Changeset 13f1472 for resTools_backend/backend/Helpers/JwtMiddleware.cs

Timestamp:

09/18/22 18:09:53 (21 months ago)

Author:

Danilo <danilo.najkov@…>

Branches:

master

Parents:

49b0bbd

Message:

vip functionallity + menu fields + alergens filtering + google/fb login + email queueing

File:

• resTools_backend/backend/Helpers/JwtMiddleware.cs (modified) (4 diffs)

resTools_backend/backend/Helpers/JwtMiddleware.cs

@@ -6 +6 @@
 using backend.Services;
 using backend.Helpers;
+using Google.Apis.Auth;
+using System.Text.Json;
+using Newtonsoft.Json;
 
 public class JwtMiddleware
@@ -11 +14 @@
     private readonly RequestDelegate _next;
     private readonly AppSettings _appSettings;
+    private static readonly HttpClient client = new HttpClient();
+
 
     public JwtMiddleware(RequestDelegate next, IOptions<AppSettings> appSettings)
@@ -22 +27 @@
         var token = context.Request.Headers["Authorization"].FirstOrDefault()?.Split(" ").Last();
 
-        if (token != null)
-            attachUserToContext(context, userService, token);
+        if (token != null && token != "null")
+            await attachUserToContext(context, userService, token);
 
         await _next(context);
     }
 
-    private void attachUserToContext(HttpContext context, IUserService userService, string token)
+    private async Task attachUserToContext(HttpContext context, IUserService userService, string token)
     {
         try
         {
+            var fbResult = await this.ValidateFacebookToken(token);
+            if (fbResult != null)
+            {
+                context.Items["User"] = fbResult;
+                return;
+            }
+
             var tokenHandler = new JwtSecurityTokenHandler();
             var key = System.Text.Encoding.ASCII.GetBytes(_appSettings.Secret);
@@ -47 +59 @@
 
             context.Items["User"] = userId;
+
         }
         catch
         {
-            // do nothing if jwt validation fails
+            try
+            {
+                var result = await GoogleJsonWebSignature.ValidateAsync(token);
+                context.Items["User"] = result.Email;
+            }
+            catch
+            {
+                // do nothing
+            }
         }
     }
+
+    private async Task<string> ValidateFacebookToken(string token)
+    {
+        try
+        {
+            var stringTask = await client.GetStringAsync("https://graph.facebook.com/me?fields=email&access_token=" + token);
+            var obj = JsonConvert.DeserializeObject<FacebookResult>(stringTask);
+            return obj.email;
+        }
+        catch
+        {
+            return null;
+        }
+    }
+
+    internal class FacebookResult
+    {
+        public string email { get; set; }
+        public string id { get; set; }
+    }
 }