MireaBackend/Endpoint/Controllers/V1/AuthController.cs

using Asp.Versioning;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Http;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Options;
using Mirea.Api.Dto.Common;
using Mirea.Api.Dto.Requests;
using Mirea.Api.Dto.Responses;
using Mirea.Api.Endpoint.Common.Attributes;
using Mirea.Api.Endpoint.Common.Exceptions;
using Mirea.Api.Endpoint.Common.MapperDto;
using Mirea.Api.Endpoint.Common.Services;
using Mirea.Api.Endpoint.Configuration.Model;
using Mirea.Api.Security.Common.Domain;
using Mirea.Api.Security.Services;
using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Linq;
using System.Threading.Tasks;
using OAuthProvider = Mirea.Api.Security.Common.Domain.OAuthProvider;

namespace Mirea.Api.Endpoint.Controllers.V1;

[ApiVersion("1.0")]
public class AuthController(IOptionsSnapshot<Admin> user, IOptionsSnapshot<GeneralConfig> generalConfig, AuthService auth,
    PasswordHashService passwordService, OAuthService oAuthService) : BaseController
{
    private CookieOptionsParameters GetCookieParams() =>
        new()
        {
            Domain = HttpContext.GetCurrentDomain(),
            Path = UrlHelper.GetSubPathWithoutFirstApiName + "api"
        };

    private static string GenerateHtmlResponse(string title, string message, OAuthProvider? provider, bool isError = false, string? traceId = null)
    {
        var messageColor = isError ? "red" : "white";
        var script = "<script>setTimeout(()=>{if(window.opener){window.opener.postMessage(" +
                        "{success:" + (!isError).ToString().ToLower() +
                        ",provider:'" + (provider == null ? "null" : (int)provider) +
                        "',providerName:'" + (provider == null ? "null" : Enum.GetName(provider.Value)) +
                        "',message:'" + message.Replace("'", "\\'") +
                        "'},'*');}window.close();}, 15000);</script>";

        return $"<!DOCTYPE html><html lang=ru><head><meta charset=UTF-8><meta content=\"width=device-width,initial-scale=1\"name=viewport><link href=\"https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap\"rel=stylesheet><style>body{{background-color:#121212;color:#fff;font-family:Roboto,sans-serif;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;text-align:center}}.container{{max-width:600px;padding:20px;border-radius:8px;background-color:#1e1e1e;box-shadow:0 4px 20px rgba(0,0,0,.5)}}h1{{font-size:24px;margin-bottom:20px}}p{{font-size:16px;color:{messageColor}}}</style><title>{title}</title></head><body><div class=container><h1>{title}</h1><p>{message}</p><p style=font-size:14px;color:silver;>Это информационная страница. Вы можете закрыть её.</p>{(!string.IsNullOrEmpty(traceId) ? $"<code style=font-size:12px;color:gray;>TraceId={traceId}</code>" : string.Empty)}</div>{script}</body></html>";
    }

    [HttpGet("OAuth2")]
    [BadRequestResponse]
    [Produces("text/html")]
    [MaintenanceModeIgnore]
    public async Task<ContentResult> OAuth2([FromQuery] string code, [FromQuery] string state)
    {
        var userId = HttpContext.User.FindFirstValue(ClaimTypes.NameIdentifier);
        string title;
        string message;
        OAuthProvider provider;
        OAuthUser oAuthUser;
        var traceId = Activity.Current?.Id ?? HttpContext.TraceIdentifier;

        try
        {
            (provider, oAuthUser) = await oAuthService.LoginOAuth(HttpContext, GetCookieParams(),
                HttpContext.GetApiUrl(Url.Action("OAuth2")!), code, state);
        }
        catch (Exception e)
        {
            title = "Произошла ошибка при общении с провайдером OAuth!";
            message = e.Message;
            return Content(GenerateHtmlResponse(title, message, null, true, traceId), "text/html");
        }

        var userEntity = user.Value;

        if (userId != null)
        {
            userEntity.OAuthProviders ??= [];

