mcmuzzle
0cde51e01c
All checks were successful
Generation data pour merge sur master / reviewProcess (pull_request) Successful in 1m21s
Generation data pour merge sur master / generateData (pull_request) Successful in 1m31s
Generation data pour merge sur master / generateData (push) Has been skipped
Generation data pour merge sur master / reviewProcess (push) Successful in 1m16s
51 lines
2.1 KiB
C#
51 lines
2.1 KiB
C#
using System.Security.Claims;
|
|
using Microsoft.AspNetCore.Components.Authorization;
|
|
using Microsoft.AspNetCore.Components.Server;
|
|
using Microsoft.AspNetCore.Identity;
|
|
using Microsoft.Extensions.Options;
|
|
using LudikZoneBlazor.Data;
|
|
|
|
namespace LudikZoneBlazor.Components.Account;
|
|
|
|
#pragma warning disable CA1812 // Elle est instanciée en Injection de dependance
|
|
|
|
// This is a server-side AuthenticationStateProvider that revalidates the security stamp for the connected user
|
|
// every 30 minutes an interactive circuit is connected.
|
|
internal sealed class IdentityRevalidatingAuthenticationStateProvider(
|
|
ILoggerFactory loggerFactory,
|
|
IServiceScopeFactory scopeFactory,
|
|
IOptions<IdentityOptions> options)
|
|
: RevalidatingServerAuthenticationStateProvider(loggerFactory)
|
|
{
|
|
protected override TimeSpan RevalidationInterval => TimeSpan.FromMinutes(30);
|
|
|
|
protected override async Task<bool> ValidateAuthenticationStateAsync(
|
|
AuthenticationState authenticationState, CancellationToken cancellationToken)
|
|
{
|
|
// Get the user manager from a new scope to ensure it fetches fresh data
|
|
using AsyncServiceScope scope = scopeFactory.CreateAsyncScope();
|
|
var userManager = scope.ServiceProvider.GetRequiredService<UserManager<ApplicationUser>>();
|
|
return await ValidateSecurityStampAsync(userManager, authenticationState.User).ConfigureAwait(false);
|
|
}
|
|
|
|
private async Task<bool> ValidateSecurityStampAsync(UserManager<ApplicationUser> userManager, ClaimsPrincipal principal)
|
|
{
|
|
var user = await userManager.GetUserAsync(principal).ConfigureAwait(false);
|
|
if (user is null)
|
|
{
|
|
return false;
|
|
}
|
|
else if (!userManager.SupportsUserSecurityStamp)
|
|
{
|
|
return true;
|
|
}
|
|
else
|
|
{
|
|
var principalStamp = principal.FindFirstValue(options.Value.ClaimsIdentity.SecurityStampClaimType);
|
|
var userStamp = await userManager.GetSecurityStampAsync(user).ConfigureAwait(false);
|
|
return principalStamp == userStamp;
|
|
}
|
|
}
|
|
}
|
|
|
|
#pragma warning restore CA1812 |