mirror of https://github.com/abpframework/abp.git
Halil İbrahim Kalkan
9 years ago
7 changed files with 342 additions and 2 deletions
@ -0,0 +1,38 @@ |
|||||
|
@using Volo.Abp.Account.Web.Pages |
||||
|
@using Volo.Abp.Account.Web.Pages.Account |
||||
|
@model Volo.Abp.Account.Web.Pages.ConsentModel.ScopeViewModel |
||||
|
|
||||
|
@* TODO: Should re-format this, just made copy/paste *@ |
||||
|
|
||||
|
<li class="list-group-item"> |
||||
|
<label> |
||||
|
<input class="consent-scopecheck" |
||||
|
type="checkbox" |
||||
|
name="ScopesConsented" |
||||
|
id="scopes_@Model.Name" |
||||
|
value="@Model.Name" |
||||
|
checked="@Model.Checked" |
||||
|
disabled="@Model.Required" /> |
||||
|
@if (Model.Required) |
||||
|
{ |
||||
|
<input type="hidden" |
||||
|
name="ScopesConsented" |
||||
|
value="@Model.Name" /> |
||||
|
} |
||||
|
<strong>@Model.DisplayName</strong> |
||||
|
@if (Model.Emphasize) |
||||
|
{ |
||||
|
<span class="glyphicon glyphicon-exclamation-sign"></span> |
||||
|
} |
||||
|
</label> |
||||
|
@if (Model.Required) |
||||
|
{ |
||||
|
<span><em>(required)</em></span> |
||||
|
} |
||||
|
@if (Model.Description != null) |
||||
|
{ |
||||
|
<div class="consent-description"> |
||||
|
<label for="scopes_@Model.Name">@Model.Description</label> |
||||
|
</div> |
||||
|
} |
||||
|
</li> |
||||
@ -0,0 +1,76 @@ |
|||||
|
@page |
||||
|
@using Volo.Abp.Account.Web.Pages |
||||
|
@using Volo.Abp.Account.Web.Pages.Account |
||||
|
@model ConsentModel |
||||
|
<abp-card id="IdentityServerConsentWrapper"> |
||||
|
<abp-card-header> |
||||
|
<div class="row"> |
||||
|
<div class="col-md-12"> |
||||
|
<h2> |
||||
|
@if (Model.ClientLogoUrl != null) |
||||
|
{ |
||||
|
<img src="@Model.ClientLogoUrl"> |
||||
|
} |
||||
|
@Model.ClientName |
||||
|
<small>is requesting your permission</small> |
||||
|
</h2> |
||||
|
</div> |
||||
|
</div> |
||||
|
</abp-card-header> |
||||
|
<abp-card-body> |
||||
|
<form method="post" asp-page="/Account/Consent"> |
||||
|
<input type="hidden" asp-for="ReturnUrl" /> |
||||
|
<input type="hidden" asp-for="ReturnUrlHash" /> |
||||
|
|
||||
|
<div>Uncheck the permissions you do not wish to grant.</div> |
||||
|
|
||||
|
@if (Model.IdentityScopes.Any()) |
||||
|
{ |
||||
|
<h3>Personal Information</h3> |
||||
|
|
||||
|
<ul class="list-group"> |
||||
|
@foreach (var scope in Model.IdentityScopes) |
||||
|
{ |
||||
|
@Html.Partial("Account/_ScopeListItem", scope) |
||||
|
} |
||||
|
</ul> |
||||
|
} |
||||
|
|
||||
|
@if (Model.ResourceScopes.Any()) |
||||
|
{ |
||||
|
<h3>Application Access</h3> |
||||
|
|
||||
|
<ul class="list-group"> |
||||
|
@foreach (var scope in Model.ResourceScopes) |
||||
|
{ |
||||
|
@Html.Partial("Account/_ScopeListItem", scope) |
||||
|
} |
||||
|
</ul> |
||||
|
} |
||||
|
|
||||
|
@if (Model.AllowRememberConsent) |
||||
|
{ |
||||
|
<div class="form-check"> |
||||
|
<label asp-for="@Model.ConsentInput.RememberConsent" class="form-check-label"> |
||||
|
<input asp-for="@Model.ConsentInput.RememberConsent" class="form-check-input" /> |
||||
|
<strong>Remember My Decision</strong> |
||||
|
</label> |
||||
|
</div> |
||||
|
} |
||||
|
|
||||
|
<div> |
||||
|
<button name="UserDecision" value="yes" class="btn btn-primary" autofocus>Yes, Allow</button> |
||||
|
<button name="UserDecision" value="no" class="btn">No, Do Not Allow</button> |
||||
|
@if (Model.ClientUrl != null) |
||||
|
{ |
||||
|
<a class="pull-right btn btn-secondary" target="_blank" href="@Model.ClientUrl"> |
||||
|
<strong>@Model.ClientName</strong> |
||||
|
</a> |
||||
|
} |
||||
|
</div> |
||||
|
|
||||
|
<div asp-validation-summary="All" class="text-danger"></div> |
||||
|
|
||||
|
</form> |
||||
|
</abp-card-body> |
||||
|
</abp-card> |
||||
@ -0,0 +1,218 @@ |
|||||
|
using System; |
||||
|
using System.Collections.Generic; |
||||
|
using System.Linq; |
||||
|
using System.Threading.Tasks; |
||||
|
using IdentityServer4.Models; |
||||
|
using IdentityServer4.Services; |
||||
|
using IdentityServer4.Stores; |
||||
|
using Microsoft.AspNetCore.Mvc; |
||||
|
using Volo.Abp.AspNetCore.Mvc.RazorPages; |
||||
|
|
||||
|
namespace Volo.Abp.Account.Web.Pages |
||||
|
{ |
||||
|
//TODO: Move this into the Account folder!!!
