Reimplementing Authorization system

DotBased.ASP.Auth/AuthenticationService.cs

@@ -0,0 +1,13 @@
+namespace DotBased.ASP.Auth.Services;
+
+public class AuthenticationService
+{
+    public AuthenticationService()
+    {
+        /*
+         * - Login
+         * - Logout
+         * - Register
+         */
+    }
+}

DotBased.ASP.Auth/BasedAuthConfiguration.cs

@@ -48,3 +48,18 @@ public class BasedAuthConfiguration
         where TSessionStateProviderType : ISessionStateProvider =>
         SessionStateProviderType = typeof(TSessionStateProviderType);
 }
+
+public class BasedPasswordOptions
+{
+    
+}
+
+public class BasedUserOptions
+{
+    
+}
+
+public class BasedLockoutOptions
+{
+    
+}

DotBased.ASP.Auth/BasedServerAuthenticationStateProvider.cs

@@ -1,5 +1,4 @@
 using System.Security.Claims;
-using DotBased.ASP.Auth.Services;
 using DotBased.Logging;
 using Microsoft.AspNetCore.Components.Authorization;
 using Microsoft.AspNetCore.Components.Server;

DotBased.ASP.Auth/DotBased.ASP.Auth.csproj

@@ -17,4 +17,9 @@
     <ItemGroup>
         <FrameworkReference Include="Microsoft.AspNetCore.App" />
     </ItemGroup>
+
+    <ItemGroup>
+      <Folder Include="Models\Auth\States\" />
+      <Folder Include="Models\Repositories\" />
+    </ItemGroup>
 </Project>

DotBased.ASP.Auth/DotBasedAuthDependencyInjection.cs

@@ -18,7 +18,6 @@ public static class DotBasedAuthDependencyInjection
         var Configuration = new BasedAuthConfiguration();
         configurationAction?.Invoke(Configuration);
         
-        
         services.AddSingleton<BasedAuthConfiguration>(Configuration);
         if (Configuration.AuthDataRepositoryType == null)
             throw new ArgumentNullException(nameof(Configuration.AuthDataRepositoryType), $"No '{nameof(IAuthDataRepository)}' configured!");

DotBased.ASP.Auth/Models/Configuration/AuthConfiguration.cs

@@ -0,0 +1,11 @@
+namespace DotBased.ASP.Auth.Models.Configuration;
+
+public class AuthConfiguration
+{
+    public CacheConfiguration Cache { get; set; } = new();
+    public LockoutConfiguration Lockout { get; set; } = new();
+    public PasswordConfiguration Password { get; set; } = new();
+    public ProviderConfiguration Provider { get; set; } = new();
+    public RepositoryConfiguration Repository { get; set; } = new();
+    public UserConfiguration User { get; set; } = new();
+}

DotBased.ASP.Auth/Models/Configuration/CacheConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Auth.Models.Configuration;
+
+public class CacheConfiguration
+{
+    
+}

DotBased.ASP.Auth/Models/Configuration/LockoutConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Auth.Models.Configuration;
+
+public class LockoutConfiguration
+{
+    
+}

DotBased.ASP.Auth/Models/Configuration/PasswordConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Auth.Models.Configuration;
+
+public class PasswordConfiguration
+{
+    
+}

DotBased.ASP.Auth/Models/Configuration/ProviderConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Auth.Models.Configuration;
+
+public class ProviderConfiguration
+{
+    
+}

DotBased.ASP.Auth/Models/Configuration/RepositoryConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Auth.Models.Configuration;
+
+public class RepositoryConfiguration
+{
+    
+}

DotBased.ASP.Auth/Models/Configuration/UserConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Auth.Models.Configuration;
+
+public class UserConfiguration
+{
+    
+}

DotBased.ASP.Auth/SecurityManager.cs

@@ -0,0 +1,9 @@
+namespace DotBased.ASP.Auth.Managers;
+
+public class SecurityManager
+{
+    public SecurityManager()
+    {
+        
+    }
+}

DotBased.ASP.Auth/SecurityService.cs

@@ -7,7 +7,7 @@ using DotBased.Logging;
 using Microsoft.AspNetCore.Components.Authorization;
 using Microsoft.AspNetCore.Components.Server.ProtectedBrowserStorage;
 
-namespace DotBased.ASP.Auth.Services;
+namespace DotBased.ASP.Auth;
 
 public class SecurityService
 {
@@ -60,9 +60,9 @@ public class SecurityService
             new(ClaimTypes.Surname, userResult.Value.FamilyName),
             new(ClaimTypes.Email, userResult.Value.Email)
         };
-        //TODO: combine group, user roles
         claims.AddRange(userResult.Value.Groups.Select(group => new Claim(ClaimTypes.GroupSid, group.Id)));
         claims.AddRange(userResult.Value.Roles.Select(role => new Claim(ClaimTypes.Role, role.Name)));
+        claims.AddRange(userResult.Value.Groups.Select(g => g.Roles).SelectMany(gRolesList => gRolesList, (_, role) => new Claim(ClaimTypes.Role, role.Name)));
         var claimsIdentity = new ClaimsIdentity(claims, BasedAuthDefaults.AuthenticationScheme);
         var authState = new AuthenticationState(new ClaimsPrincipal(claimsIdentity));
         _dataCache.CacheSessionState(authStateModel, authState);

