2023-10-16 11:38:27 +02:00
|
|
|
|
using System.Security.Cryptography;
|
|
|
|
|
using System.Text;
|
|
|
|
|
using Microsoft.Extensions.Options;
|
|
|
|
|
using TaikoWebUI.Settings;
|
|
|
|
|
|
|
|
|
|
namespace TaikoWebUI.Services;
|
|
|
|
|
|
|
|
|
|
public class LoginService
|
|
|
|
|
{
|
|
|
|
|
private readonly string adminPassword;
|
|
|
|
|
private readonly string adminUsername;
|
|
|
|
|
|
|
|
|
|
public LoginService(IOptions<WebUiSettings> settings)
|
|
|
|
|
{
|
|
|
|
|
IsLoggedIn = false;
|
|
|
|
|
IsAdmin = false;
|
|
|
|
|
var webUiSettings = settings.Value;
|
|
|
|
|
adminUsername = webUiSettings.AdminUsername;
|
|
|
|
|
adminPassword = webUiSettings.AdminPassword;
|
|
|
|
|
LoginRequired = webUiSettings.LoginRequired;
|
|
|
|
|
OnlyAdmin = webUiSettings.OnlyAdmin;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public bool IsLoggedIn { get; private set; }
|
2023-11-12 00:12:26 +01:00
|
|
|
|
private User LoggedInUser { get; set; } = new();
|
2023-10-16 11:38:27 +02:00
|
|
|
|
public bool IsAdmin { get; private set; }
|
|
|
|
|
|
|
|
|
|
public bool LoginRequired { get; }
|
|
|
|
|
public bool OnlyAdmin { get; }
|
|
|
|
|
|
|
|
|
|
public int Login(string inputCardNum, string inputPassword, DashboardResponse response)
|
|
|
|
|
{
|
|
|
|
|
if (inputCardNum == adminUsername && inputPassword == adminPassword)
|
|
|
|
|
{
|
|
|
|
|
IsLoggedIn = true;
|
|
|
|
|
IsAdmin = true;
|
|
|
|
|
return 1;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (OnlyAdmin) return 0;
|
|
|
|
|
|
2023-11-12 00:12:26 +01:00
|
|
|
|
foreach (var user in response.Users.Where(user => user.AccessCodes.Contains(inputCardNum)))
|
2023-10-16 11:38:27 +02:00
|
|
|
|
{
|
2023-11-11 22:04:11 +01:00
|
|
|
|
foreach (var userCredential in response.UserCredentials.Where(userCredential => userCredential.Baid == user.Baid))
|
|
|
|
|
{
|
|
|
|
|
if (userCredential.Password == "") return 4;
|
|
|
|
|
if (ComputeHash(inputPassword, userCredential.Salt) != userCredential.Password) return 2;
|
|
|
|
|
IsLoggedIn = true;
|
2023-11-12 00:12:26 +01:00
|
|
|
|
LoggedInUser = user;
|
2023-11-11 22:04:11 +01:00
|
|
|
|
IsAdmin = false;
|
|
|
|
|
return 1;
|
|
|
|
|
}
|
2023-10-16 11:38:27 +02:00
|
|
|
|
}
|
|
|
|
|
return 3;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public async Task<int> Register(string inputCardNum, string inputPassword, string inputConfirmPassword,
|
|
|
|
|
DashboardResponse response, HttpClient client)
|
|
|
|
|
{
|
|
|
|
|
if (OnlyAdmin) return 0;
|
2023-11-12 00:12:26 +01:00
|
|
|
|
foreach (var user in response.Users.Where(user => user.AccessCodes.Contains(inputCardNum)))
|
2023-10-16 11:38:27 +02:00
|
|
|
|
{
|
2023-11-11 22:04:11 +01:00
|
|
|
|
foreach (var userCredential in response.UserCredentials.Where(userCredential => userCredential.Baid == user.Baid))
|
2023-10-16 11:38:27 +02:00
|
|
|
|
{
|
2023-11-11 22:04:11 +01:00
|
|
|
|
if (userCredential.Password != "") return 4;
|
|
|
|
|
if (inputPassword != inputConfirmPassword) return 2;
|
|
|
|
|
var salt = CreateSalt();
|
|
|
|
|
var request = new SetPasswordRequest
|
|
|
|
|
{
|
|
|
|
|
Baid = user.Baid,
|
|
|
|
|
Password = ComputeHash(inputPassword, salt),
|
|
|
|
|
Salt = salt
|
|
|
|
|
};
|
|
|
|
|
var responseMessage = await client.PostAsJsonAsync("api/Credentials", request);
|
|
|
|
|
return responseMessage.IsSuccessStatusCode ? 1 : 3;
|
|
|
|
|
}
|
2023-10-16 11:38:27 +02:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return 3;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private static string CreateSalt()
|
|
|
|
|
{
|
|
|
|
|
//Generate a cryptographic random number.
