| | | 1 | | using Kestrun.Hosting; |
| | | 2 | | using Microsoft.AspNetCore.Authentication.Cookies; |
| | | 3 | | |
| | | 4 | | namespace Kestrun.Authentication; |
| | | 5 | | |
| | | 6 | | /// <summary> |
| | | 7 | | /// Options for cookie-based authentication. |
| | | 8 | | /// </summary> |
| | | 9 | | public class CookieAuthOptions : CookieAuthenticationOptions, IOpenApiAuthenticationOptions, IAuthenticationHostOptions |
| | | 10 | | { |
| | | 11 | | /// <summary> |
| | | 12 | | /// If true, allows cookie authentication over insecure HTTP connections. |
| | | 13 | | /// </summary> |
| | 0 | 14 | | public bool AllowInsecureHttp { get; set; } |
| | | 15 | | |
| | | 16 | | /// <inheritdoc/> |
| | 6 | 17 | | public string? DisplayName { get; set; } |
| | | 18 | | |
| | | 19 | | /// <inheritdoc/> |
| | 8 | 20 | | public bool GlobalScheme { get; set; } |
| | | 21 | | |
| | | 22 | | /// <inheritdoc/> |
| | 8 | 23 | | public string? Description { get; set; } |
| | | 24 | | |
| | | 25 | | /// <inheritdoc/> |
| | 65 | 26 | | public string[] DocumentationId { get; set; } = []; |
| | | 27 | | |
| | | 28 | | /// <inheritdoc/> |
| | 10 | 29 | | public KestrunHost Host { get; set; } = default!; |
| | | 30 | | |
| | | 31 | | /// <inheritdoc/> |
| | 8 | 32 | | public bool Deprecated { get; set; } |
| | | 33 | | |
| | | 34 | | private Serilog.ILogger? _logger; |
| | | 35 | | /// <inheritdoc/> |
| | | 36 | | public Serilog.ILogger Logger |
| | | 37 | | { |
| | 3 | 38 | | get => _logger ?? (Host is null ? Serilog.Log.Logger : Host.Logger); set => _logger = value; |
| | | 39 | | } |
| | | 40 | | |
| | | 41 | | /// <summary> |
| | | 42 | | /// Helper to copy values from a user-supplied CookieAuthenticationOptions instance to the instance |
| | | 43 | | /// created by the framework inside AddCookie(). Reassigning the local variable (opts = source) would |
| | | 44 | | /// not work because only the local reference changes – the framework keeps the original instance. |
| | | 45 | | /// </summary> |
| | | 46 | | /// <param name="target">The target options to copy to.</param> |
| | | 47 | | /// <exception cref="ArgumentNullException">Thrown when source or target is null.</exception> |
| | | 48 | | /// <remarks> |
| | | 49 | | /// Only copies primitive properties and references. Does not clone complex objects like CookieBuilder. |
| | | 50 | | /// </remarks> |
| | | 51 | | public void ApplyTo(CookieAuthOptions target) |
| | | 52 | | { |
| | 2 | 53 | | ApplyTo((CookieAuthenticationOptions)target); |
| | 2 | 54 | | target.GlobalScheme = GlobalScheme; |
| | 2 | 55 | | target.Description = Description; |
| | 2 | 56 | | target.DocumentationId = DocumentationId; |
| | 2 | 57 | | target.DisplayName = DisplayName; |
| | 2 | 58 | | target.Host = Host; |
| | 2 | 59 | | target.Deprecated = Deprecated; |
| | 2 | 60 | | } |
| | | 61 | | |
| | | 62 | | /// <summary> |
| | | 63 | | /// Helper to copy values from this CookieAuthOptions instance to a target CookieAuthenticationOptions instance. |
| | | 64 | | /// </summary> |
| | | 65 | | /// <param name="target">The target CookieAuthenticationOptions instance to copy values to.</param> |
| | | 66 | | public void ApplyTo(CookieAuthenticationOptions target) |
| | | 67 | | { |
| | | 68 | | // Paths & return URL |
| | 4 | 69 | | target.LoginPath = LoginPath; |
| | 4 | 70 | | target.LogoutPath = LogoutPath; |
| | 4 | 71 | | target.AccessDeniedPath = AccessDeniedPath; |
| | 4 | 72 | | target.ReturnUrlParameter = ReturnUrlParameter; |
| | | 73 | | |
| | | 74 | | // Expiration & sliding behavior |
| | 4 | 75 | | target.ExpireTimeSpan = ExpireTimeSpan; |
| | 4 | 76 | | target.SlidingExpiration = SlidingExpiration; |
| | | 77 | | |
| | | 78 | | // Cookie builder settings |
| | | 79 | | // (Cookie is always non-null; copy primitive settings) |
| | 4 | 80 | | if (Cookie.Name is not null) |
| | | 81 | | { |
| | 3 | 82 | | target.Cookie.Name = Cookie.Name; |
| | 3 | 83 | | target.Cookie.Path = Cookie.Path; |
| | 3 | 84 | | target.Cookie.Domain = Cookie.Domain; |
| | 3 | 85 | | target.Cookie.HttpOnly = Cookie.HttpOnly; |
| | 3 | 86 | | target.Cookie.SameSite = Cookie.SameSite; |
| | 3 | 87 | | target.Cookie.SecurePolicy = Cookie.SecurePolicy; |
| | 3 | 88 | | target.Cookie.IsEssential = Cookie.IsEssential; |
| | 3 | 89 | | target.Cookie.MaxAge = Cookie.MaxAge; |
| | | 90 | | } |
| | | 91 | | // Forwarding |
| | 4 | 92 | | target.ForwardAuthenticate = ForwardAuthenticate; |
| | 4 | 93 | | target.ForwardChallenge = ForwardChallenge; |
| | 4 | 94 | | target.ForwardDefault = ForwardDefault; |
| | 4 | 95 | | target.ForwardDefaultSelector = ForwardDefaultSelector; |
| | 4 | 96 | | target.ForwardForbid = ForwardForbid; |
| | 4 | 97 | | target.ForwardSignIn = ForwardSignIn; |
| | 4 | 98 | | target.ForwardSignOut = ForwardSignOut; |
| | | 99 | | |
| | | 100 | | // Data protection / ticket / session |
| | 4 | 101 | | target.TicketDataFormat = TicketDataFormat; |
| | 4 | 102 | | target.DataProtectionProvider = DataProtectionProvider; |
| | 4 | 103 | | target.SessionStore = SessionStore; |
| | | 104 | | |
| | | 105 | | // Events & issuer |
| | 4 | 106 | | if (Events is not null) |
| | | 107 | | { |
| | 4 | 108 | | target.Events = Events; |
| | | 109 | | } |
| | 4 | 110 | | target.EventsType = EventsType; |
| | 4 | 111 | | target.ClaimsIssuer = ClaimsIssuer; |
| | 4 | 112 | | } |
| | | 113 | | } |