserName, context.UserName
},
{
AuthConstants.CustomAuthProps.IsAdmin, (userRoles.Contains(ApplicationConstants.ADMIN)) ? "true" : "false"
},
{
AuthConstants.CustomAuthProps.UserId, user.Id
},
{
AuthConstants.CustomAuthProps.FullName, user.FirstName + " " + user.LastName
},
{
AuthConstants.CustomAuthProps.ProfilePic, user.ProfileImage
}
});
var ticket = new AuthenticationTicket(identity, props);
context.Validated(ticket);
}
public AccountController(IUserBus iUserBus, IAuthorizationBus iAuthorizationBus)
{
_iUserBus = iUserBus;
_iAuthorizationBus = iAuthorizationBus;
}
