public ActionResult Login([FromBody] AppUserAuthVo user) { var accessLevel = AuthService.CheckAuthorization(user); Context.Session.SetInt32(ParametersConst.AccessTokenName, accessLevel.AccessLevel); Context.Session.SetInt32(ParametersConst.UserIdToken, accessLevel.UserId); return(JsonHelper.Success(new { accessLevel = accessLevel.AccessLevel, userId = accessLevel.UserId })); }
public AppUserVo CheckAuthorization(AppUserAuthVo u) { var user = UsersRepository .GetAll() .Include(x => x.Role) .FirstOrDefault(x => x.Login.Equals(u.Login)); var accepted = false; if (user != null) { var userPassword = HashHelper.ComputeHash(u.Password, user.Salt); accepted = userPassword.Equals(user.Password); } return(accepted ? Mapper.Map <AppUserVo>(user) : new AppUserVo { AccessLevel = -1 }); }