|
||||
|
public class ConsentModel : AbpPageModel |
||||
|
{ |
||||
|
[HiddenInput] |
||||
|
[BindProperty(SupportsGet = true)] |
||||
|
public string ReturnUrl { get; set; } |
||||
|
|
||||
|
[HiddenInput] |
||||
|
[BindProperty(SupportsGet = true)] |
||||
|
public string ReturnUrlHash { get; set; } |
||||
|
|
||||
|
[BindProperty] |
||||
|
public ConsentInputModel ConsentInput { get; set; } |
||||
|
|
||||
|
public string ClientName { get; set; } |
||||
|
public string ClientUrl { get; set; } |
||||
|
public string ClientLogoUrl { get; set; } |
||||
|
public bool AllowRememberConsent { get; set; } |
||||
|
|
||||
|
public List<ScopeViewModel> IdentityScopes { get; set; } |
||||
|
|
||||
|
public List<ScopeViewModel> ResourceScopes { get; set; } |
||||
|
|
||||
|
private readonly IIdentityServerInteractionService _interaction; |
||||
|
private readonly IClientStore _clientStore; |
||||
|
private readonly IResourceStore _resourceStore; |
||||
|
|
||||
|
public ConsentModel( |
||||
|
IIdentityServerInteractionService interaction, |
||||
|
IClientStore clientStore, |
||||
|
IResourceStore resourceStore) |
||||
|
{ |
||||
|
_interaction = interaction; |
||||
|
_clientStore = clientStore; |
||||
|
_resourceStore = resourceStore; |
||||
|
} |
||||
|
|
||||
|
public async Task OnGet() |
||||
|
{ |
||||
|
var request = await _interaction.GetAuthorizationContextAsync(ReturnUrl); |
||||
|
if (request == null) |
||||
|
{ |
||||
|
throw new ApplicationException($"No consent request matching request: {ReturnUrl}"); |
||||
|
} |
||||
|
|
||||
|
var client = await _clientStore.FindEnabledClientByIdAsync(request.ClientId); |
||||
|
if (client == null) |
||||
|
{ |
||||
|
throw new ApplicationException($"Invalid client id: {request.ClientId}"); |
||||
|
} |
||||
|
|
||||
|
var resources = await _resourceStore.FindEnabledResourcesByScopeAsync(request.ScopesRequested); |
||||
|
if (resources == null || (!resources.IdentityResources.Any() && !resources.ApiResources.Any())) |
||||
|
{ |
||||
|
throw new ApplicationException($"No scopes matching: {request.ScopesRequested.Aggregate((x, y) => x + ", " + y)}"); |
||||
|
} |
||||
|
|
||||
|
ConsentInput = new ConsentInputModel |
||||
|
{ |
||||
|
RememberConsent = true, |
||||
|
ScopesConsented = new List<string>() |
||||
|
}; |
||||
|
|
||||
|
ClientName = client.ClientId; //TODO: Consider to create a ClientInfoModel
|
||||
|
ClientUrl = client.ClientUri; |
||||
|
ClientLogoUrl = client.LogoUri; |
||||
|
AllowRememberConsent = client.AllowRememberConsent; |
||||
|
|
||||
|
IdentityScopes = resources.IdentityResources.Select(x => CreateScopeViewModel(x, true)).ToList(); |
||||
|
ResourceScopes = resources.ApiResources.SelectMany(x => x.Scopes).Select(x => CreateScopeViewModel(x, true)).ToList(); |
||||
|
|
||||
|
if (resources.OfflineAccess) |
||||
|
{ |
||||
|
ResourceScopes = ResourceScopes.Union(new[] {GetOfflineAccessScope(true)}).ToList(); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
public async Task<IActionResult> OnPost(string userDecision) |
||||
|
{ |
||||
|
var result = await ProcessConsentAsync(); |
||||
|
|
||||
|
if (result.IsRedirect) |
||||
|
{ |
||||
|
return Redirect(result.RedirectUri); |
||||
|
} |
||||
|
|
||||
|
if (result.HasValidationError) |
||||
|
{ |
||||
|
ModelState.AddModelError("", result.ValidationError); |
||||
|
} |
||||
|
|
||||
|
throw new ApplicationException("Error: "); |
||||
|
} |
||||
|
|
||||
|
private async Task<ProcessConsentResult> ProcessConsentAsync() |
||||
|
{ |
||||
|
var result = new ProcessConsentResult(); |
||||
|
|
||||
|
ConsentResponse grantedConsent = null; |
||||
|
|
||||
|
