| | | 1 | | using System.Security.Claims; |
| | | 2 | | using AsiBackbone.Core.Actors; |
| | | 3 | | using Microsoft.AspNetCore.Http; |
| | | 4 | | using Microsoft.Extensions.Options; |
| | | 5 | | |
| | | 6 | | namespace AsiBackbone.AspNetCore.Actors; |
| | | 7 | | |
| | | 8 | | /// <summary> |
| | | 9 | | /// Maps the current ASP.NET Core HTTP context into a framework-neutral AsiBackbone actor context. |
| | | 10 | | /// </summary> |
| | | 11 | | public sealed class HttpContextGovernanceActorContextResolver : IHttpGovernanceActorContextResolver |
| | | 12 | | { |
| | | 13 | | private readonly IHttpContextAccessor httpContextAccessor; |
| | | 14 | | private readonly HttpGovernanceActorContextOptions options; |
| | | 15 | | |
| | | 16 | | /// <summary> |
| | | 17 | | /// Initializes a new instance of the <see cref="HttpContextGovernanceActorContextResolver" /> class. |
| | | 18 | | /// </summary> |
| | | 19 | | /// <param name="httpContextAccessor">The ASP.NET Core HTTP context accessor.</param> |
| | | 20 | | /// <param name="options">The actor mapping options.</param> |
| | 44 | 21 | | public HttpContextGovernanceActorContextResolver( |
| | 44 | 22 | | IHttpContextAccessor httpContextAccessor, |
| | 44 | 23 | | IOptions<HttpGovernanceActorContextOptions> options) |
| | | 24 | | { |
| | 44 | 25 | | this.httpContextAccessor = httpContextAccessor ?? throw new ArgumentNullException(nameof(httpContextAccessor)); |
| | 44 | 26 | | this.options = options?.Value ?? throw new ArgumentNullException(nameof(options)); |
| | 44 | 27 | | this.options.Validate(); |
| | 44 | 28 | | } |
| | | 29 | | |
| | | 30 | | /// <inheritdoc /> |
| | | 31 | | public IGovernanceActorContext ResolveActorContext() |
| | | 32 | | { |
| | 21 | 33 | | ClaimsPrincipal? user = httpContextAccessor.HttpContext?.User; |
| | | 34 | | |
| | 21 | 35 | | if (user?.Identity?.IsAuthenticated != true) |
| | | 36 | | { |
| | 7 | 37 | | return ResolveUnauthenticatedActor; |
| | | 38 | | } |
| | | 39 | | |
| | 14 | 40 | | string? actorId = FindFirstNonEmptyClaimValue(user, options.ActorIdClaimTypes); |
| | 14 | 41 | | if (string.IsNullOrWhiteSpace(actorId)) |
| | | 42 | | { |
| | 1 | 43 | | return ResolveUnauthenticatedActor; |
| | | 44 | | } |
| | | 45 | | |
| | 13 | 46 | | string? displayName = FindFirstNonEmptyClaimValue(user, options.DisplayNameClaimTypes); |
| | 13 | 47 | | GovernanceActorType actorType = ResolveActorType(user); |
| | | 48 | | |
| | 13 | 49 | | return actorType switch |
| | 13 | 50 | | { |
| | 2 | 51 | | GovernanceActorType.Service => GovernanceActorContext.Service(actorId, displayName), |
| | 1 | 52 | | GovernanceActorType.System => GovernanceActorContext.System, |
| | 3 | 53 | | GovernanceActorType.Agent => GovernanceActorContext.Agent(actorId, displayName), |
| | 7 | 54 | | GovernanceActorType.Human => GovernanceActorContext.Human(actorId, displayName), |
| | 0 | 55 | | GovernanceActorType.Unknown => GovernanceActorContext.Unknown, |
| | 0 | 56 | | _ => GovernanceActorContext.Human(actorId, displayName), |
| | 13 | 57 | | }; |
| | | 58 | | } |
| | | 59 | | |
| | 8 | 60 | | private IGovernanceActorContext ResolveUnauthenticatedActor => string.IsNullOrWhiteSpace(options.UnauthenticatedDisp |
| | 8 | 61 | | ? GovernanceActorContext.Unknown |
| | 8 | 62 | | : GovernanceActorContext.Human( |
| | 8 | 63 | | GovernanceActorContext.UnknownActorId, |
| | 8 | 64 | | options.UnauthenticatedDisplayName, |
| | 8 | 65 | | isAuthenticated: false); |
| | | 66 | | |
| | | 67 | | private GovernanceActorType ResolveActorType(ClaimsPrincipal user) |
| | | 68 | | { |
| | 13 | 69 | | string? actorTypeValue = FindFirstNonEmptyClaimValue(user, [options.ActorTypeClaimType]); |
| | | 70 | | |
| | 13 | 71 | | return Enum.TryParse(actorTypeValue, ignoreCase: true, out GovernanceActorType actorType) |
| | 13 | 72 | | && Enum.IsDefined(actorType) |
| | 13 | 73 | | && options.AllowedActorTypesFromClaims.Contains(actorType) |
| | 13 | 74 | | ? actorType |
| | 13 | 75 | | : options.DefaultAuthenticatedActorType; |
| | | 76 | | } |
| | | 77 | | |
| | | 78 | | private static string? FindFirstNonEmptyClaimValue(ClaimsPrincipal user, IEnumerable<string> claimTypes) |
| | | 79 | | { |
| | 181 | 80 | | foreach (string claimType in claimTypes.Where(static claimType => !string.IsNullOrWhiteSpace(claimType))) |
| | | 81 | | { |
| | 64 | 82 | | Claim? claim = user.FindFirst(claimType); |
| | 64 | 83 | | if (!string.IsNullOrWhiteSpace(claim?.Value)) |
| | | 84 | | { |
| | 27 | 85 | | return claim.Value.Trim(); |
| | | 86 | | } |
| | | 87 | | } |
| | | 88 | | |
| | 13 | 89 | | return null; |
| | 27 | 90 | | } |
| | | 91 | | } |