82 lines
2.5 KiB
C#
82 lines
2.5 KiB
C#
namespace Yes.Infrastructure.Authorizations
|
||
{
|
||
public class AuthenticationHandler : IAuthenticationHandler
|
||
{
|
||
|
||
private Microsoft.AspNetCore.Authentication.AuthenticationScheme _scheme;
|
||
private HttpContext _context;
|
||
private readonly IJwtProvider _jwtProvider;
|
||
|
||
public AuthenticationHandler(IJwtProvider jwtProvider)
|
||
{
|
||
_jwtProvider = jwtProvider;
|
||
}
|
||
|
||
public Task InitializeAsync(Microsoft.AspNetCore.Authentication.AuthenticationScheme scheme, HttpContext context)
|
||
{
|
||
_scheme = scheme;
|
||
_context = context;
|
||
return Task.CompletedTask;
|
||
}
|
||
|
||
|
||
/// <summary>
|
||
/// 鉴权验证
|
||
/// </summary>
|
||
/// <returns></returns>
|
||
public async Task<AuthenticateResult> AuthenticateAsync()
|
||
{
|
||
string token = _context.Request.Headers.Authorization.ToString();
|
||
if (token.StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase))
|
||
{
|
||
token = token.Substring("Bearer ".Length).Trim();
|
||
}
|
||
|
||
if (string.IsNullOrEmpty(token))
|
||
{
|
||
return await Task.FromResult(AuthenticateResult.Fail("token错误，请重新登录！"));
|
||
}
|
||
|
||
var claimsIdentity = await _jwtProvider.ReadToken(token);
|
||
|
||
if (claimsIdentity == null)//验证token是否正确
|
||
{
|
||
return await Task.FromResult(AuthenticateResult.Fail("token错误，请重新登录！"));
|
||
}
|
||
|
||
var schemeName = _scheme.Name;
|
||
|
||
//鉴权成功，写入用户信息
|
||
return await Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(claimsIdentity, _scheme.Name)));
|
||
}
|
||
|
||
/// <summary>
|
||
/// 未登录
|
||
/// </summary>
|
||
/// <param name="properties"></param>
|
||
/// <returns></returns>
|
||
/// <exception cref="NotImplementedException"></exception>
|
||
public Task ChallengeAsync(AuthenticationProperties? properties)
|
||
{
|
||
_context.Response.StatusCode = 401;
|
||
return Task.CompletedTask;
|
||
}
|
||
|
||
|
||
|
||
|
||
/// <summary>
|
||
/// 没有权限访问
|
||
/// </summary>
|
||
/// <param name="properties"></param>
|
||
/// <returns></returns>
|
||
public Task ForbidAsync(AuthenticationProperties? properties)
|
||
{
|
||
_context.Response.StatusCode = 403;
|
||
return Task.CompletedTask;
|
||
|
||
}
|
||
|
||
}
|
||
}
|