Saving

PrivaPub/StaticServices/AuthTokenManager.cs

@@ -0,0 +1,55 @@
+using Microsoft.IdentityModel.Tokens;
+
+using PrivaPub.ClientModels;
+using PrivaPub.ClientModels.User;
+using PrivaPub.Models.User;
+
+using System.IdentityModel.Tokens.Jwt;
+using System.Security.Claims;
+using System.Text;
+
+namespace PrivaPub.StaticServices
+{
+	public class AuthTokenManager
+	{
+		readonly IConfiguration Configuration;
+
+		public AuthTokenManager(IConfiguration configuration)
+		{
+			Configuration = configuration;
+		}
+
+		public JwtUser GenerateToken(RootUser user, ViewAvatarServer userSettings)
+		{
+			var expiration = DateTime.UtcNow.AddHours(int.Parse(Configuration["AppConfiguration:Jwt:HoursTimeout"]));
+			var securityKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(Configuration["AppConfiguration:Jwt:Key"]));
+			var jwtUser = new JwtUser
+			{
+				UserId = user.ID,
+				Email = user.Email,
+				Username = user.UserName,
+				Expiration = expiration.Ticks,
+				Policies = user.Policies,
+				UserSettings = userSettings
+			};
+			var claims = new List<Claim>
+			{
+				new(ClaimTypes.UserData, user.ID),
+				new(ClaimTypes.Name, user.UserName)
+			};
+
+			claims.Add(new(Policies.IsUser, $"{user.Policies.Contains(Policies.IsUser)}".ToLower()));
+			claims.Add(new(Policies.IsModerator, $"{user.Policies.Contains(Policies.IsModerator)}".ToLower()));
+			claims.Add(new(Policies.IsAdmin, $"{user.Policies.Contains(Policies.IsAdmin)}".ToLower()));
+
+			var token = new JwtSecurityToken(issuer: Configuration["AppConfiguration:Jwt:Issuer"], audience: Configuration["AppConfiguration:Jwt:Audience"],
+					claims: claims,
+					expires: expiration,
+					signingCredentials: new(securityKey, SecurityAlgorithms.HmacSha512)
+			);
+			var tokenHandler = new JwtSecurityTokenHandler();
+			jwtUser.Token = tokenHandler.WriteToken(token);
+			return jwtUser;
+		}
+	}
+}