Exemple #1
0
        public ActionResult Put(BaseMdps model)
        {
            BaseMdps UserMdp = new BaseMdps();

            using (SqlConnection connection = new SqlConnection(ConnectionString))
            {
                connection.Open();
                using (SqlCommand cmd = new SqlCommand("sp_GetUser", connection))
                {
                    cmd.CommandType = System.Data.CommandType.StoredProcedure;
                    cmd.Parameters.AddWithValue("@User", model.User);

                    using (SqlDataReader DR = cmd.ExecuteReader())
                    {
                        while (DR.Read())
                        {
                            UserMdp.HA = DR["HA"].ToString();
                        }
                    }
                }
                connection.Close();
            }
            Crypto MonCrypt          = new Crypto();
            string variableChallenge = LeChallengeUser + UserMdp.HA;
            string ChallengeUser     = MonCrypt.Encrypt(variableChallenge, CleChiffreDechiffre);

            if (ChallengeUser == model.ChallengeUser)
            {
                return(Ok());
            }
            else
            {
                return(NotFound());
            }
        }
Exemple #2
0
 public void Post(BaseMdps model)
 {
     using (SqlConnection connection = new SqlConnection(ConnectionString))
     {
         connection.Open();
         using (SqlCommand cmd = new SqlCommand("sp_CreateUser", connection))
         {
             cmd.CommandType = System.Data.CommandType.StoredProcedure;
             cmd.Parameters.AddWithValue("@User", model.User);
             cmd.Parameters.AddWithValue("@email", model.Email);
             cmd.Parameters.AddWithValue("@HA", model.HA);
             cmd.Parameters.AddWithValue("@Salt", model.Salt);
             cmd.ExecuteNonQuery();
         }
         connection.Close();
     }
 }
Exemple #3
0
        public ActionResult <BaseMdps> Get(int id, string User)
        {
            bool     Resultat    = false;
            BaseMdps utilisateur = new BaseMdps();

            using (SqlConnection connection = new SqlConnection(ConnectionString))
            {
                connection.Open();
                using (SqlCommand cmd = new SqlCommand("sp_GetUser", connection))
                {
                    cmd.CommandType = System.Data.CommandType.StoredProcedure;
                    cmd.Parameters.AddWithValue("@User", User);

                    using (SqlDataReader DR = cmd.ExecuteReader())
                    {
                        while (DR.Read())
                        {
                            utilisateur.Salt = (byte[])DR["Salt"];
                            utilisateur.Id   = DR.GetInt64(DR.GetOrdinal("Id"));
                            Resultat         = true;
                        }
                    }
                }
                connection.Close();
            }
            if (Resultat)
            {
                Crypto MonCrypt = new Crypto();
                utilisateur.ChallengeUser = MonCrypt.Encrypt(MonCrypt.RandomString(32, false), MonCrypt.RandomString(32, false));
                LeChallengeUser           = utilisateur.ChallengeUser;
                return(Ok(utilisateur));
            }
            else
            {
                return(NotFound());
            }
        }