            if (!userEntity.OAuthProviders.TryAdd(provider, oAuthUser))
            {
                title = "Ошибка связи аккаунта!";
                message = "Этот OAuth провайдер уже связан с вашей учетной записью. " +
                          "Пожалуйста, используйте другого провайдера или удалите связь с аккаунтом.";
                return Content(GenerateHtmlResponse(title, message, provider, true, traceId), "text/html");
            }

            userEntity.SaveSetting();

            title = "Учетная запись успешно связана.";
            message = "Вы успешно связали свою учетную запись с провайдером OAuth. Вы можете продолжить использовать приложение.";
            return Content(GenerateHtmlResponse(title, message, provider), "text/html");
        }

        if (userEntity.OAuthProviders != null &&
            userEntity.OAuthProviders.TryGetValue(provider, out var userOAuth) &&
            userOAuth.Id == oAuthUser.Id)
        {
            await auth.LoginOAuthAsync(GetCookieParams(), HttpContext, new User
            {
                Id = 1.ToString(),
                Username = userEntity.Username,
                Email = userEntity.Email,
                PasswordHash = userEntity.PasswordHash,
                Salt = userEntity.Salt,
                TwoFactorAuthenticator = userEntity.TwoFactorAuthenticator,
                SecondFactorToken = userEntity.Secret,
                OAuthProviders = userEntity.OAuthProviders
            });

            title = "Успешный вход в аккаунт.";
            message = "Вы успешно вошли в свою учетную запись. Добро пожаловать!";
            return Content(GenerateHtmlResponse(title, message, provider), "text/html");
        }

        title = "Вы успешно зарегистрированы.";
        message = "Процесс завершен. Вы можете закрыть эту страницу.";
        userEntity.Email = string.IsNullOrEmpty(oAuthUser.Email) ? string.Empty : oAuthUser.Email;
        userEntity.Username = string.IsNullOrEmpty(oAuthUser.Username) ? string.Empty : oAuthUser.Username;
        userEntity.OAuthProviders ??= [];
        userEntity.OAuthProviders.Add(provider, oAuthUser);
        userEntity.SaveSetting();
        return Content(GenerateHtmlResponse(title, message, provider), "text/html");
    }

    /// <summary>
    /// Initiates the OAuth2 authorization process for the selected provider.
    /// </summary>
    /// <remarks>
    /// This method generates a redirect URL for the selected provider and redirects the user to it.
    /// </remarks>
    /// <param name="provider">The identifier of the OAuth provider to authorize with.</param>
    /// <param name="callback">The address where the user will need to be redirected after the end of communication with the OAuth provider</param>
    /// <returns>A redirect to the OAuth provider's authorization URL.</returns>
    /// <exception cref="ControllerArgumentException">Thrown if the specified provider is not valid.</exception>
    [HttpGet("AuthorizeOAuth2")]
    [MaintenanceModeIgnore]
    public ActionResult AuthorizeOAuth2([FromQuery] int provider, [FromQuery] Uri callback)
    {
        if (!Enum.IsDefined(typeof(OAuthProvider), provider))
            throw new ControllerArgumentException("There is no selected provider");

        if (!callback.IsAbsoluteUri)
            throw new ControllerArgumentException("The callback URL must be absolute.");

        return Redirect(oAuthService.GetProviderRedirect(HttpContext, GetCookieParams(),
            HttpContext.GetApiUrl(Url.Action("OAuth2")!),
            (OAuthProvider)provider,
            callback).AbsoluteUri);
    }

