49 lines
1.7 KiB
C#
49 lines
1.7 KiB
C#
using System.IdentityModel.Tokens.Jwt;
|
|
using System.Security.Claims;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.IdentityModel.Tokens;
|
|
|
|
namespace TURN.Services.Chess.Controllers
|
|
{
|
|
public class TokenController : ControllerBase
|
|
{
|
|
/// <summary>
|
|
/// получение bearer токена
|
|
/// </summary>
|
|
[Route("gettoken/{user}")]
|
|
[HttpGet]
|
|
public ActionResult<string> GetToken(string user)
|
|
{
|
|
try
|
|
{
|
|
return HttpContext.Request.Query.TryGetValue("apikey", out var value)
|
|
? value.ToString() == Environment.GetEnvironmentVariable("AUTH_API_KEY")
|
|
? new JwtSecurityTokenHandler().WriteToken(CreateToken(user))
|
|
: StatusCode(403, "Wrong api key.")
|
|
: StatusCode(401, "Api key not found.");
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
return StatusCode(500, $"Internal server error: {ex.Message}");
|
|
}
|
|
}
|
|
|
|
private SecurityToken CreateToken(string user)
|
|
{
|
|
var claims = new List<Claim>()
|
|
{
|
|
new Claim(ClaimTypes.Name, user),
|
|
new Claim(ClaimTypes.Role, "admin")
|
|
};
|
|
return new JwtSecurityToken(
|
|
issuer: AuthOptions.ISSUER,
|
|
audience: AuthOptions.AUDIENCE,
|
|
claims: claims,
|
|
expires: DateTime.UtcNow.Add(TimeSpan.FromDays(30)),
|
|
signingCredentials: new SigningCredentials(
|
|
AuthOptions.GetSymmetricSecurityKey(),
|
|
SecurityAlgorithms.HmacSha256));
|
|
}
|
|
}
|
|
}
|