Exemple #1
0
        /// <inheritdoc />
        internal override void Validate()
        {
            base.Validate();

            if (!Uri.TryCreate(Config.RedirectUri.ToString(), UriKind.Absolute, out Uri uriResult))
            {
                throw new InvalidOperationException(AuthErrorMessage.InvalidRedirectUriReceived(Config.RedirectUri.ToString()));
            }
        }
Exemple #2
0
        /// <inheritdoc />
        public async Task <AuthorizationResult> AcquireAuthorizationAsync(
            Uri authorizationUri,
            Uri redirectUri,
            RequestContext requestContext,
            CancellationToken cancellationToken)
        {
            requestContext.Logger.Info(LogMessages.CustomWebUiAcquiringAuthorizationCode);

            try
            {
                requestContext.Logger.InfoPii(
                    LogMessages.CustomWebUiCallingAcquireAuthorizationCodePii(authorizationUri, redirectUri),
                    LogMessages.CustomWebUiCallingAcquireAuthorizationCodeNoPii);
                var uri = await _customWebUi.AcquireAuthorizationCodeAsync(authorizationUri, redirectUri, cancellationToken)
                          .ConfigureAwait(false);

                if (uri == null || string.IsNullOrWhiteSpace(uri.Query))
                {
                    throw new AuthClientException(
                              AuthError.CustomWebUiReturnedInvalidUri,
                              AuthErrorMessage.CustomWebUiReturnedInvalidUri);
                }

                if (uri.Authority.Equals(redirectUri.Authority, StringComparison.OrdinalIgnoreCase) &&
                    uri.AbsolutePath.Equals(redirectUri.AbsolutePath, StringComparison.OrdinalIgnoreCase))
                {
                    IDictionary <string, string> inputQp = CoreHelpers.ParseKeyValueList(
                        authorizationUri.Query.Substring(1),
                        '&',
                        true,
                        null);

                    requestContext.Logger.Info(LogMessages.CustomWebUiRedirectUriMatched);
                    return(new AuthorizationResult(AuthorizationStatus.Success, uri.OriginalString));
                }

                throw new AuthClientException(
                          AuthError.CustomWebUiRedirectUriMismatch,
                          AuthErrorMessage.CustomWebUiRedirectUriMismatch(
                              uri.AbsolutePath,
                              redirectUri.AbsolutePath));
            }
            catch (OperationCanceledException)
            {
                requestContext.Logger.Info(LogMessages.CustomWebUiOperationCancelled);
                return(new AuthorizationResult(AuthorizationStatus.UserCancel, null));
            }
            catch (Exception ex)
            {
                requestContext.Logger.WarningPiiWithPrefix(ex, AuthErrorMessage.CustomWebUiAuthorizationCodeFailed);
                throw;
            }
        }