Integrate Google+ provider
Integrate Google+ provider which is currently a separate project
This commit is contained in:
7
Owin.Security.Providers/GooglePlus/Constants.cs
Normal file
7
Owin.Security.Providers/GooglePlus/Constants.cs
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
namespace Owin.Security.Providers.GooglePlus
|
||||||
|
{
|
||||||
|
internal static class Constants
|
||||||
|
{
|
||||||
|
public const string DefaultAuthenticationType = "GooglePlus";
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,29 @@
|
|||||||
|
using System;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus
|
||||||
|
{
|
||||||
|
public static class GooglePlusAuthenticationExtensions
|
||||||
|
{
|
||||||
|
public static IAppBuilder UseGooglePlusAuthentication(this IAppBuilder app,
|
||||||
|
GooglePlusAuthenticationOptions options)
|
||||||
|
{
|
||||||
|
if (app == null)
|
||||||
|
throw new ArgumentNullException("app");
|
||||||
|
if (options == null)
|
||||||
|
throw new ArgumentNullException("options");
|
||||||
|
|
||||||
|
app.Use(typeof(GooglePlusAuthenticationMiddleware), app, options);
|
||||||
|
|
||||||
|
return app;
|
||||||
|
}
|
||||||
|
|
||||||
|
public static IAppBuilder UseGooglePlusAuthentication(this IAppBuilder app, string clientId, string clientSecret)
|
||||||
|
{
|
||||||
|
return app.UseGooglePlusAuthentication(new GooglePlusAuthenticationOptions
|
||||||
|
{
|
||||||
|
ClientId = clientId,
|
||||||
|
ClientSecret = clientSecret
|
||||||
|
});
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,247 @@
|
|||||||
|
using System;
|
||||||
|
using System.Collections.Generic;
|
||||||
|
using System.Net.Http;
|
||||||
|
using System.Security.Claims;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
using Microsoft.Owin;
|
||||||
|
using Microsoft.Owin.Infrastructure;
|
||||||
|
using Microsoft.Owin.Logging;
|
||||||
|
using Microsoft.Owin.Security;
|
||||||
|
using Microsoft.Owin.Security.Infrastructure;
|
||||||
|
using Newtonsoft.Json;
|
||||||
|
using Newtonsoft.Json.Linq;
|
||||||
|
using Owin.Security.Providers.GooglePlus.Provider;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus
|
||||||
|
{
|
||||||
|
public class GooglePlusAuthenticationHandler : AuthenticationHandler<GooglePlusAuthenticationOptions>
|
||||||
|
{
|
||||||
|
private const string XmlSchemaString = "http://www.w3.org/2001/XMLSchema#string";
|
||||||
|
private const string TokenEndpoint = "https://accounts.google.com/o/oauth2/token";
|
||||||
|
private const string UserInfoEndpoint = "https://www.googleapis.com/oauth2/v3/userinfo";
|
||||||
|
private const string GooglePlusUserEndpoint = "https://www.googleapis.com/plus/v1/people/me";
|
||||||
|
|
||||||
|
private readonly ILogger logger;
|
||||||
|
private readonly HttpClient httpClient;
|
||||||
|
|
||||||
|
public GooglePlusAuthenticationHandler(HttpClient httpClient, ILogger logger)
|
||||||
|
{
|
||||||
|
this.httpClient = httpClient;
|
||||||
|
this.logger = logger;
|
||||||
|
}
|
||||||
|
|
||||||
|
protected override async Task<AuthenticationTicket> AuthenticateCoreAsync()
|
||||||
|
{
|
||||||
|
AuthenticationProperties properties = null;
|
||||||
|
|
||||||
|
try
|
||||||
|
{
|
||||||
|
string code = null;
|
||||||
|
string state = null;
|
||||||
|
|
||||||
|
IReadableStringCollection query = Request.Query;
|
||||||
|
IList<string> values = query.GetValues("code");
|
||||||
|
if (values != null && values.Count == 1)
|
||||||
|
{
|
||||||
|
code = values[0];
|
||||||
|
}
|
||||||
|
values = query.GetValues("state");
|
||||||
|
if (values != null && values.Count == 1)
