| | | 1 | | using System.Text; |
| | | 2 | | using Syki.Back.Auth.Claims; |
| | | 3 | | using System.Security.Claims; |
| | | 4 | | using Microsoft.IdentityModel.Tokens; |
| | | 5 | | using System.IdentityModel.Tokens.Jwt; |
| | | 6 | | using Syki.Back.Features.Identity.SignIn; |
| | | 7 | | |
| | | 8 | | namespace Syki.Back.Features.Cross.SignIn; |
| | | 9 | | |
| | 374 | 10 | | public class SignInService( |
| | 374 | 11 | | SykiDbContext ctx, |
| | 374 | 12 | | AuthSettings settings, |
| | 374 | 13 | | IHttpContextAccessor httpCtx) : ISykiService |
| | | 14 | | { |
| | | 15 | | public async Task<SignInOut> SignIn(string email) |
| | | 16 | | { |
| | 282 | 17 | | var user = await ctx.Users.Where(u => u.Email == email).Select(x => new { x.Id, x.InstitutionId }).FirstAsync(); |
| | 282 | 18 | | var role = await ctx.GetUserRole(user.Id, user.InstitutionId); |
| | 282 | 19 | | var permissions = role.Permissions.Serialize(); |
| | | 20 | | |
| | 282 | 21 | | var claims = new List<Claim> |
| | 282 | 22 | | { |
| | 282 | 23 | | new(SykiClaims.UserId, user.Id.ToString()), |
| | 282 | 24 | | new(SykiClaims.UserPermissions, permissions), |
| | 282 | 25 | | new(SykiClaims.Jti, Guid.NewGuid().ToString()), |
| | 282 | 26 | | new(SykiClaims.UserType, role.BaseType.ToInt().ToString()), |
| | 282 | 27 | | new(SykiClaims.UserInstitutionId, user.InstitutionId.ToString()), |
| | 282 | 28 | | }; |
| | | 29 | | |
| | 282 | 30 | | var identityClaims = new ClaimsIdentity(); |
| | 282 | 31 | | identityClaims.AddClaims(claims); |
| | | 32 | | |
| | 282 | 33 | | var key = Encoding.ASCII.GetBytes(settings.SecurityKey); |
| | 282 | 34 | | var expirationTime = settings.ExpirationTimeInMinutes; |
| | 282 | 35 | | var signingCredentials = new SigningCredentials( |
| | 282 | 36 | | new SymmetricSecurityKey(key), |
| | 282 | 37 | | SecurityAlgorithms.HmacSha256Signature |
| | 282 | 38 | | ); |
| | | 39 | | |
| | 282 | 40 | | var tokenDescriptor = new SecurityTokenDescriptor |
| | 282 | 41 | | { |
| | 282 | 42 | | Issuer = settings.Issuer, |
| | 282 | 43 | | Subject = identityClaims, |
| | 282 | 44 | | Audience = settings.Audience, |
| | 282 | 45 | | SigningCredentials = signingCredentials, |
| | 282 | 46 | | Expires = DateTime.UtcNow.AddMinutes(expirationTime), |
| | 282 | 47 | | }; |
| | | 48 | | |
| | 282 | 49 | | var tokenHandler = new JwtSecurityTokenHandler(); |
| | 282 | 50 | | var securityToken = tokenHandler.CreateToken(tokenDescriptor); |
| | | 51 | | |
| | 282 | 52 | | httpCtx.HttpContext.Response.AppendJWTCookie(tokenHandler.WriteToken(securityToken), settings); |
| | | 53 | | |
| | 282 | 54 | | return new SignInOut |
| | 282 | 55 | | { |
| | 282 | 56 | | UserId = user.Id, |
| | 282 | 57 | | InstitutionId = user.InstitutionId, |
| | 282 | 58 | | }; |
| | 282 | 59 | | } |
| | | 60 | | } |