squidex/src/Squidex.Domain.Apps.Core.Operations/Scripting/JintUser.cs

// ==========================================================================
//  Squidex Headless CMS
// ==========================================================================
//  Copyright (c) Squidex UG (haftungsbeschränkt)
//  All rights reserved. Licensed under the MIT license.
// ==========================================================================

using System.Collections.Generic;
using System.Linq;
using System.Security.Claims;
using Jint;
using Jint.Runtime.Interop;
using Squidex.Infrastructure.Security;
using Squidex.Shared.Identity;
using Squidex.Shared.Users;

namespace Squidex.Domain.Apps.Core.Scripting
{
    public static class JintUser
    {
        private static readonly char[] ClaimSeparators = { '/', '.', ':' };

        public static ObjectWrapper Create(Engine engine, IUser user)
        {
            var clientId = user.Claims.FirstOrDefault(x => x.Type == OpenIdClaims.ClientId)?.Value;

            var isClient = !string.IsNullOrWhiteSpace(clientId);

            return CreateUser(engine, user.Id, isClient, user.Email, user.DisplayName(), user.Claims);
        }

        public static ObjectWrapper Create(Engine engine, ClaimsPrincipal principal)
        {
            var id = principal.OpenIdSubject();

            var isClient = string.IsNullOrWhiteSpace(id);

            if (isClient)
            {
                id = principal.OpenIdClientId();
            }

            var name = principal.FindFirst(SquidexClaimTypes.DisplayName)?.Value;

            return CreateUser(engine, id, isClient, principal.OpenIdEmail(), name, principal.Claims);
        }

        private static ObjectWrapper CreateUser(Engine engine, string id, bool isClient, string email, string name, IEnumerable<Claim> allClaims)
        {
            var claims =
                allClaims.GroupBy(x => x.Type.Split(ClaimSeparators).Last())
                    .ToDictionary(
                        x => x.Key,
                        x => x.Select(y => y.Value).ToArray());

            return new ObjectWrapper(engine, new { id, isClient, email, name, claims });
        }
    }
}