|
||||||
|
{
|
||||||
|
state = values[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
properties = Options.StateDataFormat.Unprotect(state);
|
||||||
|
if (properties == null)
|
||||||
|
{
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
// OAuth2 10.12 CSRF
|
||||||
|
if (!ValidateCorrelationId(properties, logger))
|
||||||
|
{
|
||||||
|
return new AuthenticationTicket(null, properties);
|
||||||
|
}
|
||||||
|
|
||||||
|
string requestPrefix = Request.Scheme + "://" + Request.Host;
|
||||||
|
string redirectUri = requestPrefix + Request.PathBase + Options.CallbackPath;
|
||||||
|
|
||||||
|
// Build up the body for the token request
|
||||||
|
var body = new List<KeyValuePair<string, string>>();
|
||||||
|
body.Add(new KeyValuePair<string, string>("grant_type", "authorization_code"));
|
||||||
|
body.Add(new KeyValuePair<string, string>("code", code));
|
||||||
|
body.Add(new KeyValuePair<string, string>("redirect_uri", redirectUri));
|
||||||
|
body.Add(new KeyValuePair<string, string>("client_id", Options.ClientId));
|
||||||
|
body.Add(new KeyValuePair<string, string>("client_secret", Options.ClientSecret));
|
||||||
|
|
||||||
|
// Request the token
|
||||||
|
HttpResponseMessage tokenResponse =
|
||||||
|
await httpClient.PostAsync(TokenEndpoint, new FormUrlEncodedContent(body));
|
||||||
|
tokenResponse.EnsureSuccessStatusCode();
|
||||||
|
string text = await tokenResponse.Content.ReadAsStringAsync();
|
||||||
|
|
||||||
|
// Deserializes the token response
|
||||||
|
dynamic response = JsonConvert.DeserializeObject<dynamic>(text);
|
||||||
|
string accessToken = (string)response.access_token;
|
||||||
|
string expires = (string) response.expires_in;
|
||||||
|
|
||||||
|
// Get the Google user
|
||||||
|
HttpResponseMessage graphResponse = await httpClient.GetAsync(
|
||||||
|
UserInfoEndpoint + "?access_token=" + Uri.EscapeDataString(accessToken), Request.CallCancelled);
|
||||||
|
graphResponse.EnsureSuccessStatusCode();
|
||||||
|
text = await graphResponse.Content.ReadAsStringAsync();
|
||||||
|
JObject user = JObject.Parse(text);
|
||||||
|
|
||||||
|
// Get the Google+ Person Info
|
||||||
|
graphResponse = await httpClient.GetAsync(
|
||||||
|
GooglePlusUserEndpoint + "?access_token=" + Uri.EscapeDataString(accessToken), Request.CallCancelled);
|
||||||
|
graphResponse.EnsureSuccessStatusCode();
|
||||||
|
text = await graphResponse.Content.ReadAsStringAsync();
|
||||||
|
JObject person = JObject.Parse(text);
|
||||||
|
|
||||||
|
var context = new GooglePlusAuthenticatedContext(Context, user, person, accessToken, expires);
|
||||||
|
context.Identity = new ClaimsIdentity(
|
||||||
|
Options.AuthenticationType,
|
||||||
|
ClaimsIdentity.DefaultNameClaimType,
|
||||||
|
ClaimsIdentity.DefaultRoleClaimType);
|
||||||
|
if (!string.IsNullOrEmpty(context.Id))
|
||||||
|
{
|
||||||
|
context.Identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, context.Id, XmlSchemaString, Options.AuthenticationType));
|
||||||
|
}
|
||||||
|
if (!string.IsNullOrEmpty(context.UserName))
|
||||||
|
{
|
||||||
|
context.Identity.AddClaim(new Claim(ClaimsIdentity.DefaultNameClaimType, context.UserName, XmlSchemaString, Options.AuthenticationType));
|
||||||
|
}
|
||||||
|
if (!string.IsNullOrEmpty(context.Email))
|
||||||
|
{
|
||||||
|
context.Identity.AddClaim(new Claim(ClaimTypes.Email, context.Email, XmlSchemaString, Options.AuthenticationType));
|
||||||
|
}
|
||||||
|
if (!string.IsNullOrEmpty(context.Name))
|
||||||
|
{
|
||||||
|
context.Identity.AddClaim(new Claim("urn:googleplus:name", context.Name, XmlSchemaString, Options.AuthenticationType));
