public override Task Authenticated(GitHubAuthenticatedContext context)
        {
            context.Identity.AddClaim(new Claim(Claims.ExternalAccessToken, context.AccessToken));
            context.Identity.AddClaim(new Claim(Claims.ExternalUserName, context.Name));

            return base.Authenticated(context);
        }
 /// <summary>
 /// Invoked whenever GitHub succesfully authenticates a user
 /// </summary>
 /// <param name="context">Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.</param>
 /// <returns>A <see cref="Task"/> representing the completed operation.</returns>
 public virtual Task Authenticated(GitHubAuthenticatedContext context)
 {
     return OnAuthenticated(context);
 }
        protected override async Task <AuthenticationTicket> AuthenticateCoreAsync()
        {
            AuthenticationProperties properties = null;

            try
            {
                string code  = null;
                string state = null;

                IReadableStringCollection query  = Request.Query;
                IList <string>            values = query.GetValues("code");
                if (values != null && values.Count == 1)
                {
                    code = values[0];
                }
                values = query.GetValues("state");
                if (values != null && values.Count == 1)
                {
                    state = values[0];
                }

                properties = Options.StateDataFormat.Unprotect(state);
                if (properties == null)
                {
                    return(null);
                }

                // OAuth2 10.12 CSRF
                if (!ValidateCorrelationId(properties, logger))
                {
                    return(new AuthenticationTicket(null, properties));
                }

                string requestPrefix = Request.Scheme + "://" + Request.Host;
                string redirectUri   = requestPrefix + Request.PathBase + Options.CallbackPath;

                // Build up the body for the token request
                var body = new List <KeyValuePair <string, string> >();
                body.Add(new KeyValuePair <string, string>("code", code));
                body.Add(new KeyValuePair <string, string>("redirect_uri", redirectUri));
                body.Add(new KeyValuePair <string, string>("client_id", Options.ClientId));
                body.Add(new KeyValuePair <string, string>("client_secret", Options.ClientSecret));

                // Request the token
                var requestMessage = new HttpRequestMessage(HttpMethod.Post, Options.Endpoints.TokenEndpoint);
                requestMessage.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
                requestMessage.Content = new FormUrlEncodedContent(body);
                HttpResponseMessage tokenResponse = await httpClient.SendAsync(requestMessage);

                tokenResponse.EnsureSuccessStatusCode();
                string text = await tokenResponse.Content.ReadAsStringAsync();

                // Deserializes the token response
                dynamic response    = JsonConvert.DeserializeObject <dynamic>(text);
                string  accessToken = (string)response.access_token;

                // Get the GitHub user
                HttpRequestMessage userRequest = new HttpRequestMessage(HttpMethod.Get, Options.Endpoints.UserInfoEndpoint + "?access_token=" + Uri.EscapeDataString(accessToken));
                userRequest.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
                HttpResponseMessage userResponse = await httpClient.SendAsync(userRequest, Request.CallCancelled);

                userResponse.EnsureSuccessStatusCode();
                text = await userResponse.Content.ReadAsStringAsync();

                JObject user = JObject.Parse(text);

                var context = new GitHubAuthenticatedContext(Context, user, accessToken);
                context.Identity = new ClaimsIdentity(
                    Options.AuthenticationType,
                    ClaimsIdentity.DefaultNameClaimType,
                    ClaimsIdentity.DefaultRoleClaimType);
                if (!string.IsNullOrEmpty(context.Id))
                {
                    context.Identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, context.Id, XmlSchemaString, Options.AuthenticationType));
                }
                if (!string.IsNullOrEmpty(context.UserName))
                {
                    context.Identity.AddClaim(new Claim(ClaimsIdentity.DefaultNameClaimType, context.UserName, XmlSchemaString, Options.AuthenticationType));
                }
                if (!string.IsNullOrEmpty(context.Name))
                {
                    context.Identity.AddClaim(new Claim("urn:github:name", context.Name, XmlSchemaString, Options.AuthenticationType));
                }
                if (!string.IsNullOrEmpty(context.Link))
                {
                    context.Identity.AddClaim(new Claim("urn:github:url", context.Link, XmlSchemaString, Options.AuthenticationType));
                }
                context.Properties = properties;

