// Gennemgå metode, skriv kommentarer
public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
{
using (var conn = new SqlConnection(ConfigurationManager.ConnectionStrings["Hildur"].ConnectionString))
{
string Email = context.UserName;
string password = context.Password;
// searching the user in the database
//var user = conn.QuerySingleOrDefault<Employee>("SELECT * FROM hfo_Employee WHERE Email =@Email",
// new { Email });
var result = conn.QueryMultiple("SELECT * FROM hfo_Employee WHERE Email = @Email; SELECT * FROM hfo_User WHERE Email = @Email",
new { Email });
Employee employee = result.ReadSingleOrDefault <Employee>();
User user = result.ReadSingleOrDefault <User>();
// if the user is found, claims are added
if (user != null || employee != null)
{
if (user != null)
{
if (PasswordHelper.ComparePass(password, user.PasswordHash, user.Salt))
{
var Claims = new List <Claim>();
Claims.Add(new Claim(ClaimTypes.Name, user.FirstName));
Claims.Add(new Claim(ClaimTypes.NameIdentifier, user.UserId.ToString()));
Claims.Add(new Claim("LoggedOn", DateTime.Now.ToString()));
Claims.Add(new Claim(ClaimTypes.Role, user.RoleId.ToString()));
ClaimsIdentity oAuthClaimIdentity = new ClaimsIdentity(Claims, context.Options.AuthenticationType);
// Ticket har din identity
AuthenticationTicket ticket = new AuthenticationTicket(oAuthClaimIdentity, new AuthenticationProperties());
await Task.Run(() => context.Validated(ticket));
}
}
else
{
if (PasswordHelper.ComparePass(password, employee.PasswordHash, employee.Salt))
{
var Claims = new List <Claim>();
Claims.Add(new Claim(ClaimTypes.Name, employee.FirstName));
Claims.Add(new Claim(ClaimTypes.NameIdentifier, employee.EmployeeId.ToString()));
Claims.Add(new Claim("LoggedOn", DateTime.Now.ToString())); // ??
Claims.Add(new Claim(ClaimTypes.Role, employee.RoleId.ToString()));
Claims.Add(new Claim("Experience", employee.Experience.ToString()));
ClaimsIdentity oAuthClaimIdentity = new ClaimsIdentity(Claims, context.Options.AuthenticationType);
// Ticket har din identity
AuthenticationTicket ticket = new AuthenticationTicket(oAuthClaimIdentity, new AuthenticationProperties());
await Task.Run(() => context.Validated(ticket));
}
}
}
else
{
context.SetError("Wrong Crendentials", "Provided username and password is incorrect");
}
}
}