|
||||||
|
}
|
||||||
|
if (!string.IsNullOrEmpty(context.Link))
|
||||||
|
{
|
||||||
|
context.Identity.AddClaim(new Claim("urn:googleplus:url", context.Link, XmlSchemaString, Options.AuthenticationType));
|
||||||
|
}
|
||||||
|
context.Properties = properties;
|
||||||
|
|
||||||
|
await Options.Provider.Authenticated(context);
|
||||||
|
|
||||||
|
return new AuthenticationTicket(context.Identity, context.Properties);
|
||||||
|
}
|
||||||
|
catch (Exception ex)
|
||||||
|
{
|
||||||
|
logger.WriteError(ex.Message);
|
||||||
|
}
|
||||||
|
return new AuthenticationTicket(null, properties);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected override Task ApplyResponseChallengeAsync()
|
||||||
|
{
|
||||||
|
if (Response.StatusCode != 401)
|
||||||
|
{
|
||||||
|
return Task.FromResult<object>(null);
|
||||||
|
}
|
||||||
|
|
||||||
|
AuthenticationResponseChallenge challenge = Helper.LookupChallenge(Options.AuthenticationType, Options.AuthenticationMode);
|
||||||
|
|
||||||
|
if (challenge != null)
|
||||||
|
{
|
||||||
|
string baseUri =
|
||||||
|
Request.Scheme +
|
||||||
|
Uri.SchemeDelimiter +
|
||||||
|
Request.Host +
|
||||||
|
Request.PathBase;
|
||||||
|
|
||||||
|
string currentUri =
|
||||||
|
baseUri +
|
||||||
|
Request.Path +
|
||||||
|
Request.QueryString;
|
||||||
|
|
||||||
|
string redirectUri =
|
||||||
|
baseUri +
|
||||||
|
Options.CallbackPath;
|
||||||
|
|
||||||
|
AuthenticationProperties properties = challenge.Properties;
|
||||||
|
if (string.IsNullOrEmpty(properties.RedirectUri))
|
||||||
|
{
|
||||||
|
properties.RedirectUri = currentUri;
|
||||||
|
}
|
||||||
|
|
||||||
|
// OAuth2 10.12 CSRF
|
||||||
|
GenerateCorrelationId(properties);
|
||||||
|
|
||||||
|
// comma separated
|
||||||
|
string scope = string.Join(" ", Options.Scope);
|
||||||
|
|
||||||
|
string state = Options.StateDataFormat.Protect(properties);
|
||||||
|
|
||||||
|
string authorizationEndpoint =
|
||||||
|
"https://accounts.google.com/o/oauth2/auth" +
|
||||||
|
"?response_type=code" +
|
||||||
|
"&client_id=" + Uri.EscapeDataString(Options.ClientId) +
|
||||||
|
"&redirect_uri=" + Uri.EscapeDataString(redirectUri) +
|
||||||
|
"&scope=" + Uri.EscapeDataString(scope) +
|
||||||
|
"&state=" + Uri.EscapeDataString(state);
|
||||||
|
|
||||||
|
Response.Redirect(authorizationEndpoint);
|
||||||
|
}
|
||||||
|
|
||||||
|
return Task.FromResult<object>(null);
|
||||||
|
}
|
||||||
|
|
||||||
|
public override async Task<bool> InvokeAsync()
|
||||||
|
{
|
||||||
|
return await InvokeReplyPathAsync();
|
||||||
|
}
|
||||||
|
|
||||||
|
private async Task<bool> InvokeReplyPathAsync()
|
||||||
|
{
|
||||||
|
if (Options.CallbackPath.HasValue && Options.CallbackPath == Request.Path)
|
||||||
|
{
|
||||||
|
// TODO: error responses
|
||||||
|
|
||||||
|
AuthenticationTicket ticket = await AuthenticateAsync();
|
||||||
|
if (ticket == null)
|
||||||
|
{
|
||||||
|
logger.WriteWarning("Invalid return state, unable to redirect.");
|
||||||
|
Response.StatusCode = 500;
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
var context = new GooglePlusReturnEndpointContext(Context, ticket);
|
||||||
|
context.SignInAsAuthenticationType = Options.SignInAsAuthenticationType;
|
||||||
|
context.RedirectUri = ticket.Properties.RedirectUri;
|
||||||
|
|
||||||
|
await Options.Provider.ReturnEndpoint(context);
|
||||||
|
|
||||||
|
if (context.SignInAsAuthenticationType != null &&
|
||||||
|
context.Identity != null)
|
||||||
|
{
|
||||||
|
ClaimsIdentity grantIdentity = context.Identity;
