/// <summary> /// Implements the interface method by invoking the related delegate method /// </summary> /// <param name="context">Contains information about the event</param> public virtual Task Exception(BasicExceptionContext context) => OnException(context);
protected override async Task <AuthenticateResult> HandleAuthenticateAsync()
{
try
{
var feat = Context.Features.OfType <HttpRequestFeature>();
var headers = Request.Headers[RequestHeader];
if (headers.Count <= 0)
{
return(AuthenticateResult.Failed("No authorization header."));
}
var header = headers.Where(h => h.StartsWith(RequestHeaderPrefix)).FirstOrDefault();
if (header == null)
{
return(AuthenticateResult.Failed("Not basic authentication header."));
}
var encoded = header.Substring(RequestHeaderPrefix.Length);
var decoded = default(string);
try
{
decoded = Encoding.UTF8.GetString(Convert.FromBase64String(encoded));
}
catch (Exception)
{
return(AuthenticateResult.Failed("Invalid basic authentication header encoding."));
}
var index = decoded.IndexOf(':');
if (index == -1)
{
return(AuthenticateResult.Failed("Invalid basic authentication header format."));
}
var username = decoded.Substring(0, index);
var password = decoded.Substring(index + 1);
var signInContext = new BasicSignInContext(Context, Options, username, password);
await Options.Events.SignIn(signInContext);
if (signInContext.HandledResponse)
{
if (signInContext.AuthenticationTicket != null)
{
return(AuthenticateResult.Success(signInContext.AuthenticationTicket));
}
else
{
return(AuthenticateResult.Failed("Invalid basic authentication credentials."));
}
}
if (signInContext.Skipped)
{
return(AuthenticateResult.Success(null));
}
var credentials = Options.Credentials.Where(c => c.Username == username && c.Password == password).FirstOrDefault();
if (credentials == null)
{
return(AuthenticateResult.Failed("Invalid basic authentication credentials."));
}
var claims = credentials.Claims.Select(c => new Claim(c.Type, c.Value)).ToList();
if (!claims.Any(c => c.Type == ClaimTypes.Name))
{
claims.Add(new Claim(ClaimTypes.Name, username));
}
var principal = new ClaimsPrincipal(new ClaimsIdentity(claims, Options.AuthenticationScheme));
var ticket = new AuthenticationTicket(principal, new AuthenticationProperties(), Options.AuthenticationScheme);
return(AuthenticateResult.Success(ticket));
}
catch (Exception ex)
{
var exceptionContext = new BasicExceptionContext(Context, Options, ex);
await Options.Events.Exception(exceptionContext);
if (exceptionContext.HandledResponse)
{
return(AuthenticateResult.Success(exceptionContext.AuthenticationTicket));
}
if (exceptionContext.Skipped)
{
return(AuthenticateResult.Success(null));
}
throw;
}
}
/// <summary> /// Implements the interface method by invoking the related delegate method /// </summary> /// <param name="context">Contains information about the event</param> public virtual Task Exception(BasicExceptionContext context) => OnException(context);