public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context) { var allowedOrigin = "http://localhost:8080"; context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { allowedOrigin }); //var userManager = context.OwinContext.GetUserManager<ApplicationUserManager>(); using (AuthRepository _repo = new AuthRepository()) { ApplicationUser user = await _repo.FindUser(context.UserName, context.Password); if (user == null) { context.SetError("invalid_grant", "The user name or password is incorrect."); return; } ClaimsIdentity oAuthIdentity = await user.GenerateUserIdentityAsync(_repo._userManager, "JWT"); //oAuthIdentity.AddClaims(ExtendedClaimProvider.GetClaims(user)); var ticket = new AuthenticationTicket(oAuthIdentity,null); context.Validated(ticket); } }
public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext ctx) { string clientId = string.Empty; string clientSecret = string.Empty; Client client = null; if(!ctx.TryGetBasicCredentials(out clientId,out clientSecret)) { ctx.TryGetFormCredentials(out clientId, out clientSecret); } if(ctx.ClientId == null) { ctx.SetError("No clientId specified ! "); return Task.FromResult<object>(null); } using(AuthRepository _repo = new AuthRepository()) { client = _repo.FindClient(clientId); } if(client == null) { ctx.SetError("clientId not found !"); return Task.FromResult<object>(null); } if (client.ApplicationType == ApplicationTypes.Native) { if (string.IsNullOrWhiteSpace(clientSecret)) { ctx.SetError("invalid_clientId", "Client secret should be sent."); return Task.FromResult<object>(null); } else { if (client.Secret != GetHash(clientSecret)) { ctx.SetError("invalid_clientId", "Client secret is invalid."); return Task.FromResult<object>(null); } } } if (!client.Active) { ctx.SetError("invalid_clientId", "Client is inactive."); return Task.FromResult<object>(null); } ctx.OwinContext.Set<string>("as:clientAllowedOrigin", client.AllowedOrigin); ctx.OwinContext.Set<string>("as:clientRefreshTokenLifeTime", client.RefreshTokenLifeTime.ToString()); ctx.Validated(); return Task.FromResult<object>(null); }
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context) { var allowedOrigin = context.OwinContext.Get<string>("as:clientAllowedOrigin"); if (allowedOrigin == null) allowedOrigin = "*"; context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { allowedOrigin }); AuthRepository _repo = new AuthRepository(); ApplicationUser user = await _repo.FindUser(context.UserName, context.Password); if (user == null) { context.SetError("invalid_grant", "The user name or password is incorrect."); return; } //var identity = new ClaimsIdentity(context.Options.AuthenticationType); var identity = await user.GenerateUserIdentityAsync(_repo._userManager, "JWT"); identity.AddClaim(new Claim(ClaimTypes.Name, context.UserName)); var props = new AuthenticationProperties(new Dictionary<string, string> { { "client_id", (context.ClientId == null) ? string.Empty : context.ClientId }, { "userName", context.UserName } }); var ticket = new AuthenticationTicket(identity, props); context.Validated(ticket); }
public async Task ReceiveAsync(AuthenticationTokenReceiveContext context) { var allowedOrigin = context.OwinContext.Get<string>("as:clientAllowedOrigin"); context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { allowedOrigin }); string hashedTokenId = GetHash(context.Token); using (AuthRepository _repo = new AuthRepository()) { var refreshToken = await _repo.FindRefreshToken(hashedTokenId); if (refreshToken != null) { //Get protectedTicket from refreshToken class context.DeserializeTicket(refreshToken.ProtectedTicket); var result = await _repo.RemoveRefreshToken(hashedTokenId); } } }
public async Task CreateAsync(AuthenticationTokenCreateContext context) { var clientid = context.Ticket.Properties.Dictionary["client_id"]; if (string.IsNullOrEmpty(clientid)) { return; } var refreshTokenId = Guid.NewGuid().ToString("n"); using (AuthRepository _repo = new AuthRepository()) { var refreshTokenLifeTime = context.OwinContext.Get<string>("as:clientRefreshTokenLifeTime"); var token = new RefreshToken() { Id = GetHash(refreshTokenId), ClientId = clientid, Subject = context.Ticket.Identity.Name, IssuedUtc = DateTime.UtcNow, ExpiresUtc = DateTime.UtcNow.AddMinutes(Convert.ToDouble(refreshTokenLifeTime)) }; context.Ticket.Properties.IssuedUtc = token.IssuedUtc; context.Ticket.Properties.ExpiresUtc = token.ExpiresUtc; token.ProtectedTicket = context.SerializeTicket(); var result = await _repo.AddRefreshToken(token); if (result) { context.SetToken(refreshTokenId); } } }