|
||||||
|
if (!string.Equals(grantIdentity.AuthenticationType, context.SignInAsAuthenticationType, StringComparison.Ordinal))
|
||||||
|
{
|
||||||
|
grantIdentity = new ClaimsIdentity(grantIdentity.Claims, context.SignInAsAuthenticationType, grantIdentity.NameClaimType, grantIdentity.RoleClaimType);
|
||||||
|
}
|
||||||
|
Context.Authentication.SignIn(context.Properties, grantIdentity);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!context.IsRequestCompleted && context.RedirectUri != null)
|
||||||
|
{
|
||||||
|
string redirectUri = context.RedirectUri;
|
||||||
|
if (context.Identity == null)
|
||||||
|
{
|
||||||
|
// add a redirect hint that sign-in failed in some way
|
||||||
|
redirectUri = WebUtilities.AddQueryString(redirectUri, "error", "access_denied");
|
||||||
|
}
|
||||||
|
Response.Redirect(redirectUri);
|
||||||
|
context.RequestCompleted();
|
||||||
|
}
|
||||||
|
|
||||||
|
return context.IsRequestCompleted;
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,86 @@
|
|||||||
|
using System;
|
||||||
|
using System.Globalization;
|
||||||
|
using System.Net.Http;
|
||||||
|
using Microsoft.Owin;
|
||||||
|
using Microsoft.Owin.Logging;
|
||||||
|
using Microsoft.Owin.Security;
|
||||||
|
using Microsoft.Owin.Security.DataHandler;
|
||||||
|
using Microsoft.Owin.Security.DataProtection;
|
||||||
|
using Microsoft.Owin.Security.Infrastructure;
|
||||||
|
using Owin.Security.Providers.GooglePlus.Provider;
|
||||||
|
using Owin.Security.Providers.Properties;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus
|
||||||
|
{
|
||||||
|
public class GooglePlusAuthenticationMiddleware : AuthenticationMiddleware<GooglePlusAuthenticationOptions>
|
||||||
|
{
|
||||||
|
private readonly HttpClient httpClient;
|
||||||
|
private readonly ILogger logger;
|
||||||
|
|
||||||
|
public GooglePlusAuthenticationMiddleware(OwinMiddleware next, IAppBuilder app,
|
||||||
|
GooglePlusAuthenticationOptions options)
|
||||||
|
: base(next, options)
|
||||||
|
{
|
||||||
|
if (String.IsNullOrWhiteSpace(Options.ClientId))
|
||||||
|
throw new ArgumentException(String.Format(CultureInfo.CurrentCulture,
|
||||||
|
Resources.Exception_OptionMustBeProvided, "ClientId"));
|
||||||
|
if (String.IsNullOrWhiteSpace(Options.ClientSecret))
|
||||||
|
throw new ArgumentException(String.Format(CultureInfo.CurrentCulture,
|
||||||
|
Resources.Exception_OptionMustBeProvided, "ClientSecret"));
|
||||||
|
|
||||||
|
logger = app.CreateLogger<GooglePlusAuthenticationMiddleware>();
|
||||||
|
|
||||||
|
if (Options.Provider == null)
|
||||||
|
Options.Provider = new GooglePlusAuthenticationProvider();
|
||||||
|
|
||||||
|
if (Options.StateDataFormat == null)
|
||||||
|
{
|
||||||
|
IDataProtector dataProtector = app.CreateDataProtector(
|
||||||
|
typeof (GooglePlusAuthenticationMiddleware).FullName,
|
||||||
|
Options.AuthenticationType, "v1");
|
||||||
|
Options.StateDataFormat = new PropertiesDataFormat(dataProtector);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (String.IsNullOrEmpty(Options.SignInAsAuthenticationType))
|
||||||
|
Options.SignInAsAuthenticationType = app.GetDefaultSignInAsAuthenticationType();
|
||||||
|
|
||||||
|
httpClient = new HttpClient(ResolveHttpMessageHandler(Options))
|
||||||
|
{
|
||||||
|
Timeout = Options.BackchannelTimeout,
|
||||||
|
MaxResponseContentBufferSize = 1024*1024*10
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Provides the <see cref="T:Microsoft.Owin.Security.Infrastructure.AuthenticationHandler" /> object for processing
|
||||||
|
/// authentication-related requests.
