public UserToken Authenticate(string username, string password, ToolTier3DbContext context)
{
var entUser = context.Users.SingleOrDefault(x => x.Username.ToLower() == username.ToLower() && x.Password == password);
// return null if user not found
if (entUser == null)
{
return(null);
}
var user = new UserToken(entUser);
var tokenHandler = new JwtSecurityTokenHandler();
var key = Encoding.ASCII.GetBytes(_appSettings.Secret);
var tokenDescriptor = new SecurityTokenDescriptor
{
Subject = new ClaimsIdentity(new Claim[]
{
new Claim(ClaimTypes.Name, user.Username),
new Claim(ClaimTypes.Role, user.Role),
new Claim("CanAccessDW", (user.CanAccessDW ?? false) ? "Can" : "Not"),
new Claim("CanAccessHHAX", (user.CanAccessHHAX ?? false) ? "Can" : "Not")
}),
Expires = DateTime.UtcNow.AddMinutes(90),
SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature)
};
var token = tokenHandler.CreateToken(tokenDescriptor);
user.Token = tokenHandler.WriteToken(token);
return(user);
}
public ConnectionsController(ToolTier3DbContext context, IUserService userService)
{
_context = context;
}
public UsersController(ToolTier3DbContext context, IUserService userService)
{
_context = context;
_userService = userService;
}
public IEnumerable <Users> GetUsers(ToolTier3DbContext context)
{
return(context.Users);
}
