mirror of https://github.com/abpframework/abp.git
Halil İbrahim Kalkan
5 years ago
354 changed files with 1016 additions and 602 deletions
@ -0,0 +1,7 @@ |
|||||
|
namespace Volo.Abp.AspNetCore.ExceptionHandling |
||||
|
{ |
||||
|
public class AbpAuthorizationExceptionHandlerOptions |
||||
|
{ |
||||
|
public string AuthenticationScheme { get; set; } |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,67 @@ |
|||||
|
using System; |
||||
|
using System.Threading.Tasks; |
||||
|
using Microsoft.AspNetCore.Authentication; |
||||
|
using Microsoft.AspNetCore.Http; |
||||
|
using Microsoft.Extensions.DependencyInjection; |
||||
|
using Microsoft.Extensions.Options; |
||||
|
using Volo.Abp.Authorization; |
||||
|
using Volo.Abp.DependencyInjection; |
||||
|
|
||||
|
namespace Volo.Abp.AspNetCore.ExceptionHandling |
||||
|
{ |
||||
|
public class DefaultAbpAuthorizationExceptionHandler : IAbpAuthorizationExceptionHandler, ITransientDependency |
||||
|
{ |
||||
|
public virtual async Task HandleAsync(AbpAuthorizationException exception, HttpContext httpContext) |
||||
|
{ |
||||
|
var handlerOptions = httpContext.RequestServices.GetRequiredService<IOptions<AbpAuthorizationExceptionHandlerOptions>>().Value; |
||||
|
var isAuthenticated = httpContext.User.Identity?.IsAuthenticated ?? false; |
||||
|
var authenticationSchemeProvider = httpContext.RequestServices.GetRequiredService<IAuthenticationSchemeProvider>(); |
||||
|
|
||||
|
AuthenticationScheme scheme = null; |
||||
|
|
||||
|
if (!handlerOptions.AuthenticationScheme.IsNullOrWhiteSpace()) |
||||
|
{ |
||||
|
scheme = await authenticationSchemeProvider.GetSchemeAsync(handlerOptions.AuthenticationScheme); |
||||
|
if (scheme == null) |
||||
|
{ |
||||
|
throw new AbpException($"No authentication scheme named {handlerOptions.AuthenticationScheme} was found."); |
||||
|
} |
||||
|
} |
||||
|
else |
||||
|
{ |
||||
|
if (isAuthenticated) |
||||
|
{ |
||||
|
scheme = await authenticationSchemeProvider.GetDefaultForbidSchemeAsync(); |
||||
|
if (scheme == null) |
||||
|
{ |
||||
|
throw new AbpException($"There was no DefaultForbidScheme found."); |
||||
|
} |
||||
|
} |
||||
|
else |
||||
|
{ |
||||
|
scheme = await authenticationSchemeProvider.GetDefaultChallengeSchemeAsync(); |
||||
|
if (scheme == null) |
||||
|
{ |
||||
|
throw new AbpException($"There was no DefaultChallengeScheme found."); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
var handlers = httpContext.RequestServices.GetRequiredService<IAuthenticationHandlerProvider>(); |
||||
|
var handler = await handlers.GetHandlerAsync(httpContext, scheme.Name); |
||||
|
if (handler == null) |
||||
|
{ |
||||
|
throw new AbpException($"No handler of {scheme.Name} was found."); |
||||
|
} |
||||
|
|
||||
|
if (isAuthenticated) |
||||
|
{ |
||||
|
await handler.ForbidAsync(null); |
||||
|
} |
||||
|
else |
||||
|
{ |
||||
|
await handler.ChallengeAsync(null); |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,11 @@ |
|||||
|
using System.Threading.Tasks; |
||||
|
using Microsoft.AspNetCore.Http; |
||||
|
using Volo.Abp.Authorization; |
||||
|
|
||||
|
namespace Volo.Abp.AspNetCore.ExceptionHandling |
||||
|
{ |
||||
|
public interface IAbpAuthorizationExceptionHandler |
||||
|
{ |
||||
|
Task HandleAsync(AbpAuthorizationException exception, HttpContext httpContext); |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,69 @@ |
|||||
|
using System; |
||||
|
using System.Net; |
||||
|
using System.Security.Claims; |
||||
|
using System.Threading.Tasks; |
||||
|
using Microsoft.Extensions.DependencyInjection; |
||||
|
using Microsoft.Extensions.Hosting; |
||||
|
using NSubstitute; |
||||
|
using Shouldly; |
||||
|
using Volo.Abp.AspNetCore.ExceptionHandling; |
||||
|
using Volo.Abp.ExceptionHandling; |
||||
|
using Volo.Abp.Security.Claims; |
||||
|
using Xunit; |
||||
|
|
||||
|
namespace Volo.Abp.AspNetCore.Mvc.ExceptionHandling |
||||
|
{ |
||||
|
public class AbpAuthorizationExceptionTestController_Tests : AspNetCoreMvcTestBase |
||||
|
{ |
||||
|
protected IExceptionSubscriber FakeExceptionSubscriber; |
||||
|
|
||||
|
protected FakeUserClaims FakeRequiredService; |
||||
|
|
||||
|
public AbpAuthorizationExceptionTestController_Tests() |
||||
|
{ |
||||
|
FakeRequiredService = GetRequiredService<FakeUserClaims>(); |
||||
|
} |
||||
|
|
||||
|
protected override void ConfigureServices(HostBuilderContext context, IServiceCollection services) |
