[a26f6a1] | 1 | namespace backend.Services;
|
---|
[b66b3ac] | 2 |
|
---|
[057037b] | 3 | using backend.Data;
|
---|
| 4 | using backend.DTOs;
|
---|
[a26f6a1] | 5 | using backend.Email;
|
---|
[b66b3ac] | 6 | using backend.Entities;
|
---|
| 7 | using backend.Helpers;
|
---|
| 8 | using backend.Models;
|
---|
[057037b] | 9 | using Microsoft.EntityFrameworkCore;
|
---|
[b66b3ac] | 10 | using Microsoft.Extensions.Options;
|
---|
| 11 | using Microsoft.IdentityModel.Tokens;
|
---|
| 12 | using System.IdentityModel.Tokens.Jwt;
|
---|
| 13 | using System.Security.Claims;
|
---|
[a26f6a1] | 14 | using System.Security.Cryptography;
|
---|
| 15 | using System.Text;
|
---|
[b66b3ac] | 16 |
|
---|
| 17 | public interface IUserService
|
---|
| 18 | {
|
---|
[057037b] | 19 | Task<AuthenticateResponse> Authenticate(AuthenticateRequest model);
|
---|
[899b19d] | 20 | Task<AuthenticateResponse> Register(CreateUserRequest req, bool isFirst);
|
---|
[057037b] | 21 | Task<User> GetById(int id);
|
---|
[13f1472] | 22 | Task<User> GetByEmail(string email);
|
---|
[a26f6a1] | 23 | Task SendEmailConfirmation(string email);
|
---|
| 24 | Task SendPasswordReset(string email);
|
---|
| 25 | Task ConfirmEmail(User user, string checkValid);
|
---|
| 26 | Task ResetPassword(string checkValid, string password);
|
---|
[13f1472] | 27 | Task<List<UserResponse>> GetUsers();
|
---|
| 28 | Task UpdateVipStatus(int id, bool isVip);
|
---|
| 29 |
|
---|
[b66b3ac] | 30 | }
|
---|
| 31 |
|
---|
| 32 | public class UserService : IUserService
|
---|
| 33 | {
|
---|
| 34 | private readonly AppSettings _appSettings;
|
---|
[057037b] | 35 | private readonly DataContext _context = null;
|
---|
[a26f6a1] | 36 | private readonly IEmailSender _emailSender;
|
---|
[b66b3ac] | 37 |
|
---|
[a26f6a1] | 38 | public UserService(IOptions<AppSettings> appSettings, DataContext context, IEmailSender emailSender)
|
---|
[b66b3ac] | 39 | {
|
---|
| 40 | _appSettings = appSettings.Value;
|
---|
[057037b] | 41 | _context = context;
|
---|
[a26f6a1] | 42 | _emailSender = emailSender;
|
---|
[b66b3ac] | 43 | }
|
---|
| 44 |
|
---|
[13f1472] | 45 | public async Task<User> GetByEmail(string email)
|
---|
| 46 | {
|
---|
| 47 | return await _context.Users.FirstOrDefaultAsync(x => x.Email == email);
|
---|
| 48 | }
|
---|
| 49 |
|
---|
[057037b] | 50 | public async Task<AuthenticateResponse> Authenticate(AuthenticateRequest model)
|
---|
[b66b3ac] | 51 | {
|
---|
[057037b] | 52 | User user = await _context.Users.FirstOrDefaultAsync(x => x.Email == model.Email && x.Password == model.Password);
|
---|
[b66b3ac] | 53 |
|
---|
| 54 | // return null if user not found
|
---|
| 55 | if (user == null) return null;
|
---|
| 56 |
|
---|
| 57 | // authentication successful so generate jwt token
|
---|
| 58 | var token = generateJwtToken(user);
|
---|
| 59 |
|
---|
