HexaEightMiddleware 1.6.13

HexaEight Middleware

How To Use This Library

Sample Middleware Code (Startup and Configuration Section)

public void ConfigureServices(IServiceCollection services)
{
	
	services.Add(new ServiceDescriptor(typeof(HexaEightResource), new HexaEightResource("<client id>", "<token server url>")));
	services.AddSingleton<IAuthenticationService, AuthenticationMiddleware>();
	
	services.AddAuthentication();
	services.AddAuthorization();
        services.AddCors();
	services.AddControllers();
	
}


public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
	if (env.IsDevelopment())
	{
		app.UseDeveloperExceptionPage();
	}

	app.UseCors(x => x
		.AllowAnyMethod()
		.AllowAnyHeader()
		.SetIsOriginAllowed(origin => true)
		.AllowCredentials());

	app.UseMiddleware<HexaEightEngine.Middleware>();
	app.UseRouting();
	app.Use(async (context, next) =>
	{
		await next();

		if (context.Response.StatusCode == (int)HttpStatusCode.Unauthorized)
		{
			context.Response.StatusCode = (int)HttpStatusCode.OK;
			await context.Response.Body.WriteAsync(Encoding.UTF8.GetBytes("UnAuthorized - Access Denied"));
                }

	});

	app.UseAuthentication();
	app.UseAuthorization();

	app.UseEndpoints(endpoints =>
	{
		endpoints.MapControllers();
	});
}

Sample Weather Controller Code with Authorization for Get and Post

[HttpGet("{resource}")]
[Authorize(AuthenticationSchemes = "Bearer")]
public IEnumerable<WeatherForecast> Get(string resource)
{
	var rng = new Random();
	return Enumerable.Range(1, 5).Select(index => new WeatherForecast
	{
		Date = DateTime.Now.AddDays(index),
		TemperatureC = rng.Next(-20, 55),
		Summary = resource + " "  + HttpContext.User.Identity.Name.ToString()  +  " : " + Summaries[rng.Next(Summaries.Length)]
	})
	.ToArray();
}

[HttpPost("{resource}")]
[Authorize(AuthenticationSchemes = "Bearer")]
public async Task<IEnumerable<WeatherForecast>> Post(string resource)
{

	string body = "";
	using (StreamReader stream = new StreamReader(HttpContext.Request.Body))
	{
		body = await stream.ReadToEndAsync();
	}

	Console.WriteLine(body);

	var rng = new Random();
	return Enumerable.Range(1, 5).Select(index => new WeatherForecast
	{
		Date = DateTime.Now.AddDays(index),
		TemperatureC = rng.Next(-20, 55),
		Summary = resource + " :: " + HttpContext.User.Identity.Name.ToString() + " : " + Summaries[rng.Next(Summaries.Length)]
		})
		.ToArray();
	}

}

Sample Authentication Middleware Code For Additional Authorization

public class AuthenticationMiddleware : IAuthenticationService
{

	// context.user.Identity contains all information about the authenticated user
	// Resource Servers can perform additional authorization at this layer for advanced authorization scenarios

	public Task<AuthenticateResult> AuthenticateAsync(HttpContext context, string scheme)
        {
            try
            {

                if (context.User.Identity.IsAuthenticated && context.User.Identity.AuthenticationType == "HexaEight Identity")
                {
		 
                    Console.WriteLine(context.User.Claims.FirstOrDefault(c => c.Type == "Sender").Value);
                    AuthenticationTicket at = new AuthenticationTicket(context.User, "HexaEight");

                    return Task.FromResult(AuthenticateResult.Success(at));
                }
                return Task.FromResult(AuthenticateResult.Fail("UnAuthorized"));
            }
            catch
            {
                return Task.FromResult(AuthenticateResult.Fail("UnAuthorized"));
            }


        }

        public Task ChallengeAsync(HttpContext context, string scheme, AuthenticationProperties properties)
        {
            context.Response.StatusCode = (int)HttpStatusCode.Unauthorized;
            return Task.CompletedTask;
        }

        public Task ForbidAsync(HttpContext context, string scheme, AuthenticationProperties properties)
        {
            throw new NotImplementedException();
        }

        public Task SignInAsync(HttpContext context, string scheme, ClaimsPrincipal principal, AuthenticationProperties properties)
        {

            Console.WriteLine(context.User.Identity.Name);
            Console.WriteLine(principal.Identity.Name);
            return Task.CompletedTask;
        }

        public Task SignOutAsync(HttpContext context, string scheme, AuthenticationProperties properties)
        {
            throw new NotImplementedException();
	}
}