46 lines
1.9 KiB
C++
46 lines
1.9 KiB
C++
|
#include <AuthenticationService.h>
|
||
|
|
||
|
AuthenticationService::AuthenticationService(AsyncWebServer* server, SecurityManager* securityManager):
|
||
|
_server(server), _securityManager(securityManager) {
|
||
|
server->on(VERIFY_AUTHORIZATION_PATH, HTTP_GET, std::bind(&AuthenticationService::verifyAuthorization, this, std::placeholders::_1));
|
||
|
|
||
|
_signInHandler.setUri(SIGN_IN_PATH);
|
||
|
_signInHandler.setMethod(HTTP_POST);
|
||
|
_signInHandler.setMaxContentLength(MAX_SECURITY_MANAGER_SETTINGS_SIZE);
|
||
|
_signInHandler.onRequest(std::bind(&AuthenticationService::signIn, this, std::placeholders::_1, std::placeholders::_2));
|
||
|
server->addHandler(&_signInHandler);
|
||
|
}
|
||
|
|
||
|
AuthenticationService::~AuthenticationService() {}
|
||
|
|
||
|
/**
|
||
|
* Verifys that the request supplied a valid JWT.
|
||
|
*/
|
||
|
void AuthenticationService::verifyAuthorization(AsyncWebServerRequest *request) {
|
||
|
Authentication authentication = _securityManager->authenticateRequest(request);
|
||
|
request->send(authentication.isAuthenticated() ? 200: 401);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Signs in a user if the username and password match. Provides a JWT to be used in the Authorization header in subsequent requests.
|
||
|
*/
|
||
|
void AuthenticationService::signIn(AsyncWebServerRequest *request, JsonDocument &jsonDocument){
|
||
|
if (jsonDocument.is<JsonObject>()) {
|
||
|
String username = jsonDocument["username"];
|
||
|
String password = jsonDocument["password"];
|
||
|
Authentication authentication = _securityManager->authenticate(username, password);
|
||
|
if (authentication.isAuthenticated()) {
|
||
|
User* user = authentication.getUser();
|
||
|
AsyncJsonResponse * response = new AsyncJsonResponse(MAX_USERS_SIZE);
|
||
|
JsonObject jsonObject = response->getRoot();
|
||
|
jsonObject["access_token"] = _securityManager->generateJWT(user);
|
||
|
response->setLength();
|
||
|
request->send(response);
|
||
|
return;
|
||
|
}
|
||
|
}
|
||
|
AsyncWebServerResponse *response = request->beginResponse(401);
|
||
|
request->send(response);
|
||
|
}
|
||
|
|