Saving changes

Using asymmetric validation

Startup.cs

@@ -4,6 +4,8 @@ using System.Linq;
 using System.Threading.Tasks;
 using System.IdentityModel.Tokens.Jwt;
 using System.Security.Claims;
+using System.Security.Cryptography;
+using System.Security.Cryptography.X509Certificates;
 
 using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.Authorization;
@@ -21,22 +23,113 @@ using Newtonsoft.Json;
 using NLog;
 using NLog.Web;
 using NLog.Web.AspNetCore;
+using Org.BouncyCastle.Crypto;
+using Org.BouncyCastle.Crypto.Parameters;
+using Org.BouncyCastle.OpenSsl;
+using Org.BouncyCastle.Security;
 
+using Icarus.Services;
+using Icarus.Repositories;
 using Icarus.Authorization;
 using Icarus.Authorization.Handlers;
 using Icarus.Database.Contexts;
 
 namespace Icarus
 {
+    #region Classes
+    public class SigningIssuerCertificate
+    {
+        public SigningIssuerCertificate()
+        {
+        }
+
+        // public or private key?
+        public RsaSecurityKey GetIssuerSigningKey(string publicKeyPath)
+        {
+            var file = publicKeyPath;
+            var publicKey = System.IO.File.ReadAllText(file);
+            var rsa = new RSACryptoServiceProvider();
+
+            using (var reader = System.IO.File.OpenText(file))
+            {
+                var pem = new PemReader(reader);
+                var o = (RsaKeyParameters)pem.ReadObject();
+                var parameters = new RSAParameters();
+                parameters.Modulus = o.Modulus.ToByteArray();
+                parameters.Exponent = o.Exponent.ToByteArray();
+                rsa.ImportParameters(parameters);
+            }
+
+            return new RsaSecurityKey(rsa);
+        }
+    }
+
+    public class SigningAudienceCertificate
+    {
+        // public or private key?
+        public SigningCredentials GetAudienceSigningKey(string keyPath)
+        {
+            // string privateXmlKey = System.IO.File.ReadAllText("./private_key.xml");
+            // rsa.FromXmlString(privateXmlKey);
+
+            var file = keyPath;
+            var publicKey = System.IO.File.ReadAllText(file);
+            var rsa = new RSACryptoServiceProvider();
+
+            using (var reader = System.IO.File.OpenText(file))
+            {
+                var pem = new PemReader(reader);
+                var o = (RsaKeyParameters)pem.ReadObject();
+                var parameters = new RSAParameters();
+                parameters.Modulus = o.Modulus.ToByteArray();
+                parameters.Exponent = o.Exponent.ToByteArray();
+                rsa.ImportParameters(parameters);
+            }
+
+            return new SigningCredentials(
+                key: new RsaSecurityKey(rsa),
+                algorithm: SecurityAlgorithms.RsaSha256);
+        }
+    }
+    #endregion
+
+    public static class MyClass
+    {
+        public static IServiceCollection AddAsymmetricAuthentication(this IServiceCollection services, IConfiguration configuration)
+        // public static IServiceCollection AddAsymmetricAuthentication(this IServiceCollection services, IConfiguration configuration)
+        {
+            var issuerSigningCertificate = new SigningIssuerCertificate();
+            RsaSecurityKey issuerSigningKey = issuerSigningCertificate.GetIssuerSigningKey(configuration["RSAKeys:PublicKeyPath"]);
+
+            services.AddAuthentication(authOptions =>
+                {
+                })
+                .AddJwtBearer(options =>
+                {
+                    options.TokenValidationParameters = new TokenValidationParameters
+                    {
+                        IssuerSigningKey = issuerSigningKey,
+                    };
+                });
+
+            return services;
+        }
+    }
     public class Startup
     {
+        #region Constructors
         public Startup(IConfiguration configuration)
         {
             Configuration = configuration;
         }
+        #endregion
 
+        #region Properties
         public IConfiguration Configuration { get; }
+        #endregion
 
+
+        #region Methods
         // This method gets called by the runtime. Use this method to add services to the container.
         public void ConfigureServices(IServiceCollection services)
         {
@@ -45,6 +138,7 @@ namespace Icarus
             var auth_id = Configuration["Auth0:Domain"];
             var domain = $"https://{auth_id}/";
             var audience = Configuration["Auth0:ApiIdentifier"];
+            /**
 
             services
                 .AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
@@ -103,6 +197,7 @@ namespace Icarus
 
 
             services.AddSingleton<IAuthorizationHandler, HasScopeHandler>();
+            */
 
             var connString = Configuration.GetConnectionString("DefaultConnection");
 
@@ -114,6 +209,21 @@ namespace Icarus
             services.AddDbContext<GenreContext>(options => options.UseMySQL(connString));
             services.AddDbContext<CoverArtContext>(options => options.UseMySQL(connString));
 
+            services.AddAsymmetricAuthentication(Configuration);
+
+            services.AddTransient<AuthenticationService>(au => new AuthenticationService(new UserService(new UserRepository(), Configuration), new TokenService(new UserRepository(), Configuration), Configuration));
+            services.AddTransient<UserService>(us => new UserService(new UserRepository(), Configuration));
+            services.AddTransient<TokenService>(tk => new TokenService(new UserRepository(), Configuration));
+            services.AddTransient<UserRepository>();
+            services.AddTransient<UserContext>(uc => new UserContext(connString));
+            /**
+            services.AddTransient<Func<string, UserContext>((providers) =>
+            {
+                return new Func<string, UserContext>((numParams) =>
+                    new UserContext(providers.GetRequiredService<IConfiguration>, numParams));
+            });
+            */
+
             services.AddControllers()
                 .AddNewtonsoftJson();
         }
@@ -131,5 +241,6 @@ namespace Icarus
                 endpoints.MapControllers();
             });
         }
+        #endregion
     }
 }