DotBased.ASP.Authentication/BasedAuthenticationBuilder.cs

@@ -0,0 +1,16 @@
+namespace DotBased.ASP.Authentication;
+
+public class BasedAuthenticationBuilder
+{
+    public BasedAuthenticationBuilder(Type authRepository)
+    {
+        if (authRepository.IsValueType)
+        {
+            throw new ArgumentException("Type cannot be a value type!", nameof(authRepository));
+        }
+
+        AuthenticationRepositoryType = authRepository;
+    }
+
+    public Type AuthenticationRepositoryType { get; }
+}

DotBased.ASP.Authentication/BasedAuthenticationExtensions.cs

@@ -0,0 +1,34 @@
+using DotBased.ASP.Authentication.Configuration;
+using DotBased.ASP.Authentication.Repositories;
+using Microsoft.Extensions.DependencyInjection;
+
+namespace DotBased.ASP.Authentication;
+
+public static class BasedAuthenticationExtensions
+{
+    public static BasedAuthenticationBuilder AddBasedAuthentication(this IServiceCollection services, Action<AuthenticationConfiguration>? configurationAction)
+    {
+        /*
+         * Add services
+         * - Validators
+         * - Managers
+         * - Services
+         */
+        if (configurationAction != null)
+        {
+            services.Configure(configurationAction);
+        }
+
+        return new BasedAuthenticationBuilder(typeof(BasedAuthenticationBuilder));
+    }
+
+    public static BasedAuthenticationBuilder AddRepository<TRepository>(this BasedAuthenticationBuilder builder)
+    {
+        return builder;
+    }
+
+    public static BasedAuthenticationBuilder SeedData<TRepository>(this BasedAuthenticationBuilder builder, Action<TRepository> seeder) where TRepository : RepositoryBase
+    {
+        return builder;
+    }
+}

DotBased.ASP.Authentication/BasedAuthenticationStateProvider.cs

@@ -0,0 +1,11 @@
+using Microsoft.AspNetCore.Components.Authorization;
+
+namespace DotBased.ASP.Authentication;
+
+public class BasedAuthenticationStateProvider : AuthenticationStateProvider
+{
+    public override async Task<AuthenticationState> GetAuthenticationStateAsync()
+    {
+        throw new NotImplementedException();
+    }
+}

DotBased.ASP.Authentication/Configuration/AuthenticationConfiguration.cs

@@ -0,0 +1,9 @@
+namespace DotBased.ASP.Authentication.Configuration;
+
+public class AuthenticationConfiguration
+{
+    public CacheConfiguration Cache { get; set; } = new();
+    public LockoutConfiguration Lockout { get; set; } = new();
+    public PasswordConfiguration Password { get; set; } = new();
+    public UserConfiguration User { get; set; } = new();
+}

DotBased.ASP.Authentication/Configuration/CacheConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Configuration;
+
+public class CacheConfiguration
+{
+    
+}

DotBased.ASP.Authentication/Configuration/LockoutConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Configuration;
+
+public class LockoutConfiguration
+{
+    
+}

DotBased.ASP.Authentication/Configuration/PasswordConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Configuration;
+
+public class PasswordConfiguration
+{
+    
+}

DotBased.ASP.Authentication/Configuration/UserConfiguration.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Configuration;
+
+public class UserConfiguration
+{
+    
+}

DotBased.ASP.Authentication/Providers/IStateProvider.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Providers;
+
+public interface IStateProvider
+{
+    
+}

DotBased.ASP.Authentication/Repositories/IAttributeRepository.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Repositories;
+
+public interface IAttributeRepository
+{
+    
+}

DotBased.ASP.Authentication/Repositories/IAuthenticationRepository.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Repositories;
+
+public interface IAuthenticationRepository
+{
+    
+}

DotBased.ASP.Authentication/Repositories/IGroupRepository.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Repositories;
+
+public interface IGroupRepository
+{
+    
+}

DotBased.ASP.Authentication/Repositories/IRoleRepository.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Repositories;
+
+public interface IRoleRepository
+{
+    
+}

DotBased.ASP.Authentication/Repositories/ISessionRepository.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Repositories;
+
+public interface ISessionRepository
+{
+    
+}

DotBased.ASP.Authentication/Repositories/IUserRepository.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Repositories;
+
+public interface IUserRepository
+{
+    
+}

DotBased.ASP.Authentication/Repositories/RepositoryBase.cs

@@ -0,0 +1,6 @@
+namespace DotBased.ASP.Authentication.Repositories;
+
+public abstract class RepositoryBase : IAuthenticationRepository, IAttributeRepository, IGroupRepository, ISessionRepository, IUserRepository
+{
+    
+}

DotBased.ASP.Authentication/SecurityManager.cs

@@ -0,0 +1,17 @@
+using DotBased.ASP.Authentication.Configuration;
+using DotBased.Logging;
+using Microsoft.Extensions.Options;
+
+namespace DotBased.ASP.Authentication;
+
+public class SecurityManager
+{
+    public SecurityManager(IServiceProvider services, IOptions<AuthenticationConfiguration>? config)
+    {
+        _services = services;
+        Configuration = config?.Value ?? new AuthenticationConfiguration();
+    }
+    private ILogger _logger = LogService.RegisterLogger<SecurityManager>();
+    private IServiceProvider _services;
+    public AuthenticationConfiguration Configuration { get; set; }
+}