[13f1472] | 60 | return new AuthenticateResponse { Email = user.Email, Id = user.Id, Token = token, IsAdmin = user.IsAdmin, IsConfirmed = user.IsConfirmed, isVip = user.IsVip};
|
---|
[a26f6a1] | 61 | }
|
---|
| 62 |
|
---|
| 63 | public async Task ConfirmEmail(User user, string checkValid)
|
---|
| 64 | {
|
---|
| 65 | if(user.ConfirmationURL != checkValid)
|
---|
| 66 | {
|
---|
| 67 | throw new Exception("Invalid check");
|
---|
| 68 | }
|
---|
| 69 | if(user.ConfirmationValidTo < DateTime.UtcNow)
|
---|
| 70 | {
|
---|
| 71 | throw new Exception("Link expired");
|
---|
| 72 | }
|
---|
| 73 |
|
---|
| 74 | user.IsConfirmed = true;
|
---|
| 75 | _context.Users.Update(user);
|
---|
| 76 | await _context.SaveChangesAsync();
|
---|
[057037b] | 77 | }
|
---|
| 78 |
|
---|
| 79 | public async Task<User> GetById(int id)
|
---|
| 80 | {
|
---|
| 81 | return await _context.Users.FindAsync(id);
|
---|
[b66b3ac] | 82 | }
|
---|
| 83 |
|
---|
[899b19d] | 84 | public async Task<AuthenticateResponse> Register(CreateUserRequest req, bool isFirst)
|
---|
[b66b3ac] | 85 | {
|
---|
[13f1472] | 86 | var exists = await _context.Users.FirstOrDefaultAsync(x => x.Email == req.Email);
|
---|
| 87 | if(exists != null && req.IsConfirmed)
|
---|
| 88 | {
|
---|
| 89 | return new AuthenticateResponse { Email = exists.Email, Id = exists.Id, IsAdmin = exists.IsAdmin, IsConfirmed = true };
|
---|
| 90 | }
|
---|
| 91 | User user = new User() { Email = req.Email, Password = req.Password, IsAdmin = isFirst, IsConfirmed = req.IsConfirmed, IsVip = false };
|
---|
[057037b] | 92 | await _context.Users.AddAsync(user);
|
---|
| 93 | await _context.SaveChangesAsync();
|
---|
| 94 | var token = generateJwtToken(user);
|
---|
[13f1472] | 95 | return new AuthenticateResponse { Email = user.Email, Id = user.Id, Token = token, IsAdmin = user.IsAdmin, IsConfirmed = req.IsConfirmed, isVip = user.IsVip };
|
---|
[a26f6a1] | 96 | }
|
---|
| 97 |
|
---|
| 98 | public async Task ResetPassword(string checkValid, string password)
|
---|
| 99 | {
|
---|
| 100 | var user = await _context.Users.Where(x => x.PasswordResetURL == checkValid).FirstOrDefaultAsync();
|
---|
| 101 | if (user == null)
|
---|
| 102 | {
|
---|
| 103 | throw new Exception("Invalid check");
|
---|
| 104 | }
|
---|
| 105 | if (user.PasswordResetValidTo < DateTime.UtcNow)
|
---|
| 106 | {
|
---|
| 107 | throw new Exception("Link expired");
|
---|
| 108 | }
|
---|
| 109 |
|
---|
| 110 | user.Password = password;
|
---|
| 111 | _context.Users.Update(user);
|
---|
| 112 | await _context.SaveChangesAsync();
|
---|
| 113 | }
|
---|
| 114 |
|
---|
| 115 | public async Task SendEmailConfirmation(string email)
|
---|
| 116 | {
|
---|
| 117 | User user = await _context.Users.FirstOrDefaultAsync(x => x.Email == email);
|
---|
| 118 | user.ConfirmationURL = Guid.NewGuid().ToString();
|
---|
| 119 | user.ConfirmationValidTo = DateTime.UtcNow.AddHours(24);
|
---|
| 120 | _context.Users.Update(user);
