| | | 1 | | using Dapper; |
| | | 2 | | |
| | | 3 | | namespace Estud.Back.Features.Identity.CheckSsoAvailability; |
| | | 4 | | |
| | 10 | 5 | | public class CheckSsoAvailabilityService(EstudDbContext ctx) : IEstudService |
| | | 6 | | { |
| | | 7 | | private class Validator : AbstractValidator<CheckSsoAvailabilityIn> |
| | | 8 | | { |
| | 2 | 9 | | public Validator() |
| | | 10 | | { |
| | 2 | 11 | | RuleFor(x => x.Email).NotEmpty().WithError(InvalidEmail.I); |
| | 12 | 12 | | RuleFor(x => x.Email).Must(x => x.IsValidEmail()).WithError(InvalidEmail.I); |
| | 2 | 13 | | } |
| | | 14 | | } |
| | 2 | 15 | | private static readonly Validator V = new(); |
| | | 16 | | |
| | | 17 | | public async Task<OneOf<CheckSsoAvailabilityOut, EstudError>> Check(CheckSsoAvailabilityIn data) |
| | | 18 | | { |
| | 16 | 19 | | if (V.Run(data, out var error)) return error; |
| | | 20 | | |
| | 4 | 21 | | var domain = ExtractDomain(data.Email); |
| | 4 | 22 | | if (domain == null) return new CheckSsoAvailabilityOut { SsoEnabled = false }; |
| | | 23 | | |
| | | 24 | | const string sql = @" |
| | | 25 | | SELECT |
| | | 26 | | c.require_sso, |
| | | 27 | | c.provider_type |
| | | 28 | | FROM |
| | | 29 | | estud.sso_allowed_domains d |
| | | 30 | | INNER JOIN |
| | | 31 | | estud.sso_configurations c ON c.id = d.sso_configuration_id |
| | | 32 | | WHERE |
| | | 33 | | d.domain = @Domain |
| | | 34 | | AND |
| | | 35 | | c.is_active = true |
| | | 36 | | LIMIT 1 |
| | | 37 | | "; |
| | | 38 | | |
| | 4 | 39 | | var config = await ctx.Database.GetDbConnection().QueryFirstOrDefaultAsync<SsoConfigDto>(sql, new { Domain = dom |
| | 6 | 40 | | if (config == null) return new CheckSsoAvailabilityOut { SsoEnabled = false }; |
| | | 41 | | |
| | 2 | 42 | | return new CheckSsoAvailabilityOut |
| | 2 | 43 | | { |
| | 2 | 44 | | SsoEnabled = true, |
| | 2 | 45 | | SsoRequired = config.RequireSso, |
| | 2 | 46 | | ProviderType = config.ProviderType, |
| | 2 | 47 | | }; |
| | 10 | 48 | | } |
| | | 49 | | |
| | | 50 | | private static string? ExtractDomain(string email) |
| | | 51 | | { |
| | 4 | 52 | | if (email.IsEmpty()) return null; |
| | | 53 | | |
| | 4 | 54 | | var parts = email.Split('@'); |
| | 4 | 55 | | if (parts.Length != 2) return null; |
| | | 56 | | |
| | 4 | 57 | | return parts[1].Trim().ToLowerInvariant(); |
| | | 58 | | } |
| | | 59 | | } |