Meyer.EndpointAuthentication 1.0.0-preview2

Meyer.EndpointAuthentication

This library is used to add Authentication and Authorization to WebAPI services.

Setting up the service

// This method gets called by the runtime. Use this method to add services to the container.
public void ConfigureServices(IServiceCollection services)
{
    services.AddEntityFrameworkNpgsql();

    ...
        
    services.AddEndpointAuthentication(o => o.UseNpgsql(ConnectionString));

    ...
}

Note: You can use any Entity Framework data store.

Adding the middleware

// This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{
    if (env.IsDevelopment())
    {
        app.UseDeveloperExceptionPage();
    }

    app.UseRequestOAuth();

    ...

    app.UseSignedMessage();

    app.UseMvc();
}

Using Authorization

// POST api/orders
[HttpPost]
[Authorize(Roles = "AuthenticatedUser")]
public void Post([FromBody] Order value)
{
    ...
}

[HttpPut("{id}")]
[Authorize(Roles = "AuthenticatedUser")]
public ActionResult Put(int id, [FromBody] Order value)
{
     ...
}

Configuring the database

In the Package Manager Console:

PM> Add-Migration -Context EndpointDataContext -Name EPAuth
PM> Update-Database

Seed the Database

Generate the Administrator and AuthenticatedUser roles and create the Admin account.

public virtual void SeedDatabase()
{
    Role administrator = default(Role);
    User admin = default(User);

    administrator = Roles.SingleOrDefault(r => r.RoleName == "Administrator");
    if (administrator == default(Role))
    {
        administrator = new Role() { RoleName = "Administrator", Description = "Database Administator" };
        Roles.Add(administrator);
    }

    Role authUser = Roles.SingleOrDefault(r => r.RoleName == "AuthenticatedUser");
    if (authUser == default(Role))
    {
        authUser = new Role { RoleName = "AuthenticatedUser", Description = "Authenticated User Account" };
        Roles.Add(authUser);
    }

    admin = Users.SingleOrDefault(u => u.UserName == "Admin");
    if (admin == default(User))
    {
        admin = new User() { UserName = "Admin", Password = "password", IsActive = true, UserRoles = new List<UserRole>() };
        admin.AddRole(administrator);
        admin.AddRole(authUser);
            
        admin.GenerateNewUserKey();
            
        Users.Add(admin);
    }

    SaveChanges();
}