public async Task <IActionResult> Login(LoginAuthDto loginAuthDto)
{
//check if user exists
var user = await _repo.Login(loginAuthDto.Username.ToLower(), loginAuthDto.Password);
if (user == null)
{
return(Unauthorized());
}
//claims are basically the data which will be send back along with token from server to client
var claims = new[]
{
new Claim(ClaimTypes.NameIdentifier, user.Id.ToString()),
new Claim(ClaimTypes.Name, user.Username)
};
//key is used to encrypt the token which will be suplied to client
var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_config.GetSection("AppSettings:Token").Value));
//key is used to encrypt the token along with a encrypting algorithm
var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha512Signature);
//start creating token with defining a token descriptor
var tokenDescriptor = new SecurityTokenDescriptor
{
Subject = new ClaimsIdentity(claims),
Expires = DateTime.Now.AddDays(1), //expire time must be random
SigningCredentials = creds
};
//a token handler is created which will create a token
var tokenHandler = new JwtSecurityTokenHandler();
//token is created based on token descriptor
var token = tokenHandler.CreateToken(tokenDescriptor);
var userToReturn = _mapper.Map <UserDetailedDto>(user);
return(Ok(new
{
//write token parts which is too send back to client
token = tokenHandler.WriteToken(token),
userToReturn
}));
}
public async Task <IActionResult> Register(RegisterAuthDto registerAuthDto)
{
//usernames are all lowercase and to ensure it
registerAuthDto.Username = registerAuthDto.Username.ToLower();
if (await _repo.UserExists(registerAuthDto.Username))
{
return(BadRequest("Username already taken! please use another one"));
}
var userToCreate = _mapper.Map <User>(registerAuthDto);
var created_user = await _repo.Register(userToCreate, registerAuthDto.Password);
var userToReturn = _mapper.Map <UserDetailedDto>(created_user);
var loginUser = new LoginAuthDto()
{
Username = userToReturn.Username, Password = registerAuthDto.Password
};
var token = await Login(loginUser);
return(token);
// return CreatedAtRoute(nameof(UsersController.GetUser), new { controller = "Users", id = created_user.Id }, userToReturn);
}
