|
public FindAll ( Predicate |
||
| match | Predicate |
The function that performs the matching logic. |
| return | IEnumerable |
|
public static async Task<List<string>> GetGroups(ClaimsIdentity claimsId)
{
if (claimsId.FindFirst("_claim_names") != null
&& (Json.Decode(claimsId.FindFirst("_claim_names").Value)).groups != null)
return await GetGroupsFromGraphAPI(claimsId);
return claimsId.FindAll("groups").Select(c => c.Value).ToList();
}
/// <summary>
/// For access check user's group membership must be determined.
/// This method retrieves user's group membership from Azure AD Graph API if not present in the token.
/// </summary>
/// <param name="claimsIdentity">The <see cref="ClaimsIdenity" /> object that represents the
/// claims-based identity of the currently signed in user and contains thier claims.</param>
/// <returns>A list of ObjectIDs representing the groups that the user is member of.</returns>
public static async Task<List<string>> GetMemberGroups(ClaimsIdentity claimsIdentity)
{
//check for groups overage claim. If present query graph API for group membership
if (claimsIdentity.FindFirst("_claim_names") != null
&& (Json.Decode(claimsIdentity.FindFirst("_claim_names").Value)).groups != null)
return await GetGroupsFromGraphAPI(claimsIdentity);
return claimsIdentity.FindAll("groups").Select(c => c.Value).ToList();
}
public static string FindUserKey(ClaimsIdentity claimsIdentity)
{
if (claimsIdentity == null)
{
throw new ArgumentNullException("claimsIdentity");
}
Claim nameIdentifierClaim = claimsIdentity.FindAll(ClaimTypes.NameIdentifier).SingleOrDefault();
if (nameIdentifierClaim == null)
{
throw new InvalidOperationException(string.Format(CultureInfo.InvariantCulture, "Claim type '{0}' was not found.", ClaimTypes.NameIdentifier));
}
return nameIdentifierClaim.Value;
}
public static AuthenticationProperties CreateProperties(ClaimsIdentity identity)
{
var roleClaimValues = identity.FindAll(ClaimTypes.Role).Select(c => c.Value);
var roles = string.Join(",", roleClaimValues);
IDictionary<string, string> data = new Dictionary<string, string>
{
{ "userName", identity.FindFirstValue(ClaimTypes.Name) },
{ "userRoles", roles }
};
return new AuthenticationProperties(data);
}
public void Find_CaseInsensivity()
{
var claim_type = new Claim("TYpe", "value");
var id = new ClaimsIdentity(
new[] { claim_type },
"base_auth_type", "base_name_claim_type", null);
var f1 = id.FindFirst("tyPe");
Assert.Equal("value", f1.Value);
var f2 = id.FindAll("tyPE").First();
Assert.Equal("value", f2.Value);
}
/// <summary> /// /// </summary> /// <typeparam name="T"></typeparam> /// <param name="identity"></param> /// <param name="claimType"></param> /// <returns></returns> public static IEnumerable <T> GetUserClaims <T>(this ClaimsIdentity identity, string claimType) => identity.FindAll(claimType).Select(x => (T)Convert.ChangeType(x.Value, typeof(T)));
public void FindCaseInsensivity ()
{
var claim_type = new Claim("TYpe", "value");
var id = new ClaimsIdentity (
new[] { claim_type },
"base_auth_type", "base_name_claim_type", null);
var f1 = id.FindFirst ("tyPe");
Assert.AreEqual ("value", f1.Value, "#1");
var f2 = id.FindAll ("tyPE").First ();
Assert.AreEqual ("value", f2.Value, "#2");
}
