| | | 1 | | using System.IdentityModel.Tokens.Jwt; |
| | | 2 | | using Syki.Back.Features.Cross.CreateUser; |
| | | 3 | | using Syki.Back.Features.Cross.GenerateJWT; |
| | | 4 | | |
| | | 5 | | namespace Syki.Back.Features.Cross.LoginMfa; |
| | | 6 | | |
| | 6 | 7 | | public class LoginMfaService(GenerateJWTService service, SignInManager<SykiUser> signInManager) : ICrossService |
| | | 8 | | { |
| | | 9 | | public async Task<OneOf<LoginMfaOut, SykiError>> LoginMfa(LoginMfaIn data) |
| | | 10 | | { |
| | 6 | 11 | | var token = data.Token!.OnlyNumbers(); |
| | 6 | 12 | | var result = await signInManager.TwoFactorAuthenticatorSignInAsync(token, false, false); |
| | | 13 | | |
| | 6 | 14 | | if (!result.Succeeded) |
| | 4 | 15 | | return new LoginWrongMfaToken(); |
| | | 16 | | |
| | 2 | 17 | | var user = await signInManager.GetTwoFactorAuthenticationUserAsync(); |
| | | 18 | | |
| | 2 | 19 | | var jwt = await service.Generate(user!.Email!); |
| | 2 | 20 | | var claims = new JwtSecurityToken(jwt).Claims.ToList(); |
| | | 21 | | |
| | 2 | 22 | | return new LoginMfaOut |
| | 2 | 23 | | { |
| | 2 | 24 | | AccessToken = jwt, |
| | 8 | 25 | | Name = claims.First(x => x.Type == "name").Value, |
| | 10 | 26 | | Email = claims.First(x => x.Type == "email").Value, |
| | 4 | 27 | | Id = Guid.Parse(claims.First(x => x.Type == "sub").Value), |
| | 6 | 28 | | Role = Enum.Parse<UserRole>(claims.First(x => x.Type == "role").Value), |
| | 2 | 29 | | }; |
| | 6 | 30 | | } |
| | | 31 | | } |