public override Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context) { _iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus)); string clientId = string.Empty; string clientSecret = string.Empty; ClientDTO client = null; if (!context.TryGetBasicCredentials(out clientId, out clientSecret)) { context.TryGetFormCredentials(out clientId, out clientSecret); } if (context.ClientId == null) { context.Validated(); return(Task.FromResult <object>(null)); } client = _iAuthorizationBus.FindClient(context.ClientId); if (client == null) { context.SetError("invalid_clientId"); return(Task.FromResult <object>(null)); } if (client.ApplicationType == ApplicationTypes.Client_NativeConfidentialApplication) { if (string.IsNullOrWhiteSpace(clientSecret)) { context.SetError("invalid_clientId", Resources.ClientSecretShouldBeSent); return(Task.FromResult <object>(null)); } else { if (client.Secret != Helper.GetHash(clientSecret)) { context.SetError("invalid_clientId", Resources.InvalidClientSecret); return(Task.FromResult <object>(null)); } } } if (!client.Active) { context.SetError("invalid_clientId", Resources.ClientInactive); return(Task.FromResult <object>(null)); } context.OwinContext.Set <string>("as:clientAllowedOrigin", client.AllowedOrigin); context.OwinContext.Set <string>("as:clientRefreshTokenLifeTime", client.RefreshTokenLifeTime.ToString()); context.Validated(); return(Task.FromResult <object>(null)); }
public async Task ReceiveAsync(AuthenticationTokenReceiveContext context) { _iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus)); var allowedOrigin = context.OwinContext.Get <string>("as:clientAllowedOrigin"); //context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { allowedOrigin }); string hashedTokenId = Helper.GetHash(context.Token); var refreshToken = await _iAuthorizationBus.FindRefreshToken(hashedTokenId); if (refreshToken != null) { //TicketSerializer serializer = new TicketSerializer(); //context.SetTicket(serializer.Deserialize(System.Text.Encoding.Default.GetBytes(refreshToken.ProtectedTicket))); context.DeserializeTicket(refreshToken.ProtectedTicket); var result = await _iAuthorizationBus.RemoveRefreshToken(hashedTokenId); } }
public override Task GrantRefreshToken(OAuthGrantRefreshTokenContext context) { _iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus)); var originalClient = context.Ticket.Properties.Dictionary["as:client_id"]; var currentClinet = context.ClientId; if (originalClient != currentClinet) { context.SetError("invalid_clientId", Resources.RefreshTokenIssuedToDifferentClient); return(Task.FromResult <object>(null)); } var newIdentity = new ClaimsIdentity(context.Ticket.Identity); var newTicket = new AuthenticationTicket(newIdentity, context.Ticket.Properties); context.Validated(newTicket); return(Task.FromResult <object>(null)); }
public async Task CreateAsync(AuthenticationTokenCreateContext context) { _iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus)); var clientId = context.Ticket.Properties.Dictionary["as:client_id"]; if (string.IsNullOrEmpty(clientId)) { return; } var refreshTokenId = Guid.NewGuid().ToString("n"); var refreshTokenLifeTime = context.OwinContext.Get <string>("as:clientRefreshTokenLifeTime"); var token = new RefreshTokenDTO() { Id = Helper.GetHash(refreshTokenId), ClientId = clientId, Subject = context.Ticket.Identity.Name, IssuedUtc = DateTime.UtcNow, ExpiresUtc = DateTime.UtcNow.AddMinutes(Convert.ToDouble(refreshTokenLifeTime)) }; context.Ticket.Properties.IssuedUtc = token.IssuedUtc; context.Ticket.Properties.ExpiresUtc = token.ExpiresUtc; //TicketSerializer serializer = new TicketSerializer(); //token.ProtectedTicket = System.Text.Encoding.Default.GetString(serializer.Serialize(context.Ticket)); token.ProtectedTicket = context.SerializeTicket(); var result = await _iAuthorizationBus.AddRefreshToken(token); if (result) { context.SetToken(refreshTokenId); } }
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context) { _iAuthorizationBus = (IAuthorizationBus)GlobalConfiguration.Configuration.DependencyResolver.GetService(typeof(IAuthorizationBus)); var allowedOrigin = context.OwinContext.Get <string>("as:clientAllowedOrigin"); if (allowedOrigin == null) { allowedOrigin = "*"; } //context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { "*" }); if (context.UserName == null || context.Password == null) { context.SetError("invalid_request", Resources.InvalidLoginRequest); return; } var user = await _iAuthorizationBus.FindUser(context.UserName, context.Password); if (user == null) { context.SetError("invalid_grant", Resources.InvalidEmailOrPassword); return; } var userRoles = await _iAuthorizationBus.UserRoles(user.Id); var identity = new ClaimsIdentity(context.Options.AuthenticationType); identity.AddClaim(new Claim(ClaimTypes.Name, context.UserName)); identity.AddClaim(new Claim(AuthConstants.CustomClaims.UserId, user.Id)); foreach (var role in userRoles) { identity.AddClaim(new Claim(ClaimTypes.Role, role)); } var props = new AuthenticationProperties(new Dictionary <string, string> { { AuthConstants.CustomAuthProps.ClientId, (context.ClientId == null) ? string.Empty : context.ClientId }, { AuthConstants.CustomAuthProps.UserName, context.UserName }, { AuthConstants.CustomAuthProps.IsAdmin, (userRoles.Contains(ApplicationConstants.ADMIN)) ? "true" : "false" }, { AuthConstants.CustomAuthProps.UserId, user.Id }, { AuthConstants.CustomAuthProps.FullName, user.FirstName + " " + user.LastName }, { AuthConstants.CustomAuthProps.ProfilePic, user.ProfileImage } }); var ticket = new AuthenticationTicket(identity, props); context.Validated(ticket); }
public AccountController(IUserBus iUserBus, IAuthorizationBus iAuthorizationBus) { _iUserBus = iUserBus; _iAuthorizationBus = iAuthorizationBus; }