public ActionResult Authenticate(string returnUrl)
{
IAuthenticationResponse response = openid.GetResponse();
if (response == null)
{
// Stage 2: user submitting Identifier
Identifier id;
if (Identifier.TryParse(Request.Form["openid_identifier"], out id))
{
try
{
IAuthenticationRequest request = openid.CreateRequest(Request.Form["openid_identifier"]);
request.AddExtension(new ClaimsRequest
{
Email = DemandLevel.Require,
Nickname = DemandLevel.Request,
FullName = DemandLevel.Request,
BirthDate = DemandLevel.Request
});
return request.RedirectingResponse.AsActionResult();
}
catch (ProtocolException ex)
{
ViewData["Message"] = ex.Message;
return View("Login");
}
}
else
{
ViewData["Message"] = "Invalid identifier";
return View("Login");
}
}
else
{
// Stage 3: OpenID Provider sending assertion response
switch (response.Status)
{
case AuthenticationStatus.Authenticated:
var claimedId = Models.User.NormalizeOpenId(response.ClaimedIdentifier.ToString().ToLower());
var sreg = response.GetExtension<ClaimsResponse>();
if (AppSettings.EnableWhiteList)
{
string lookupClaim = claimedId;
// google
if (claimedId.StartsWith(@"http://google.com/accounts/o8/id") && !claimedId.Contains("@") && sreg.Email != null && sreg.Email.Length > 2)
{
lookupClaim = "email:" + sreg.Email;
}
if (IsVerifiedEmailProvider(claimedId) && sreg.Email != null && sreg.Email.Length > 2)
{
lookupClaim = "email:" + sreg.Email;
}
var whiteListEntry = Current.DB.Query<OpenIdWhiteList>("select * from OpenIdWhiteList where lower(OpenId) = @lookupClaim", new { lookupClaim }).FirstOrDefault();
if (whiteListEntry == null || !whiteListEntry.Approved)
{
if (whiteListEntry == null)
{
// add a non approved entry to the list
whiteListEntry = new OpenIdWhiteList()
{
Approved = false,
CreationDate = DateTime.UtcNow,
OpenId = lookupClaim,
IpAddress = Request.UserHostAddress
};
Current.DB.OpenIdWhiteLists.InsertOnSubmit(whiteListEntry);
Current.DB.SubmitChanges();
}
// not allowed in
return TextPlain("Not allowed");
}
}
User user = null;
var openId = Current.DB.UserOpenIds.Where(o => o.OpenIdClaim == claimedId).FirstOrDefault();
if (!CurrentUser.IsAnonymous)
{
if (openId.UserId != CurrentUser.Id) //Does another user have this OpenID
{
//TODO: Need to perform a user merge
ViewData["Message"] = "Another user with this OpenID already exists, merging is not possible at this time.";
SetHeader("Log in below to change your OpenID");
return View("Login");
}
openId = CurrentUser.UserOpenIds.FirstOrDefault();
openId.OpenIdClaim = claimedId;
Current.DB.SubmitChanges();
user = CurrentUser;
returnUrl = "/user/" + user.Id;
}
else if (openId == null)
{
if (sreg != null && IsVerifiedEmailProvider(claimedId))
{
user = Current.DB.Users.FirstOrDefault(u => u.Email == sreg.Email);
if (user != null)
{
var o = new UserOpenId();
o.OpenIdClaim = claimedId;
o.User = user;
Current.DB.UserOpenIds.InsertOnSubmit(o);
Current.DB.SubmitChanges();
}
}
if (user == null)
{
// create new user
string email = "";
string login = "";
if (sreg != null)
{
email = sreg.Email;
login = sreg.Nickname;
}
user = Models.User.CreateUser(login, email, claimedId);
}
}
else
{
user = openId.User;
}
string Groups = user.IsAdmin ? "Admin" : "";
var ticket = new FormsAuthenticationTicket(
1,
user.Id.ToString(),
DateTime.Now,
DateTime.Now.AddYears(2),
true,
Groups);
string encryptedTicket = FormsAuthentication.Encrypt(ticket);
var authenticationCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
authenticationCookie.Expires = ticket.Expiration;
Response.Cookies.Add(authenticationCookie);
if (!string.IsNullOrEmpty(returnUrl))
{
return Redirect(returnUrl);
}
else
{
return RedirectToAction("Index", "Home");
}
case AuthenticationStatus.Canceled:
ViewData["Message"] = "Canceled at provider";
return View("Login");
case AuthenticationStatus.Failed:
ViewData["Message"] = response.Exception.Message;
return View("Login");
}
}
return new EmptyResult();
}
partial void UpdateOpenIdWhiteList(OpenIdWhiteList instance);
partial void DeleteOpenIdWhiteList(OpenIdWhiteList instance);
partial void InsertOpenIdWhiteList(OpenIdWhiteList instance);