/// <summary>
/// Loads the default security policy
/// </summary>
private void LoadDefaultSecurityPolicy(IIpSecurityPolicy policy)
{
var helper = new IpSettingsFactory().GetSettingsHelper((IIpConfigurationSettingsHelper)null);
var providerFullyQualifiedType = helper.GetSetting(IpArgument.GetConfigAppSetting("AuthProvider")).ToString();
try
{
var providerType = Type.GetType(providerFullyQualifiedType);
policy.Provider = (OAuthAuthorizationServerProvider)Activator.CreateInstance(providerType);
}
catch
{
//load the default provider
policy.Provider = new IpAuthorizationServerProvider();
}
//Load values from configuration
policy.PasswordComplexityRegex = helper.GetSetting(IpArgument.GetConfigAppSetting("PasswordComplexityRegex")).ToString();
policy.AuthenticationEndpoint = helper.GetSetting(IpArgument.GetConfigAppSetting("AuthenticationEndpoint")).ToString();
policy.MinimumPasswordLength = helper.GetSetting(IpArgument.GetConfigAppSetting("MinimumPasswordLength")).ChangeType <int>();
policy.MaximumPasswordLength = helper.GetSetting(IpArgument.GetConfigAppSetting("MaximumPasswordLength")).ChangeType <int>();
policy.PasswordExpirationInDays = helper.GetSetting(IpArgument.GetConfigAppSetting("PasswordExpirationInDays")).ChangeType <int>();
policy.AuthTokenExpirationMinutes = helper.GetSetting(IpArgument.GetConfigAppSetting("AuthTokenExpirationMinutes")).ChangeType <int>();
policy.LockoutAttemptCount = helper.GetSetting(IpArgument.GetConfigAppSetting("LockoutAttemptCount")).ChangeType <int>();
policy.RequireRegistrationConfirmation = helper.GetSetting(IpArgument.GetConfigAppSetting("RequireRegistrationConfirmation")).ToBool();
policy.UseTwoFactorAuthentication = helper.GetSetting(IpArgument.GetConfigAppSetting("UseTwoFactorAuthentication")).ToBool();
policy.UseSecurityQuestions = helper.GetSetting(IpArgument.GetConfigAppSetting("UseSecurityQuestions")).ToBool();
policy.AllowInsecureHttp = helper.GetSetting(IpArgument.GetConfigAppSetting("AllowInsecureHttp")).ToBool();
policy.AllowCors = helper.GetSetting(IpArgument.GetConfigAppSetting("AllowCors")).ToBool();
}
/// <summary>
/// Configures the OAuth server
/// </summary>
/// <param name="app">The app</param>
/// <param name="securityPolicy">The Security Policy</param>
public void ConfigureOAuth(IAppBuilder app, IIpSecurityPolicy securityPolicy)
{
var serverOptions = new OAuthAuthorizationServerOptions
{
AllowInsecureHttp = securityPolicy.AllowInsecureHttp,
TokenEndpointPath = new PathString(securityPolicy.AuthenticationEndpoint),
AccessTokenExpireTimeSpan = TimeSpan.FromMinutes(securityPolicy.AuthTokenExpirationMinutes),
Provider = securityPolicy.Provider
};
app.UseOAuthAuthorizationServer(serverOptions);
app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions());
}
