mirror of https://github.com/Squidex/squidex.git
Sebastian Stehle
9 years ago
42 changed files with 259 additions and 310 deletions
@ -0,0 +1,62 @@ |
|||||
|
// ==========================================================================
|
||||
|
// AuthenticationServices.cs
|
||||
|
// Squidex Headless CMS
|
||||
|
// ==========================================================================
|
||||
|
// Copyright (c) Squidex Group
|
||||
|
// All rights reserved.
|
||||
|
// ==========================================================================
|
||||
|
|
||||
|
using Microsoft.AspNetCore.Authentication; |
||||
|
using Microsoft.AspNetCore.Builder; |
||||
|
using Microsoft.Extensions.Configuration; |
||||
|
using Microsoft.Extensions.DependencyInjection; |
||||
|
using Squidex.Infrastructure; |
||||
|
|
||||
|
namespace Squidex.Config.Identity |
||||
|
{ |
||||
|
public static class AuthenticationServices |
||||
|
{ |
||||
|
public static IServiceCollection AddMyAuthentication(this IServiceCollection services, IConfiguration configuration) |
||||
|
{ |
||||
|
var identityOptions = configuration.GetSection("identity").Get<MyIdentityOptions>(); |
||||
|
|
||||
|
services.AddAuthentication() |
||||
|
.AddMyGoogleAuthentication(identityOptions) |
||||
|
.AddMyMicrosoftAuthentication(identityOptions) |
||||
|
.AddMyApiProtection(identityOptions, configuration); |
||||
|
|
||||
|
return services; |
||||
|
} |
||||
|
|
||||
|
public static AuthenticationBuilder AddMyApiProtection(this AuthenticationBuilder authBuilder, MyIdentityOptions identityOptions, IConfiguration configuration) |
||||
|
{ |
||||
|
var apiScope = Constants.ApiScope; |
||||
|
|
||||
|
var urlsOptions = configuration.GetSection("urls").Get<MyUrlsOptions>(); |
||||
|
|
||||
|
if (!string.IsNullOrWhiteSpace(urlsOptions.BaseUrl)) |
||||
|
{ |
||||
|
string apiAuthorityUrl; |
||||
|
|
||||
|
if (!string.IsNullOrWhiteSpace(identityOptions.AuthorityUrl)) |
||||
|
{ |
||||
|
apiAuthorityUrl = identityOptions.AuthorityUrl.BuildFullUrl(Constants.IdentityPrefix); |
||||
|
} |
||||
|
else |
||||
|
{ |
||||
|
apiAuthorityUrl = urlsOptions.BuildUrl(Constants.IdentityPrefix); |
||||
|
} |
||||
|
|
||||
|
authBuilder.AddIdentityServerAuthentication(options => |
||||
|
{ |
||||
|
options.Authority = apiAuthorityUrl; |
||||
|
options.ApiName = apiScope; |
||||
|
options.ApiSecret = null; |
||||
|
options.RequireHttpsMetadata = identityOptions.RequiresHttps; |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
return authBuilder; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,22 @@ |
|||||
|
// ==========================================================================
|
||||
|
// AuthenticationUsage.cs
|
||||
|
// Squidex Headless CMS
|
||||
|
// ==========================================================================
|
||||
|
// Copyright (c) Squidex Group
|
||||
|
// All rights reserved.
|
||||
|
// ==========================================================================
|
||||
|
|
||||
|
using Microsoft.AspNetCore.Builder; |
||||
|
|
||||
|
namespace Squidex.Config.Identity |
||||
|
{ |
||||
|
public static class AuthenticationUsage |
||||
|
{ |
||||
|
public static IApplicationBuilder UseMyAuthentication(this IApplicationBuilder app) |
||||
|
{ |
||||
|
app.UseAuthentication(); |
||||
|
|
||||
|
return app; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -1,42 +0,0 @@ |
|||||
// ==========================================================================
|
|
||||
// GithubHandler.cs
|
|
||||
// Squidex Headless CMS
|
|
||||
// ==========================================================================
|
|
||||
// Copyright (c) Squidex Group
|
|
||||
// All rights reserved.
