360 lines
16 KiB
C#
Executable File
360 lines
16 KiB
C#
Executable File
using Microsoft.AspNetCore.Mvc;
|
|
using Auth.Services;
|
|
using Auth.Services.DatabaseService;
|
|
using Auth.Entities;
|
|
using Auth.DTO;
|
|
using System.Web.Http;
|
|
using System.IdentityModel.Tokens.Jwt;
|
|
using Microsoft.IdentityModel.Tokens;
|
|
using System.Text;
|
|
using System.Security.Claims;
|
|
|
|
namespace Auth.Controllers {
|
|
[ApiController]
|
|
[Route("api/")]
|
|
public class AuthenticationController : MistoxControllerBase {
|
|
|
|
EmailService _emailContext;
|
|
|
|
public AuthenticationController(DatabaseService db, EmailService emailContext) : base(db) {
|
|
_emailContext = emailContext;
|
|
}
|
|
|
|
[Route("get")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<Account>> Get() {
|
|
try {
|
|
if (isLoggedIn()) {
|
|
return Ok(await getLoggedInUser());
|
|
}
|
|
return BadRequest("Not logged in");
|
|
} catch (Exception ex) {
|
|
Console.WriteLine("Get Error: " + ex);
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("login")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<Account>> Login([FromBody] LoginRequest request) {
|
|
try {
|
|
Account? test = await _databaseService.GetAccount(request.UserName.ToLower());
|
|
if (test != null) {
|
|
if (test.EmailVerified == true) {
|
|
if (test.FailedPasswordLock) {
|
|
if (test.CurrentPasswordAttempts >= test.PasswordAttempts) {
|
|
return BadRequest("Too many failed password attempts. Please reset your password");
|
|
}
|
|
}
|
|
if (BCrypt.Net.BCrypt.Verify(request.Password, test.PasswordHash)) {
|
|
test.CurrentPasswordAttempts = 0;
|
|
await _databaseService.SetAccount(test);
|
|
|
|
string jwt = AuthJWT.GenereateJWTToken(test, request.StayLoggedIn);
|
|
AuthJWT.SignIn(Response, request.StayLoggedIn, jwt);
|
|
|
|
return Ok(test);
|
|
}
|
|
else {
|
|
test.CurrentPasswordAttempts += 1;
|
|
await _databaseService.SetAccount(test);
|
|
return BadRequest("Wrong Password");
|
|
}
|
|
}
|
|
else {
|
|
await SendVerify(new SendVerifyEmailRequest {
|
|
UserName = test.UserName
|
|
});
|
|
return BadRequest("A new verify email has been sent. \n Note only 1 email send every 5 mintes");
|
|
}
|
|
}
|
|
return BadRequest("Account Not Found");
|
|
} catch (Exception ex) {
|
|
Console.WriteLine("Login Error: " + ex.Message);
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("jwtlogin")]
|
|
[HttpPost]
|
|
public async Task<ActionResult> Authenticate([FromBody] LoginRequest request) {
|
|
try {
|
|
Account? test = await _databaseService.GetAccount(request.UserName.ToLower());
|
|
if (test != null) {
|
|
if (test.EmailVerified == true) {
|
|
if (test.FailedPasswordLock) {
|
|
if (test.CurrentPasswordAttempts >= test.PasswordAttempts) {
|
|
return BadRequest("Too many failed password attempts. Please reset your password");
|
|
}
|
|
}
|
|
if (BCrypt.Net.BCrypt.Verify(request.Password, test.PasswordHash)) {
|
|
test.CurrentPasswordAttempts = 0;
|
|
await _databaseService.SetAccount(test);
|
|
|
|
return Ok(AuthJWT.GenereateJWTToken(test, request.StayLoggedIn));
|
|
} else {
|
|
test.CurrentPasswordAttempts += 1;
|
|
await _databaseService.SetAccount(test);
|
|
return BadRequest("Wrong Password");
|
|
}
|
|
} else {
|
|
await SendVerify(new SendVerifyEmailRequest {
|
|
UserName = test.UserName
|
|
});
|
|
return BadRequest("A new verify email has been sent. \n Note only 1 email send every 5 mintes");
|
|
}
|
|
}
|
|
return BadRequest("Account Not Found");
|
|
} catch (Exception ex) {
|
|
Console.WriteLine("Login Error: " + ex.Message);
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("jwttryrenew")]
|
|
[HttpPost]
|
|
public IActionResult Refresh([FromBody] JWTRenewRequest request){
|
|
try {
|
|
JwtSecurityTokenHandler handler = new JwtSecurityTokenHandler();
|
|
ClaimsPrincipal claimsPrincipal = handler.ValidateToken(request.Token, AuthJWT.TokenParameters, out var validatedToken);
|
|
JwtSecurityToken jwt = (JwtSecurityToken)validatedToken;
|
|
if (jwt != null) {
|
|
