using Microsoft.AspNetCore.Authentication.JwtBearer;

using Microsoft.Extensions.Configuration;

using Microsoft.Extensions.DependencyInjection;

using Microsoft.IdentityModel.Tokens;

using System;

using System.Collections.Generic;

using System.Linq;

using System.Text;

using System.Threading.Tasks;

namespace APIJSON.NET

{

public static class AuthConfigurer

{

public static void Configure(IServiceCollection services, IConfiguration configuration)

{

if (bool.Parse(configuration["Authentication:JwtBearer:IsEnabled"]))

{

services.AddAuthentication(sharedOptions =>

{

sharedOptions.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;

sharedOptions.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;

})

.AddJwtBearer(options =>

{

options.Audience = configuration["Authentication:JwtBearer:Audience"];

options.TokenValidationParameters = new TokenValidationParameters

{

ValidateIssuerSigningKey = true,

IssuerSigningKey = new SymmetricSecurityKey(Encoding.ASCII.GetBytes(configuration["Authentication:JwtBearer:SecurityKey"])),

ValidateIssuer = true,

ValidIssuer = configuration["Authentication:JwtBearer:Issuer"],

ValidateAudience = true,

ValidAudience = configuration["Authentication:JwtBearer:Audience"],

ValidateLifetime = true,

ClockSkew = TimeSpan.Zero

};

options.Events = new JwtBearerEvents

{

OnMessageReceived = QueryStringTokenResolver,

};

});

}

}

private static Task QueryStringTokenResolver(MessageReceivedContext context)

{

var qsAuthToken = context.Request.Headers["Authorization"].FirstOrDefault();

if (qsAuthToken == null)

{

return Task.CompletedTask;

}

qsAuthToken = qsAuthToken.Replace("Bearer ", "");

// context.Token = SimpleStringCipher.Instance.Decrypt(qsAuthToken, AppConsts.DefaultPassPhrase);

return Task.CompletedTask;

}

}

}