squidex/backend/src/Squidex.Infrastructure/Security/Extensions.cs

// ==========================================================================
//  Squidex Headless CMS
// ==========================================================================
//  Copyright (c) Squidex UG (haftungsbeschraenkt)
//  All rights reserved. Licensed under the MIT license.
// ==========================================================================

using System;
using System.Linq;
using System.Security.Claims;

namespace Squidex.Infrastructure.Security
{
    public static class Extensions
    {
        public static RefToken? Token(this ClaimsPrincipal principal)
        {
            var subjectId = principal.OpenIdSubject();
            var subjectName = principal.OpenIdName();

            var clientId = principal.OpenIdClientId();

            if (!string.IsNullOrWhiteSpace(subjectId) && !string.IsNullOrWhiteSpace(subjectName))
            {
                return RefToken.User(subjectId);
            }

            if (!string.IsNullOrWhiteSpace(clientId))
            {
                return RefToken.Client(clientId);
            }

            return null;
        }

        public static string? OpenIdSubject(this ClaimsPrincipal principal)
        {
            return principal.Claims.FirstOrDefault(x => x.Type == OpenIdClaims.Subject)?.Value;
        }

        public static string? OpenIdClientId(this ClaimsPrincipal principal)
        {
            return principal.Claims.FirstOrDefault(x => x.Type == OpenIdClaims.ClientId)?.Value;
        }

        public static string? UserOrClientId(this ClaimsPrincipal principal)
        {
            return principal.OpenIdSubject() ?? principal.OpenIdClientId();
        }

        public static string? OpenIdPreferredUserName(this ClaimsPrincipal principal)
        {
            return principal.Claims.FirstOrDefault(x => x.Type == OpenIdClaims.PreferredUserName)?.Value;
        }

        public static string? OpenIdName(this ClaimsPrincipal principal)
        {
            return principal.Claims.FirstOrDefault(x => x.Type == OpenIdClaims.Name)?.Value;
        }

        public static string? OpenIdEmail(this ClaimsPrincipal principal)
        {
            return principal.Claims.FirstOrDefault(x => x.Type == OpenIdClaims.Email)?.Value;
        }

        public static string? GetEmail(this ClaimsPrincipal principal)
        {
            return principal.Claims.FirstOrDefault(x => x.Type == ClaimTypes.Email)?.Value ??
                   principal.Claims.FirstOrDefault(x => x.Type == OpenIdClaims.Email)?.Value;
        }

        public static bool IsInClient(this ClaimsPrincipal principal, string client)
        {
            return principal.Claims.Any(x => x.Type == OpenIdClaims.ClientId && string.Equals(x.Value, client, StringComparison.OrdinalIgnoreCase));
        }
    }
}