public UsersController(
IUserService userService,
IMapper mapper,
IOptions <AppSettings.AppSettings> appSettings)
{
_userService = userService;
_mapper = mapper;
_appSettings = appSettings.Value;
}
private static X509Certificate2 GetCertificate(AppSettings.AppSettings appSettings)
{
if (!string.IsNullOrEmpty(appSettings.FiksIOConfig.MaskinPortenCompanyCertificatePath))
{
return(new X509Certificate2(File.ReadAllBytes(appSettings.FiksIOConfig.MaskinPortenCompanyCertificatePath), appSettings.FiksIOConfig.MaskinPortenCompanyCertificatePassword));
}
var store = new X509Store(StoreLocation.CurrentUser);
store.Open(OpenFlags.ReadOnly);
var certificates = store.Certificates.Find(X509FindType.FindByThumbprint, appSettings.FiksIOConfig.MaskinPortenCompanyCertificateThumbprint, false);
store.Close();
return(certificates.Count > 0 ? certificates[0] : null);
}
public static KS.Fiks.IO.Client.FiksIOClient CreateFiksIoClient(AppSettings.AppSettings appSettings)
{
Console.WriteLine("Setter opp FIKS integrasjon for arkivsystem...");
var accountId = appSettings.FiksIOConfig.FiksIoAccountId;
var privateKey = File.ReadAllText(appSettings.FiksIOConfig.FiksIoPrivateKey);
var integrationId = appSettings.FiksIOConfig.FiksIoIntegrationId;
var integrationPassword = appSettings.FiksIOConfig.FiksIoIntegrationPassword;
var scope = appSettings.FiksIOConfig.FiksIoIntegrationScope;
var audience = appSettings.FiksIOConfig.MaskinPortenAudienceUrl;
var tokenEndpoint = appSettings.FiksIOConfig.MaskinPortenTokenUrl;
var issuer = appSettings.FiksIOConfig.MaskinPortenIssuer;
var ignoreSSLError = Environment.GetEnvironmentVariable("AMQP_IGNORE_SSL_ERROR");
// Fiks IO account configuration
var account = new KontoConfiguration(
accountId,
privateKey);
// Id and password for integration associated to the Fiks IO account.
var integration = new IntegrasjonConfiguration(
integrationId,
integrationPassword, scope);
// ID-porten machine to machine configuration
var maskinporten = new MaskinportenClientConfiguration(
audience: audience,
tokenEndpoint: tokenEndpoint,
issuer: issuer,
numberOfSecondsLeftBeforeExpire: 10,
certificate: GetCertificate(appSettings));
// Optional: Use custom api host (i.e. for connecting to test api)
var api = new ApiConfiguration(
scheme: appSettings.FiksIOConfig.ApiScheme,
host: appSettings.FiksIOConfig.ApiHost,
port: appSettings.FiksIOConfig.ApiPort);
var sslOption1 = (!string.IsNullOrEmpty(ignoreSSLError) && ignoreSSLError == "true")
? new SslOption()
{
Enabled = true,
ServerName = appSettings.FiksIOConfig.AmqpHost,
CertificateValidationCallback =
(RemoteCertificateValidationCallback)((sender, certificate, chain, errors) => true)
}
: null;
// Optional: Use custom amqp host (i.e. for connection to test queue)
var amqp = new AmqpConfiguration(
host: appSettings.FiksIOConfig.AmqpHost, //"io.fiks.test.ks.no",
port: appSettings.FiksIOConfig.AmqpPort,
sslOption1);
// Combine all configurations
var configuration = new FiksIOConfiguration(account, integration, maskinporten, api, amqp);
return(new KS.Fiks.IO.Client.FiksIOClient(configuration));
}
