hamid
3a51305343
- six REST endpoints (auth/request_otp, verify_otp, refresh, logout, me, me/select_role) wrapping the existing JWE/TOTP/RBAC engine - usr.UserSessions with refresh-token rotation + stolen-token (replay) detection → revoke-all + 401; logout rotates the security stamp - users extended: gender, national_id (enc, NULL until KYC), shahkar_verified_at (auto-reset on phone change), phone_hash UNIQUE, is_active, deleted_at + soft-delete filter; phone/email/national_id encrypted at rest via IFieldEncryptor value converter - user_roles grant/revoke audit trail + global revoked filter; 7 roles seeded; admin sub-roles never self-assignable (403) - ISmsSender seam (mock logs the OTP code) replaces the TODO log lines - OperationResult/BaseController learned enveloped 401/403 - auth knobs as platform_configs rows (resend/attempts/session TTL) - migration IdentitySessionsAndUserExtensions applied to the dev DB - 24 new tests incl. Baya.Test.Api (WebApplicationFactory over SQLite); 47 total green, zero new build warnings; swagger snapshot + contract (identity-auth.md), handoff, report, mocks-registry updated Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
34 lines
1.1 KiB
C#
34 lines
1.1 KiB
C#
#nullable enable
|
|
using System.Security.Claims;
|
|
using Baya.Application.Contracts.Common;
|
|
using Baya.SharedKernel.Extensions;
|
|
using Microsoft.AspNetCore.Http;
|
|
|
|
namespace Baya.Infrastructure.Identity.Identity.CurrentUser;
|
|
|
|
/// <summary>
|
|
/// Resolves the current user from the active HTTP request's claims. When there is no request or no
|
|
/// authenticated principal (background work, startup), all members report "no user".
|
|
/// </summary>
|
|
public sealed class HttpContextCurrentUser(IHttpContextAccessor httpContextAccessor) : ICurrentUser
|
|
{
|
|
private ClaimsPrincipal? Principal => httpContextAccessor.HttpContext?.User;
|
|
|
|
public int? UserId
|
|
{
|
|
get
|
|
{
|
|
var rawId = Principal?.Identity?.GetUserId();
|
|
return rawId.HasValue() && int.TryParse(rawId, out var id) ? id : null;
|
|
}
|
|
}
|
|
|
|
public bool IsAuthenticated => Principal?.Identity?.IsAuthenticated ?? false;
|
|
|
|
public IReadOnlyList<string> Roles =>
|
|
Principal?.FindAll(ClaimTypes.Role).Select(c => c.Value).ToArray() ?? [];
|
|
|
|
public string? IpAddress =>
|
|
httpContextAccessor.HttpContext?.Connection.RemoteIpAddress?.ToString();
|
|
}
|