| | | 1 | | using Elsa.Abstractions; |
| | | 2 | | using Elsa.Common.Multitenancy; |
| | | 3 | | using Elsa.ExternalAuthentication.Constants; |
| | | 4 | | using Elsa.ExternalAuthentication.Models; |
| | | 5 | | using Elsa.ExternalAuthentication.Services; |
| | | 6 | | using Microsoft.AspNetCore.Builder; |
| | | 7 | | |
| | | 8 | | namespace Elsa.ExternalAuthentication.Endpoints.Broker; |
| | | 9 | | |
| | | 10 | | internal sealed class InitiateExternal(IExternalAuthenticationBroker broker, ITenantAccessor tenantAccessor) : ElsaEndpo |
| | | 11 | | { |
| | | 12 | | public override void Configure() |
| | | 13 | | { |
| | | 14 | | Get("/external-authentication/authorize/{connectionKey}"); |
| | | 15 | | AllowAnonymous(); |
| | | 16 | | Options(x => x.RequireRateLimiting(ExternalAuthenticationRateLimitPolicyNames.ExternalInitiation)); |
| | | 17 | | } |
| | | 18 | | |
| | | 19 | | public override async Task HandleAsync(InitiateExternalRequest request, CancellationToken cancellationToken) |
| | | 20 | | { |
| | | 21 | | var clientId = Query<string>("client_id", false) ?? request.ClientId; |
| | | 22 | | var redirectUriValue = Query<string>("redirect_uri", false) ?? request.RedirectUri; |
| | | 23 | | var responseType = Query<string>("response_type", false) ?? request.ResponseType; |
| | | 24 | | var codeChallenge = Query<string>("code_challenge", false) ?? request.CodeChallenge; |
| | | 25 | | var codeChallengeMethod = Query<string>("code_challenge_method", false) ?? request.CodeChallengeMethod; |
| | | 26 | | var returnPath = Query<string>("return_path", false) ?? request.ReturnPath; |
| | | 27 | | if (!Uri.TryCreate(redirectUriValue, UriKind.Absolute, out var redirectUri)) |
| | | 28 | | { |
| | | 29 | | await BrokerEndpointSupport.SendErrorAsync(Send, BrokerErrorFactory.Create(BrokerErrorCategory.InvalidReques |
| | | 30 | | return; |
| | | 31 | | } |
| | | 32 | | |
| | | 33 | | var result = await broker.InitiateExternalAsync(new( |
| | | 34 | | clientId ?? string.Empty, redirectUri, responseType ?? string.Empty, codeChallenge ?? string.Empty, |
| | | 35 | | codeChallengeMethod ?? string.Empty, returnPath ?? string.Empty, request.ConnectionKey ?? string.Empty, requ |
| | | 36 | | if (result.Error is { } error) |
| | | 37 | | { |
| | | 38 | | await BrokerEndpointSupport.SendErrorAsync(Send, error, cancellationToken); |
| | | 39 | | return; |
| | | 40 | | } |
| | | 41 | | |
| | | 42 | | await Send.RedirectAsync(result.NavigationUri!.ToString(), false, true); |
| | | 43 | | } |
| | | 44 | | } |
| | | 45 | | |
| | | 46 | | internal sealed class InitiateExternalRequest |
| | | 47 | | { |
| | 2 | 48 | | public string? ConnectionKey { get; set; } |
| | 0 | 49 | | public string? ClientId { get; set; } |
| | 0 | 50 | | public string? RedirectUri { get; set; } |
| | 0 | 51 | | public string? ResponseType { get; set; } |
| | 0 | 52 | | public string? CodeChallenge { get; set; } |
| | 0 | 53 | | public string? CodeChallengeMethod { get; set; } |
| | 0 | 54 | | public string? ReturnPath { get; set; } |
| | 1 | 55 | | public string? State { get; set; } |
| | | 56 | | } |