| | | 1 | | using Elsa.Abstractions; |
| | | 2 | | using Elsa.Common.Multitenancy; |
| | | 3 | | using Elsa.ExternalAuthentication.Constants; |
| | | 4 | | using Elsa.ExternalAuthentication.Models; |
| | | 5 | | using Elsa.ExternalAuthentication.Services; |
| | | 6 | | using Microsoft.AspNetCore.Builder; |
| | | 7 | | |
| | | 8 | | namespace Elsa.ExternalAuthentication.Endpoints.Broker; |
| | | 9 | | |
| | | 10 | | internal sealed class InitiateLocal(IExternalAuthenticationBroker broker, ITenantAccessor tenantAccessor) : ElsaEndpoint |
| | | 11 | | { |
| | | 12 | | public override void Configure() |
| | | 13 | | { |
| | | 14 | | Post("/external-authentication/local/authorize"); |
| | | 15 | | AllowAnonymous(); |
| | | 16 | | Options(x => x.RequireRateLimiting(ExternalAuthenticationRateLimitPolicyNames.LocalInitiation)); |
| | | 17 | | } |
| | | 18 | | |
| | | 19 | | public override async Task HandleAsync(InitiateLocalRequest request, CancellationToken cancellationToken) |
| | | 20 | | { |
| | | 21 | | if (!Uri.TryCreate(request.RedirectUri, UriKind.Absolute, out var redirectUri)) |
| | | 22 | | { |
| | | 23 | | await BrokerEndpointSupport.SendErrorAsync(Send, BrokerErrorFactory.Create(BrokerErrorCategory.InvalidReques |
| | | 24 | | return; |
| | | 25 | | } |
| | | 26 | | |
| | | 27 | | var result = await broker.InitiateLocalAsync(new( |
| | | 28 | | request.ClientId ?? string.Empty, redirectUri, request.ResponseType ?? string.Empty, request.CodeChallenge ? |
| | | 29 | | request.CodeChallengeMethod ?? string.Empty, request.ReturnPath ?? string.Empty, request.Username ?? string. |
| | | 30 | | request.Password ?? string.Empty, request.State), tenantAccessor.TenantId, cancellationToken); |
| | | 31 | | if (result.Error is { } error) |
| | | 32 | | { |
| | | 33 | | await BrokerEndpointSupport.SendErrorAsync(Send, error, cancellationToken); |
| | | 34 | | return; |
| | | 35 | | } |
| | | 36 | | |
| | | 37 | | await Send.OkAsync(new InitiateLocalResponse(result.RedirectUri!.ToString()), cancellationToken); |
| | | 38 | | } |
| | | 39 | | } |
| | | 40 | | |
| | | 41 | | internal sealed class InitiateLocalRequest |
| | | 42 | | { |
| | | 43 | | public string? ClientId { get; set; } |
| | | 44 | | public string? RedirectUri { get; set; } |
| | | 45 | | public string? ResponseType { get; set; } |
| | | 46 | | public string? CodeChallenge { get; set; } |
| | | 47 | | public string? CodeChallengeMethod { get; set; } |
| | | 48 | | public string? ReturnPath { get; set; } |
| | | 49 | | public string? State { get; set; } |
| | | 50 | | public string? Username { get; set; } |
| | | 51 | | public string? Password { get; set; } |
| | | 52 | | } |
| | | 53 | | |
| | 2 | 54 | | internal sealed record InitiateLocalResponse(string RedirectUri); |