|
||||||
|
/// </summary>
|
||||||
|
/// <returns>
|
||||||
|
/// An <see cref="T:Microsoft.Owin.Security.Infrastructure.AuthenticationHandler" /> configured with the
|
||||||
|
/// <see cref="T:Owin.Security.Providers.GooglePlus.GooglePlusAuthenticationOptions" /> supplied to the constructor.
|
||||||
|
/// </returns>
|
||||||
|
protected override AuthenticationHandler<GooglePlusAuthenticationOptions> CreateHandler()
|
||||||
|
{
|
||||||
|
return new GooglePlusAuthenticationHandler(httpClient, logger);
|
||||||
|
}
|
||||||
|
|
||||||
|
private HttpMessageHandler ResolveHttpMessageHandler(GooglePlusAuthenticationOptions options)
|
||||||
|
{
|
||||||
|
HttpMessageHandler handler = options.BackchannelHttpHandler ?? new WebRequestHandler();
|
||||||
|
|
||||||
|
// If they provided a validator, apply it or fail.
|
||||||
|
if (options.BackchannelCertificateValidator != null)
|
||||||
|
{
|
||||||
|
// Set the cert validate callback
|
||||||
|
var webRequestHandler = handler as WebRequestHandler;
|
||||||
|
if (webRequestHandler == null)
|
||||||
|
{
|
||||||
|
throw new InvalidOperationException(Resources.Exception_ValidatorHandlerMismatch);
|
||||||
|
}
|
||||||
|
webRequestHandler.ServerCertificateValidationCallback = options.BackchannelCertificateValidator.Validate;
|
||||||
|
}
|
||||||
|
|
||||||
|
return handler;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,104 @@
|
|||||||
|
using System;
|
||||||
|
using System.Collections.Generic;
|
||||||
|
using System.Net.Http;
|
||||||
|
using Microsoft.Owin;
|
||||||
|
using Microsoft.Owin.Security;
|
||||||
|
using Owin.Security.Providers.GooglePlus.Provider;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus
|
||||||
|
{
|
||||||
|
public class GooglePlusAuthenticationOptions : AuthenticationOptions
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the a pinned certificate validator to use to validate the endpoints used
|
||||||
|
/// in back channel communications belong to Google+.
|
||||||
|
/// </summary>
|
||||||
|
/// <value>
|
||||||
|
/// The pinned certificate validator.
|
||||||
|
/// </value>
|
||||||
|
/// <remarks>
|
||||||
|
/// If this property is null then the default certificate checks are performed,
|
||||||
|
/// validating the subject name and if the signing chain is a trusted party.
|
||||||
|
/// </remarks>
|
||||||
|
public ICertificateValidator BackchannelCertificateValidator { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// The HttpMessageHandler used to communicate with Google+.
|
||||||
|
/// This cannot be set at the same time as BackchannelCertificateValidator unless the value
|
||||||
|
/// can be downcast to a WebRequestHandler.
|
||||||
|
/// </summary>
|
||||||
|
public HttpMessageHandler BackchannelHttpHandler { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets timeout value in milliseconds for back channel communications with Google+.
|
||||||
|
/// </summary>
|
||||||
|
/// <value>
|
||||||
|
/// The back channel timeout in milliseconds.
|
||||||
|
/// </value>
|
||||||
|
public TimeSpan BackchannelTimeout { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// The request path within the application's base path where the user-agent will be returned.
|
||||||
|
/// The middleware will process this request when it arrives.
|
||||||
|
/// Default value is "/signin-googleplus".
|
||||||
|
/// </summary>
|
||||||
|
public PathString CallbackPath { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Get or sets the text that the user can display on a sign in user interface.
|
||||||
|
/// </summary>
|
||||||
|
public string Caption
|
||||||
|
{
|
||||||
|
get { return Description.Caption; }
|
||||||
|
set { Description.Caption = value; }
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the Google supplied Client ID
|
||||||
|
/// </summary>
|
||||||
|
public string ClientId { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the Google supplied Client Secret
|
||||||
|
/// </summary>
|
||||||
|
public string ClientSecret { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the <see cref="IGooglePlusAuthenticationProvider" /> used in the authentication events
|
||||||
|
/// </summary>
|
||||||
|
public IGooglePlusAuthenticationProvider Provider { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// A list of permissions to request.
