public async void ReturnTrue_IfKeyIsValid(string validKey)
{
_context.SeedKeys(validKey);
var actual = await _sut.IsKeyValidAsync(validKey);
Assert.True(actual);
}
/// <summary>
/// Validate the provided API key
/// If the header does not exist, or the key does not exist or is invalid,
/// do not authenticate the user.
/// If the key exists and is valid, create a new identity and add name claim
/// </summary>
protected override async Task <AuthenticateResult> HandleAuthenticateAsync()
{
if (Request.Headers.TryGetValue(ApiKeyHeaderName, out var apiKeyHeaderValues) == false)
{
Logger.LogInformation("Failure retrieving API key from request header. Path: {path}", Request.Path.Value);
return(AuthenticateResult.Fail("No API key request header provided."));
}
var providedApiKey = apiKeyHeaderValues.FirstOrDefault();
if (apiKeyHeaderValues.Count == 0 ||
string.IsNullOrWhiteSpace(providedApiKey))
{
Logger.LogInformation("Invalid or null API key. Key: {key}", providedApiKey);
return(AuthenticateResult.Fail("No API key provided or API key invalid."));
}
if (await _keyService.IsKeyValidAsync(providedApiKey))
{
var claims = new List <Claim>
{
new Claim(ClaimTypes.Name, "AuthorizedUser")
};
var identity = new ClaimsIdentity(claims, Options.AuthenticationType);
var identities = new List <ClaimsIdentity> {
identity
};
var principal = new ClaimsPrincipal(identities);
var ticket = new AuthenticationTicket(principal, Options.Scheme);
Logger.LogInformation("Succesfully validated API key. Auth ticket: {@ticket}", ticket);
return(AuthenticateResult.Success(ticket));
}
return(AuthenticateResult.Fail("Invalid API Key provided."));
}