if (jwt.ValidTo - DateTime.UtcNow < TimeSpan.FromDays(1)) {
|
|
var newJwt = AuthJWT.RenewJWTToken(claimsPrincipal);
|
|
return Ok(newJwt);
|
|
}
|
|
return BadRequest("Not ready to renew");
|
|
}
|
|
return BadRequest("Malformed Token");
|
|
}
|
|
catch (SecurityTokenException ex) {
|
|
return Unauthorized($"Token invalid: {ex.Message}");
|
|
}
|
|
}
|
|
|
|
[Route("logout")]
|
|
[HttpPost]
|
|
public ActionResult Logout() {
|
|
if (isLoggedIn()) {
|
|
AuthJWT.SignOut(Response);
|
|
return Ok();
|
|
}
|
|
return BadRequest();
|
|
}
|
|
|
|
[Route("register")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<Account>> Register([FromBody] RegisterRequest request) {
|
|
try {
|
|
if (await _databaseService.GetAccount(request.UserName.ToLower()) == null) {
|
|
if (await _databaseService.GetAccount(request.Email.ToLower()) == null) {
|
|
Account created = new Account() {
|
|
UserName = request.UserName.ToLower(),
|
|
Email = request.Email.ToLower(),
|
|
EmailVerified = false,
|
|
PasswordHash = BCrypt.Net.BCrypt.HashPassword(request.Password),
|
|
};
|
|
await _databaseService.SetAccount(created);
|
|
Account? loadedAccount = await _databaseService.GetAccount(request.Email.ToLower());
|
|
if (loadedAccount != null) {
|
|
await SendVerify(new SendVerifyEmailRequest {
|
|
UserName = loadedAccount.UserName
|
|
});
|
|
return Ok(loadedAccount);
|
|
}
|
|
return BadRequest("Unable to create the account");
|
|
}
|
|
else {
|
|
return BadRequest("Email is already in use");
|
|
}
|
|
}
|
|
else {
|
|
return BadRequest("UserName is taken");
|
|
}
|
|
} catch (Exception ex) {
|
|
Console.WriteLine("Register Error: " + ex.Message);
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
|
|
}
|
|
|
|
[Route("changepassword")]
|
|
[HttpPost]
|
|
public async Task<ActionResult> ChangePassword([FromBody] ChangePasswordRequest request) {
|
|
try {
|
|
if (isLoggedIn()) {
|
|
Account user = await getLoggedInUser();
|
|
if (BCrypt.Net.BCrypt.Verify(request.OldPassword, user.PasswordHash)) {
|
|
user.PasswordHash = BCrypt.Net.BCrypt.HashPassword(request.NewPassword);
|
|
user.CurrentPasswordAttempts = 0;
|
|
await _databaseService.SetAccount(user);
|
|
return Ok();
|
|
}
|
|
}
|
|
return BadRequest("Not logged in");
|
|
} catch (Exception ex) {
|
|
Console.WriteLine("ChangePassword Error: " + ex.Message);
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("accountlock")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<string>> setAccountLock([FromBody] AccountLockRequest request) {
|
|
try {
|
|
if (isLoggedIn()) {
|
|
Account user = await getLoggedInUser();
|
|
user.FailedPasswordLock = request.AccountLock;
|
|
user.CurrentPasswordAttempts = 0;
|
|
await _databaseService.SetAccount(user);
|
|
return Ok();
|
|
}
|
|
return BadRequest("Not logged in");
|
|
} catch (Exception ex) {
|
|
Console.WriteLine("ToggleAccountLock Error: " + ex.Message);
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("sendverifyemail")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<string>> SendVerify([FromBody] SendVerifyEmailRequest request) {
|
|
try {
|
|
string key = "v" + request.UserName.ToLower();
|
|
// Stop from sending multiple emails quickly
|
|
if (_emailContext._SentEmails.ContainsKey(key)) {
|
|
DateTime PreviousSentTime = _emailContext._SentEmails.GetValueOrDefault(key);
|
|
if (PreviousSentTime.AddMinutes(5) > DateTime.Now) {
|
|
return BadRequest("Cannot sent another verify email until 5 minutes has elapsed");
|
|
}
|
|
else {
|
|
_emailContext._SentEmails.Remove(key);
|
|
}
|
|
}
|
|
Account? test = await _databaseService.GetAccount(request.UserName.ToLower());
|
|
if (test != null) {
|
|
test.EmailToken = Guid.NewGuid().ToString();
|
|
test.EmailTokenCreated = DateTime.UtcNow;
|
|
await _databaseService.SetAccount(test);
|
|
|
|
string EmailContents = EmailService.VerifyEmailEmail;
|
|
EmailContents = Substitue(EmailContents, "@UserName", request.UserName);
|
|
EmailContents = Substitue(EmailContents, "@UserName", request.UserName);
|
|