|
||||||
|
/// </summary>
|
||||||
|
public IList<string> Scope { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the name of another authentication middleware which will be responsible for actually issuing a user
|
||||||
|
/// <see cref="System.Security.Claims.ClaimsIdentity" />.
|
||||||
|
/// </summary>
|
||||||
|
public string SignInAsAuthenticationType { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the type used to secure data handled by the middleware.
|
||||||
|
/// </summary>
|
||||||
|
public ISecureDataFormat<AuthenticationProperties> StateDataFormat { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Initializes a new <see cref="GooglePlusAuthenticationOptions" />
|
||||||
|
/// </summary>
|
||||||
|
public GooglePlusAuthenticationOptions()
|
||||||
|
: base("GooglePlus")
|
||||||
|
{
|
||||||
|
Caption = Constants.DefaultAuthenticationType;
|
||||||
|
CallbackPath = new PathString("/signin-googleplus");
|
||||||
|
AuthenticationMode = AuthenticationMode.Passive;
|
||||||
|
Scope = new List<string>
|
||||||
|
{
|
||||||
|
"https://www.googleapis.com/auth/plus.login",
|
||||||
|
"https://www.googleapis.com/auth/userinfo.email"
|
||||||
|
};
|
||||||
|
BackchannelTimeout = TimeSpan.FromSeconds(60);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,111 @@
|
|||||||
|
// Copyright (c) Microsoft Open Technologies, Inc. All rights reserved. See License.txt in the project root for license information.
|
||||||
|
|
||||||
|
using System;
|
||||||
|
using System.Globalization;
|
||||||
|
using System.Security.Claims;
|
||||||
|
using Microsoft.Owin;
|
||||||
|
using Microsoft.Owin.Security;
|
||||||
|
using Microsoft.Owin.Security.Provider;
|
||||||
|
using Newtonsoft.Json.Linq;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus.Provider
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.
|
||||||
|
/// </summary>
|
||||||
|
public class GooglePlusAuthenticatedContext : BaseContext
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Initializes a <see cref="GooglePlusAuthenticatedContext"/>
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="context">The OWIN environment</param>
|
||||||
|
/// <param name="user">The JSON-serialized user</param>
|
||||||
|
/// <param name="person"></param>
|
||||||
|
/// <param name="accessToken">Google+ Access token</param>
|
||||||
|
/// <param name="expires">Seconds until expiration</param>
|
||||||
|
public GooglePlusAuthenticatedContext(IOwinContext context, JObject user, JObject person, string accessToken, string expires)
|
||||||
|
: base(context)
|
||||||
|
{
|
||||||
|
User = user;
|
||||||
|
Person = person;
|
||||||
|
AccessToken = accessToken;
|
||||||
|
|
||||||
|
int expiresValue;
|
||||||
|
if (Int32.TryParse(expires, NumberStyles.Integer, CultureInfo.InvariantCulture, out expiresValue))
|
||||||
|
{
|
||||||
|
ExpiresIn = TimeSpan.FromSeconds(expiresValue);
|
||||||
|
}
|
||||||
|
|
||||||
|
Id = TryGetValue(person, "id");
|
||||||
|
Name = TryGetValue(person, "displayName");
|
||||||
|
Link = TryGetValue(person, "url");
|
||||||
|
UserName = TryGetValue(person, "displayName").Replace(" ", "");
|
||||||
|
Email = TryGetValue(user, "email");
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the JSON-serialized user
|
||||||
|
/// </summary>
|
||||||
|
/// <remarks>
|
||||||
|
/// Contains the Google user obtained from the endpoint https://www.googleapis.com/oauth2/v3/userinfo
|
||||||
|
/// </remarks>
|
||||||
|
public JObject User { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the JSON-serialized person
|
||||||
|
/// </summary>
|
||||||
|
/// <remarks>
|
||||||
|
/// Contains the Google+ person obtained from the endpoint https://www.googleapis.com/plus/v1/people/me. For more information
|
||||||
|
/// see https://developers.google.com/+/api/latest/people
|
||||||
|
/// </remarks>
|
||||||
|
public JObject Person { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the Facebook access token
|
||||||
|
/// </summary>
|
||||||
|
public string AccessToken { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the Facebook access token expiration time
|
||||||
|
/// </summary>
|
||||||
|
public TimeSpan? ExpiresIn { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the Facebook user ID
|
||||||
|
/// </summary>
|
||||||
|
public string Id { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the user's name
|
||||||
|
/// </summary>
|
||||||
|
public string Name { get; private set; }
|
||||||
|
|
||||||
|
public string Link { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the Facebook username
|
||||||
|
/// </summary>
|
||||||
|
public string UserName { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the Facebook email
|
||||||
|
/// </summary>
|
||||||
|
public string Email { get; private set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets the <see cref="ClaimsIdentity"/> representing the user
|
||||||
|
/// </summary>
|
||||||
|
public ClaimsIdentity Identity { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets a property bag for common authentication properties
|
||||||
|
/// </summary>
|
||||||
|
public AuthenticationProperties Properties { get; set; }
|
||||||
|
|
||||||
|
private static string TryGetValue(JObject user, string propertyName)
|
||||||
|
{
|
||||||
|
JToken value;
|
||||||
|
return user.TryGetValue(propertyName, out value) ? value.ToString() : null;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,50 @@
|
|||||||
|
using System;
|
||||||
|
using System.Threading.Tasks;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus.Provider
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Default <see cref="IGooglePlusAuthenticationProvider"/> implementation.
