62 lines
2.4 KiB
C#
62 lines
2.4 KiB
C#
|
using FutureMailAPI.Services;
|
|||
|
|
using FutureMailAPI.Models;
|
|||
|
|
|
|||
|
|
namespace FutureMailAPI.Middleware
|
|||
|
|
{
|
|||
|
|
public class OAuthAuthenticationMiddleware
|
|||
|
|
{
|
|||
|
|
private readonly RequestDelegate _next;
|
|||
|
|
private readonly ILogger<OAuthAuthenticationMiddleware> _logger;
|
|||
|
|
|
|||
|
|
public OAuthAuthenticationMiddleware(RequestDelegate next, ILogger<OAuthAuthenticationMiddleware> logger)
|
|||
|
|
{
|
|||
|
|
_next = next;
|
|||
|
|
_logger = logger;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public async Task InvokeAsync(HttpContext context, IOAuthService oauthService)
|
|||
|
|
{
|
|||
|
|
// 检查是否需要OAuth认证
|
|||
|
|
var endpoint = context.GetEndpoint();
|
|||
|
|
if (endpoint != null)
|
|||
|
|
{
|
|||
|
|
// 如果端点标记为AllowAnonymous，则跳过认证
|
|||
|
|
var allowAnonymousAttribute = endpoint.Metadata.GetMetadata<Microsoft.AspNetCore.Authorization.AllowAnonymousAttribute>();
|
|||
|
|
if (allowAnonymousAttribute != null)
|
|||
|
|
{
|
|||
|
|
await _next(context);
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 检查Authorization头
|
|||
|
|
var authHeader = context.Request.Headers.Authorization.FirstOrDefault();
|
|||
|
|
if (authHeader != null && authHeader.StartsWith("Bearer "))
|
|||
|
|
{
|
|||
|
|
var token = authHeader.Substring("Bearer ".Length).Trim();
|
|||
|
|
|
|||
|
|
// 验证令牌
|
|||
|
|
var validationResult = await oauthService.ValidateTokenAsync(token);
|
|||
|
|
if (validationResult.Success)
|
|||
|
|
{
|
|||
|
|
// 获取访问令牌信息
|
|||
|
|
var accessToken = await oauthService.GetAccessTokenAsync(token);
|
|||
|
|
if (accessToken != null)
|
|||
|
|
{
|
|||
|
|
// 将用户信息添加到HttpContext
|
|||
|
|
context.Items["UserId"] = accessToken.UserId;
|
|||
|
|
context.Items["UserEmail"] = accessToken.User.Email;
|
|||
|
|
context.Items["AccessToken"] = accessToken;
|
|||
|
|
|
|||
|
|
await _next(context);
|
|||
|
|
return;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 如果没有有效的令牌，返回401未授权
|
|||
|
|
context.Response.StatusCode = 401;
|
|||
|
|
await context.Response.WriteAsync("未授权访问");
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|