integration https://github.com/XacronDevelopment/oauth-aspnet

Yavsc/ViewModels/Auth/AuthorisationHandlers.cs

@@ -0,0 +1,143 @@
+using System;
+using System.IO;
+using System.Security.Claims;
+using Microsoft.AspNet.Authorization;
+using Yavsc.Models;
+
+namespace Yavsc {
+    public class PrivateChatEntryRequirement : IAuthorizationRequirement
+    {
+    }
+
+    public class EditRequirement : IAuthorizationRequirement
+    {
+        public EditRequirement()
+        {
+        }
+    }
+
+    public class FileSpotInfo : IAuthorizationRequirement
+    {
+        public DirectoryInfo PathInfo { get; private set; } 
+        public FileSpotInfo(string path, Blog b) {
+            PathInfo = new DirectoryInfo(path);
+            AuthorId = b.AuthorId;
+            BlogEntryId = b.Id;
+        }
+        public string AuthorId { get; private set; }
+        public long BlogEntryId { get; private set; }
+        
+    }
+    public class ViewRequirement : IAuthorizationRequirement
+    {
+        public ViewRequirement()
+        {
+        }
+    }
+    public class BlogEditHandler : AuthorizationHandler<EditRequirement, Blog>
+    {
+        protected override void Handle(AuthorizationContext context, EditRequirement requirement, Blog resource)
+        {
+            if (context.User.IsInRole(Constants.BlogModeratorGroupName))
+                context.Succeed(requirement);
+            else if (context.User.Identity.IsAuthenticated)
+            if (resource.AuthorId == context.User.GetUserId())
+                context.Succeed(requirement);
+        }
+
+    }
+    public class PostUserFileHandler : AuthorizationHandler<EditRequirement, FileSpotInfo>
+    {
+        protected override void Handle(AuthorizationContext context, EditRequirement requirement, FileSpotInfo resource)
+        {
+            if (context.User.IsInRole(Constants.BlogModeratorGroupName)
+            || context.User.IsInRole(Constants.AdminGroupName))
+                context.Succeed(requirement);
+            if (!context.User.Identity.IsAuthenticated)
+                context.Fail();
+            if (resource.AuthorId == context.User.GetUserId())
+                context.Succeed(requirement);
+            else context.Fail();
+        }
+
+    }
+    
+public class BlogViewHandler : AuthorizationHandler<ViewRequirement, Blog>
+    {
+        protected override void Handle(AuthorizationContext context, ViewRequirement requirement, Blog resource)
+        {
+            if (context.User.IsInRole("Moderator"))
+                context.Succeed(requirement);
+            else if (context.User.Identity.IsAuthenticated)
+            if (resource.AuthorId == context.User.GetUserId())
+                context.Succeed(requirement); 
+            else if (resource.visible)
+            // TODO && ( resource.Circles == null || context.User belongs to resource.Circles )
+                context.Succeed(requirement); 
+        }
+    }
+
+    public class CommandViewHandler : AuthorizationHandler<ViewRequirement, Command>
+    {
+        protected override void Handle(AuthorizationContext context, ViewRequirement requirement, Command resource)
+        {
+            if (context.User.IsInRole("FrontOffice"))
+                context.Succeed(requirement);
+            else if (context.User.Identity.IsAuthenticated)
+            if (resource.ClientId == context.User.GetUserId())
+                context.Succeed(requirement);
+            else if (resource.PerformerId == context.User.GetUserId())
+                context.Succeed(requirement);
+        }
+
+    }
+    public class CommandEditHandler : AuthorizationHandler<EditRequirement, Command>
+    {
+        protected override void Handle(AuthorizationContext context, EditRequirement requirement, Command resource)
+        {
+            if (context.User.IsInRole("FrontOffice"))
+                context.Succeed(requirement);
+            else if (context.User.Identity.IsAuthenticated)
+            if (resource.ClientId == context.User.GetUserId())
+                context.Succeed(requirement);
+        }
+
+    }
+    public class HasTemporaryPassHandler : AuthorizationHandler<PrivateChatEntryRequirement>
+    {
+        protected override void Handle(AuthorizationContext context, PrivateChatEntryRequirement requirement)
+        {
+            if (!context.User.HasClaim(c => c.Type == "TemporaryBadgeExpiry" &&
+                                            c.Issuer == Constants.Issuer))
+            {
+                return;
+            }
+
+            var temporaryBadgeExpiry =
+                Convert.ToDateTime(context.User.FindFirst(
+                                       c => c.Type == "TemporaryBadgeExpiry" &&
+                                       c.Issuer == Constants.Issuer).Value);
+
+            if (temporaryBadgeExpiry > DateTime.Now)
+            {
+                context.Succeed(requirement);
+            }
+        }
+    }
+
+    public class HasBadgeHandler : AuthorizationHandler<PrivateChatEntryRequirement>
+    {
+        protected override void Handle(AuthorizationContext context, PrivateChatEntryRequirement requirement)
+        {
+            if (!context.User.HasClaim(c => c.Type == "BadgeNumber" &&
+                                            c.Issuer == Constants.Issuer))
+            {
+                return;
+            }
+            context.Succeed(requirement);
+        }
+    }
+
+   
+
+}

Yavsc/ViewModels/Auth/AuthorisationView.cs

@@ -0,0 +1,11 @@
+
+
+using Microsoft.IdentityModel.Protocols.OpenIdConnect;
+
+namespace Yavsc
+{
+    public class AuthorisationView { 
+        public OpenIdConnectMessage Message { get; set; }
+        public Application Application { get; set; }
+    }
+}

Yavsc/ViewModels/Auth/ClaimTypes.cs

@@ -0,0 +1,12 @@
+
+
+
+namespace Yavsc {
+
+
+internal static class  YavscClaimTypes {
+
+        public const string GoogleUserId = "GoogleUserId";
+    }
+
+}