if (ConsentInput.UserDecision == "no") |
||||
|
{ |
||||
|
grantedConsent = ConsentResponse.Denied; |
||||
|
} |
||||
|
else |
||||
|
{ |
||||
|
if (ConsentInput.ScopesConsented != null && ConsentInput.ScopesConsented.Any()) |
||||
|
{ |
||||
|
var scopes = ConsentInput.ScopesConsented; |
||||
|
|
||||
|
grantedConsent = new ConsentResponse |
||||
|
{ |
||||
|
RememberConsent = ConsentInput.RememberConsent, |
||||
|
ScopesConsented = scopes.ToArray() |
||||
|
}; |
||||
|
} |
||||
|
else |
||||
|
{ |
||||
|
result.ValidationError = "You must pick at least one permission"; |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
if (grantedConsent != null) |
||||
|
{ |
||||
|
// validate return url is still valid
|
||||
|
var request = await _interaction.GetAuthorizationContextAsync(ReturnUrl); |
||||
|
if (request == null) return result; |
||||
|
|
||||
|
// communicate outcome of consent back to identityserver
|
||||
|
await _interaction.GrantConsentAsync(request, grantedConsent); |
||||
|
|
||||
|
// indicate that's it ok to redirect back to authorization endpoint
|
||||
|
result.RedirectUri = ReturnUrl; //TODO: ReturnUrlHash?
|
||||
|
} |
||||
|
|
||||
|
return result; |
||||
|
} |
||||
|
|
||||
|
|
||||
|
private ScopeViewModel CreateScopeViewModel(IdentityResource identity, bool check) |
||||
|
{ |
||||
|
return new ScopeViewModel |
||||
|
{ |
||||
|
Name = identity.Name, |
||||
|
DisplayName = identity.DisplayName, |
||||
|
Description = identity.Description, |
||||
|
Emphasize = identity.Emphasize, |
||||
|
Required = identity.Required, |
||||
|
Checked = check || identity.Required |
||||
|
}; |
||||
|
} |
||||
|
|
||||
|
public ScopeViewModel CreateScopeViewModel(Scope scope, bool check) |
||||
|
{ |
||||
|
return new ScopeViewModel |
||||
|
{ |
||||
|
Name = scope.Name, |
||||
|
DisplayName = scope.DisplayName, |
||||
|
Description = scope.Description, |
||||
|
Emphasize = scope.Emphasize, |
||||
|
Required = scope.Required, |
||||
|
Checked = check || scope.Required |
||||
|
}; |
||||
|
} |
||||
|
|
||||
|
private ScopeViewModel GetOfflineAccessScope(bool check) |
||||
|
{ |
||||
|
return new ScopeViewModel |
||||
|
{ |
||||
|
Name = IdentityServer4.IdentityServerConstants.StandardScopes.OfflineAccess, |
||||
|
DisplayName = "Offline Access", //TODO: Localize
|
||||
|
Description = "Access to your applications and resources, even when you are offline", |
||||
|
Emphasize = true, |
||||
|
Checked = check |
||||
|
}; |
||||
|
} |
||||
|
|
||||
|
public class ConsentInputModel |
||||
|
{ |
||||
|
public string UserDecision { get; set; } |
||||
|
|
||||
|
public List<string> ScopesConsented { get; set; } |
||||
|
|
||||
|
public bool RememberConsent { get; set; } |
||||
|
} |
||||
|
|
||||
|
public class ScopeViewModel |
||||
|
{ |
||||
|
public string Name { get; set; } |
||||
|
public string DisplayName { get; set; } |
||||
|
public string Description { get; set; } |
||||
|
public bool Emphasize { get; set; } |
||||
|
public bool Required { get; set; } |
||||
|
public bool Checked { get; set; } |
||||
|
} |
||||
|
|
||||
|
public class ProcessConsentResult |
||||
|
{ |
||||
|
public bool IsRedirect => RedirectUri != null; |
||||
|
public string RedirectUri { get; set; } |
||||
|
|
||||
|
public bool HasValidationError => ValidationError != null; |
||||
|
public string ValidationError { get; set; } |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,3 @@ |
|||||
|
@addTagHelper *, Microsoft.AspNetCore.Mvc.TagHelpers |
||||
|
@addTagHelper *, Volo.Abp.AspNetCore.Mvc.UI |
||||
|
@addTagHelper *, Volo.Abp.AspNetCore.Mvc.UI.Bootstrap |
||||
Loading…
Reference in new issue