EmailContents = Substitue(EmailContents, "@VerifyPassword", test.EmailToken);
|
|
|
|
string result = _emailContext.Send(test.Email, EmailService.VerifyEmailSubject, EmailContents);
|
|
_emailContext._SentEmails.Add(key, DateTime.Now);
|
|
return Ok(result);
|
|
}
|
|
return BadRequest("Account not found");
|
|
} catch (Exception) {
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("verifyemail")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<bool>> VerifyEmail([FromBody] VerifyEmailRequest request) {
|
|
try {
|
|
Account? test = await _databaseService.GetAccount(request.UserName.ToLower());
|
|
if (test != null) {
|
|
if (DateTime.UtcNow < test.EmailTokenCreated.AddMinutes(30)) {
|
|
if (test.EmailToken == request.EmailToken) {
|
|
test.EmailToken = "";
|
|
test.EmailVerified = true;
|
|
await _databaseService.SetAccount(test);
|
|
return Ok(true);
|
|
}
|
|
return BadRequest("The token isn't valid");
|
|
}
|
|
return BadRequest("Your email token has timed out");
|
|
}
|
|
return BadRequest("Account not found"); ;
|
|
} catch {
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("sendresetpassword")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<string>> ResetPassword([FromBody] SendResetPasswordRequest request) {
|
|
try {
|
|
string key = "p" + request.Email.ToLower();
|
|
// Stop from sending multiple emails quickly
|
|
if (_emailContext._SentEmails.ContainsKey(key)) {
|
|
DateTime PreviousSentTime = _emailContext._SentEmails.GetValueOrDefault(key);
|
|
if (PreviousSentTime.AddMinutes(5) > DateTime.Now) {
|
|
return BadRequest("Cannot sent another reset requests until 5 minutes has elapsed");
|
|
}
|
|
else {
|
|
_emailContext._SentEmails.Remove(key);
|
|
}
|
|
}
|
|
Account? test = await _databaseService.GetAccount(request.Email.ToLower());
|
|
if (test != null) {
|
|
test.PasswordToken = Guid.NewGuid().ToString();
|
|
test.PasswordTokenCreated = DateTime.UtcNow;
|
|
await _databaseService.SetAccount(test);
|
|
|
|
string EmailContents = EmailService.ResetPasswordEmail;
|
|
EmailContents = Substitue(EmailContents, "@UserName", test.UserName);
|
|
EmailContents = Substitue(EmailContents, "@UserName", test.UserName);
|
|
EmailContents = Substitue(EmailContents, "@ResetPassWord", test.EmailToken);
|
|
|
|
string result = _emailContext.Send(test.Email, EmailService.VerifyEmailSubject, EmailContents);
|
|
_emailContext._SentEmails.Add(key, DateTime.Now);
|
|
return Ok(result);
|
|
}
|
|
return BadRequest("Account Not Found");
|
|
} catch (Exception e) {
|
|
Console.WriteLine("EmailService Error: " + e.ToString());
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
|
|
}
|
|
|
|
[Route("resetpassword")]
|
|
[HttpPost]
|
|
public async Task<ActionResult<bool>> ResetPwdVerify([FromBody] ResetPasswordRequest request) {
|
|
try {
|
|
Account? test = await _databaseService.GetAccount(request.UserName.ToLower());
|
|
if (test != null) {
|
|
if (DateTime.UtcNow < test.PasswordTokenCreated.AddMinutes(30)) {
|
|
if (test.PasswordToken == request.PasswordToken) {
|
|
test.CurrentPasswordAttempts = 0;
|
|
test.PasswordToken = "";
|
|
test.PasswordHash = BCrypt.Net.BCrypt.HashPassword(request.NewPassword);
|
|
await _databaseService.SetAccount(test);
|
|
return Ok(true);
|
|
}
|
|
return BadRequest("The token isn't valid");
|
|
}
|
|
return BadRequest("Your email token has timed out");
|
|
}
|
|
return BadRequest("Account not found"); ;
|
|
} catch {
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
[Route("delete")]
|
|
[HttpPost]
|
|
public async Task<ActionResult> delete([FromBody] DeleteRequest request) {
|
|
try {
|
|
if (isLoggedIn()) {
|
|
Account user = await getLoggedInUser();
|
|
if (BCrypt.Net.BCrypt.Verify(request.Password, user.PasswordHash)) {
|
|
await _databaseService.DeleteAccount(user.ID);
|
|
return Ok();
|
|
}
|
|
}
|
|
return BadRequest("User is not logged in");
|
|
} catch (Exception ex) {
|
|
Console.WriteLine("Delete Error: " + ex.Message);
|
|
return BadRequest("An internal server error has occured");
|
|
}
|
|
}
|
|
|
|
}
|
|
}
|