    /// <summary>
    /// Retrieves a list of available OAuth providers with their corresponding authorization URLs.
    /// </summary>
    /// <remarks>
    /// This allows the client to fetch all possible OAuth options and the URLs required to initiate authorization.
    /// </remarks>
    /// <returns>A list of available providers and their redirect URLs.</returns>
    [HttpGet("AvailableProviders")]
    [MaintenanceModeIgnore]
    public ActionResult<List<AvailableOAuthProvidersResponse>> AvailableProviders([FromQuery] Uri callback) =>
        Ok(oAuthService
            .GetAvailableProviders(HttpContext.GetApiUrl(Url.Action("AuthorizeOAuth2")!))
            .Select(x =>
            {
                if (!callback.IsAbsoluteUri)
                    throw new ControllerArgumentException("The callback URL must be absolute.");

                x.Redirect = new Uri(x.Redirect + "&callback=" + Uri.EscapeDataString(callback.AbsoluteUri));
                return x;
            })
            .ConvertToDto());

    /// <summary>
    /// Logs in a user using their username or email and password.
    /// </summary>
    /// <param name="request">The login request containing username/email and password.</param>
    /// <returns>A TwoFactorAuthentication token if the login is successful; otherwise, a BadRequest response.</returns>
    [HttpPost("Login")]
    [BadRequestResponse]
    public async Task<ActionResult<TwoFactorAuthentication>> Login([FromBody] LoginRequest request)
    {
        var userEntity = user.Value;

        var tokenResult = await auth.LoginAsync(
            GetCookieParams(),
            new User
            {
                Id = 1.ToString(),
                Username = userEntity.Username,
                Email = userEntity.Email,
                PasswordHash = userEntity.PasswordHash,
                Salt = userEntity.Salt,
                TwoFactorAuthenticator = userEntity.TwoFactorAuthenticator,
                SecondFactorToken = userEntity.Secret,
                OAuthProviders = userEntity.OAuthProviders
            },
            HttpContext, request.Password, request.Username);

        return Ok(tokenResult.ConvertToDto());
    }

    /// <summary>
    /// Performs two-factor authentication for the user.
    /// </summary>
    /// <param name="request">The request containing the method and code for two-factor authentication.</param>
    /// <returns>A boolean indicating whether the two-factor authentication was successful.</returns>
    [HttpPost("2FA")]
    [BadRequestResponse]
    public async Task<ActionResult<bool>> TwoFactorAuth([FromBody] TwoFactorAuthRequest request)
    {
        var tokenResult = await auth.LoginAsync(GetCookieParams(), HttpContext, request.Method.ConvertFromDto(), request.Code);
        return Ok(tokenResult);
    }

    /// <summary>
    /// Refreshes the authentication token using the existing refresh token.
    /// </summary>
    /// <returns>User's AuthRoles.</returns>
    [HttpGet("ReLogin")]
    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
    [ProducesResponseType(StatusCodes.Status403Forbidden)]
    public async Task<ActionResult<AuthRoles>> ReLogin()
    {
        await auth.RefreshTokenAsync(GetCookieParams(), HttpContext);
        return Ok(AuthRoles.Admin);
    }

    /// <summary>
    /// Logs the user out by clearing the refresh token and performing any necessary cleanup.
    /// </summary>
    /// <returns>An Ok response if the logout was successful.</returns>
    [HttpGet("Logout")]
    public async Task<ActionResult> Logout()
    {
        await auth.LogoutAsync(GetCookieParams(), HttpContext);
        return Ok();
    }

    /// <summary>
    /// Retrieves the role of the authenticated user.
    /// </summary>
    /// <returns>The role of the authenticated user.</returns>
    [HttpGet("GetRole")]
    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
    [Authorize]
    public ActionResult<AuthRoles> GetRole() => Ok(AuthRoles.Admin);

    [HttpPost("RenewPassword")]
    [ApiExplorerSettings(IgnoreApi = true)]
    [Localhost]
    [BadRequestResponse]
    public ActionResult<string> RenewPassword([FromBody] string? password = null)
    {
        var passwordPolicy = generalConfig.Value.PasswordPolicy;
        var passwordPolicyService = new PasswordPolicyService(passwordPolicy);

        if (string.IsNullOrEmpty(password))
            password = string.Empty;
        else
            passwordPolicyService.ValidatePasswordOrThrow(password);

        while (!passwordPolicyService.TryValidatePassword(password))
            password = GeneratorKey.GenerateAlphaNumeric(passwordPolicy.MinimumLength + 2, includes: "!@#%^");

        var (salt, hash) = passwordService.HashPassword(password);

        var admin = user.Value;

        admin.Salt = salt;
        admin.PasswordHash = hash;
        admin.SaveSetting();

        return Ok(password);
    }
}
-												build: update ref

											
										
