84 lines
3.1 KiB
C#
84 lines
3.1 KiB
C#
using System.Security.Claims;
|
|
using LctMonolith.Domain.Entities;
|
|
using LctMonolith.Services;
|
|
using LctMonolith.Services.Models;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Identity;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
namespace LctMonolith.Controllers;
|
|
|
|
/// <summary>
|
|
/// Authentication endpoints (mocked local identity + JWT issuing).
|
|
/// </summary>
|
|
[ApiController]
|
|
[Route("api/auth")]
|
|
public class AuthController : ControllerBase
|
|
{
|
|
private readonly UserManager<AppUser> _userManager;
|
|
private readonly SignInManager<AppUser> _signInManager;
|
|
private readonly ITokenService _tokenService;
|
|
|
|
public AuthController(UserManager<AppUser> userManager, SignInManager<AppUser> signInManager, ITokenService tokenService)
|
|
{
|
|
_userManager = userManager;
|
|
_signInManager = signInManager;
|
|
_tokenService = tokenService;
|
|
}
|
|
|
|
/// <summary>Registers a new user (simplified).</summary>
|
|
[HttpPost("register")]
|
|
[AllowAnonymous]
|
|
public async Task<ActionResult<TokenPair>> Register(AuthRequest req, CancellationToken ct)
|
|
{
|
|
var existing = await _userManager.FindByEmailAsync(req.Email);
|
|
if (existing != null) return Conflict("Email already registered");
|
|
var user = new AppUser { UserName = req.Email, Email = req.Email, FirstName = req.FirstName, LastName = req.LastName };
|
|
var result = await _userManager.CreateAsync(user, req.Password);
|
|
if (!result.Succeeded) return BadRequest(result.Errors);
|
|
var tokens = await _tokenService.IssueAsync(user, ct);
|
|
return Ok(tokens);
|
|
}
|
|
|
|
/// <summary>Login with email + password.</summary>
|
|
[HttpPost("login")]
|
|
[AllowAnonymous]
|
|
public async Task<ActionResult<TokenPair>> Login(AuthRequest req, CancellationToken ct)
|
|
{
|
|
var user = await _userManager.FindByEmailAsync(req.Email);
|
|
if (user == null) return Unauthorized();
|
|
var passOk = await _signInManager.CheckPasswordSignInAsync(user, req.Password, lockoutOnFailure: false);
|
|
if (!passOk.Succeeded) return Unauthorized();
|
|
var tokens = await _tokenService.IssueAsync(user, ct);
|
|
return Ok(tokens);
|
|
}
|
|
|
|
/// <summary>Refresh access token by refresh token.</summary>
|
|
[HttpPost("refresh")]
|
|
[AllowAnonymous]
|
|
public async Task<ActionResult<TokenPair>> Refresh(RefreshRequest req, CancellationToken ct)
|
|
{
|
|
var pair = await _tokenService.RefreshAsync(req.RefreshToken, ct);
|
|
return Ok(pair);
|
|
}
|
|
|
|
/// <summary>Revoke refresh token (logout).</summary>
|
|
[HttpPost("revoke")]
|
|
[Authorize]
|
|
public async Task<IActionResult> Revoke(RevokeRequest req, CancellationToken ct)
|
|
{
|
|
await _tokenService.RevokeAsync(req.RefreshToken, ct);
|
|
return NoContent();
|
|
}
|
|
|
|
/// <summary>Returns current user id (debug).</summary>
|
|
[HttpGet("me")]
|
|
[Authorize]
|
|
public ActionResult<object> Me()
|
|
{
|
|
var id = User.FindFirstValue(ClaimTypes.NameIdentifier) ?? User.FindFirstValue(ClaimTypes.NameIdentifier) ?? User.FindFirstValue(ClaimTypes.Name);
|
|
return Ok(new { userId = id });
|
|
}
|
|
}
|
|
|