Authservice

AuthService/.gitignore

@@ -0,0 +1,4 @@
+obj/*
+bin/*
+
+appsettings.Development.json

AuthService/.vscode/launch.json

@@ -0,0 +1,35 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+        {
+            // Use IntelliSense to find out which attributes exist for C# debugging
+            // Use hover for the description of the existing attributes
+            // For further information visit https://github.com/dotnet/vscode-csharp/blob/main/debugger-launchjson.md.
+            "name": ".NET Core Launch (web)",
+            "type": "coreclr",
+            "request": "launch",
+            "preLaunchTask": "build",
+            // If you have changed target frameworks, make sure to update the program path.
+            "program": "${workspaceFolder}/bin/Debug/net8.0/AuthService.dll",
+            "args": [],
+            "cwd": "${workspaceFolder}",
+            "stopAtEntry": false,
+            // Enable launching a web browser when ASP.NET Core starts. For more information: https://aka.ms/VSCode-CS-LaunchJson-WebBrowser
+            "serverReadyAction": {
+                "action": "openExternally",
+                "pattern": "\\bNow listening on:\\s+(https?://\\S+)"
+            },
+            "env": {
+                "ASPNETCORE_ENVIRONMENT": "Development"
+            },
+            "sourceFileMap": {
+                "/Views": "${workspaceFolder}/Views"
+            }
+        },
+        {
+            "name": ".NET Core Attach",
+            "type": "coreclr",
+            "request": "attach"
+        }
+    ]
+}

AuthService/.vscode/tasks.json

@@ -0,0 +1,41 @@
+{
+    "version": "2.0.0",
+    "tasks": [
+        {
+            "label": "build",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "build",
+                "${workspaceFolder}/AuthService.csproj",
+                "/property:GenerateFullPaths=true",
+                "/consoleloggerparameters:NoSummary;ForceNoAlign"
+            ],
+            "problemMatcher": "$msCompile"
+        },
+        {
+            "label": "publish",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "publish",
+                "${workspaceFolder}/AuthService.csproj",
+                "/property:GenerateFullPaths=true",
+                "/consoleloggerparameters:NoSummary;ForceNoAlign"
+            ],
+            "problemMatcher": "$msCompile"
+        },
+        {
+            "label": "watch",
+            "command": "dotnet",
+            "type": "process",
+            "args": [
+                "watch",
+                "run",
+                "--project",
+                "${workspaceFolder}/AuthService.csproj"
+            ],
+            "problemMatcher": "$msCompile"
+        }
+    ]
+}

AuthService/AuthService.csproj

@@ -0,0 +1,28 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+
+  <PropertyGroup>
+    <TargetFramework>net8.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="8.0.10" />
+    <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
+    <PackageReference Include="BCrypt.Net-Next" Version="4.0.3" />
+    <PackageReference Include="Serilog" Version="4.1.0" />
+    <PackageReference Include="Serilog.AspNetCore" Version="8.0.3" />
+    <PackageReference Include="Serilog.Enrichers.Environment" Version="3.0.1" />
+    <PackageReference Include="Serilog.Exceptions" Version="8.4.0" />
+    <PackageReference Include="Serilog.Extensions.Logging" Version="8.0.0" />
+    <PackageReference Include="Serilog.Formatting.OpenSearch" Version="1.2.0" />
+    <PackageReference Include="Serilog.Sinks.Console" Version="6.0.0" />
+    <PackageReference Include="Serilog.Sinks.Debug" Version="3.0.0" />
+    <PackageReference Include="Serilog.Sinks.File" Version="6.0.0" />
+    <PackageReference Include="Serilog.Sinks.OpenSearch" Version="1.2.0" />
+    <PackageReference Include="StackExchange.Redis" Version="2.8.16" />
+    <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="8.0.10" />
+  </ItemGroup>
+
+</Project>

AuthService/AuthService.http

@@ -0,0 +1,3 @@
+@AuthService_HostAddress = http://localhost:5050
+
+###

AuthService/Dockerfile

@@ -0,0 +1,24 @@
+FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS base
+WORKDIR /app
+EXPOSE 5095
+
+ENV ASPNETCORE_URLS=http://+:5095
+
+USER app
+FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
+ARG configuration=Release
+WORKDIR /src
+COPY ["AuthService.csproj", "./"]
+RUN dotnet restore "AuthService.csproj"
+COPY . .
+WORKDIR "/src/."
+RUN dotnet build "AuthService.csproj" -c $configuration -o /app/build
+
+FROM build AS publish
+ARG configuration=Release
+RUN dotnet publish "AuthService.csproj" -c $configuration -o /app/publish /p:UseAppHost=false
+
+FROM base AS final
+WORKDIR /app
+COPY --from=publish /app/publish .
+ENTRYPOINT ["dotnet", "AuthService.dll"]

