Added JWT integration

yusufenesaras · Aug 13, 2021 · 40cde49 · 40cde49
1 parent 97d2f10
commit 40cde49
Show file tree

Hide file tree

Showing 182 changed files with 51,430 additions and 579 deletions.
diff --git a/.vs/ReCapProject/DesignTimeBuild/.dtbcache.v2 b/.vs/ReCapProject/DesignTimeBuild/.dtbcache.v2
diff --git a/.vs/ReCapProject/v16/.suo b/.vs/ReCapProject/v16/.suo
diff --git a/Business/Abstract/IAuthService.cs b/Business/Abstract/IAuthService.cs
@@ -0,0 +1,15 @@
+using Core.Entities.Concrete;
+using Core.Utilities.Results;
+using Core.Utilities.Security.JWT;
+using Entities.DTOs;
+
+namespace Business.Abstract
+{
+    public interface IAuthService
+    {
+        IDataResult<User> Register(UserForRegisterDto userForRegisterDto, string password);
+        IDataResult<User> Login(UserForLoginDto userForLoginDto);
+        IResult UserExists(string email);
+        IDataResult<AccessToken> CreateAccessToken(User user);
+    }   
+}
diff --git a/Business/Abstract/IUserService.cs b/Business/Abstract/IUserService.cs
@@ -1,5 +1,5 @@
-using Core.Utilities.Results;
-using Entities.Concrete;
+using Core.Entities.Concrete;
+using Core.Utilities.Results;
 using System;
 using System.Collections.Generic;
 using System.Text;
@@ -8,10 +8,12 @@ namespace Business.Abstract
 {
     public interface IUserService
     {
+        IDataResult<List<OperationClaim>> GetClaims(User user);
         IResult Add(User user);
-        IResult Delete(User user);
         IResult Update(User user);
+        IResult Delete(User user);
         IDataResult<List<User>> GetAll();
-        IDataResult<User> GetById(int id);
+        IDataResult<User> GetById(int userId);
+        IDataResult<User> GetByMail(string email);
     }
 }
diff --git a/Business/Business.csproj b/Business/Business.csproj
@@ -6,10 +6,13 @@
 
   <ItemGroup>
     <PackageReference Include="Autofac" Version="6.1.0" />
+    <PackageReference Include="Autofac.Extensions.DependencyInjection" Version="7.1.0" />
     <PackageReference Include="Autofac.Extras.DynamicProxy" Version="6.0.0" />
     <PackageReference Include="FluentValidation" Version="9.5.1" />
     <PackageReference Include="Microsoft.AspNetCore.Http" Version="2.2.2" />
+    <PackageReference Include="Microsoft.AspNetCore.Http.Abstractions" Version="2.2.0" />
     <PackageReference Include="Microsoft.AspNetCore.Http.Features" Version="3.1.11" />
+    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="5.0.1" />
   </ItemGroup>
 
   <ItemGroup>

diff --git a/Business/BusinessAspects/Autofac/SecuredOperation.cs b/Business/BusinessAspects/Autofac/SecuredOperation.cs
@@ -0,0 +1,38 @@
+using Core.Utilities.Interceptors;
+using Core.Utilities.IoC;
+using Microsoft.AspNetCore.Http;
+using System;
+using Castle.DynamicProxy;
+using Microsoft.Extensions.DependencyInjection;
+using Core.Extensions;
+using Business.Constans;
+
+namespace Business.BusinessAspects.Autofac
+{
+    //Jwt için
+    public class SecuredOperation : MethodInterception
+    {
+        private string[] _roles;
+        private IHttpContextAccessor _httpContextAccessor;
+
+        public SecuredOperation(string roles)
+        {
+            _roles = roles.Split(',');
+            _httpContextAccessor = ServiceTool.ServiceProvider.GetService<IHttpContextAccessor>();
+
+        }
+
+        protected override void OnBefore(IInvocation invocation)
+        {
+            var roleClaims = _httpContextAccessor.HttpContext.User.ClaimRoles();
+            foreach (var role in _roles)
+            {
+                if (roleClaims.Contains(role))
+                {
+                    return;
+                }
+            }
+            throw new Exception(Messages.AuthorizationDenied);
+        }
+    }
+}
diff --git a/Business/Concrete/AuthManager.cs b/Business/Concrete/AuthManager.cs
@@ -0,0 +1,76 @@
+using Business.Abstract;
+using Core.Entities.Concrete;
+using Core.Utilities.Results;
+using Core.Utilities.Security.Hashing;
+using Core.Utilities.Security.JWT;
+using Entities.DTOs;
+using System;
+using System.Collections.Generic;
+using System.Text;
+using DataAccess.Abstract;
+using System.Linq;
+using Business.Constans;
+
+namespace Business.Concrete
+{
+    public class AuthManager : IAuthService
+    {
+        private IUserService _userService;
+        private ITokenHelper _tokenHelper;
+
+        public AuthManager(IUserService userService, ITokenHelper tokenHelper)
+        {
+            _userService = userService;
+            _tokenHelper = tokenHelper;
+        }
+
+        public IDataResult<User> Register(UserForRegisterDto userForRegisterDto, string password)
+        {
+            byte[] passwordHash, passwordSalt;
+            HashingHelper.CreatePasswordHash(password, out passwordHash, out passwordSalt);
+            var user = new User
+            {
+                Email = userForRegisterDto.Email,
+                FirstName = userForRegisterDto.FirstName,
+                LastName = userForRegisterDto.LastName,
+                PasswordHash = passwordHash,
+                PasswordSalt = passwordSalt,
+                Status = true
+            };
+            _userService.Add(user);
+            return new SuccessDataResult<User>(user, Messages.UserRegistered);
+        }
+
+        public IDataResult<User> Login(UserForLoginDto userForLoginDto)
+        {
+            var userToCheck = _userService.GetByMail(userForLoginDto.Email);
+            if (userToCheck == null)
+            {
+                return new ErrorDataResult<User>(Messages.UserNotFound);
+            }
+
+            if (!HashingHelper.VerifyPasswordHash(userForLoginDto.Password, userToCheck.Data.PasswordHash, userToCheck.Data.PasswordSalt))
+            {
+                return new ErrorDataResult<User>("Parola hatası");
+            }
+
+            return new SuccessDataResult<User>(userToCheck.Data,"Giriş başarılı");
+        }
+
+        public IResult UserExists(string email)
+        {
+            if (_userService.GetByMail(email).Data != null)
+            {
+                return new ErrorResult(Messages.UserAlreadyExists);
+            }
+            return new SuccessResult();
+        }
+
+        public IDataResult<AccessToken> CreateAccessToken(User user)
+        {
+            var claims = _userService.GetClaims(user);
+            var accessToken = _tokenHelper.CreateToken(user, claims.Data);
+            return new SuccessDataResult<AccessToken>(accessToken, "Token oluşturuldu");
+        }
+    }
+}
diff --git a/Business/Concrete/CarManager.cs b/Business/Concrete/CarManager.cs
@@ -1,4 +1,5 @@
 using Business.Abstract;
+using Business.BusinessAspects.Autofac;
 using Business.Constans;
 using Business.ValidationRules.FluentValidation;
 using Core.Aspects.Autofac.Validation;
@@ -22,7 +23,8 @@ public CarManager(ICarDal carDal)
         {
             _carDal = carDal;
         }
-
+        //Claim
+        [SecuredOperation("car.add,admin")]
         [ValidationAspect(typeof(CarValidator))]
         public IResult Add(Car car)
         {