||||
|
{ |
||||
|
base.ConfigureServices(context, services); |
||||
|
|
||||
|
FakeExceptionSubscriber = Substitute.For<IExceptionSubscriber>(); |
||||
|
|
||||
|
services.AddSingleton(FakeExceptionSubscriber); |
||||
|
|
||||
|
services.Configure<AbpAuthorizationExceptionHandlerOptions>(options => |
||||
|
{ |
||||
|
options.AuthenticationScheme = "Cookie"; |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public virtual async Task Should_Handle_By_Cookie_AuthenticationScheme_For_AbpAuthorizationException() |
||||
|
{ |
||||
|
var result = await GetResponseAsync("/api/exception-test/AbpAuthorizationException", HttpStatusCode.Redirect); |
||||
|
result.Headers.Location.ToString().ShouldContain("http://localhost/Account/Login"); |
||||
|
|
||||
|
#pragma warning disable 4014
|
||||
|
FakeExceptionSubscriber |
||||
|
.Received() |
||||
|
.HandleAsync(Arg.Any<ExceptionNotificationContext>()); |
||||
|
#pragma warning restore 4014
|
||||
|
|
||||
|
|
||||
|
FakeRequiredService.Claims.AddRange(new[] |
||||
|
{ |
||||
|
new Claim(AbpClaimTypes.UserId, Guid.NewGuid().ToString()) |
||||
|
}); |
||||
|
|
||||
|
result = await GetResponseAsync("/api/exception-test/AbpAuthorizationException", HttpStatusCode.Redirect); |
||||
|
result.Headers.Location.ToString().ShouldContain("http://localhost/Account/AccessDenied"); |
||||
|
|
||||
|
#pragma warning disable 4014
|
||||
|
FakeExceptionSubscriber |
||||
|
.Received() |
||||
|
.HandleAsync(Arg.Any<ExceptionNotificationContext>()); |
||||
|
#pragma warning restore 4014
|
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,69 @@ |
|||||
|
using System; |
||||
|
using System.Net; |
||||
|
using System.Security.Claims; |
||||
|
using System.Threading.Tasks; |
||||
|
using Microsoft.Extensions.DependencyInjection; |
||||
|
using Microsoft.Extensions.Hosting; |
||||
|
using NSubstitute; |
||||
|
using Shouldly; |
||||
|
using Volo.Abp.AspNetCore.ExceptionHandling; |
||||
|
using Volo.Abp.ExceptionHandling; |
||||
|
using Volo.Abp.Security.Claims; |
||||
|
using Xunit; |
||||
|
|
||||
|
namespace Volo.Abp.AspNetCore.Mvc.ExceptionHandling |
||||
|
{ |
||||
|
public class AbpAuthorizationExceptionTestPage_Tests : AspNetCoreMvcTestBase |
||||
|
{ |
||||
|
private IExceptionSubscriber _fakeExceptionSubscriber; |
||||
|
|
||||
|
private FakeUserClaims _fakeRequiredService; |
||||
|
|
||||
|
public AbpAuthorizationExceptionTestPage_Tests() |
||||
|
{ |
||||
|
_fakeRequiredService = GetRequiredService<FakeUserClaims>(); |
||||
|
} |
||||
|
|
||||
|
protected override void ConfigureServices(HostBuilderContext context, IServiceCollection services) |
||||
|
{ |
||||
|
base.ConfigureServices(context, services); |
||||
|
|
||||
|
_fakeExceptionSubscriber = Substitute.For<IExceptionSubscriber>(); |
||||
|
|
||||
|
services.AddSingleton(_fakeExceptionSubscriber); |
||||
|
|
||||
|
services.Configure<AbpAuthorizationExceptionHandlerOptions>(options => |
||||
|
{ |
||||
|
options.AuthenticationScheme = "Cookie"; |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
[Fact] |
||||
|
public virtual async Task Should_Handle_By_Cookie_AuthenticationScheme_For_AbpAuthorizationException() |
||||
|
{ |
||||
|
var result = await GetResponseAsync("/ExceptionHandling/ExceptionTestPage?handler=AbpAuthorizationException", HttpStatusCode.Redirect); |
||||
|
result.Headers.Location.ToString().ShouldContain("http://localhost/Account/Login"); |
||||
|
|
||||
|
#pragma warning disable 4014
|
||||
|
_fakeExceptionSubscriber |
||||
|
.Received() |
||||
|
.HandleAsync(Arg.Any<ExceptionNotificationContext>()); |
||||
|
#pragma warning restore 4014
|
||||
|
|
||||
|
|
||||
|
_fakeRequiredService.Claims.AddRange(new[] |
||||
|
{ |
||||
|
new Claim(AbpClaimTypes.UserId, Guid.NewGuid().ToString()) |
||||
|
}); |
||||
|
|
||||
|
result = await GetResponseAsync("/ExceptionHandling/ExceptionTestPage?handler=AbpAuthorizationException", HttpStatusCode.Redirect); |
||||
|
result.Headers.Location.ToString().ShouldContain("http://localhost/Account/AccessDenied"); |
||||
|
|
||||
|
#pragma warning disable 4014
|
||||
|
_fakeExceptionSubscriber |
||||
|
.Received() |
||||
|
.HandleAsync(Arg.Any<ExceptionNotificationContext>()); |
||||
|
#pragma warning restore 4014
|
||||
|
} |
||||
|
} |
||||
|
} |
||||
Some files were not shown because too many files changed in this diff
Loading…
Reference in new issue