										
											2024-09-18 06:00:07 +03:00
+								using Asp.Versioning;
 								using Microsoft.AspNetCore.Authorization;
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								using Microsoft.AspNetCore.Http;
 								using Microsoft.AspNetCore.Mvc;
 								using Microsoft.Extensions.Options;
 								using Mirea.Api.Dto.Common;
 								using Mirea.Api.Dto.Requests;
-												feat: add available providers list

											
										
										
											2024-11-04 02:59:51 +03:00
+								using Mirea.Api.Dto.Responses;
-												feat: add a cache with a short lifetime

											
										
										
											2024-08-24 04:30:31 +03:00
+								using Mirea.Api.Endpoint.Common.Attributes;
-												feat: add renew password

											
										
										
											2024-08-27 22:52:07 +03:00
+								using Mirea.Api.Endpoint.Common.Exceptions;
-												refactor: return next step from security

											
										
										
											2024-11-02 01:06:58 +03:00
+								using Mirea.Api.Endpoint.Common.MapperDto;
-												feat: add sub path for actual url

											
										
										
											2024-07-05 01:35:19 +03:00
+								using Mirea.Api.Endpoint.Common.Services;
-												refactor: code restructuring

											
										
										
											2024-10-07 02:13:35 +03:00
+								using Mirea.Api.Endpoint.Configuration.Model;
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								using Mirea.Api.Security.Common.Domain;
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								using Mirea.Api.Security.Services;
 								using System;
-												feat: add authorize in OAuth

											
										
										
											2024-11-04 02:39:10 +03:00
+								using System.Collections.Generic;
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								using System.Diagnostics;
-												sec: add payload

											
										
										
											2024-12-26 08:47:56 +03:00
+								using System.Linq;
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								using System.Threading.Tasks;
-												sec: get links to the backend to initiate the receipt of provider data

											
										
										
											2024-12-18 07:23:23 +03:00
+								using OAuthProvider = Mirea.Api.Security.Common.Domain.OAuthProvider;
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
 								namespace Mirea.Api.Endpoint.Controllers.V1;
 								[ApiVersion("1.0")]
-												refactor: add .editorconfig and refactor code

											
										
										
											2024-12-25 05:43:30 +03:00
+								public class AuthController(IOptionsSnapshot<Admin> user, IOptionsSnapshot<GeneralConfig> generalConfig, AuthService auth,
 								    PasswordHashService passwordService, OAuthService oAuthService) : BaseController
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								{
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								    private CookieOptionsParameters GetCookieParams() =>
 								        new()
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								        {
-												refactor: use this in static method

											
										
										
											2024-08-10 23:11:43 +03:00
+								            Domain = HttpContext.GetCurrentDomain(),
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								            Path = UrlHelper.GetSubPathWithoutFirstApiName + "api"
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								        };
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								    private static string GenerateHtmlResponse(string title, string message, OAuthProvider? provider, bool isError = false, string? traceId = null)
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
+								    {
-												refactor: add .editorconfig and refactor code

											
										
