hmaxnl/SharpRSS
1
0
Fork 0
mirror of https://github.com/hmaxnl/SharpRSS.git synced 2025-01-18 04:44:20 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Custom auth implementation

Browse Source
This commit is contained in:
Max 2024-07-13 16:29:27 +02:00
parent 89cb9fbe1e
commit 487fd518e7
13 changed files with 82 additions and 57 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
DotBased

@ -1 +1 @@
Subproject commit 03daea46e78dfa97d3e4f85fa8035fef5c5ed446
Subproject commit 5341179e9421b7d8c4e54ce4962fc856cef4d6ed

9
SharpRSS.Blazor/Components/Pages/Home.razor
View File

@ -4,4 +4,13 @@
<MudText Typo="Typo.h4">Mud text!</MudText>
<AuthorizeView Roles="test">
<NotAuthorized>
<span>Not autorized for role: 'test'</span>
</NotAuthorized>
<Authorized>
<span>Role: 'test' found!</span>
</Authorized>
</AuthorizeView>
Welcome to your new app.

7
SharpRSS.Blazor/Components/Pages/TestAdmin.razor Normal file
View File

@ -0,0 +1,7 @@
@page "/TestAdmin"
@attribute [Authorize(Roles = "Admin")]
<h3>TestAdmin</h3>
@code {
}

7
SharpRSS.Blazor/Components/Routes.razor
View File

@ -3,4 +3,11 @@
<RouteView RouteData="routeData" DefaultLayout="typeof(Layout.MainLayout)"/>
<FocusOnNavigate RouteData="routeData" Selector="h1"/>
</Found>
<NotFound>
<LayoutView Layout="@typeof(EmptyLayout)">
@*TODO: Manage not found*@
<PageTitle>Not found!</PageTitle>
<p>Page not found!</p>
</LayoutView>
</NotFound>
</Router>

9
SharpRSS.Blazor/Components/_Imports.razor
View File

@ -1,14 +1,19 @@
@using System.Net.Http
@using System.Net.Http.Json
@using Microsoft.AspNetCore.Authorization
@using Microsoft.AspNetCore.Components.Forms
@using Microsoft.AspNetCore.Components.Routing
@using Microsoft.AspNetCore.Components.Web
@using static Microsoft.AspNetCore.Components.Web.RenderMode
@using Microsoft.AspNetCore.Components.Web.Virtualization
@using Microsoft.AspNetCore.Components.Authorization
@using Microsoft.JSInterop
@using static Microsoft.AspNetCore.Components.Web.RenderMode
@*SharpRSS*@
@using SharpRSS.Blazor
@using SharpRSS.Blazor.Components
@using SharpRSS.Blazor.Components.Layout
@*MudBlazor*@
@using MudBlazor
@using MudBlazor.Components
@using MudBlazor.Components
@*Authorize for the whole application*@
@attribute [Authorize]

24
SharpRSS.Blazor/Program.cs
View File

@ -4,9 +4,9 @@ using MudBlazor.Services;
using SharpRSS.Blazor.Components;
using SharpRSS.Business;
using SharpRSS.Data;
using SharpRSS.Data.Domains.Configuration;
var builder = WebApplication.CreateBuilder(args);
builder.UseSRSS();
builder.Services.AddBlazoredLocalStorage();
@ -20,15 +20,22 @@ builder.Services.AddHttpContextAccessor(); // HttpContext accessor
/*
* HSTS config
*/
builder.Services.AddHsts(options =>
var hstsConfig = new HstsConfiguration();
var configSection = builder.Configuration.GetSection($"HTTP:{HstsConfiguration.Hsts}");
configSection.Bind(hstsConfig);
if (hstsConfig.EnableHsts)
{
options.Preload = true;
options.IncludeSubDomains = true;
options.MaxAge = TimeSpan.FromDays(60); // For DEV = 60 days, PROD = 1 year
});
builder.Services.AddHsts(options =>
{
options.Preload = hstsConfig.Preload;
options.IncludeSubDomains = hstsConfig.IncludeSubdomains;
options.MaxAge = TimeSpan.FromSeconds(hstsConfig.MaxAgeSeconds);
});
}
var app = builder.Build();
//TODO: Move to migrations
var contextFactory = app.Services.GetService<IDbContextFactory<SRSSContext>>();
if (contextFactory != null)
{
@ -42,14 +49,15 @@ else
if (!app.Environment.IsDevelopment())
{
app.UseDeveloperExceptionPage();
app.UseExceptionHandler("/Error", createScopeForErrors: true);
app.UseHsts();
}
app.UseHttpsRedirection();
app.UseStaticFiles();
app.UseAntiforgery();
app.UseAuthentication();
app.UseAuthorization();
app.MapRazorComponents<App>()
.AddInteractiveServerRenderMode();

10
SharpRSS.Blazor/appsettings.Development.json
View File

@ -42,5 +42,15 @@
"Properties": {
"Application": "SharpRSS"
}
},
"HTTP":
{
"HSTS":
{
"EnableHSTS": true,
"MaxAgeSeconds": 300,
"IncludeSubdomains": true,
"Preload": true
}
}
}