|
||||||
|
/// </summary>
|
||||||
|
public class GooglePlusAuthenticationProvider : IGooglePlusAuthenticationProvider
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Initializes a <see cref="GooglePlusAuthenticationProvider"/>
|
||||||
|
/// </summary>
|
||||||
|
public GooglePlusAuthenticationProvider()
|
||||||
|
{
|
||||||
|
OnAuthenticated = context => Task.FromResult<object>(null);
|
||||||
|
OnReturnEndpoint = context => Task.FromResult<object>(null);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the function that is invoked when the Authenticated method is invoked.
|
||||||
|
/// </summary>
|
||||||
|
public Func<GooglePlusAuthenticatedContext, Task> OnAuthenticated { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Gets or sets the function that is invoked when the ReturnEndpoint method is invoked.
|
||||||
|
/// </summary>
|
||||||
|
public Func<GooglePlusReturnEndpointContext, Task> OnReturnEndpoint { get; set; }
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Invoked whenever Google+ succesfully authenticates a user
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="context">Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.</param>
|
||||||
|
/// <returns>A <see cref="Task"/> representing the completed operation.</returns>
|
||||||
|
public virtual Task Authenticated(GooglePlusAuthenticatedContext context)
|
||||||
|
{
|
||||||
|
return OnAuthenticated(context);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Invoked prior to the <see cref="System.Security.Claims.ClaimsIdentity"/> being saved in a local cookie and the browser being redirected to the originally requested URL.
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="context"></param>
|
||||||
|
/// <returns>A <see cref="Task"/> representing the completed operation.</returns>
|
||||||
|
public virtual Task ReturnEndpoint(GooglePlusReturnEndpointContext context)
|
||||||
|
{
|
||||||
|
return OnReturnEndpoint(context);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,26 @@
|
|||||||
|
// Copyright (c) Microsoft Open Technologies, Inc. All rights reserved. See License.txt in the project root for license information.
|
||||||
|
|
||||||
|
using Microsoft.Owin;
|
||||||
|
using Microsoft.Owin.Security;
|
||||||
|
using Microsoft.Owin.Security.Provider;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus.Provider
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Provides context information to middleware providers.
|
||||||
|
/// </summary>
|
||||||
|
public class GooglePlusReturnEndpointContext : ReturnEndpointContext
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
///
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="context">OWIN environment</param>
|
||||||
|
/// <param name="ticket">The authentication ticket</param>
|
||||||
|
public GooglePlusReturnEndpointContext(
|
||||||
|
IOwinContext context,
|
||||||
|
AuthenticationTicket ticket)
|
||||||
|
: base(context, ticket)
|
||||||
|
{
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,24 @@
|
|||||||
|
using System.Threading.Tasks;
|
||||||
|
|
||||||
|
namespace Owin.Security.Providers.GooglePlus.Provider
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Specifies callback methods which the <see cref="GooglePlusAuthenticationMiddleware"></see> invokes to enable developer control over the authentication process. />
|
||||||
|
/// </summary>
|
||||||
|
public interface IGooglePlusAuthenticationProvider
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Invoked whenever Google+ succesfully authenticates a user
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="context">Contains information about the login session as well as the user <see cref="System.Security.Claims.ClaimsIdentity"/>.</param>
|
||||||
|
/// <returns>A <see cref="Task"/> representing the completed operation.</returns>
|
||||||
|
Task Authenticated(GooglePlusAuthenticatedContext context);
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Invoked prior to the <see cref="System.Security.Claims.ClaimsIdentity"/> being saved in a local cookie and the browser being redirected to the originally requested URL.
