public static Guid CreateAuthenticationControl(Guid userId, AuthOrigin origin)
{
var token = Guid.NewGuid();
AuthenticationControlRepository.Get().InsertAuthControl(userId, token, origin, true);
return(token);
}
public void InsertAuthControl(Guid userId, Guid token, AuthOrigin origin, bool manterConectado)
{
DynamicParameters parameters = new DynamicParameters();
parameters.Add("@usuarioid", userId, System.Data.DbType.Guid);
parameters.Add("@token", token, System.Data.DbType.Guid);
parameters.Add("@dataregistro", DateTime.UtcNow, System.Data.DbType.DateTime);
parameters.Add("@origem", origin, System.Data.DbType.Int16);
parameters.Add("@manterconectado", manterConectado, System.Data.DbType.Int16);
Execute(INSERT_AUTH_CONTROL, parameters);
}
public static UserEntity Authenticate(string email, string password, AuthOrigin origin)
{
UserEntity user;
user = UserRepository.Get().GetUserAuth(email);
if (user == null)
{
throw new ExceptionWithHttpStatus(System.Net.HttpStatusCode.BadRequest, Messages.USER_INVALID);
}
switch (origin)
{
case AuthOrigin.App:
if (user.UserType == UserType.Administrator)
{
throw new ExceptionWithHttpStatus(System.Net.HttpStatusCode.BadRequest, Messages.USER_INVALID);
}
break;
case AuthOrigin.Web:
if (user.UserType == UserType.SalesPerson ||
user.UserType == UserType.SecundarySalesPerson)
{
throw new ExceptionWithHttpStatus(System.Net.HttpStatusCode.BadRequest, Messages.USER_INVALID);
}
break;
}
if (ValidatePassword(password, user.PasswordSalt, user.Password))
{
user.Password = string.Empty;
user.PasswordSalt = string.Empty;
return(user);
}
else
{
throw new ExceptionWithHttpStatus(System.Net.HttpStatusCode.BadRequest, Messages.USER_INVALID);
}
}
public UserEntity Authenticate(string email, string password, AuthOrigin origin)
{
return(UserBusiness.Authenticate(email, password, origin));
}
public Guid CreateAuthenticationControl(Guid userId, AuthOrigin origin)
{
return(AuthenticationBusiness.CreateAuthenticationControl(userId, origin));
}