										
											2024-12-25 05:43:30 +03:00
+								        var messageColor = isError ? "red" : "white";
 								        var script = "<script>setTimeout(()=>{if(window.opener){window.opener.postMessage(" +
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								                        "{success:" + (!isError).ToString().ToLower() +
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
+								                        ",provider:'" + (provider == null ? "null" : (int)provider) +
 								                        "',providerName:'" + (provider == null ? "null" : Enum.GetName(provider.Value)) +
 								                        "',message:'" + message.Replace("'", "\\'") +
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								                        "'},'*');}window.close();}, 15000);</script>";
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								        return $"<!DOCTYPE html><html lang=ru><head><meta charset=UTF-8><meta content=\"width=device-width,initial-scale=1\"name=viewport><link href=\"https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap\"rel=stylesheet><style>body{{background-color:#121212;color:#fff;font-family:Roboto,sans-serif;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;text-align:center}}.container{{max-width:600px;padding:20px;border-radius:8px;background-color:#1e1e1e;box-shadow:0 4px 20px rgba(0,0,0,.5)}}h1{{font-size:24px;margin-bottom:20px}}p{{font-size:16px;color:{messageColor}}}</style><title>{title}</title></head><body><div class=container><h1>{title}</h1><p>{message}</p><p style=font-size:14px;color:silver;>Это информационная страница. Вы можете закрыть её.</p>{(!string.IsNullOrEmpty(traceId) ? $"<code style=font-size:12px;color:gray;>TraceId={traceId}</code>" : string.Empty)}</div>{script}</body></html>";
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
+								    }
 								    [HttpGet("OAuth2")]
 								    [BadRequestResponse]
 								    [Produces("text/html")]
 								    [MaintenanceModeIgnore]
 								    public async Task<ContentResult> OAuth2([FromQuery] string code, [FromQuery] string state)
 								    {
 								        var userId = HttpContext.User.FindFirstValue(ClaimTypes.NameIdentifier);
 								        string title;
 								        string message;
 								        OAuthProvider provider;
 								        OAuthUser oAuthUser;
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								        var traceId = Activity.Current?.Id ?? HttpContext.TraceIdentifier;
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
 								        try
 								        {
 								            (provider, oAuthUser) = await oAuthService.LoginOAuth(HttpContext, GetCookieParams(),
 								                HttpContext.GetApiUrl(Url.Action("OAuth2")!), code, state);
 								        }
 								        catch (Exception e)
 								        {
 								            title = "Произошла ошибка при общении с провайдером OAuth!";
 								            message = e.Message;
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								            return Content(GenerateHtmlResponse(title, message, null, true, traceId), "text/html");
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
+								        }
 								        var userEntity = user.Value;
 								        if (userId != null)
 								        {
-												refactor: clean code

											
										
										
											2024-12-22 07:25:41 +03:00
+								            userEntity.OAuthProviders ??= [];
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
 								            if (!userEntity.OAuthProviders.TryAdd(provider, oAuthUser))
 								            {
 								                title = "Ошибка связи аккаунта!";
-												refactor: add .editorconfig and refactor code

											
										
										
											2024-12-25 05:43:30 +03:00
+								                message = "Этот OAuth провайдер уже связан с вашей учетной записью. " +
 								                          "Пожалуйста, используйте другого провайдера или удалите связь с аккаунтом.";
-												refactor: to return the result according to the RFC 7807 standard and add a traceId

											
										
										
											2024-12-22 05:25:19 +03:00
+								                return Content(GenerateHtmlResponse(title, message, provider, true, traceId), "text/html");
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
+								            }
 								            userEntity.SaveSetting();
 								            title = "Учетная запись успешно связана.";
 								            message = "Вы успешно связали свою учетную запись с провайдером OAuth. Вы можете продолжить использовать приложение.";
 								            return Content(GenerateHtmlResponse(title, message, provider), "text/html");
 								        }
 								        if (userEntity.OAuthProviders != null &&
 								            userEntity.OAuthProviders.TryGetValue(provider, out var userOAuth) &&
 								            userOAuth.Id == oAuthUser.Id)
 								        {
 								            await auth.LoginOAuthAsync(GetCookieParams(), HttpContext, new User
 								            {
 								                Id = 1.ToString(),
 								                Username = userEntity.Username,
 								                Email = userEntity.Email,
 								                PasswordHash = userEntity.PasswordHash,
 								                Salt = userEntity.Salt,
 								                TwoFactorAuthenticator = userEntity.TwoFactorAuthenticator,
 								                SecondFactorToken = userEntity.Secret,
 								                OAuthProviders = userEntity.OAuthProviders
-												refactor: clean code

											
										
