persistence/Persistence.API/DependencyInjection.cs

using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.Extensions.DependencyInjection.Extensions;
using Microsoft.Extensions.Options;
using Microsoft.IdentityModel.Tokens;
using Microsoft.OpenApi.Any;
using Microsoft.OpenApi.Models;
using Persistence.Models;
using Persistence.Models.Configurations;
using System.Data.Common;
using System.Text;
using System.Text.Json.Nodes;

namespace Persistence.API;

public static class DependencyInjection
{
    public static void AddSwagger(this IServiceCollection services, IConfiguration configuration)
    {
        services.AddSwaggerGen(c =>
        {
            c.MapType<TimeSpan>(() => new OpenApiSchema { Type = "string", Example = new OpenApiString("0.00:00:00") });
            c.MapType<DateOnly>(() => new OpenApiSchema { Type = "string", Format = "date" });
            c.MapType<JsonValue>(() => new OpenApiSchema
            {
                AnyOf = new OpenApiSchema[]
                {
                    new OpenApiSchema {Type = "string", Format = "string" },
                    new OpenApiSchema {Type = "number", Format = "int32" },
                    new OpenApiSchema {Type = "number", Format = "float" },
                }
            });

            c.CustomOperationIds(e =>
            {
                return $"{e.ActionDescriptor.RouteValues["action"]}";
            });

            c.SwaggerDoc("v1", new OpenApiInfo { Title = "Persistence web api", Version = "v1" });

			var needUseKeyCloak = configuration.GetSection("NeedUseKeyCloak").Get<bool>();
			if (needUseKeyCloak)
			{
				c.AddSecurityDefinition("Keycloack", new OpenApiSecurityScheme
				{
					Description = @"JWT Authorization header using the Bearer scheme. Enter 'Bearer' [space] and then your token in the text input below. Example: 'Bearer 12345abcdef'",
					Name = "Authorization",
					In = ParameterLocation.Header,
					Type = SecuritySchemeType.OAuth2,
					Flows = new OpenApiOAuthFlows
					{
						Implicit = new OpenApiOAuthFlow
						{
							AuthorizationUrl = new Uri(configuration["Authentication:AuthorizationUrl"]),
						}
					}
				});

				c.AddSecurityRequirement(new OpenApiSecurityRequirement()
				{
					{
						new OpenApiSecurityScheme
						{
							Reference = new OpenApiReference
							{
								Type = ReferenceType.SecurityScheme,
								Id = "Keycloack"
							},
							Scheme = "Bearer",
							Name = "Bearer",
							In = ParameterLocation.Header,
						},
						new List<string>()
					}
				});
			}
			else
			{
				c.AddSecurityDefinition("Bearer", new OpenApiSecurityScheme
				{
					Description = @"JWT Authorization header using the Bearer scheme. Enter 'Bearer' [space] and then your token in the text input below. Example: 'Bearer 12345abcdef'",
					Name = "Authorization",
					In = ParameterLocation.Header,
					Type = SecuritySchemeType.ApiKey,
					Scheme = "Bearer",
				});

				c.AddSecurityRequirement(new OpenApiSecurityRequirement()
				{
					{
						new OpenApiSecurityScheme
						{
							Reference = new OpenApiReference
							{
								Type = ReferenceType.SecurityScheme,
								Id = "Bearer"
							},
							Scheme = "oauth2",
							Name = "Bearer",
							In = ParameterLocation.Header,
						},
						new List<string>()
					}
				});
			}

			//var xmlFile = $"{Assembly.GetExecutingAssembly().GetName().Name}.xml";
			//var xmlPath = Path.Combine(AppContext.BaseDirectory, xmlFile);
			//var includeControllerXmlComment = true;
			//c.IncludeXmlComments(xmlPath, includeControllerXmlComment);
			//c.IncludeXmlComments(Path.Combine(AppContext.BaseDirectory, "AsbCloudApp.xml"), includeControllerXmlComment);
		});
    }

    public static void AddJWTAuthentication(this IServiceCollection services, IConfiguration configuration)
    {
        var needUseKeyCloak = configuration
			.GetSection("NeedUseKeyCloak")
			.Get<bool>();
        if (needUseKeyCloak) services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
			.AddJwtBearer(options => 
	        {
				options.RequireHttpsMetadata = false;
				options.Audience = configuration["Authentication:Audience"];
				options.MetadataAddress = configuration["Authentication:MetadataAddress"]!;
				options.TokenValidationParameters = new TokenValidationParameters
		        {
			        ValidIssuer = configuration["Authentication:ValidIssuer"],
		        };
	        });
		else services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
			.AddJwtBearer(options =>
			{
				options.RequireHttpsMetadata = false;
				options.TokenValidationParameters = new TokenValidationParameters
				{
					ValidateIssuer = true,
					ValidIssuer = JwtParams.Issuer,
					ValidateAudience = true,
					ValidAudience = JwtParams.Audience,
					ValidateLifetime = true,
					IssuerSigningKey = JwtParams.SecurityKey,
					ValidateIssuerSigningKey = false
				};
				options.Events = new JwtBearerEvents
				{
					OnMessageReceived = context =>
					{
						var accessToken = context.Request.Headers["Authorization"]
							.ToString()
							.Replace(JwtBearerDefaults.AuthenticationScheme, string.Empty)
							.Trim();

						context.Token = accessToken;

						return Task.CompletedTask;
					},
					OnTokenValidated = context =>
					{
						var username = context.Principal?.Claims
							.FirstOrDefault(e => e.Type == "username")?.Value;

						var password = context.Principal?.Claims
							.FirstOrDefault(e => e.Type == "password")?.Value;

						var keyCloakUser = configuration
							.GetSection(nameof(AuthUser))
							.Get<AuthUser>()!;

						if (username != keyCloakUser.Username || password != keyCloakUser.Password)
						{
							context.Fail("username or password did not match");
						}

						return Task.CompletedTask;
					}
				};
			});
	}
}