                await Options.Provider.Authenticated(context);

                return(new AuthenticationTicket(context.Identity, context.Properties));
            }
            catch (Exception ex)
            {
                logger.WriteError(ex.Message);
            }
            return(new AuthenticationTicket(null, properties));
        }
Пример #4
0
 public Task ReturnEndpoint(GitHubAuthenticatedContext context)
 {
     return Task.FromResult<object>(null);
 }
Пример #5
0
 public override Task Authenticated(GitHubAuthenticatedContext context)
 {
     context.Identity.AddClaim(new Claim("ExternalAccessToken", context.AccessToken));
     return Task.FromResult<object>(null);
 }
Пример #6
0
 public void ApplyRedirect(GitHubAuthenticatedContext context)
 {
     context.Response.Redirect(context.Properties.RedirectUri);
 }
Пример #7
0
 /// <summary>
 /// Invoked whenever GitHub succesfully authenticates a user
 /// </summary>
 /// <param name="context">Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.</param>
 /// <returns>A <see cref="Task"/> representing the completed operation.</returns>
 public virtual Task Authenticated(GitHubAuthenticatedContext context)
 {
     return(OnAuthenticated(context));
 }
Пример #8
0
        public AuthenticationTicket ChallengeResult(string code, string state)
        {
            //var tt = new GitHubAuthenticationOptions();
            var properties = sOption.StateDataFormat.Unprotect(state);

            if (properties == null)
            {
                return(null);
            }

            // OAuth2 10.12 CSRF
            //if (!ValidateCorrelationId(properties, logger))
//            {
//                return null;
//            }


            string redirectUri = RedirectUri;// requestPrefix + Request.PathBase + Options.CallbackPath;

            // Build up the body for the token request
            var body = new List <KeyValuePair <string, string> >();

            body.Add(new KeyValuePair <string, string>("code", code));
            body.Add(new KeyValuePair <string, string>("redirect_uri", redirectUri));
            body.Add(new KeyValuePair <string, string>("client_id", sOption.ClientId));
            body.Add(new KeyValuePair <string, string>("client_secret", sOption.ClientSecret));

            // Request the token
            var requestMessage = new HttpRequestMessage(HttpMethod.Post, sOption.Endpoints.TokenEndpoint);

            requestMessage.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
            requestMessage.Content = new FormUrlEncodedContent(body);
            HttpResponseMessage tokenResponse = httpClient.SendAsync(requestMessage).Result;

            tokenResponse.EnsureSuccessStatusCode();
            string text = tokenResponse.Content.ReadAsStringAsync().Result;

            // Deserializes the token response
            dynamic response    = JsonConvert.DeserializeObject <dynamic>(text);
            string  accessToken = (string)response.access_token;

            // Get the GitHub user
            HttpRequestMessage userRequest = new HttpRequestMessage(HttpMethod.Get, sOption.Endpoints.UserInfoEndpoint + "?access_token=" + Uri.EscapeDataString(accessToken));

            userRequest.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
            var aaa = new CancellationToken();
            HttpResponseMessage userResponse = httpClient.SendAsync(userRequest, aaa).Result;

            userResponse.EnsureSuccessStatusCode();
            text = userResponse.Content.ReadAsStringAsync().Result;
            JObject user = JObject.Parse(text);