										
											2024-12-22 07:25:41 +03:00
+								            });
-												feat: add a method for getting data from OAuth

											
										
										
											2024-12-18 07:40:07 +03:00
 								            title = "Успешный вход в аккаунт.";
 								            message = "Вы успешно вошли в свою учетную запись. Добро пожаловать!";
 								            return Content(GenerateHtmlResponse(title, message, provider), "text/html");
 								        }
 								        title = "Вы успешно зарегистрированы.";
 								        message = "Процесс завершен. Вы можете закрыть эту страницу.";
 								        userEntity.Email = string.IsNullOrEmpty(oAuthUser.Email) ? string.Empty : oAuthUser.Email;
 								        userEntity.Username = string.IsNullOrEmpty(oAuthUser.Username) ? string.Empty : oAuthUser.Username;
 								        userEntity.OAuthProviders ??= [];
 								        userEntity.OAuthProviders.Add(provider, oAuthUser);
 								        userEntity.SaveSetting();
 								        return Content(GenerateHtmlResponse(title, message, provider), "text/html");
 								    }
-												docs: add comment

											
										
										
											2024-11-04 03:14:42 +03:00
+								    /// <summary>
-												sec: get links to the backend to initiate the receipt of provider data

											
										
										
											2024-12-18 07:23:23 +03:00
+								    /// Initiates the OAuth2 authorization process for the selected provider.
-												docs: add comment

											
										
										
											2024-11-04 03:14:42 +03:00
+								    /// </summary>
-												sec: get links to the backend to initiate the receipt of provider data

											
										
										
											2024-12-18 07:23:23 +03:00
+								    /// <remarks>
 								    /// This method generates a redirect URL for the selected provider and redirects the user to it.
 								    /// </remarks>
 								    /// <param name="provider">The identifier of the OAuth provider to authorize with.</param>
-												sec: add payload

											
										
										
											2024-12-26 08:47:56 +03:00
+								    /// <param name="callback">The address where the user will need to be redirected after the end of communication with the OAuth provider</param>
-												sec: get links to the backend to initiate the receipt of provider data

											
										
										
											2024-12-18 07:23:23 +03:00
+								    /// <returns>A redirect to the OAuth provider's authorization URL.</returns>
 								    /// <exception cref="ControllerArgumentException">Thrown if the specified provider is not valid.</exception>
 								    [HttpGet("AuthorizeOAuth2")]
 								    [MaintenanceModeIgnore]
-												sec: add payload

											
										
										
											2024-12-26 08:47:56 +03:00
+								    public ActionResult AuthorizeOAuth2([FromQuery] int provider, [FromQuery] Uri callback)
-												sec: get links to the backend to initiate the receipt of provider data

											
										
										
											2024-12-18 07:23:23 +03:00
+								    {
 								        if (!Enum.IsDefined(typeof(OAuthProvider), provider))
 								            throw new ControllerArgumentException("There is no selected provider");
-												sec: add payload

											
										
										
											2024-12-26 08:47:56 +03:00
+								        if (!callback.IsAbsoluteUri)
 								            throw new ControllerArgumentException("The callback URL must be absolute.");
 								        return Redirect(oAuthService.GetProviderRedirect(HttpContext, GetCookieParams(),
 								            HttpContext.GetApiUrl(Url.Action("OAuth2")!),
 								            (OAuthProvider)provider,
 								            callback).AbsoluteUri);
-												sec: get links to the backend to initiate the receipt of provider data

											
										
										
											2024-12-18 07:23:23 +03:00
+								    }
 								    /// <summary>
 								    /// Retrieves a list of available OAuth providers with their corresponding authorization URLs.
 								    /// </summary>
 								    /// <remarks>
 								    /// This allows the client to fetch all possible OAuth options and the URLs required to initiate authorization.
 								    /// </remarks>
 								    /// <returns>A list of available providers and their redirect URLs.</returns>
 								    [HttpGet("AvailableProviders")]
 								    [MaintenanceModeIgnore]
-												sec: add payload

