SemianiakaVY/BotSharp
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

AllowMultipleDeviceLoginUserIds

Browse source
This commit is contained in:
Haiping Chen 2024-09-19 14:00:01 -05:00
parent a9abc96cc8
commit 5645554063
2 changed files with 17 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/Infrastructure/BotSharp.Abstraction/Users/Settings/AccountSetting.cs
View file

@ -6,4 +6,5 @@ public class AccountSetting
/// Whether to enable verification code to verify the authenticity of new users
/// </summary>
public bool NewUserVerification { get; set; }
public string[] AllowMultipleDeviceLoginUserIds { get; set; } = [];
}

20
src/Infrastructure/BotSharp.OpenAPI/Filters/UserSingleLoginFilter.cs
View file

@ -1,5 +1,7 @@
using BotSharp.Abstraction.Users.Settings;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Mvc.Filters;
using Microsoft.Extensions.Configuration;
using Microsoft.Net.Http.Headers;
using System.IdentityModel.Tokens.Jwt;
@ -8,10 +10,12 @@ namespace BotSharp.OpenAPI.Filters
public class UserSingleLoginFilter : IAuthorizationFilter
{
private readonly IUserService _userService;
private readonly IServiceProvider _services;
public UserSingleLoginFilter(IUserService userService)
public UserSingleLoginFilter(IUserService userService, IServiceProvider services)
{
_userService = userService;
_services = services;
}
public void OnAuthorization(AuthorizationFilterContext context)
@ -19,7 +23,15 @@ namespace BotSharp.OpenAPI.Filters
var bearerToken = GetBearerToken(context);
if (!string.IsNullOrWhiteSpace(bearerToken))
{
if (GetJwtTokenExpires(bearerToken).ToLongTimeString() != GetUserExpires().ToLongTimeString())
var config = _services.GetRequiredService<AccountSetting>();
var token = GetJwtToken(bearerToken);
if (config.AllowMultipleDeviceLoginUserIds.Contains(token.Claims.First(x => x.Type == "nameid").Value))
{
return;
}
if (token.ValidTo.ToLongTimeString() != GetUserExpires().ToLongTimeString())
{
context.Result = new UnauthorizedResult();
}
@ -40,11 +52,11 @@ namespace BotSharp.OpenAPI.Filters
return null;
}
private DateTime GetJwtTokenExpires(string jwtToken)
private JwtSecurityToken GetJwtToken(string jwtToken)
{
var handler = new JwtSecurityTokenHandler();
var token = handler.ReadJwtToken(jwtToken);
return token.ValidTo;
return token;
}
private DateTime GetUserExpires()