| | | 1 | | using Elsa.Abstractions; |
| | | 2 | | using Elsa.Common.Multitenancy; |
| | | 3 | | using Elsa.ExternalAuthentication.Constants; |
| | | 4 | | using Elsa.ExternalAuthentication.Models; |
| | | 5 | | using Elsa.ExternalAuthentication.Services; |
| | | 6 | | using FastEndpoints; |
| | | 7 | | using Microsoft.AspNetCore.Builder; |
| | | 8 | | using Microsoft.AspNetCore.RateLimiting; |
| | | 9 | | |
| | | 10 | | namespace Elsa.ExternalAuthentication.Endpoints.Broker; |
| | | 11 | | |
| | 7 | 12 | | internal sealed class InitiateExternal(IExternalAuthenticationBroker broker, ITenantAccessor tenantAccessor) : ElsaEndpo |
| | | 13 | | { |
| | | 14 | | public override void Configure() |
| | | 15 | | { |
| | 6 | 16 | | Get("/external-authentication/authorize/{connectionKey}"); |
| | 6 | 17 | | AllowAnonymous(); |
| | 12 | 18 | | Options(x => x.RequireRateLimiting(ExternalAuthenticationRateLimitPolicyNames.ExternalInitiation)); |
| | 6 | 19 | | } |
| | | 20 | | |
| | | 21 | | public override async Task HandleAsync(InitiateExternalRequest request, CancellationToken cancellationToken) |
| | | 22 | | { |
| | 1 | 23 | | var clientId = Query<string>("client_id", false) ?? request.ClientId; |
| | 1 | 24 | | var redirectUriValue = Query<string>("redirect_uri", false) ?? request.RedirectUri; |
| | 1 | 25 | | var responseType = Query<string>("response_type", false) ?? request.ResponseType; |
| | 1 | 26 | | var codeChallenge = Query<string>("code_challenge", false) ?? request.CodeChallenge; |
| | 1 | 27 | | var codeChallengeMethod = Query<string>("code_challenge_method", false) ?? request.CodeChallengeMethod; |
| | 1 | 28 | | var returnPath = Query<string>("return_path", false) ?? request.ReturnPath; |
| | 1 | 29 | | if (!Uri.TryCreate(redirectUriValue, UriKind.Absolute, out var redirectUri)) |
| | | 30 | | { |
| | 0 | 31 | | await BrokerEndpointSupport.SendErrorAsync(Send, BrokerErrorFactory.Create(BrokerErrorCategory.InvalidReques |
| | 0 | 32 | | return; |
| | | 33 | | } |
| | | 34 | | |
| | 1 | 35 | | var result = await broker.InitiateExternalAsync(new BrokerAuthorizationRequest( |
| | 1 | 36 | | clientId ?? string.Empty, redirectUri, responseType ?? string.Empty, codeChallenge ?? string.Empty, |
| | 1 | 37 | | codeChallengeMethod ?? string.Empty, returnPath ?? string.Empty, request.ConnectionKey ?? string.Empty, requ |
| | 1 | 38 | | if (result.Error is { } error) |
| | | 39 | | { |
| | 0 | 40 | | await BrokerEndpointSupport.SendErrorAsync(Send, error, cancellationToken); |
| | 0 | 41 | | return; |
| | | 42 | | } |
| | | 43 | | |
| | 1 | 44 | | await Send.RedirectAsync(result.NavigationUri!.ToString(), false, true); |
| | 1 | 45 | | } |
| | | 46 | | } |
| | | 47 | | |
| | | 48 | | internal sealed class InitiateExternalRequest |
| | | 49 | | { |
| | | 50 | | public string? ConnectionKey { get; set; } |
| | | 51 | | public string? ClientId { get; set; } |
| | | 52 | | public string? RedirectUri { get; set; } |
| | | 53 | | public string? ResponseType { get; set; } |
| | | 54 | | public string? CodeChallenge { get; set; } |
| | | 55 | | public string? CodeChallengeMethod { get; set; } |
| | | 56 | | public string? ReturnPath { get; set; } |
| | | 57 | | public string? State { get; set; } |
| | | 58 | | } |