88 lines
3.4 KiB
C#
88 lines
3.4 KiB
C#
using System.Security.Claims;
|
|
using System.Text;
|
|
using System.Text.Encodings.Web;
|
|
using Microsoft.AspNetCore.Authentication;
|
|
using Microsoft.Extensions.Options;
|
|
using Newtonsoft.Json;
|
|
using SVSim.Database.Enums;
|
|
using SVSim.Database.Models;
|
|
using SVSim.Database.Repositories.Viewer;
|
|
using SVSim.EmulatedEntrypoint.Constants;
|
|
using SVSim.EmulatedEntrypoint.Extensions;
|
|
using SVSim.EmulatedEntrypoint.Models.Dtos.Requests;
|
|
using SVSim.EmulatedEntrypoint.Services;
|
|
|
|
namespace SVSim.EmulatedEntrypoint.Security.SteamSessionAuthentication;
|
|
|
|
public class SteamSessionAuthenticationHandler : AuthenticationHandler<SteamAuthenticationHandlerOptions>
|
|
{
|
|
private readonly SteamSessionService _sessionService;
|
|
private readonly IViewerRepository _viewerRepository;
|
|
public SteamSessionAuthenticationHandler(IOptionsMonitor<SteamAuthenticationHandlerOptions> options, ILoggerFactory logger, UrlEncoder encoder, SteamSessionService sessionService, IViewerRepository viewerRepository) : base(options, logger, encoder)
|
|
{
|
|
_sessionService = sessionService;
|
|
_viewerRepository = viewerRepository;
|
|
}
|
|
|
|
protected async override Task<AuthenticateResult> HandleAuthenticateAsync()
|
|
{
|
|
byte[] requestBytes;
|
|
try
|
|
{
|
|
using (var requestBytesStream = new MemoryStream())
|
|
{
|
|
// Reset request stream
|
|
Request.Body.Seek(0, SeekOrigin.Begin);
|
|
|
|
await Request.Body.CopyToAsync(requestBytesStream);
|
|
requestBytes = requestBytesStream.ToArray();
|
|
|
|
// Reset request stream
|
|
Request.Body.Seek(0, SeekOrigin.Begin);
|
|
}
|
|
}
|
|
catch (Exception e)
|
|
{
|
|
return AuthenticateResult.Fail("Failed to read request body.");
|
|
}
|
|
|
|
// Convert bytes to json
|
|
string requestString = Encoding.UTF8.GetString(requestBytes);
|
|
BaseRequest? requestJson = JsonConvert.DeserializeObject<BaseRequest>(requestString);
|
|
|
|
if (requestJson is null)
|
|
{
|
|
return AuthenticateResult.Fail("Invalid request body.");
|
|
}
|
|
|
|
// Check steam session validity
|
|
bool sessionIsValid = _sessionService.IsTicketValidForUser(requestJson.SteamSessionTicket, requestJson.SteamId);
|
|
if (!sessionIsValid)
|
|
{
|
|
return AuthenticateResult.Fail("Invalid ticket.");
|
|
}
|
|
|
|
Viewer? viewer =
|
|
await _viewerRepository.GetViewerBySocialConnection(SocialAccountType.Steam, requestJson.SteamId);
|
|
|
|
if (viewer is null)
|
|
{
|
|
return AuthenticateResult.Fail("User not found.");
|
|
}
|
|
|
|
// Add viewer to context
|
|
Context.SetViewer(viewer);
|
|
|
|
// Build identity
|
|
ClaimsIdentity identity = new ClaimsIdentity(SteamAuthenticationConstants.SchemeName);
|
|
identity.AddClaim(new Claim(ClaimTypes.Name, viewer.DisplayName));
|
|
identity.AddClaim(new Claim(ShadowverseClaimTypes.ShortUdidClaim, viewer.ShortUdid.ToString()));
|
|
identity.AddClaim(new Claim(ShadowverseClaimTypes.ViewerIdClaim, viewer.Id.ToString()));
|
|
identity.AddClaim(new Claim(SteamAuthenticationConstants.SteamIdClaim, requestJson.SteamId.ToString()));
|
|
|
|
// Build and return final ticket
|
|
AuthenticationTicket ticket =
|
|
new AuthenticationTicket(new ClaimsPrincipal(identity), SteamAuthenticationConstants.SchemeName);
|
|
return AuthenticateResult.Success(ticket);
|
|
}
|
|
} |