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="context"></param>
|
||||||
|
/// <returns>A <see cref="Task"/> representing the completed operation.</returns>
|
||||||
|
Task ReturnEndpoint(GooglePlusReturnEndpointContext context);
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -64,6 +64,15 @@
|
|||||||
<Compile Include="GitHub\Provider\GitHubAuthenticatedContext.cs" />
|
<Compile Include="GitHub\Provider\GitHubAuthenticatedContext.cs" />
|
||||||
<Compile Include="GitHub\Provider\GitHubAuthenticationProvider.cs" />
|
<Compile Include="GitHub\Provider\GitHubAuthenticationProvider.cs" />
|
||||||
<Compile Include="GitHub\Provider\GitHubReturnEndpointContext.cs" />
|
<Compile Include="GitHub\Provider\GitHubReturnEndpointContext.cs" />
|
||||||
|
<Compile Include="GooglePlus\Constants.cs" />
|
||||||
|
<Compile Include="GooglePlus\GooglePlusAuthenticationExtensions.cs" />
|
||||||
|
<Compile Include="GooglePlus\GooglePlusAuthenticationHandler.cs" />
|
||||||
|
<Compile Include="GooglePlus\GooglePlusAuthenticationMiddleware.cs" />
|
||||||
|
<Compile Include="GooglePlus\GooglePlusAuthenticationOptions.cs" />
|
||||||
|
<Compile Include="GooglePlus\Provider\GooglePlusAuthenticatedContext.cs" />
|
||||||
|
<Compile Include="GooglePlus\Provider\GooglePlusAuthenticationProvider.cs" />
|
||||||
|
<Compile Include="GooglePlus\Provider\GooglePlusReturnEndpointContext.cs" />
|
||||||
|
<Compile Include="GooglePlus\Provider\IGooglePlusAuthenticationProvider.cs" />
|
||||||
<Compile Include="LinkedIn\Constants.cs" />
|
<Compile Include="LinkedIn\Constants.cs" />
|
||||||
<Compile Include="LinkedIn\LinkedInAuthenticationExtensions.cs" />
|
<Compile Include="LinkedIn\LinkedInAuthenticationExtensions.cs" />
|
||||||
<Compile Include="LinkedIn\LinkedInAuthenticationHandler.cs" />
|
<Compile Include="LinkedIn\LinkedInAuthenticationHandler.cs" />
|
||||||
|
|||||||
@@ -3,6 +3,7 @@ using Microsoft.Owin;
|
|||||||
using Microsoft.Owin.Security.Cookies;
|
using Microsoft.Owin.Security.Cookies;
|
||||||
using Owin;
|
using Owin;
|
||||||
using Owin.Security.Providers.GitHub;
|
using Owin.Security.Providers.GitHub;
|
||||||
|
using Owin.Security.Providers.GooglePlus;
|
||||||
using Owin.Security.Providers.LinkedIn;
|
using Owin.Security.Providers.LinkedIn;
|
||||||
using Owin.Security.Providers.Yahoo;
|
using Owin.Security.Providers.Yahoo;
|
||||||
using Owin.Security.Providers.OpenID;
|
using Owin.Security.Providers.OpenID;
|
||||||
@@ -47,6 +48,7 @@ namespace OwinOAuthProvidersDemo
|
|||||||
|
|
||||||
//app.UseGitHubAuthentication("", "");
|
//app.UseGitHubAuthentication("", "");
|
||||||
|
|
||||||
|
app.UseGooglePlusAuthentication("169017484276-45fp7oma0vvsciiain786erkjm0uljtb.apps.googleusercontent.com", "sfNOmc1-e9ph9NjZkI7SWcr6");
|
||||||
|
|
||||||
//app.UseOpenIDAuthentication("http://me.yahoo.com/", "Yahoo");
|
//app.UseOpenIDAuthentication("http://me.yahoo.com/", "Yahoo");
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user