|
|
|
|
|
var randomNumber = new byte[32];
|
|
|
|
|
var rng = RandomNumberGenerator.Create();
|
|
|
|
|
rng.GetBytes(randomNumber);
|
|
|
|
|
var salt = Convert.ToBase64String(randomNumber);
|
|
|
|
|
|
|
|
|
|
// Return a Base64 string representation of the random number.
|
|
|
|
|
return salt;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private static string ComputeHash(string inputPassword, string salt)
|
|
|
|
|
{
|
|
|
|
|
var encDataByte = Encoding.UTF8.GetBytes(inputPassword + salt);
|
|
|
|
|
var encodedData = Convert.ToBase64String(encDataByte);
|
|
|
|
|
encDataByte = Encoding.UTF8.GetBytes(encodedData);
|
|
|
|
|
encodedData = Convert.ToBase64String(encDataByte);
|
|
|
|
|
encDataByte = Encoding.UTF8.GetBytes(encodedData);
|
|
|
|
|
encodedData = Convert.ToBase64String(encDataByte);
|
|
|
|
|
encDataByte = Encoding.UTF8.GetBytes(encodedData);
|
|
|
|
|
encodedData = Convert.ToBase64String(encDataByte);
|
|
|
|
|
return encodedData;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public async Task<int> ChangePassword(string inputCardNum, string inputOldPassword, string inputNewPassword,
|
|
|
|
|
string inputConfirmNewPassword, DashboardResponse response, HttpClient client)
|
|
|
|
|
{
|
|
|
|
|
if (OnlyAdmin) return 0;
|
2023-11-12 00:12:26 +01:00
|
|
|
|
foreach (var user in response.Users.Where(user => user.AccessCodes.Contains(inputCardNum)))
|
2023-10-16 11:38:27 +02:00
|
|
|
|
{
|
2023-11-11 22:04:11 +01:00
|
|
|
|
foreach (var userCredential in response.UserCredentials.Where(userCredential => userCredential.Baid == user.Baid))
|
2023-10-16 11:38:27 +02:00
|
|
|
|
{
|
2023-11-11 22:04:11 +01:00
|
|
|
|
if (userCredential.Password != ComputeHash(inputOldPassword, userCredential.Salt)) return 4;
|
|
|
|
|
if (inputNewPassword != inputConfirmNewPassword) return 2;
|
|
|
|
|
var request = new SetPasswordRequest
|
|
|
|
|
{
|
|
|
|
|
Baid = user.Baid,
|
|
|
|
|
Password = ComputeHash(inputNewPassword, userCredential.Salt),
|
|
|
|
|
Salt = userCredential.Salt
|
|
|
|
|
};
|
|
|
|
|
var responseMessage = await client.PostAsJsonAsync("api/Credentials", request);
|
|
|
|
|
return responseMessage.IsSuccessStatusCode ? 1 : 3;
|
|
|
|
|
}
|
2023-10-16 11:38:27 +02:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return 3;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public void Logout()
|
|
|
|
|
{
|
|
|
|
|
IsLoggedIn = false;
|
2023-11-12 00:12:26 +01:00
|
|
|
|
LoggedInUser = new User();
|
2023-10-16 11:38:27 +02:00
|
|
|
|
IsAdmin = false;
|
|
|
|
|
}
|
|
|
|
|
|
2023-11-12 00:12:26 +01:00
|
|
|
|
public User GetLoggedInUser()
|
2023-10-16 11:38:27 +02:00
|
|
|
|
{
|
2023-11-12 00:12:26 +01:00
|
|
|
|
return LoggedInUser;
|
2023-10-16 11:38:27 +02:00
|
|
|
|
}
|
|
|
|
|
}
|