public bool ValidateCredentials(string userName, string password, UserRoleKind roleRequred = UserRoleKind.Admin)
{
string passwordHash = GetPasswordHashString(password);
UserAccount userAccount = _dbAuthController.GetUserAccount(userName, passwordHash);
if (userAccount == null)
{
LogAuth(userName, roleRequred, false);
return(false);
}
if (roleRequred != UserRoleKind.Unknown)
{
List <UserRoleKind> userRoles = _dbAuthController.GetUserRoles(userAccount.UserId);
bool roleExists = userRoles.Contains(roleRequred);
LogAuth(userName, roleRequred, roleExists);
return(roleExists);
}
LogAuth(userName, roleRequred, true);
return(true);
}
private void LogAuth(string login, UserRoleKind role, bool isAutenticated)
{
_accessLogger.LogAssess(login, isAutenticated, role.ToString(), role.ToString());
}
