| | | 1 | | using System.Text; |
| | | 2 | | using System.Security.Claims; |
| | | 3 | | using Microsoft.IdentityModel.Tokens; |
| | | 4 | | using System.IdentityModel.Tokens.Jwt; |
| | | 5 | | using Syki.Back.Features.Cross.CreateUser; |
| | | 6 | | |
| | | 7 | | namespace Syki.Back.Features.Cross.GenerateJWT; |
| | | 8 | | |
| | 970 | 9 | | public class GenerateJWTService(AuthSettings settings, UserManager<SykiUser> userManager, SykiDbContext ctx) : ICrossSer |
| | | 10 | | { |
| | | 11 | | public async Task<string> Generate(string email) |
| | | 12 | | { |
| | 948 | 13 | | var user = (await userManager.FindByEmailAsync(email))!; |
| | 948 | 14 | | var role = (await userManager.GetRolesAsync(user))[0]; |
| | | 15 | | |
| | 948 | 16 | | var claims = new List<Claim> |
| | 948 | 17 | | { |
| | 948 | 18 | | new("jti", Guid.CreateVersion7().ToString()), |
| | 948 | 19 | | new("sub", user.Id.ToString()), |
| | 948 | 20 | | new("role", role), |
| | 948 | 21 | | new("name", user.Name), |
| | 948 | 22 | | new("email", user.Email!), |
| | 948 | 23 | | new("institution", user.InstitutionId.ToString()), |
| | 948 | 24 | | }; |
| | 948 | 25 | | claims.AddRange(await GetDbClaims(user.Id, role)); |
| | | 26 | | |
| | 948 | 27 | | var identityClaims = new ClaimsIdentity(); |
| | 948 | 28 | | identityClaims.AddClaims(claims); |
| | | 29 | | |
| | 948 | 30 | | var key = Encoding.ASCII.GetBytes(settings.SecurityKey); |
| | 948 | 31 | | var expirationTime = settings.ExpirationTimeInMinutes; |
| | 948 | 32 | | var signingCredentials = new SigningCredentials( |
| | 948 | 33 | | new SymmetricSecurityKey(key), |
| | 948 | 34 | | SecurityAlgorithms.HmacSha256Signature |
| | 948 | 35 | | ); |
| | | 36 | | |
| | 948 | 37 | | var tokenDescriptor = new SecurityTokenDescriptor |
| | 948 | 38 | | { |
| | 948 | 39 | | Issuer = settings.Issuer, |
| | 948 | 40 | | Subject = identityClaims, |
| | 948 | 41 | | Audience = settings.Audience, |
| | 948 | 42 | | SigningCredentials = signingCredentials, |
| | 948 | 43 | | Expires = DateTime.UtcNow.AddMinutes(expirationTime), |
| | 948 | 44 | | }; |
| | | 45 | | |
| | 948 | 46 | | var tokenHandler = new JwtSecurityTokenHandler(); |
| | 948 | 47 | | var token = tokenHandler.CreateToken(tokenDescriptor); |
| | | 48 | | |
| | 948 | 49 | | return tokenHandler.WriteToken(token); |
| | 948 | 50 | | } |
| | | 51 | | |
| | | 52 | | private async Task<List<Claim>> GetDbClaims(Guid userId, string role) |
| | | 53 | | { |
| | 948 | 54 | | if (role.ToEnum<UserRole>() is UserRole.Student) |
| | | 55 | | { |
| | 198 | 56 | | var courseOfferingId = await ctx.Students.Where(a => a.Id == userId) |
| | 198 | 57 | | .Select(a => a.CourseOfferingId).FirstAsync(); |
| | 198 | 58 | | var courseCurriculumId = await ctx.CourseOfferings.Where(o => o.Id == courseOfferingId) |
| | 198 | 59 | | .Select(o => o.CourseCurriculumId).FirstAsync(); |
| | | 60 | | |
| | 198 | 61 | | return [ new("CourseCurriculumId", courseCurriculumId.ToString()) ]; |
| | | 62 | | } |
| | | 63 | | |
| | 750 | 64 | | return []; |
| | 948 | 65 | | } |
| | | 66 | | } |