aspnetcore.3.0.Authentication.ApiAuthentication.mustache Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of openapi-generator Show documentation

There is a newer version: 7.9.0

using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc.Filters;

namespace {{packageName}}.Authentication
{
    /// 
    /// A requirement that an ApiKey must be present.
    /// 
    public class ApiKeyRequirement : IAuthorizationRequirement
    {
        /// 
        /// Get the list of api keys
        /// 
        public IReadOnlyList ApiKeys { get; }

        /// 
        /// Get the policy name,
        /// 
        public string PolicyName { get; }

        /// 
        /// Create a new instance of the  class.
        /// 
        /// 
        /// 
        public ApiKeyRequirement(IEnumerable apiKeys, string policyName)
        {
            ApiKeys = apiKeys?.ToList() ?? new List();
            PolicyName = policyName;
        }
    }

    /// 
    /// Enforce that an api key is present.
    /// 
    public class ApiKeyRequirementHandler : AuthorizationHandler
    {
        /// 
        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, ApiKeyRequirement requirement)
        {
            SucceedRequirementIfApiKeyPresentAndValid(context, requirement);
            return Task.CompletedTask;
        }

        private void SucceedRequirementIfApiKeyPresentAndValid(AuthorizationHandlerContext context, ApiKeyRequirement requirement)
        {
{{#authMethods}}{{#isApiKey}}
            if (context.Resource is AuthorizationFilterContext authorizationFilterContext)
            {
{{#isKeyInHeader}}
                var apiKey = authorizationFilterContext.HttpContext.Request.Headers["{{keyParamName}}"].FirstOrDefault();
{{/isKeyInHeader}}
{{#isKeyInQuery}}
                var apiKey = authorizationFilterContext.HttpContext.Request.Query["{{keyParamName}}"].FirstOrDefault();
{{/isKeyInQuery}}
{{#isKeyInCookie}}
                var apiKey = authorizationFilterContext.HttpContext.Request.Cookies["{{keyParamName}}"] ?? null;
{{/isKeyInCookie}}
                if (requirement.PolicyName == "{{name}}" && apiKey != null && requirement.ApiKeys.Any(requiredApiKey => apiKey == requiredApiKey))
                {
                    context.Succeed(requirement);
                }
            }
{{/isApiKey}}{{/authMethods}}
        }
    }
}