76 lines
3.1 KiB
C#
76 lines
3.1 KiB
C#
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.SignalR;
|
|
using LightlessSyncShared.Data;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using LightlessSyncShared.Utils;
|
|
using StackExchange.Redis;
|
|
using StackExchange.Redis.Extensions.Core.Abstractions;
|
|
using Microsoft.Extensions.Logging;
|
|
|
|
namespace LightlessSyncShared.RequirementHandlers;
|
|
|
|
public class UserRequirementHandler : AuthorizationHandler<UserRequirement, HubInvocationContext>
|
|
{
|
|
private readonly IDbContextFactory<LightlessDbContext> _dbContextFactory;
|
|
private readonly ILogger<UserRequirementHandler> _logger;
|
|
private readonly IRedisDatabase _redis;
|
|
|
|
public UserRequirementHandler(IDbContextFactory<LightlessDbContext> dbContextFactory, ILogger<UserRequirementHandler> logger, IRedisDatabase redisDb)
|
|
{
|
|
_dbContextFactory = dbContextFactory;
|
|
_logger = logger;
|
|
_redis = redisDb;
|
|
}
|
|
|
|
protected override async Task HandleRequirementAsync(AuthorizationHandlerContext context, UserRequirement requirement, HubInvocationContext resource)
|
|
{
|
|
var uid = context.User.Claims.SingleOrDefault(g => string.Equals(g.Type, LightlessClaimTypes.Uid, StringComparison.Ordinal))?.Value;
|
|
|
|
if (uid == null)
|
|
{
|
|
context.Fail();
|
|
_logger.LogWarning("No user UID found in claims");
|
|
return;
|
|
}
|
|
|
|
if ((requirement.Requirements & UserRequirements.Identified) is UserRequirements.Identified)
|
|
{
|
|
var ident = await _redis.GetAsync<string>("UID:" + uid).ConfigureAwait(false);
|
|
if (ident == RedisValue.EmptyString)
|
|
{
|
|
context.Fail();
|
|
_logger.LogWarning("User {uid} not online", uid);
|
|
return;
|
|
}
|
|
}
|
|
|
|
if ((requirement.Requirements & UserRequirements.Administrator) is UserRequirements.Administrator)
|
|
{
|
|
using var dbContext = await _dbContextFactory.CreateDbContextAsync().ConfigureAwait(false);
|
|
var user = await dbContext.Users.AsNoTracking().SingleOrDefaultAsync(b => b.UID == uid).ConfigureAwait(false);
|
|
if (user == null || !user.IsAdmin)
|
|
{
|
|
context.Fail();
|
|
_logger.LogWarning("Admin request for {uid} unauthenticated", uid);
|
|
return;
|
|
}
|
|
_logger.LogInformation("Admin {uid} authenticated", uid);
|
|
}
|
|
|
|
if ((requirement.Requirements & UserRequirements.Moderator) is UserRequirements.Moderator)
|
|
{
|
|
using var dbContext = await _dbContextFactory.CreateDbContextAsync().ConfigureAwait(false);
|
|
var user = await dbContext.Users.AsNoTracking().SingleOrDefaultAsync(b => b.UID == uid).ConfigureAwait(false);
|
|
if (user == null || !user.IsAdmin && !user.IsModerator)
|
|
{
|
|
context.Fail();
|
|
_logger.LogWarning("Admin/Moderator for {uid} unauthenticated", uid);
|
|
return;
|
|
}
|
|
_logger.LogInformation("Admin/Moderator {uid} authenticated", uid);
|
|
}
|
|
|
|
context.Succeed(requirement);
|
|
}
|
|
}
|