unosquare / embedio-extras Goto Github PK

View Code? Open in Web Editor NEW

44.0 44.0 16.0 2.06 MB

Additional Modules showing how to extend EmbedIO.

Home Page: http://unosquare.github.io/embedio-extras/

License: Other

C# 100.00%

bearer embedio-modules json json-server middleware owin sqlite3 webserver

embedio-extras's People

Contributors

Stargazers

Watchers

Forkers

afsharm roygoode codefork jefersonflamini sreenivasarajiv gitbitlit rdeago wbarrionuevo neilsilver neotim fiahblade mcserversoft bgkyer revan1985 m8e katterfelto

embedio-extras's Issues

How to setup the principal in EmbedIO with bearer token and API modules

I'm using the Bearer Token Module to secure the API module.

How can I get the IHttpContext.User property set to the current user, so that I can access it in my controllers?

Here's the relevant part of the web server setup:

WebServerEmbedded
    .WithCors()
    .WithBearerToken("/api", "0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9eyJjbGF", new MyAuthorizationServerProvider())
    .WithModule(webApiModule)

and here is MyAuthorizationServerProvider:

internal sealed class MyAuthorizationServerProvider: IAuthorizationServerProvider
{
    public async Task ValidateClientAuthentication(ValidateClientAuthenticationContext context)
    {
        var data = await context.HttpContext.GetRequestFormDataAsync().ConfigureAwait(false);

        if (data?.ContainsKey("grant_type") == true && data["grant_type"] == "password")
        {
            var username = data.ContainsKey("username") ? data["username"] : string.Empty;
            var password = data.ContainsKey("password") ? data["password"] : string.Empty;

            if (ValidateCredentials(username, password))
            {
                context.Validated(username);
            }
            else
            {
                context.Rejected();
            }
        }
        else
        {
            context.Rejected();
        }
    }

    public long GetExpirationDate() => DateTime.UtcNow.AddHours(12).Ticks;

    private static bool ValidateCredentials(string username, string password)
    {
        var user = BusinessLayer.CheckUserAndPassword(username, password);
        return user != null;
    }
}

Thanks.

Add ability to generate openapi spec

Token generated with BearerTokenModule has incorrect expiry time

The bearer token generated has a different expiry date to that what was requested by the service provider.

await context.JsonResponseAsync(new BearerToken
                    {
                        Token = validationContext.GetToken(SecretKey),
                        TokenType = "bearer",
                        ExpirationDate = authorizationServerProvider.GetExpirationDate(),
                        Username = validationContext.IdentityName,
                    });

where the line

   validationContext.GetToken(SecretKey)

creates a token with a default expiry date.

I did the following to fix the issue

                if (validationContext.IsValidated)
                {
                    var expiryDate = DateTime.SpecifyKind(DateTime.FromBinary(authorizationServerProvider.GetExpirationDate()), DateTimeKind.Utc);

                    await context.JsonResponseAsync(new BearerToken
                    {
                        Token = validationContext.GetToken(SecretKey, expiryDate),
                        TokenType = "bearer",
                        ExpirationDate = authorizationServerProvider.GetExpirationDate(),
                        Username = validationContext.IdentityName,
                    });
                }
...

        public string GetToken(SymmetricSecurityKey secretKey, DateTime? expires = null)
        {
            var tokenHandler = new JwtSecurityTokenHandler();

            var plainToken = tokenHandler.CreateToken(new SecurityTokenDescriptor
            {
                Subject = Identity,
                Issuer = "Embedio Bearer Token",
                Expires = expires,
                SigningCredentials = new SigningCredentials(secretKey,
                    SecurityAlgorithms.HmacSha256Signature),
            });

            return tokenHandler.WriteToken(plainToken);
        }

I hope this helps.

Why is StyleCop a dependency for the BearerToken nuget package?

Can this dependency be removed? I'd prefer not to have this in my project.

Add Module for graphql

Add license

Hey, thanks for this awesome lib!
Could you please add a license file to this project?

Bearer Token routes not working with WebApiController routes

It looks like routes passed to BearerTokenModule are not working with WebApiController routes.

It works if API Controller routes and Bearer token routes are as follows :

route begin with "/" and there should NOT be anymore "/"
route is just wildcard "*"
route is null (default)

Update Readme.md and Litelib sample with examples of usage compatible with EmbedIO v3

The readme.Md examples (apart from the auth token) are not compatible with the extension methods of v3.

I will fork and do some work on updating the readme myself.

The documentation here : https://unosquare.github.io/embedio-extras/#litelib is also similar.

In addition there is no Litelib in the Sample and it has the most specific implementation. So could do with adding the

Lastly it is not clear that the EmbedIO.LiteLibWebApi on Nuget https://www.nuget.org/packages/EmbedIO.LiteLibWebApi/
Is Not compatible with EmbedIOv3

System.MissingMethodeException

Hello,

i have the error:

System.MissingMethodException: "Missing Method "Void Unosquare.Labs.EmbedIO.WebModuleBase.AddHandler(System.String, Unosquare.Labs.EmbedIO.HttpVerbs, System.Func`3<System.Net.HttpListenerContext,System.Threading.CancellationToken,System.Threading.Tasks.Task`1<Boolean>>)"."

with this code:

            var basicAuthProvider = new BasicAuthorizationServerProvider();
            var routes = new[] { "/secure.html" };

            var server = new WebServer("http://localhost:9696/", RoutingStrategy.Regex);
     
            server.RegisterModule(new BearerTokenModule(basicAuthProvider, routes));
            server.RegisterModule(new WebApiModule());

            server.Module<WebApiModule>().RegisterController<RequestController>();
            server.RunAsync();

Could you please help me? What is wrong?

Check AppVeyor Tests

https://ci.appveyor.com/project/geoperez/embedio-extras/build/1.0.203#L1283

FixUnitTest

token lifetime fails is not handled

Hi, when ValidateToken() fails on token lifetime it remains returning a valid securityToken and BearerModule still returning http 200 StatusCode.

I suggest you to handle that setting securityToken var to null when an excetption occours.

embedio-extras/src/Unosquare.Labs.EmbedIO.BearerToken/Extensions.cs

Line 101 in 8d134c0

ex.Log(nameof(BearerTokenModule));

Add Couchbase Lite Extension

Similar to Json Server Extension, but with Couchbase Lite backend.
https://www.dotnetfoundation.org/couchbase-lite-for-.net

cannot convert from 'Unosquare.Labs.EmbedIO.BearerToken.BearerTokenModule' to 'Unosquare.Labs.EmbedIO.IWebModule'

Hi,
My .Net 4.5 app is using EmbedIO 1.0.19 and EmbedIO.BearerToken 1.0.0 packages from nuget. With this code:

            var basicAuthProvider = new BasicAuthorizationServerProvider();
            var routes = new[] { "" };
            server.RegisterModule(new BearerTokenModule(basicAuthProvider, routes));

I get error: cannot convert from 'Unosquare.Labs.EmbedIO.BearerToken.BearerTokenModule' to 'Unosquare.Labs.EmbedIO.IWebModule'

How can I correct it?

update the EmbedIO.BearerToken nuget package

Hi,

Could you update the EmbedIO.BearerToken nuget package as it's not synced with the github current version.

Thanks