Changeset e49c3ed

Timestamp:

10/26/25 20:52:35 (11 months ago)

Author:

stefansaveski <stefansaveski19@…>

Branches:

master

Children:

3347c1b, c2e73b6, cab02ad

Parents:

9538edc

Message:

Add JWT authentication and refactor namespaces

Introduced JWT-based authentication and authorization:

• Configured JWT authentication in Program.cs with token validation.
• Added [Authorize] attribute to a new getstring endpoint.

Refactored namespaces for consistency:

• Updated namespaces from iknow_api.Core.* to iknow_api.*.

Enhanced middleware and dependency injection:

• Registered IAuthService and IUserRepository.
• Added app.UseAuthentication() and app.UseAuthorization().

Removed unused code and dependencies:

• Deleted WeatherForecast class.
• Cleaned up redundant imports.

Updated project dependencies to include JWT authentication library.

Location:

iknow-api

Files:

• Controllers/AuthController.cs (modified) (2 diffs)
• Data/AppDbContext.cs (modified) (1 diff)
• Migrations/20251022202014_InitialCreate.Designer.cs (modified) (1 diff)
• Migrations/AppDbContextModelSnapshot.cs (modified) (1 diff)
• Models/User.cs (modified) (1 diff)
• Program.cs (modified) (3 diffs)
• Repository/Implementations/UserRepository.cs (modified) (1 diff)
• Repository/Interface/IUserRepository.cs (modified) (1 diff)
• Services/Implementations/AuthService.cs (modified) (3 diffs)
• WeatherForecast.cs (deleted)
• iknow-api.csproj (modified) (1 diff)

iknow-api/Controllers/AuthController.cs

@@ -1 +1 @@
 using iknow_api.DTOs;
 using iknow_api.Services;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.Mvc;
 
@@ -45 +47 @@
             return Ok(new { Token = token });
         }
+
+        [Authorize]
+        [HttpGet("getstring")]
+        public async Task<IActionResult> getstring()
+        {
+            return Ok(new { message = "You are authorized!" });
+        }
     }
 }

iknow-api/Data/AppDbContext.cs

@@ -1 +1 @@
 using Microsoft.EntityFrameworkCore;
-using iknow_api.Core.Models;
+using iknow_api.Models;
 
-namespace iknow_api.Core.Data
+namespace iknow_api.Data
 {
     public class AppDbContext : DbContext

iknow-api/Migrations/20251022202014_InitialCreate.Designer.cs

@@ -6 +6 @@
 using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
 using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
-using iknow_api.Core.Data;
+using iknow_api.Data;
 
 #nullable disable

iknow-api/Migrations/AppDbContextModelSnapshot.cs

@@ -5 +5 @@
 using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
 using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
-using iknow_api.Core.Data;
+using iknow_api.Data;
 
 #nullable disable

iknow-api/Models/User.cs

@@ -1 +1 @@
 
 
-namespace iknow_api.Core.Models
+namespace iknow_api.Models
 {
     public enum UserRole

iknow-api/Program.cs

@@ +1 @@
+using System.Text;
+using iknow_api.Data;
+using iknow_api.Repositories;
+using iknow_api.Services;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.EntityFrameworkCore;
-using iknow_api.Core.Data;
-using iknow_api.Services;
-using iknow_api.Repositories;
+using Microsoft.IdentityModel.Tokens;
 
 var builder = WebApplication.CreateBuilder(args);
+builder.Services.AddAuthentication(options =>
+{
+    options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
+    options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
+})
+.AddJwtBearer(options =>
+{
+    options.RequireHttpsMetadata = false; // only for development
+    options.SaveToken = true;
+    options.TokenValidationParameters = new TokenValidationParameters
+    {
+        ValidateIssuer = true,
+        ValidIssuer = "iknow-api",
 
+        ValidateAudience = true,
+        ValidAudience = "iknow-api",
+
+        ValidateLifetime = true,
+
+        ValidateIssuerSigningKey = true,
+        IssuerSigningKey = new SymmetricSecurityKey(
+            Encoding.UTF8.GetBytes(builder.Configuration["Jwt:Key"]))
+    };
+});
 // Add services to the container.
 builder.Services.AddControllers();
@@ -17 +43 @@
 builder.Services.AddScoped<IAuthService, AuthService>();
 builder.Services.AddScoped<IUserRepository, UserRepository>(); // You'll need to add the UserRepository implementation
-
+builder.Services.AddAuthorization();
 var app = builder.Build();
 
@@ -27 +53 @@
 
 app.UseHttpsRedirection();
+app.UseAuthentication(); // <-- must come BEFORE UseAuthorization
 app.UseAuthorization();
 app.MapControllers();

iknow-api/Repository/Implementations/UserRepository.cs

@@ -1 @@
-using iknow_api.Core.Models;
-using iknow_api.Core.Data;
-using iknow_api.Core.Data;
-using iknow_api.Core.Models;
+using iknow_api.Models;
+using iknow_api.Data;
+using iknow_api.Models;
 using Microsoft.EntityFrameworkCore;
 

iknow-api/Repository/Interface/IUserRepository.cs

@@ -1 @@
-using iknow_api.Core.Models;
+using iknow_api.Models;
 namespace iknow_api.Repositories
 {

iknow-api/Services/Implementations/AuthService.cs

@@ -4 +4 @@
 using BCrypt.Net;
 using iknow_api.Controllers;
-using iknow_api.Core.Models;
+using iknow_api.Models;
 using iknow_api.DTOs;
 using iknow_api.Repositories;
@@ -36 +36 @@
                 Bday = DateTime.SpecifyKind(registerDto.Bday, DateTimeKind.Utc),
                 CreatedAt = DateTime.UtcNow,
-                Role = (Core.Models.UserRole)registerDto.Role
+                Role = (Models.UserRole)registerDto.Role
             };
 
@@ -62 +62 @@
             {
                 new Claim("id", user.Id.ToString()),
-                new Claim("username", user.Email ?? string.Empty),
+                new Claim("email", user.Email ?? string.Empty),
                 new Claim("role", user.Role.ToString())
             };

iknow-api/iknow-api.csproj

@@ -10 +10 @@
   <ItemGroup>
     <PackageReference Include="BCrypt.Net-Next" Version="4.0.3" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="9.0.10" />
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="9.0.9" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="9.0.10">