/// <summary>
/// Authenticates the user.
/// </summary>
/// <param name="context">The <see cref="IMansionContext"/>.</param>
/// <param name="authenicationProvider">The authentication provider which to use.</param>
/// <param name="parameters">The parameters used for authentication.</param>
/// <returns>Returns the <see cref="AuthenticationResult"/>.</returns>
protected override AuthenticationResult DoAuthenticate(IMansionContext context, AuthenticationProvider authenicationProvider, IPropertyBag parameters)
{
// authenticate
var result = authenicationProvider.Authenticate(context, parameters);
if (!result.WasSuccesful)
return result;
var user = result.UserState;
// get the web request context
var webContext = context.Cast<IMansionWebContext>();
// check session
if (!webContext.Session.IsWritable)
throw new InvalidOperationException("Could not authenticate user because the session is not writeable");
// store this user in the session
webContext.Session[GetRevivalCookieName(context)] = user;
// check if the authentication provider support user revival and the rememberMe flag was set
var revivalCookieName = GetRevivalCookieName(context);
if (authenicationProvider.SupportsRevival && parameters.Get(context, "allowRevival", false))
{
// get the revival data for this user
var revivalData = authenicationProvider.GetRevivalProperties(context, user, parameters);
if (revivalData != null)
{
// add additional revival properties
revivalData.Set("authenticationProviderName", authenicationProvider.Name);
revivalData.Set("userSignature", GetUserSignatureHash(webContext));
// encrypt it
var serializedRevivalData = conversionService.Convert<byte[]>(context, revivalData);
var encryptedRevivalData = encryptionService.Encrypt(context, cookieSalt, serializedRevivalData);
var revivalDataString = conversionService.Convert<string>(context, encryptedRevivalData);
// store it in a cookie
var revivalCookie = new WebCookie {
Name = revivalCookieName,
Value = revivalDataString,
Expires = DateTime.Now.AddDays(14),
HttpOnly = true
};
context.SetCookie(revivalCookie);
}
}
else
context.DeleteCookie(revivalCookieName);
// authentication was successful
return result;
}