|
---|
| 121 | await _context.SaveChangesAsync();
|
---|
| 122 | await _emailSender.SendEmailAsync(
|
---|
| 123 | "Потврдете го вашиот емаил",
|
---|
| 124 | "Ве молиме кликнете на следниот линк за да го потврдите вашиот емаил: http://localhost:3000/confirm?id=" + user.ConfirmationURL,
|
---|
| 125 | email);
|
---|
| 126 | }
|
---|
| 127 |
|
---|
| 128 | public async Task SendPasswordReset(string email)
|
---|
| 129 | {
|
---|
| 130 | User user = await _context.Users.FirstOrDefaultAsync(x => x.Email == email);
|
---|
| 131 | user.PasswordResetURL = Guid.NewGuid().ToString();
|
---|
| 132 | user.PasswordResetValidTo = DateTime.UtcNow.AddHours(24);
|
---|
| 133 | _context.Users.Update(user);
|
---|
| 134 | await _context.SaveChangesAsync();
|
---|
| 135 | await _emailSender.SendEmailAsync(
|
---|
| 136 | "Ресетирајте ја лозинката",
|
---|
| 137 | "Ве молиме кликнете на следниот линк за да ја ресетирате лозинката: http://localhost:3000/reset?id=" + user.PasswordResetURL,
|
---|
| 138 | email);
|
---|
[b66b3ac] | 139 | }
|
---|
| 140 |
|
---|
[13f1472] | 141 | public async Task<List<UserResponse>> GetUsers()
|
---|
| 142 | {
|
---|
| 143 | return await _context.Users.Select(x => new UserResponse()
|
---|
| 144 | {
|
---|
| 145 | Email = x.Email,
|
---|
| 146 | Id = x.Id,
|
---|
| 147 | IsVip = x.IsVip
|
---|
| 148 | }).OrderBy(x => x.Id).ToListAsync();
|
---|
| 149 | }
|
---|
| 150 |
|
---|
| 151 | public async Task UpdateVipStatus(int id, bool isVip)
|
---|
| 152 | {
|
---|
| 153 | var user = await _context.Users.FindAsync(id);
|
---|
| 154 | user.IsVip = isVip;
|
---|
| 155 | _context.Users.Update(user);
|
---|
| 156 | await _context.SaveChangesAsync();
|
---|
| 157 | }
|
---|
| 158 |
|
---|
[b66b3ac] | 159 | private string generateJwtToken(User user)
|
---|
| 160 | {
|
---|
| 161 | // generate token that is valid for 7 days
|
---|
| 162 | var tokenHandler = new JwtSecurityTokenHandler();
|
---|
[057037b] | 163 | var key = System.Text.Encoding.ASCII.GetBytes(_appSettings.Secret);
|
---|
[b66b3ac] | 164 | var tokenDescriptor = new SecurityTokenDescriptor
|
---|
| 165 | {
|
---|
| 166 | Subject = new ClaimsIdentity(new[] { new Claim("id", user.Id.ToString()) }),
|
---|
| 167 | Expires = DateTime.UtcNow.AddDays(7),
|
---|
| 168 | SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha256Signature)
|
---|
| 169 | };
|
---|
| 170 | var token = tokenHandler.CreateToken(tokenDescriptor);
|
---|
| 171 | return tokenHandler.WriteToken(token);
|
---|
| 172 | }
|
---|
[a26f6a1] | 173 |
|
---|
| 174 | private string sha256Hash(String value)
|
---|
| 175 | {
|
---|
| 176 | using (SHA256 hash = SHA256.Create())
|
---|
| 177 | {
|
---|
| 178 | return String.Concat(hash
|
---|
| 179 | .ComputeHash(Encoding.UTF8.GetBytes(value))
|
---|
| 180 | .Select(item => item.ToString("x2")));
|
---|
| 181 | }
|
---|
| 182 | }
|
---|
[b66b3ac] | 183 | } |
---|