Пример #1
0
        public IActionResult Login(string user, string password)
        {
            if (string.IsNullOrWhiteSpace(user) || string.IsNullOrWhiteSpace(password))
            {
                return(StatusCode(400, Common.Constantes.Mensagens.Alertas.SENHA_USUARIO_OBRIGATORIO));
            }

            var provider   = new MongoProvider();
            var database   = provider.GetApplicationDatabase(provider.InitializeDatabase(Database.ConnectionString));
            var collection = database.GetCollection <BsonDocument>("users", null);
            //var builder = Builders<BsonDocument>.Filter;
            var filter = Builders <BsonDocument> .Filter.Eq("user", user);

            var userObject = collection.Find(filter).FirstOrDefault();

            if (userObject == null)
            {
                return(StatusCode(400, Common.Constantes.Mensagens.Alertas.SENHA_USUARIO_OBRIGATORIO));
            }

            if (userObject["password"] != password)
            {
                return(StatusCode(StatusCodes.Status401Unauthorized, Common.Constantes.Mensagens.Alertas.LOGIN_INVALIDO));
            }

            return(Ok(Common.Constantes.Mensagens.LOGIN_SUCESSO));
        }
Пример #2
0
        public IActionResult Token([FromBody] AuthRequest user)
        {
            if (!ModelState.IsValid)
            {
                return(BadRequest("Token failed to generate"));
            }
            //Get our bitch ass user from :b:ongo
            var provider   = new MongoProvider();
            var database   = provider.GetApplicationDatabase(provider.InitializeDatabase(Database.ConnectionString));
            var collection = database.GetCollection <BsonDocument>("users", null);
            //var builder = Builders<BsonDocument>.Filter;
            var filter = Builders <BsonDocument> .Filter.Eq("Email", user.User);

            var userObject = collection.Find(filter).FirstOrDefault();

            if (userObject == null)
            {
                return(Unauthorized());
            }

            //Add Claims
            var claims = new[]
            {
                new Claim(JwtRegisteredClaimNames.UniqueName, "data"),
                new Claim(JwtRegisteredClaimNames.Sub, "data"),
                new Claim(JwtRegisteredClaimNames.Email, "data"),
                new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()),
            };

            var truestKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_configuration["TokenAuthentication:SecretKey"]));
            var key       = new SymmetricSecurityKey(Encoding.UTF8.GetBytes("rlyaKithdrYVl6Z80ODU350md")); //Secrets
            var creds     = new SigningCredentials(truestKey, SecurityAlgorithms.HmacSha256);

            var token = new JwtSecurityToken(userObject["Email"].AsString,
                                             _configuration["TokenAuthentication:Issuer"],
                                             claims,
                                             expires: DateTime.Now.AddMinutes(30),
                                             signingCredentials: creds);

            return(Ok(new
            {
                access_token = new JwtSecurityTokenHandler().WriteToken(token),
                expires_in = DateTime.Now.AddMinutes(30),
                token_type = "bearer"
            }));
        }