|
|
||||
// ==========================================================================
|
|
||||
|
|
||||
using System.Security.Claims; |
|
||||
using System.Threading.Tasks; |
|
||||
using Microsoft.AspNetCore.Authentication.OAuth; |
|
||||
using Squidex.Shared.Identity; |
|
||||
|
|
||||
namespace Squidex.Config.Identity |
|
||||
{ |
|
||||
public sealed class GitHubHandler : OAuthEvents |
|
||||
{ |
|
||||
public override Task CreatingTicket(OAuthCreatingTicketContext context) |
|
||||
{ |
|
||||
var userLogin = context.User.Value<string>("login"); |
|
||||
var userName = context.User.Value<string>("name"); |
|
||||
|
|
||||
if (!string.IsNullOrEmpty(userName)) |
|
||||
{ |
|
||||
context.Identity.AddClaim(new Claim(SquidexClaimTypes.SquidexDisplayName, userName)); |
|
||||
} |
|
||||
else if (!string.IsNullOrWhiteSpace(userLogin)) |
|
||||
{ |
|
||||
context.Identity.AddClaim(new Claim(SquidexClaimTypes.SquidexDisplayName, userName)); |
|
||||
} |
|
||||
|
|
||||
var pictureUrl = context.User.Value<string>("avatar_url"); |
|
||||
|
|
||||
if (!string.IsNullOrEmpty(pictureUrl)) |
|
||||
{ |
|
||||
context.Identity.AddClaim(new Claim(SquidexClaimTypes.SquidexPictureUrl, pictureUrl)); |
|
||||
} |
|
||||
|
|
||||
return base.CreatingTicket(context); |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
@ -1,37 +0,0 @@ |
|||||
// ==========================================================================
|
|
||||
// GithubIdentityUsage.cs
|
|
||||
// Squidex Headless CMS
|
|
||||
// ==========================================================================
|
|
||||
// Copyright (c) Squidex Group
|
|
||||
// All rights reserved.
|
|
||||
// ==========================================================================
|
|
||||
|
|
||||
using AspNet.Security.OAuth.GitHub; |
|
||||
using Microsoft.AspNetCore.Builder; |
|
||||
using Microsoft.Extensions.DependencyInjection; |
|
||||
using Microsoft.Extensions.Options; |
|
||||
|
|
||||
namespace Squidex.Config.Identity |
|
||||
{ |
|
||||
public static class GitHubIdentityUsage |
|
||||
{ |
|
||||
public static IApplicationBuilder UseMyGithubAuthentication(this IApplicationBuilder app) |
|
||||
{ |
|
||||
var options = app.ApplicationServices.GetService<IOptions<MyIdentityOptions>>().Value; |
|
||||
|
|
||||
if (options.IsGithubAuthConfigured()) |
|
||||
{ |
|
||||
var githubOptions = |
|
||||
new GitHubAuthenticationOptions |
|
||||
{ |
|
||||
ClientId = options.GithubClient, |
|
||||
ClientSecret = options.GithubSecret |
|
||||
}; |
|
||||
|
|
||||
app.UseGitHubAuthentication(githubOptions); |
|
||||
} |
|
||||
|
|
||||
return app; |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
@ -0,0 +1,31 @@ |
|||||
|
// ==========================================================================
|
||||
|
// GoogleAuthenticationServices.cs
|
||||
|
// Squidex Headless CMS
|
||||
|
// ==========================================================================
|
||||
|
// Copyright (c) Squidex Group
|
||||
|
// All rights reserved.
|
||||
|
// ==========================================================================
|
||||
|
|
||||
|
using Microsoft.AspNetCore.Authentication; |
||||
|
using Microsoft.Extensions.DependencyInjection; |
||||
|
|
||||
|
namespace Squidex.Config.Identity |
||||
|
{ |
||||
|
public static class GoogleAuthenticationServices |
||||
|
{ |
||||
|
public static AuthenticationBuilder AddMyGoogleAuthentication(this AuthenticationBuilder authBuilder, MyIdentityOptions identityOptions) |
||||
|
{ |
||||
|
if (identityOptions.IsGoogleAuthConfigured()) |
||||
|
{ |
||||
|
authBuilder.AddGoogle(options => |
||||
|
{ |
||||
|
options.ClientId = identityOptions.GoogleClient; |
||||
|
options.ClientSecret = identityOptions.GoogleSecret; |
||||
|
options.Events = new GoogleHandler(); |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
return authBuilder; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -1,37 +0,0 @@ |
|||||
// ==========================================================================
|
|
||||
// GoogleIdentityUsage.cs
|
|
||||
// Squidex Headless CMS
|
|
||||
// ==========================================================================
|
|
||||
// Copyright (c) Squidex Group
|
|
||||
// All rights reserved.
