示例#1
0
        public async Task <IActionResult> Post([FromBody] SingInViewModel model)
        {
            if (!ModelState.IsValid)
            {
                return(BadRequest(ModelState.ErrorsToList()));
            }

            var normalizedUserName = model.Username.Trim().ToUpper();

            var user = await _userService.GetByUserNameOrEmailOrDefaultAsync(normalizedUserName);

            if (user == null)
            {
                return(NotFound($"User with email or name {model.Username} not found"));
            }

            var result = await _signInService.CheckPasswordSignInAsync(user, model.Password, false);

            if (!result.Succeeded)
            {
                return(result.ToActionResult());
            }

            return(Ok(await _jwtTokenServices.GetJwtTokenAsync(user)));
        }
        public async Task <IActionResult> Login([FromBody] CredentialsDto credentials)
        {
            var user = await _userService.FindByNameAsync(credentials.UserNameOrEmail);

            if (user == null)
            {
                user = await _userService.FindByEmailAsync(credentials.UserNameOrEmail);

                if (user == null)
                {
                    return(BadRequest("Login fehlgeschlagen!"));
                }
            }
            user.LastLoginDate = DateTime.Now;
            await _userService.UpdateUserAsync(user);

            await userLoginService.CreateAsync(new UserLogin()
            {
                DateTimeOfLastLogin = DateTime.Now, UserId = user.Id
            });

            if (user.UserLockEnabled)
            {
                return(BadRequest("Benutzer ist gesperrt! Bitte den Administrator kontaktieren"));
            }

            var signInAsync = await _signInService.CheckPasswordSignInAsync(user, credentials.Password);

            if (signInAsync.Succeeded)
            {
                var userDto = _mapper.Map <UserDto>(user);
                var roles   = await _userService.GetRolesAsync(user);

                List <Claim> claims;
                if (!user.IsSuperAdmin)
                {
                    claims = await GetAllClaimsOfUser(roles);
                }
                else
                {
                    claims = RoleClaims.GetAllClaims();
                }
                userDto.AccessToken = _signInService.CreateToken(user, roles, claims);
                return(Ok(userDto));
            }

            return(BadRequest("Login fehlgeschlagen!"));
        }