44 lines
1.7 KiB
C#
44 lines
1.7 KiB
C#
|
using Avalonia_EFCore.Models;
|
||
|
|
using Microsoft.Extensions.Options;
|
||
|
|
using Microsoft.IdentityModel.Tokens;
|
||
|
|
using System.IdentityModel.Tokens.Jwt;
|
||
|
|
using System.Security.Claims;
|
||
|
|
using System.Text;
|
||
|
|
|
||
|
|
namespace Avalonia_API.Authentication
|
||
|
|
{
|
||
|
|
public sealed class JwtTokenService(IOptions<JwtOptions> options)
|
||
|
|
{
|
||
|
|
private readonly JwtOptions _options = options.Value;
|
||
|
|
|
||
|
|
public (string Token, DateTime ExpiresAt) CreateAccessToken(UserEntity user, IReadOnlyCollection<string> roles)
|
||
|
|
{
|
||
|
|
var expiresAt = DateTime.UtcNow.AddMinutes(_options.AccessTokenMinutes);
|
||
|
|
var claims = new List<Claim>
|
||
|
|
{
|
||
|
|
new(JwtRegisteredClaimNames.Sub, user.Id.ToString()),
|
||
|
|
new(ClaimTypes.NameIdentifier, user.Id.ToString()),
|
||
|
|
new(ClaimTypes.Name, user.Name ?? user.Email ?? $"user-{user.Id}"),
|
||
|
|
new("auth_type", "api-jwt"),
|
||
|
|
};
|
||
|
|
|
||
|
|
foreach (var role in roles.Where(role => !string.IsNullOrWhiteSpace(role)).Distinct(StringComparer.OrdinalIgnoreCase))
|
||
|
|
{
|
||
|
|
claims.Add(new Claim(ClaimTypes.Role, role));
|
||
|
|
}
|
||
|
|
|
||
|
|
var signingKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(_options.SigningKey));
|
||
|
|
var credentials = new SigningCredentials(signingKey, SecurityAlgorithms.HmacSha256);
|
||
|
|
var jwt = new JwtSecurityToken(
|
||
|
|
issuer: _options.Issuer,
|
||
|
|
audience: _options.Audience,
|
||
|
|
claims: claims,
|
||
|
|
notBefore: DateTime.UtcNow,
|
||
|
|
expires: expiresAt,
|
||
|
|
signingCredentials: credentials);
|
||
|
|
|
||
|
|
return (new JwtSecurityTokenHandler().WriteToken(jwt), expiresAt);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|