8fb797eaeb
This commit completely removes the Elsa.Expressions.Dsl module, including all associated features, services, models, and dependencies. The DSL functionality, including its custom activities and integration options, has been fully eliminated from the project.
72 lines
2.5 KiB
C#
72 lines
2.5 KiB
C#
using System.IdentityModel.Tokens.Jwt;
|
|
using System.Text;
|
|
using Elsa.Identity.Constants;
|
|
using Microsoft.AspNetCore.Authentication.JwtBearer;
|
|
using Microsoft.IdentityModel.Tokens;
|
|
|
|
namespace Elsa.Identity.Options;
|
|
|
|
/// <summary>
|
|
/// Represents options about token validation and generation.
|
|
/// </summary>
|
|
public class IdentityTokenOptions
|
|
{
|
|
/// <summary>
|
|
/// The key to use when signing tokens
|
|
/// </summary>
|
|
public string SigningKey { get; set; } = null!;
|
|
|
|
/// <summary>
|
|
/// The issuer to use when creating and validating tokens
|
|
/// </summary>
|
|
public string Issuer { get; set; } = "http://elsa.api";
|
|
|
|
/// <summary>
|
|
/// The audience to use when creating and validating tokens
|
|
/// </summary>
|
|
public string Audience { get; set; } = "http://elsa.api";
|
|
|
|
/// <summary>
|
|
/// The lifetime of access tokens
|
|
/// </summary>
|
|
public TimeSpan AccessTokenLifetime { get; set; } = TimeSpan.FromHours(1);
|
|
|
|
/// <summary>
|
|
/// The lifetime of refresh tokens
|
|
/// </summary>
|
|
public TimeSpan RefreshTokenLifetime { get; set; } = TimeSpan.FromHours(2);
|
|
|
|
/// <summary>
|
|
/// Gets or sets the claim type that hold the tenant ID in the user's claims.
|
|
/// If not set, <see cref="CustomClaimTypes.TenantId" /> will be used
|
|
/// </summary>
|
|
public string TenantIdClaimsType { get; set; } = CustomClaimTypes.TenantId;
|
|
|
|
/// <summary>
|
|
/// Creates a new <see cref="SecurityKey"/> from the <see cref="SigningKey"/>.
|
|
/// </summary>
|
|
/// <returns></returns>
|
|
public SecurityKey CreateSecurityKey() => new SymmetricSecurityKey(Encoding.ASCII.GetBytes(SigningKey));
|
|
|
|
/// <summary>
|
|
/// Configures the <see cref="JwtBearerOptions"/> with the values from this instance.
|
|
/// </summary>
|
|
/// <param name="options">The options to configure.</param>
|
|
public void ConfigureJwtBearerOptions(JwtBearerOptions options)
|
|
{
|
|
options.TokenValidationParameters = new TokenValidationParameters
|
|
{
|
|
IssuerSigningKey = CreateSecurityKey(),
|
|
ValidAudience = Audience,
|
|
ValidIssuer = Issuer,
|
|
ValidateLifetime = true,
|
|
LifetimeValidator = ValidateLifetime,
|
|
NameClaimType = JwtRegisteredClaimNames.Name
|
|
};
|
|
}
|
|
|
|
private static bool ValidateLifetime(DateTime? notBefore, DateTime? expires, SecurityToken securityToken, TokenValidationParameters validationParameters)
|
|
{
|
|
return expires != null && expires > DateTime.UtcNow;
|
|
}
|
|
} |