Files
event-sourcing-jambo/source/Auth/Jambo.Auth.UI/Controllers/AccountController.cs
Ivan Paulovich fc74b10766 Spliting projects
2017-12-21 15:59:03 -02:00

64 lines
1.9 KiB
C#

namespace Jambo.Auth.UI
{
using System;
using System.Collections.Generic;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Authorization;
using System.IdentityModel.Tokens.Jwt;
using Microsoft.IdentityModel.Tokens;
using System.Security.Claims;
using System.Text;
using Jambo.Auth.Application.Commands;
[Route("api/[controller]")]
public class AccountController : Controller
{
private readonly Config config;
public AccountController(Config config)
{
this.config = config;
}
[AllowAnonymous]
[HttpPost]
public IActionResult Token([FromBody] LoginCommand loginCommand)
{
//
// TODO: Implementar uma verificação
// se loginCommand.Username e loginCommand.Password são válidos.
//
var token = GetJwtSecurityToken(loginCommand);
return Ok(new
{
token = new JwtSecurityTokenHandler().WriteToken(token),
expiration = token.ValidTo
});
}
private JwtSecurityToken GetJwtSecurityToken(LoginCommand user)
{
return new JwtSecurityToken(
config.Issuer,
config.Issuer,
GetTokenClaims(user),
expires: DateTime.UtcNow.AddDays(7),
signingCredentials: new SigningCredentials(
new SymmetricSecurityKey(Encoding.UTF8.GetBytes(config.SecretKey)),
SecurityAlgorithms.HmacSha256)
);
}
private static IEnumerable<Claim> GetTokenClaims(LoginCommand user)
{
return new List<Claim>
{
new Claim(JwtRegisteredClaimNames.Jti, user.Username),
new Claim(JwtRegisteredClaimNames.Sub, user.Password),
};
}
}
}