BotSharp/src/Plugins/BotSharp.Plugin.ChatHub/WebSocketsMiddleware.cs

using Microsoft.AspNetCore.Http;
using System.Text.RegularExpressions;

namespace BotSharp.Plugin.ChatHub;

public class WebSocketsMiddleware
{
    private readonly RequestDelegate _next;

    public WebSocketsMiddleware(RequestDelegate next)
    {
        _next = next;
    }

    public async Task Invoke(HttpContext httpContext)
    {
        var request = httpContext.Request;

        // web sockets cannot pass headers so we must take the access token from query param and
        // add it to the header before authentication middleware runs
        if ((VerifyChatHubRequest(request) || VerifyGetRequest(request)) &&
            request.Query.TryGetValue("access_token", out var accessToken))
        {
            request.Headers["Authorization"] = $"Bearer {accessToken}";
        }

        await _next(httpContext);
    }

    private bool VerifyChatHubRequest(HttpRequest request)
    {
        return request.Path.StartsWithSegments("/chatHub", StringComparison.OrdinalIgnoreCase);
    }

    private bool VerifyGetRequest(HttpRequest request)
    {
        var regexes = new List<Regex>
        {
            new Regex(@"/conversation/[a-z0-9-]+/message/[a-z0-9-]+/[a-z]+/file/[a-z0-9-]+/[a-z0-9-]+", RegexOptions.IgnoreCase),
            new Regex(@"/user/avatar", RegexOptions.IgnoreCase)
        };

        return request.Method.IsEqualTo("GET") && regexes.Any(x => x.IsMatch(request.Path.Value ?? string.Empty));
    }
}