internal string ProlongJwtToken(ClaimsPrincipal currentUser, SignInProvider signInProvider)
{
if (currentUser.HasClaim(c => c.Type == JwtEncryptedBsn))
{
var bsnEncrypted = currentUser.Claims.First(c => c.Type == JwtEncryptedBsn).Value;
var bsn = JwtClaimEncryptor.Decrypt(bsnEncrypted, _config["JwtClaimEncryption:SecretKey"]);
return(CreateJwtSecurityToken(bsn, signInProvider));
}
return(string.Empty);
}
private string CreateJwtSecurityToken(string bsn, SignInProvider signInProvider)
{
var securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_config["Jwt:Key"]));
var credentials = new SigningCredentials(securityKey, SecurityAlgorithms.HmacSha256);
var utc0 = new DateTime(1970, 1, 1, 0, 0, 0, 0, DateTimeKind.Utc);
var issueTime = DateTime.Now;
var iat = (int)issueTime.Subtract(utc0).TotalSeconds;
//Expiry depends on the identity provider
int expiryInMinutes = 0;
switch (signInProvider)
{
case SignInProvider.FakeLogin:
expiryInMinutes = int.Parse(_config["Jwt:ExpirationInMinutes:Fake"]);
break;
case SignInProvider.DigidCgi:
expiryInMinutes = int.Parse(_config["Jwt:ExpirationInMinutes:DigidCgi"]);
break;
}
var expires = DateTime.Now.AddMinutes(expiryInMinutes);
var exp = (int)expires.Subtract(utc0).TotalSeconds;
var jwtId = Guid.NewGuid().ToString();
var claims = new[]
{
new Claim(JwtEncryptedBsn, JwtClaimEncryptor.Encrypt(bsn, _config["JwtClaimEncryption:SecretKey"])),
new Claim(JwtRegisteredClaimNames.Jti, jwtId),
new Claim(JwtOriginalIdp, signInProvider.ToString()),
new Claim(JwtRegisteredClaimNames.Iat, iat.ToString()),
new Claim(JwtRegisteredClaimNames.Exp, exp.ToString())
};
var token = new JwtSecurityToken(
_config["Jwt:Issuer"],
_config["Jwt:Issuer"],
claims,
expires: expires,
signingCredentials: credentials);
Log4NetLogManager.AuditLogger.Info("Gebruiker aangemaakt na succesvolle login", jwtId);
return(new JwtSecurityTokenHandler().WriteToken(token));
}
internal string GenerateJsonWebToken(DigidUser digidUser, SignInProvider signInProvider)
{
return(CreateJwtSecurityToken(digidUser.Bsn, signInProvider));
}