|
|
||||
// ==========================================================================
|
|
||||
|
|
||||
using Microsoft.AspNetCore.Builder; |
|
||||
using Microsoft.Extensions.DependencyInjection; |
|
||||
using Microsoft.Extensions.Options; |
|
||||
|
|
||||
namespace Squidex.Config.Identity |
|
||||
{ |
|
||||
public static class GoogleIdentityUsage |
|
||||
{ |
|
||||
public static IApplicationBuilder UseMyGoogleAuthentication(this IApplicationBuilder app) |
|
||||
{ |
|
||||
var options = app.ApplicationServices.GetService<IOptions<MyIdentityOptions>>().Value; |
|
||||
|
|
||||
if (options.IsGoogleAuthConfigured()) |
|
||||
{ |
|
||||
var googleOptions = |
|
||||
new GoogleOptions |
|
||||
{ |
|
||||
ClientId = options.GoogleClient, |
|
||||
ClientSecret = options.GoogleSecret, |
|
||||
Events = new GoogleHandler() |
|
||||
}; |
|
||||
|
|
||||
app.UseGoogleAuthentication(googleOptions); |
|
||||
} |
|
||||
|
|
||||
return app; |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
@ -0,0 +1,31 @@ |
|||||
|
// ==========================================================================
|
||||
|
// MicrosoftAuthenticationServices.cs
|
||||
|
// Squidex Headless CMS
|
||||
|
// ==========================================================================
|
||||
|
// Copyright (c) Squidex Group
|
||||
|
// All rights reserved.
|
||||
|
// ==========================================================================
|
||||
|
|
||||
|
using Microsoft.AspNetCore.Authentication; |
||||
|
using Microsoft.Extensions.DependencyInjection; |
||||
|
|
||||
|
namespace Squidex.Config.Identity |
||||
|
{ |
||||
|
public static class MicrosoftAuthenticationServices |
||||
|
{ |
||||
|
public static AuthenticationBuilder AddMyMicrosoftAuthentication(this AuthenticationBuilder authBuilder, MyIdentityOptions identityOptions) |
||||
|
{ |
||||
|
if (identityOptions.IsMicrosoftAuthConfigured()) |
||||
|
{ |
||||
|
authBuilder.AddMicrosoftAccount(options => |
||||
|
{ |
||||
|
options.ClientId = identityOptions.MicrosoftClient; |
||||
|
options.ClientSecret = identityOptions.MicrosoftSecret; |
||||
|
options.Events = new MicrosoftHandler(); |
||||
|
}); |
||||
|
} |
||||
|
|
||||
|
return authBuilder; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -1,37 +0,0 @@ |
|||||
// ==========================================================================
|
|
||||
// MicrosoftIdentityUsage.cs
|
|
||||
// Squidex Headless CMS
|
|
||||
// ==========================================================================
|
|
||||
// Copyright (c) Squidex Group
|
|
||||
// All rights reserved.
|
|
||||
// ==========================================================================
|
|
||||
|
|
||||
using Microsoft.AspNetCore.Builder; |
|
||||
using Microsoft.Extensions.DependencyInjection; |
|
||||
using Microsoft.Extensions.Options; |
|
||||
|
|
||||
namespace Squidex.Config.Identity |
|
||||
{ |
|
||||
public static class MicrosoftIdentityUsage |
|
||||
{ |
|
||||
public static IApplicationBuilder UseMyMicrosoftAuthentication(this IApplicationBuilder app) |
|
||||
{ |
|
||||
var options = app.ApplicationServices.GetService<IOptions<MyIdentityOptions>>().Value; |
|
||||
|
|
||||
if (options.IsMicrosoftAuthConfigured()) |
|
||||
{ |
|
||||
var googleOptions = |
|
||||
new MicrosoftAccountOptions |
|
||||
{ |
|
||||
ClientId = options.MicrosoftClient, |
|
||||
ClientSecret = options.MicrosoftSecret, |
|
||||
Events = new MicrosoftHandler() |
|
||||
}; |
|
||||
|
|
||||
app.UseMicrosoftAccountAuthentication(googleOptions); |
|
||||
} |
|
||||
|
|
||||
return app; |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
@ -0,0 +1,21 @@ |
|||||
|
// ==========================================================================
|
||||
|
// ApiAuthorizeAttribute.cs
|
||||
|
// Squidex Headless CMS
|
||||
|
// ==========================================================================
|
||||
|
// Copyright (c) Squidex Group
|
||||
|
// All rights reserved.
|
||||
|
// ==========================================================================
|
||||
|
|
||||
|
using IdentityServer4.AccessTokenValidation; |
||||
|
using Microsoft.AspNetCore.Authorization; |
||||
|
|
||||
|
namespace Squidex.Pipeline |
||||
|
{ |
||||
|
public class ApiAuthorizeAttribute : AuthorizeAttribute |
||||
|
{ |
||||
|
public ApiAuthorizeAttribute() |
||||
|
{ |
||||
|
AuthenticationSchemes = IdentityServerAuthenticationDefaults.AuthenticationScheme; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
Loading…
Reference in new issue