            // Get the GitHub email
            HttpRequestMessage emailRequest = new HttpRequestMessage(HttpMethod.Get, sOption.Endpoints.EmailEndpoint + "?access_token=" + Uri.EscapeDataString(accessToken));

            emailRequest.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
            HttpResponseMessage emailResponse = httpClient.SendAsync(emailRequest, aaa).Result;

            emailResponse.EnsureSuccessStatusCode();
            text = emailResponse.Content.ReadAsStringAsync().Result;

            var allEmails = JArray.Parse(text).Children <JObject>();

            string primaryEmail = "";

            foreach (var email in allEmails)
            {
                if (GitHubAuthenticatedContext.TryGetValue(email, "primary") == "True")
                {
                    primaryEmail = GitHubAuthenticatedContext.TryGetValue(email, "email");
                    break;
                }
            }
            var context = new GitHubAuthenticatedContext(Context, user, accessToken);

            context.Identity = new ClaimsIdentity(
                sOption.AuthenticationType,
                ClaimsIdentity.DefaultNameClaimType,
                ClaimsIdentity.DefaultRoleClaimType);
            if (!string.IsNullOrEmpty(context.Id))
            {
                context.Identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, context.Id, XmlSchemaString, sOption.AuthenticationType));
            }
            if (!string.IsNullOrEmpty(context.UserName))
            {
                context.Identity.AddClaim(new Claim(ClaimsIdentity.DefaultNameClaimType, context.UserName, XmlSchemaString, sOption.AuthenticationType));
            }
            if (!string.IsNullOrEmpty(context.Name))
            {
                context.Identity.AddClaim(new Claim("urn:github:name", context.Name, XmlSchemaString, sOption.AuthenticationType));
            }
            if (!string.IsNullOrEmpty(context.Link))
            {
                context.Identity.AddClaim(new Claim("urn:github:url", context.Link, XmlSchemaString, sOption.AuthenticationType));
            }
            if (!string.IsNullOrEmpty(primaryEmail))
            {
                context.Identity.AddClaim(new Claim(ClaimTypes.Email, primaryEmail, XmlSchemaString, sOption.AuthenticationType));
            }
            context.Properties = properties;

            return(new AuthenticationTicket(context.Identity, context.Properties));
        }
Пример #9
0
        protected override async Task <AuthenticationTicket> AuthenticateCoreAsync()
        {
            AuthenticationProperties properties = null;

            try
            {
                string code  = null;
                string state = null;

                var query  = Request.Query;
                var values = query.GetValues("code");
                if (values != null && values.Count == 1)
                {
                    code = values[0];
                }
                values = query.GetValues("state");
                if (values != null && values.Count == 1)
                {
                    state = values[0];
                }

                properties = Options.StateDataFormat.Unprotect(state);
                if (properties == null)
                {
                    return(null);
                }

                // OAuth2 10.12 CSRF
                if (!ValidateCorrelationId(properties, _logger))
                {
                    return(new AuthenticationTicket(null, properties));
                }

                var requestPrefix = Request.Scheme + "://" + Request.Host;
                var redirectUri   = requestPrefix + Request.PathBase + Options.CallbackPath;

                // Build up the body for the token request
                var body = new List <KeyValuePair <string, string> >
                {
                    new KeyValuePair <string, string>("code", code),
                    new KeyValuePair <string, string>("redirect_uri", redirectUri),
                    new KeyValuePair <string, string>("client_id", Options.ClientId),
                    new KeyValuePair <string, string>("client_secret", Options.ClientSecret)
                };

                // Request the token
                var requestMessage = new HttpRequestMessage(HttpMethod.Post, Options.Endpoints.TokenEndpoint);
                requestMessage.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
                requestMessage.Content = new FormUrlEncodedContent(body);
                var tokenResponse = await _httpClient.SendAsync(requestMessage);

                tokenResponse.EnsureSuccessStatusCode();
                var text = await tokenResponse.Content.ReadAsStringAsync();

                // Deserializes the token response
                dynamic response    = JsonConvert.DeserializeObject <dynamic>(text);
                var     accessToken = (string)response.access_token;

