authorization

2023-06-25 12:39:49 +02:00
parent 4df16b26db
commit 944712df97
6 changed files with 98 additions and 1 deletions
@@ -0,0 +1,48 @@
+using System.IdentityModel.Tokens.Jwt;
+using System.Security.Claims;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.IdentityModel.Tokens;
+
+namespace TURN.Services.Chess.Controllers
+{
+    public class TokenController : ControllerBase
+    {
+        /// <summary>
+        /// получение bearer токена
+        /// </summary>
+        [Route("gettoken/{user}")]
+        [HttpGet]
+        public ActionResult<string> GetToken(string user)
+        {
+            try
+            {
+                return HttpContext.Request.Query.TryGetValue("apikey", out Microsoft.Extensions.Primitives.StringValues value)
+                    ? value.ToString() == Environment.GetEnvironmentVariable("AUTH_API_KEY")
+                        ? new JwtSecurityTokenHandler().WriteToken(CreateToken(user))
+                        : StatusCode(403, "Wrong api key.")
+                    : StatusCode(401, "Api key not found.");
+            }
+            catch (Exception ex)
+            {
+                return StatusCode(500, $"Internal server error: {ex.Message}");
+            }
+        }
+
+        private SecurityToken CreateToken(string user)
+        {
+            List<Claim> claims = new()
+            {
+                new Claim(ClaimTypes.Name, user),
+                new Claim(ClaimTypes.Role, "admin")
+            };
+            return new JwtSecurityToken(
+                    issuer: AuthOptions.ISSUER,
+                    audience: AuthOptions.AUDIENCE,
+                    claims: claims,
+                    expires: DateTime.UtcNow.Add(TimeSpan.FromDays(30)),
+                    signingCredentials: new SigningCredentials(
+                        AuthOptions.GetSymmetricSecurityKey(),
+                        SecurityAlgorithms.HmacSha256));
+        }
+    }
+}