diff --git a/Business/Concrete/UserManager.cs b/Business/Concrete/UserManager.cs
@@ -1,8 +1,8 @@
 using Business.Abstract;
 using Business.Constans;
+using Core.Entities.Concrete;
 using Core.Utilities.Results;
 using DataAccess.Abstract;
-using Entities.Concrete;
 using System;
 using System.Collections.Generic;
 using System.Text;
@@ -39,6 +39,18 @@ public IDataResult<User> GetById(int id)
                 (_userDal.Get(u => u.Id == id));
         }
 
+        public IDataResult<User> GetByMail(string email)
+        {
+            return new SuccessDataResult<User>
+                (_userDal.Get(u => u.Email == email));
+        }
+
+        public IDataResult<List<OperationClaim>> GetClaims(User user)
+        {
+            return new SuccessDataResult<List<OperationClaim>>
+                (_userDal.GetClaims(user));
+        }
+
         public IResult Update(User user)
         {
             _userDal.Update(user);

diff --git a/Business/Constans/Messages.cs b/Business/Constans/Messages.cs
@@ -50,6 +50,10 @@ public static class Messages
         public static string CarImageUpdated = "Araç Resmi Güncellendi";
         public static string AuthorizationDenied = "Yetkiniz Yok";
 
+        public static string UserRegistered = "Kayıt olundu";
+        public static string UserNotFound = "Kullanıcı bulunamadı";
+        public static string UserAlreadyExists = "Kullanıcı zaten mevcut";
+
         public static string MaintenanceTime = "Sistem Şuan Bakımda.";
         public static string Added = "Eklendi";
         public static string Deleted = "Silindi";

diff --git a/Business/DependencyResolvers/Autofac/AutofacBusinessModule.cs b/Business/DependencyResolvers/Autofac/AutofacBusinessModule.cs
@@ -4,8 +4,10 @@
 using Business.Concrete;
 using Castle.DynamicProxy;
 using Core.Utilities.Interceptors;
+using Core.Utilities.Security.JWT;
 using DataAccess.Abstract;
 using DataAccess.Concrete.EntityFramework;
+using Microsoft.AspNetCore.Http;
 using System;
 using System.Collections.Generic;
 using System.Text;
@@ -31,11 +33,16 @@ protected override void Load(ContainerBuilder builder)
             builder.RegisterType<RentalManager>().As<IRentalService>();
             builder.RegisterType<EfRentalDal>().As<IRentalDal>();
 
+            builder.RegisterType<CarImageManager>().As<ICarImageService>();
+            builder.RegisterType<EfCarImageDal>().As<ICarImageDal>();
+
             builder.RegisterType<UserManager>().As<IUserService>();
             builder.RegisterType<EfUserDal>().As<IUserDal>();
 
-            builder.RegisterType<CarImageManager>().As<ICarImageService>();
-            builder.RegisterType<EfCarImageDal>().As<ICarImageDal>();
+            builder.RegisterType<AuthManager>().As<IAuthService>();
+            builder.RegisterType<JwtHelper>().As<ITokenHelper>();
+
+            //builder.RegisterType<HttpContextAccessor>().As<IHttpContextAccessor>();
 
             var assembly = System.Reflection.Assembly.GetExecutingAssembly();
 

diff --git a/Business/ValidationRules/FluentValidation/UserValidator.cs b/Business/ValidationRules/FluentValidation/UserValidator.cs
@@ -1,4 +1,4 @@
-using Entities.Concrete;
+using Core.Entities.Concrete;
 using FluentValidation;
 using System;
 using System.Collections.Generic;