                // Get the GitHub user
                var userRequest = new HttpRequestMessage(HttpMethod.Get, Options.Endpoints.UserInfoEndpoint + "?access_token=" + Uri.EscapeDataString(accessToken));
                userRequest.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
                var userResponse = await _httpClient.SendAsync(userRequest, Request.CallCancelled);

                userResponse.EnsureSuccessStatusCode();
                text = await userResponse.Content.ReadAsStringAsync();

                var user = JObject.Parse(text);

                var context = new GitHubAuthenticatedContext(Context, user, accessToken)
                {
                    Identity = new ClaimsIdentity(
                        Options.AuthenticationType,
                        ClaimsIdentity.DefaultNameClaimType,
                        ClaimsIdentity.DefaultRoleClaimType)
                };
                if (!string.IsNullOrEmpty(context.Id))
                {
                    context.Identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, context.Id, XmlSchemaString, Options.AuthenticationType));
                }
                if (!string.IsNullOrEmpty(context.UserName))
                {
                    context.Identity.AddClaim(new Claim(ClaimsIdentity.DefaultNameClaimType, context.UserName, XmlSchemaString, Options.AuthenticationType));
                }
                if (!string.IsNullOrEmpty(context.Email))
                {
                    context.Identity.AddClaim(new Claim(ClaimTypes.Email, context.Email, XmlSchemaString,
                                                        Options.AuthenticationType));
                }
                else if (Options.Scope.Any(x => x == "user" || x == "user:email"))
                {
                    var userRequest2 = new HttpRequestMessage(HttpMethod.Get, Options.Endpoints.UserInfoEndpoint + "/emails" + "?access_token=" + Uri.EscapeDataString(accessToken));
                    userRequest2.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
                    var userResponse2 = await _httpClient.SendAsync(userRequest2, Request.CallCancelled);

                    userResponse2.EnsureSuccessStatusCode();
                    text = await userResponse2.Content.ReadAsStringAsync();

                    var emails = JsonConvert.DeserializeObject <List <UserEmail> >(text);
                    if (emails.Any())
                    {
                        var primaryEmail = emails.FirstOrDefault(x => x.Primary && x.Verified);
                        if (primaryEmail != null)
                        {
                            context.Identity.AddClaim(new Claim(ClaimTypes.Email, primaryEmail.Email, XmlSchemaString,
                                                                Options.AuthenticationType));
                        }
                    }
                }
                if (!string.IsNullOrEmpty(context.Name))
                {
                    context.Identity.AddClaim(new Claim("urn:github:name", context.Name, XmlSchemaString, Options.AuthenticationType));
                }
                if (!string.IsNullOrEmpty(context.Link))
                {
                    context.Identity.AddClaim(new Claim("urn:github:url", context.Link, XmlSchemaString, Options.AuthenticationType));
                }
                if (!string.IsNullOrEmpty(context.AccessToken))
                {
                    context.Identity.AddClaim(new Claim("urn:github:access_token", context.AccessToken, XmlSchemaString, Options.AuthenticationType));
                }
                if (Options.Scope.Any(x => x == "user:email") && Options.Scope.Any(x => x == "read:org"))
                {
                    var userRequest3 = new HttpRequestMessage(HttpMethod.Get, Options.Endpoints.UserInfoEndpoint + "/orgs" + "?access_token=" + Uri.EscapeDataString(accessToken));
                    userRequest3.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));
                    var userResponse3 = await _httpClient.SendAsync(userRequest3, Request.CallCancelled);

                    userResponse3.EnsureSuccessStatusCode();
                    text = await userResponse3.Content.ReadAsStringAsync();

                    var orgs = JsonConvert.DeserializeObject <List <Organization> >(text);
                    foreach (var org in orgs)
                    {
                        context.Identity.AddClaim(new Claim("urn:github:org", org.Login, XmlSchemaString, Options.AuthenticationType));
                    }
                }
                context.Properties = properties;

                await Options.Provider.Authenticated(context);

                return(new AuthenticationTicket(context.Identity, context.Properties));
            }
            catch (Exception ex)
            {
                _logger.WriteError(ex.Message);
            }
            return(new AuthenticationTicket(null, properties));
        }