40
SharpRSS.Business/Auth/SRSSAuthenticationStateProvider.cs
View File

@ -1,40 +0,0 @@
using DotBased.Logging;
using Microsoft.AspNetCore.Components.Authorization;
using Microsoft.AspNetCore.Http;
using SharpRSS.Business.Services;
namespace SharpRSS.Business.Auth;
public class SRSSAuthenticationStateProvider : AuthenticationStateProvider
{
public SRSSAuthenticationStateProvider(IHttpContextAccessor contextAccessor, AuthService authService)
{
_logger = LogService.RegisterLogger(typeof(SRSSAuthenticationStateProvider));
if (contextAccessor.HttpContext != null)
_httpContext = contextAccessor.HttpContext;
else
{
var ex = new ApplicationException("HttpContext is null! Cannot setup authentication state provider!");
_logger.Fatal(ex, "Failed to initialize authentication state provider!");
throw ex;
}
_authService = authService;
}
/*
* Services
*/
private readonly ILogger _logger;
private readonly HttpContext _httpContext;
private readonly AuthService _authService;
/*
* Consts
*/
private const string AuthIdName = "srss_auth_id";
public override Task<AuthenticationState> GetAuthenticationStateAsync()
{
_logger.Debug("Getting authentication state...");
throw new NotImplementedException();
}
}

15
SharpRSS.Business/DependencyInjection.cs
View File

@ -1,17 +1,17 @@
using DotBased.ASP.Auth;
using DotBased.ASP.Auth.Scheme;
using DotBased.Logging;
using DotBased.Logging.Serilog;
using Microsoft.AspNetCore.Builder;
using Microsoft.AspNetCore.Components.Authorization;
using Microsoft.EntityFrameworkCore;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Logging;
using Microsoft.EntityFrameworkCore.Diagnostics;
using Serilog;
using SharpRSS.Business.Auth;
using SharpRSS.Business.Services;
using SharpRSS.Core.Configuration;
using SharpRSS.Data;
using AuthService = SharpRSS.Business.Services.AuthService;
namespace SharpRSS.Business;
@ -68,7 +68,14 @@ public static class DependencyInjection
/*
* Authentication
*/
builder.Services.AddScoped<AuthenticationStateProvider, SRSSAuthenticationStateProvider>();
builder.Services.UseBasedAuth(options =>
{
options.AllowRegistration = false;
options.AuthenticationStateMaxAgeBeforeExpire = TimeSpan.FromDays(7);
options.LoginPath = "/auth/login";
options.LogoutPath = "/auth/logout";
});
builder.Services.AddCascadingAuthenticationState();
//TODO: Auth, Settings
return builder;

5
SharpRSS.Business/SharpRSS.Business.csproj
View File

@ -7,6 +7,7 @@
</PropertyGroup>
<ItemGroup>
<ProjectReference Include="..\DotBased\DotBased.ASP.Auth\DotBased.ASP.Auth.csproj" />
<ProjectReference Include="..\DotBased\DotBased.Logging.Serilog\DotBased.Logging.Serilog.csproj" />
<ProjectReference Include="..\DotBased\DotBased\DotBased.csproj" />
<ProjectReference Include="..\SharpRSS.Core\SharpRSS.Core.csproj" />
@ -36,4 +37,8 @@
<PackageReference Include="Serilog.Sinks.File" Version="5.0.0" />
</ItemGroup>
<ItemGroup>
<Folder Include="Auth\" />
</ItemGroup>
</Project>

2
SharpRSS.Data/Domains/Configuration/HstsConfiguration.cs
View File

@ -5,7 +5,7 @@ public class HstsConfiguration
public const string Hsts = "HSTS";
public bool EnableHsts { get; set; }
public long MaxAgeSeconds { get; set; }
public double MaxAgeSeconds { get; set; }
public bool IncludeSubdomains { get; set; }
public bool Preload { get; set; }
}

7
SharpRSS.sln
View File

@ -17,6 +17,8 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DotBased", "DotBased\DotBas
EndProject
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DotBased.Logging.Serilog", "DotBased\DotBased.Logging.Serilog\DotBased.Logging.Serilog.csproj", "{49F07625-B92C-439B-AC3E-7DEB26EA15D4}"
EndProject
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DotBased.ASP.Auth", "DotBased\DotBased.ASP.Auth\DotBased.ASP.Auth.csproj", "{18CEAA37-B46A-4543-9E7B-5BF12CFF9172}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
@ -47,6 +49,10 @@ Global
{49F07625-B92C-439B-AC3E-7DEB26EA15D4}.Debug|Any CPU.Build.0 = Debug|Any CPU
{49F07625-B92C-439B-AC3E-7DEB26EA15D4}.Release|Any CPU.ActiveCfg = Release|Any CPU
{49F07625-B92C-439B-AC3E-7DEB26EA15D4}.Release|Any CPU.Build.0 = Release|Any CPU
{18CEAA37-B46A-4543-9E7B-5BF12CFF9172}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{18CEAA37-B46A-4543-9E7B-5BF12CFF9172}.Debug|Any CPU.Build.0 = Debug|Any CPU
{18CEAA37-B46A-4543-9E7B-5BF12CFF9172}.Release|Any CPU.ActiveCfg = Release|Any CPU
{18CEAA37-B46A-4543-9E7B-5BF12CFF9172}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
@ -57,5 +63,6 @@ Global
GlobalSection(NestedProjects) = preSolution
{F2BA5122-C9EE-4E65-B3EF-987D797AEAB0} = {A73E4832-235F-4032-825E-3A928199A5DF}
{49F07625-B92C-439B-AC3E-7DEB26EA15D4} = {A73E4832-235F-4032-825E-3A928199A5DF}
{18CEAA37-B46A-4543-9E7B-5BF12CFF9172} = {A73E4832-235F-4032-825E-3A928199A5DF}
EndGlobalSection
EndGlobal

2
git-cmd.md
View File

@ -12,7 +12,7 @@ git submodule update --init --recursive
## Submodule commit
cd <repository>
cd <repository-dir>
git add .