2019-11-01 18:38:54 +01:00
|
|
|
#pragma warning disable CS1591
|
|
|
|
|
2021-05-21 05:56:59 +02:00
|
|
|
using System.Threading.Tasks;
|
2020-05-13 04:10:35 +02:00
|
|
|
using Jellyfin.Data.Enums;
|
2014-07-02 07:16:59 +02:00
|
|
|
using MediaBrowser.Controller.Net;
|
2019-11-23 16:31:02 +01:00
|
|
|
using Microsoft.AspNetCore.Http;
|
2014-07-02 06:57:18 +02:00
|
|
|
|
2016-11-04 02:18:51 +01:00
|
|
|
namespace Emby.Server.Implementations.HttpServer.Security
|
2014-07-02 06:57:18 +02:00
|
|
|
{
|
|
|
|
public class AuthService : IAuthService
|
|
|
|
{
|
2019-07-28 23:53:19 +02:00
|
|
|
private readonly IAuthorizationContext _authorizationContext;
|
2014-07-08 03:41:03 +02:00
|
|
|
|
2019-07-28 23:53:19 +02:00
|
|
|
public AuthService(
|
2020-09-02 12:22:14 +02:00
|
|
|
IAuthorizationContext authorizationContext)
|
2014-07-02 07:16:59 +02:00
|
|
|
{
|
2019-07-28 23:53:19 +02:00
|
|
|
_authorizationContext = authorizationContext;
|
2019-11-23 16:31:02 +01:00
|
|
|
}
|
|
|
|
|
2021-05-21 05:56:59 +02:00
|
|
|
public async Task<AuthorizationInfo> Authenticate(HttpRequest request)
|
2020-06-15 20:49:54 +02:00
|
|
|
{
|
2021-05-21 05:56:59 +02:00
|
|
|
var auth = await _authorizationContext.GetAuthorizationInfo(request).ConfigureAwait(false);
|
2020-12-01 22:47:42 +01:00
|
|
|
|
|
|
|
if (!auth.HasToken)
|
|
|
|
{
|
2021-11-13 15:27:28 +01:00
|
|
|
return auth;
|
2020-12-01 22:47:42 +01:00
|
|
|
}
|
|
|
|
|
2020-11-08 16:10:33 +01:00
|
|
|
if (!auth.IsAuthenticated)
|
2020-10-15 16:02:59 +02:00
|
|
|
{
|
2020-12-01 22:47:42 +01:00
|
|
|
throw new SecurityException("Invalid token.");
|
2020-10-15 16:02:59 +02:00
|
|
|
}
|
|
|
|
|
2020-10-15 01:58:33 +02:00
|
|
|
if (auth.User?.HasPermission(PermissionKind.IsDisabled) ?? false)
|
2020-06-15 20:49:54 +02:00
|
|
|
{
|
|
|
|
throw new SecurityException("User account has been disabled.");
|
|
|
|
}
|
|
|
|
|
|
|
|
return auth;
|
|
|
|
}
|
2014-07-02 06:57:18 +02:00
|
|
|
}
|
|
|
|
}
|