| | | 1 | | using Elsa.Abstractions; |
| | | 2 | | using Elsa.Common.Multitenancy; |
| | | 3 | | using Elsa.ExternalAuthentication.Constants; |
| | | 4 | | using Elsa.ExternalAuthentication.Models; |
| | | 5 | | using Elsa.ExternalAuthentication.Services; |
| | | 6 | | using Microsoft.AspNetCore.Builder; |
| | | 7 | | |
| | | 8 | | namespace Elsa.ExternalAuthentication.Endpoints.Broker; |
| | | 9 | | |
| | | 10 | | internal sealed class DiscoverLoginMethods(IExternalAuthenticationBroker broker, ITenantAccessor tenantAccessor) : ElsaE |
| | | 11 | | { |
| | | 12 | | public override void Configure() |
| | | 13 | | { |
| | | 14 | | Get("/external-authentication/login-methods"); |
| | | 15 | | AllowAnonymous(); |
| | | 16 | | Options(x => x.RequireRateLimiting(ExternalAuthenticationRateLimitPolicyNames.Discovery)); |
| | | 17 | | } |
| | | 18 | | |
| | | 19 | | public override async Task<DiscoverLoginMethodsResponse> ExecuteAsync(CancellationToken cancellationToken) |
| | | 20 | | { |
| | | 21 | | var clientId = Query<string>("clientId", true) ?? Query<string>("client_id", true) ?? string.Empty; |
| | | 22 | | try |
| | | 23 | | { |
| | | 24 | | var methods = await broker.DiscoverAsync(tenantAccessor.TenantId, clientId, cancellationToken); |
| | | 25 | | HttpContext.Response.Headers.CacheControl = "no-store"; |
| | | 26 | | return new(methods, methods.SingleOrDefault(x => x.IsPreferred)?.Key); |
| | | 27 | | } |
| | | 28 | | catch (InvalidOperationException) |
| | | 29 | | { |
| | | 30 | | HttpContext.Response.StatusCode = 400; |
| | | 31 | | return new([], null); |
| | | 32 | | } |
| | | 33 | | } |
| | | 34 | | } |
| | | 35 | | |
| | | 36 | | /// <summary>The preferred method is visual metadata only; clients must always render an explicit chooser.</summary> |
| | 3 | 37 | | internal sealed record DiscoverLoginMethodsResponse(IReadOnlyCollection<LoginMethod> Methods, string? PreferredMethodKey |