AuthService/Exceptions/Auth/InvalidTokenException.cs

@@ -0,0 +1,9 @@
+namespace AuthService.Exceptions.Auth;
+
+[Serializable]
+public class InvalidTokenException : Exception
+{
+    public InvalidTokenException() { }
+    public InvalidTokenException(string message) : base(message) { }
+    public InvalidTokenException(string message, Exception inner) : base(message, inner) { }
+}

AuthService/Exceptions/Auth/InvalidTokenTypeException.cs

@@ -0,0 +1,9 @@
+namespace AuthService.Exceptions.Auth;
+
+[Serializable]
+public class InvalidTokenTypeException : Exception
+{
+    public InvalidTokenTypeException() { }
+    public InvalidTokenTypeException(string message) : base(message) { }
+    public InvalidTokenTypeException(string message, Exception inner) : base(message, inner) { }
+}

AuthService/Exceptions/Auth/SessionTerminatedException.cs

@@ -0,0 +1,9 @@
+namespace AuthService.Exceptions.Auth;
+
+[Serializable]
+public class SessionTerminatedException : Exception
+{
+    public SessionTerminatedException() { }
+    public SessionTerminatedException(string message) : base(message) { }
+    public SessionTerminatedException(string message, Exception inner) : base(message, inner) { }
+}

AuthService/Exceptions/Auth/UserNotFoundException.cs

@@ -0,0 +1,9 @@
+namespace AuthService.Exceptions.Auth;
+
+[Serializable]
+public class UserNotFoundException : Exception
+{
+    public UserNotFoundException() { }
+    public UserNotFoundException(string message) : base(message) { }
+    public UserNotFoundException(string message, Exception inner) : base(message, inner) { }
+}

AuthService/Exceptions/Jwt/MissingConfigurationException.cs

@@ -0,0 +1,9 @@
+namespace AuthService.Exceptions.Auth;
+
+[Serializable]
+public class MissingConfigurationException : Exception
+{
+    public MissingConfigurationException() { }
+    public MissingConfigurationException(string message) : base(message) { }
+    public MissingConfigurationException(string message, Exception inner) : base(message, inner) { }
+}

AuthService/Models/AccessDataCache/Requests/RecacheUserRequest.cs

@@ -0,0 +1,5 @@
+using AuthService.Services.Models;
+
+namespace AuthService.Models.AccessDataCache.Requests;
+
+public class RecacheUserRequest : UserAccessData;

AuthService/Models/AccessDataCache/Responses/RecacheUserResponse.cs

@@ -0,0 +1,6 @@
+namespace AuthService.Models.AccessDataCache.Responses;
+
+public class RecacheUserResponse
+{
+    public bool IsSuccess { get; set; }
+}

AuthService/Models/Auth/Requests/RefreshRequest.cs

@@ -0,0 +1,9 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace AuthService.Models.Authentication.Requests;
+
+public class RefreshRequest
+{
+    [Required]
+    public string RefreshToken { get; set; } = null!;
+}

AuthService/Models/Auth/Requests/ValidateAccessTokenRequest.cs

@@ -0,0 +1,9 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace AuthService.Models.Authentication.Requests;
+
+public class ValidateAccessTokenRequest
+{
+    [Required]
+    public string AccessToken { get; set; } = null!;
+}

AuthService/Models/Auth/Requests/ValidateRefreshTokenRequest.cs

@@ -0,0 +1,9 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace AuthService.Models.Authentication.Requests;
+
+public class ValidateRefreshTokenRequest
+{
+    [Required]
+    public string RefreshToken { get; set; } = null!;
+}

AuthService/Models/Auth/Responses/RefreshResponse.cs

@@ -0,0 +1,7 @@
+namespace AuthService.Models.Authentication.Responses;
+
+public class RefreshResponse
+{
+    public string? AccessToken { get; set; }
+    public string? RefreshToken { get; set; }
+}

