using Microsoft.AspNetCore.Http; using Microsoft.Extensions.Configuration; using Microsoft.Extensions.DependencyInjection; using Microsoft.IdentityModel.Tokens; using System; using System.Collections.Generic; using System.IdentityModel.Tokens.Jwt; using System.Security.Claims; using System.Text; namespace Infrastructure.Extensions { public static class HttpContextExtensions { public static string GetJwtCookieName(this HttpContext httpContext) { if (httpContext is null) { throw new ArgumentNullException(nameof(httpContext)); } return $"jwt{httpContext.RequestServices.GetService()["jwt:cookie"]}"; } public static void JwtSignIn(this HttpContext httpContext, string userName, bool rememberMe, string organId = null) { if (httpContext is null) { throw new ArgumentNullException(nameof(httpContext)); } var claims = new List { new Claim(ClaimTypes.Name, userName), }; if (!string.IsNullOrEmpty(organId)) { claims.Add(new Claim(ClaimTypes.UserData, organId)); } var token = httpContext.CreateJwtToken(claims, DateTime.Now.AddYears(1)); var cookieOptions = new CookieOptions { HttpOnly = true }; if (rememberMe) { cookieOptions.Expires = DateTimeOffset.Now.AddYears(1); } var cookieName = httpContext.GetJwtCookieName(); httpContext.Response.Cookies.Delete(cookieName); httpContext.Response.Cookies.Append(cookieName, token, cookieOptions); } public static void JwtSignOut(this HttpContext httpContext) { if (httpContext is null) { throw new ArgumentNullException(nameof(httpContext)); } httpContext.Response.Cookies.Delete(httpContext.GetJwtCookieName()); } public static string CreateJwtToken(this HttpContext httpContext, List claims, DateTime expires) { if (httpContext is null) { throw new ArgumentNullException(nameof(httpContext)); } var cfg = httpContext.RequestServices.GetRequiredService(); var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(cfg["jwt:key"])); var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256); var token = new JwtSecurityToken( issuer: cfg["jwt:issuer"], audience: cfg["jwt:audience"], claims: claims, expires: expires, signingCredentials: creds); var tokenText = new JwtSecurityTokenHandler().WriteToken(token); return tokenText; } public static JwtSecurityToken ReadToken(this HttpContext httpContext, string token) { return new JwtSecurityTokenHandler().ReadJwtToken(token); } } }