											
										
										
											2024-12-26 08:47:56 +03:00
+								    public ActionResult<List<AvailableOAuthProvidersResponse>> AvailableProviders([FromQuery] Uri callback) =>
-												feat: add available providers list

											
										
										
											2024-11-04 02:59:51 +03:00
+								        Ok(oAuthService
-												refactor: clean code

											
										
										
											2024-12-22 07:25:41 +03:00
+								            .GetAvailableProviders(HttpContext.GetApiUrl(Url.Action("AuthorizeOAuth2")!))
-												sec: add payload

											
										
										
											2024-12-26 08:47:56 +03:00
+								            .Select(x =>
 								            {
 								                if (!callback.IsAbsoluteUri)
 								                    throw new ControllerArgumentException("The callback URL must be absolute.");
 								                x.Redirect = new Uri(x.Redirect + "&callback=" + Uri.EscapeDataString(callback.AbsoluteUri));
 								                return x;
 								            })
-												feat: add available providers list

											
										
										
											2024-11-04 02:59:51 +03:00
+								            .ConvertToDto());
-												docs: add comment

											
										
										
											2024-11-04 03:14:42 +03:00
+								    /// <summary>
 								    /// Logs in a user using their username or email and password.
 								    /// </summary>
 								    /// <param name="request">The login request containing username/email and password.</param>
 								    /// <returns>A TwoFactorAuthentication token if the login is successful; otherwise, a BadRequest response.</returns>
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    [HttpPost("Login")]
-												sec: move token from responce to cookie

											
										
										
											2024-10-09 03:00:26 +03:00
+								    [BadRequestResponse]
-												refactor: change name enums

											
										
										
											2024-11-02 00:50:10 +03:00
+								    public async Task<ActionResult<TwoFactorAuthentication>> Login([FromBody] LoginRequest request)
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    {
 								        var userEntity = user.Value;
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								        var tokenResult = await auth.LoginAsync(
 								            GetCookieParams(),
 								            new User
 								            {
-												fix: return bool instead

											
										
										
											2024-11-02 22:09:40 +03:00
+								                Id = 1.ToString(),
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								                Username = userEntity.Username,
 								                Email = userEntity.Email,
 								                PasswordHash = userEntity.PasswordHash,
 								                Salt = userEntity.Salt,
-												refactor: change name enums

											
										
										
											2024-11-02 00:50:10 +03:00
+								                TwoFactorAuthenticator = userEntity.TwoFactorAuthenticator,
-												feat: add authorize in OAuth

											
										
										
											2024-11-04 02:39:10 +03:00
+								                SecondFactorToken = userEntity.Secret,
 								                OAuthProviders = userEntity.OAuthProviders
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								            },
-												sec: transfer user verification to the appropriate service

											
										
										
											2024-12-22 05:13:46 +03:00
+								            HttpContext, request.Password, request.Username);
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
-												refactor: return next step from security

											
										
										
											2024-11-02 01:06:58 +03:00
+								        return Ok(tokenResult.ConvertToDto());
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								    }
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
-												docs: add comment

											
										
										
											2024-11-04 03:14:42 +03:00
+								    /// <summary>
 								    /// Performs two-factor authentication for the user.
 								    /// </summary>
 								    /// <param name="request">The request containing the method and code for two-factor authentication.</param>
 								    /// <returns>A boolean indicating whether the two-factor authentication was successful.</returns>
-												refactor: transfer two factor method to security

											
										
										
											2024-11-02 01:09:15 +03:00
+								    [HttpPost("2FA")]
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								    [BadRequestResponse]
-												fix: return bool instead

											
										
										
											2024-11-02 22:09:40 +03:00
+								    public async Task<ActionResult<bool>> TwoFactorAuth([FromBody] TwoFactorAuthRequest request)
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								    {
-												refactor: transfer two factor method to security

											
										
										
											2024-11-02 01:09:15 +03:00
+								        var tokenResult = await auth.LoginAsync(GetCookieParams(), HttpContext, request.Method.ConvertFromDto(), request.Code);
-												fix: return bool instead