AuthService/Models/Auth/Responses/ValidateAccessTokenResponse.cs

@@ -0,0 +1,6 @@
+namespace AuthService.Models.Authentication.Responses;
+
+public class ValidateAccessTokenResponse
+{
+    public bool IsSuccess { get; set; }
+}

AuthService/Models/Auth/Responses/ValidateRefreshTokenResponse.cs

@@ -0,0 +1,6 @@
+namespace AuthService.Models.Authentication.Responses;
+
+public class ValidateRefreshTokenResponse
+{
+    public bool IsSuccess { get; set; }
+}

AuthService/Models/UserAccessData.cs

@@ -0,0 +1,24 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace AuthService.Services.Models;
+
+/// <summary>
+/// Представляет объект пользователя.
+/// </summary>
+public class UserAccessData
+{
+    [Required]
+    public long Id { get; set; }
+
+    [Required]
+    public string Username { get; set; } = null!;
+
+    [Required]
+    public string Role { get; set; } = null!;
+
+    [Required]
+    public string Password { get; set; } = null!;
+
+    [Required]
+    public string Salt { get; set; } = null!;
+}

AuthService/Models/ValidatedUser.cs

@@ -0,0 +1,15 @@
+using System.ComponentModel.DataAnnotations;
+
+namespace AuthService.Models;
+
+public class ValidatedUser
+{
+    [Required]
+    public long Id { get; set; }
+
+    [Required]
+    public string Username { get; set; } = null!;
+
+    [Required]
+    public string Role { get; set; } = null!;
+}

AuthService/Program.cs

@@ -0,0 +1,26 @@
+using Serilog;
+using AuthService.Utils;
+using AuthService.Services.Jwt;
+using AuthService.Services.Authentication;
+using AuthService.Services.AccessDataCache;
+
+var builder = WebApplication.CreateBuilder(args);
+
+Logging.configureLogging();
+
+builder.Host.UseSerilog();
+
+var app = builder.Build();
+
+builder.Services.AddSingleton<IConfiguration>(builder.Configuration);
+
+builder.Services.AddStackExchangeRedisCache(options => {
+    options.Configuration = builder.Configuration["RedisCacheOptions:Configuration"];
+    options.InstanceName  = builder.Configuration["RedisCacheOptions:InstanceName"];
+});
+
+builder.Services.AddScoped<IAccessDataCacheService, AccessDataCacheService>();
+builder.Services.AddScoped<IJwtService, JwtService>();
+builder.Services.AddScoped<IAuthenticationService, AuthenticationService>();
+
+app.Run();

AuthService/Properties/launchSettings.json

@@ -0,0 +1,41 @@
+{
+  "$schema": "http://json.schemastore.org/launchsettings.json",
+  "iisSettings": {
+    "windowsAuthentication": false,
+    "anonymousAuthentication": true,
+    "iisExpress": {
+      "applicationUrl": "http://localhost:31956",
+      "sslPort": 44377
+    }
+  },
+  "profiles": {
+    "http": {
+      "commandName": "Project",
+      "dotnetRunMessages": true,
+      "launchBrowser": true,
+      "launchUrl": "swagger",
+      "applicationUrl": "http://localhost:5050",
+      "environmentVariables": {
+        "ASPNETCORE_ENVIRONMENT": "Development"
+      }
+    },
+    "https": {
+      "commandName": "Project",
+      "dotnetRunMessages": true,
+      "launchBrowser": true,
+      "launchUrl": "swagger",
+      "applicationUrl": "https://localhost:7222;http://localhost:5050",
+      "environmentVariables": {
+        "ASPNETCORE_ENVIRONMENT": "Development"
+      }
+    },
+    "IIS Express": {
+      "commandName": "IISExpress",
+      "launchBrowser": true,
+      "launchUrl": "swagger",
+      "environmentVariables": {
+        "ASPNETCORE_ENVIRONMENT": "Development"
+      }
+    }
+  }
+}

AuthService/Security/Claims.cs

@@ -0,0 +1,14 @@
+namespace AuthService.Security;
+
+public static class JwtClaims
+{
+    /// <summary>
+    /// Salt - случайный идентификатор, позволяющий провести девалидацию сессии.
+    /// </summary>
+    public const string Salt = "Salt";
+
+    /// <summary>
+    /// TokenType - тип токена. МОжеть принимать значения "access" или "refresh".
+    /// </summary>
+    public const string TokenType = "TokenType";
+}