Template
72 lines
2.6 KiB
C#
72 lines
2.6 KiB
C#
using Microsoft.AspNetCore.Identity;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using RT.Application.Services.Contract;
|
|
using RT.Domain.DTOs.Auth;
|
|
using RT.Domain.Entities;
|
|
using RT.Infrastructure.Data;
|
|
using RT.Infrastructure.Identity;
|
|
|
|
namespace RT.Application.Services.Implementation;
|
|
|
|
public class AuthService(
|
|
UserManager<ApplicationUser> userManager,
|
|
ITokenService tokenService,
|
|
AppDbContext db) : IAuthService
|
|
{
|
|
public async Task<LoginResponseDto> LoginAsync(LoginRequestDto dto, CancellationToken ct = default)
|
|
{
|
|
var user = await userManager.FindByEmailAsync(dto.Email)
|
|
?? throw new UnauthorizedAccessException("Invalid credentials.");
|
|
|
|
if (!await userManager.CheckPasswordAsync(user, dto.Password))
|
|
throw new UnauthorizedAccessException("Invalid credentials.");
|
|
|
|
return await BuildResponseAsync(user, ct);
|
|
}
|
|
|
|
public async Task<LoginResponseDto> RefreshAsync(RefreshRequestDto dto, CancellationToken ct = default)
|
|
{
|
|
var stored = await db.RefreshTokens.FirstOrDefaultAsync(r => r.Token == dto.RefreshToken, ct)
|
|
?? throw new UnauthorizedAccessException("Invalid refresh token.");
|
|
|
|
if (stored.IsRevoked)
|
|
throw new UnauthorizedAccessException("Refresh token revoked.");
|
|
|
|
if (stored.ExpiresAt < DateTime.UtcNow)
|
|
throw new UnauthorizedAccessException("Refresh token expired.");
|
|
|
|
stored.IsRevoked = true;
|
|
await db.SaveChangesAsync(ct);
|
|
|
|
var user = await userManager.FindByIdAsync(stored.UserId)
|
|
?? throw new UnauthorizedAccessException("User not found.");
|
|
|
|
return await BuildResponseAsync(user, ct);
|
|
}
|
|
|
|
public async Task RevokeAsync(RefreshRequestDto dto, CancellationToken ct = default)
|
|
{
|
|
var stored = await db.RefreshTokens.FirstOrDefaultAsync(r => r.Token == dto.RefreshToken, ct);
|
|
if (stored is null || stored.IsRevoked) return;
|
|
|
|
stored.IsRevoked = true;
|
|
await db.SaveChangesAsync(ct);
|
|
}
|
|
|
|
private async Task<LoginResponseDto> BuildResponseAsync(ApplicationUser user, CancellationToken ct)
|
|
{
|
|
var (token, expiresAt) = tokenService.GenerateToken(user.Id, user.Email!, user.UserName!);
|
|
var (refreshToken, refreshExpiresAt) = tokenService.GenerateRefreshToken();
|
|
|
|
db.RefreshTokens.Add(new RefreshToken
|
|
{
|
|
UserId = user.Id,
|
|
Token = refreshToken,
|
|
ExpiresAt = refreshExpiresAt,
|
|
});
|
|
await db.SaveChangesAsync(ct);
|
|
|
|
return new LoginResponseDto(token, expiresAt, refreshToken, refreshExpiresAt, user.MustChangePassword);
|
|
}
|
|
}
|