											
										
										
											2024-11-02 22:09:40 +03:00
+								        return Ok(tokenResult);
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    }
-												docs: add xml comments

											
										
										
											2024-06-28 22:55:18 +03:00
+								    /// <summary>
 								    /// Refreshes the authentication token using the existing refresh token.
 								    /// </summary>
-												sec: move token from responce to cookie

											
										
										
											2024-10-09 03:00:26 +03:00
+								    /// <returns>User's AuthRoles.</returns>
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    [HttpGet("ReLogin")]
 								    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
-												sec: move token from responce to cookie

											
										
										
											2024-10-09 03:00:26 +03:00
+								    [ProducesResponseType(StatusCodes.Status403Forbidden)]
 								    public async Task<ActionResult<AuthRoles>> ReLogin()
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    {
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								        await auth.RefreshTokenAsync(GetCookieParams(), HttpContext);
 								        return Ok(AuthRoles.Admin);
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    }
-												docs: add xml comments

											
										
										
											2024-06-28 22:55:18 +03:00
+								    /// <summary>
 								    /// Logs the user out by clearing the refresh token and performing any necessary cleanup.
 								    /// </summary>
 								    /// <returns>An Ok response if the logout was successful.</returns>
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    [HttpGet("Logout")]
 								    public async Task<ActionResult> Logout()
 								    {
-												refactor: transfer logic

All logic related to token manipulation has been transferred to the AuthService. Also added TOTP 2FA and rethought the logic of logging into the application

											
										
										
											2024-10-31 04:12:02 +03:00
+								        await auth.LogoutAsync(GetCookieParams(), HttpContext);
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								        return Ok();
 								    }
-												docs: add xml comments

											
										
										
											2024-06-28 22:55:18 +03:00
+								    /// <summary>
 								    /// Retrieves the role of the authenticated user.
 								    /// </summary>
 								    /// <returns>The role of the authenticated user.</returns>
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								    [HttpGet("GetRole")]
 								    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
 								    [Authorize]
 								    public ActionResult<AuthRoles> GetRole() => Ok(AuthRoles.Admin);
-												feat: add renew password

											
										
										
											2024-08-27 22:52:07 +03:00
 								    [HttpPost("RenewPassword")]
 								    [ApiExplorerSettings(IgnoreApi = true)]
 								    [Localhost]
 								    [BadRequestResponse]
 								    public ActionResult<string> RenewPassword([FromBody] string? password = null)
 								    {
-												feat: give the user the ability to make a password policy

											
										
										
											2024-12-18 07:27:57 +03:00
+								        var passwordPolicy = generalConfig.Value.PasswordPolicy;
 								        var passwordPolicyService = new PasswordPolicyService(passwordPolicy);
-												feat: add renew password

											
										
										
											2024-08-27 22:52:07 +03:00
+								        if (string.IsNullOrEmpty(password))
 								            password = string.Empty;
-												feat: give the user the ability to make a password policy

											
										
										
											2024-12-18 07:27:57 +03:00
+								        else
 								            passwordPolicyService.ValidatePasswordOrThrow(password);
-												feat: add renew password

											
										
										
											2024-08-27 22:52:07 +03:00
-												feat: give the user the ability to make a password policy

											
										
										
											2024-12-18 07:27:57 +03:00
+								        while (!passwordPolicyService.TryValidatePassword(password))
 								            password = GeneratorKey.GenerateAlphaNumeric(passwordPolicy.MinimumLength + 2, includes: "!@#%^");
-												feat: add renew password

											
										
										
											2024-08-27 22:52:07 +03:00
 								        var (salt, hash) = passwordService.HashPassword(password);
 								        var admin = user.Value;
 								        admin.Salt = salt;
 								        admin.PasswordHash = hash;
 								        admin.SaveSetting();
 								        return Ok(password);
 								    }
-												feat: add controller for authentication

											
										
										
											2024-06-21 21:52:21 +03:00
+								}