ayan.poddar/eShopOnContainers
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Added AuthorizeRequest class, which is no longer present in IdentityModel.Client.

Browse Source 
Note that this will ultimately be eliminated when moving to using
OIDCClient.
This commit is contained in:
David Britch 2018-01-15 11:46:34 +00:00
parent 5a12965695
commit df086fe0de
2 changed files with 39 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
src/Mobile/eShopOnContainers/eShopOnContainers.Core/Services/Identity/AuthorizeRequest.cs Normal file
View File

@ -0,0 +1,23 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Net;
namespace eShopOnContainers.Core.Services.Identity
{
public class AuthorizeRequest
{
readonly Uri _authorizeEndpoint;
public AuthorizeRequest(string authorizeEndpoint)
{
_authorizeEndpoint = new Uri(authorizeEndpoint);
}
public string Create(IDictionary<string, string> values)
{
var queryString = string.Join("&", values.Select(kvp => string.Format("{0}={1}", WebUtility.UrlEncode(kvp.Key), WebUtility.UrlEncode(kvp.Value))).ToArray());
return string.Format("{0}?{1}", _authorizeEndpoint.AbsoluteUri, queryString);
}
}
}

34
src/Mobile/eShopOnContainers/eShopOnContainers.Core/Services/Identity/IdentityService.cs
View File

@ -7,7 +7,6 @@ using eShopOnContainers.Core.Services.RequestProvider;
using eShopOnContainers.Core.Models.Token;
using eShopOnContainers.Core.Helpers;
using IdentityModel;
using IdentityModel.Client;
using PCLCrypto;
using static PCLCrypto.WinRTCrypto;
@ -26,26 +25,25 @@ namespace eShopOnContainers.Core.Services.Identity
public string CreateAuthorizationRequest()
{
// Create URI to authorization endpoint
//var authorizeRequest = new AuthorizeRequest(GlobalSetting.Instance.IdentityEndpoint);
var authorizeRequest = new AuthorizeRequest(GlobalSetting.Instance.IdentityEndpoint);
//// Dictionary with values for the authorize request
//var dic = new Dictionary<string, string>();
//dic.Add("client_id", GlobalSetting.Instance.ClientId);
//dic.Add("client_secret", GlobalSetting.Instance.ClientSecret);
//dic.Add("response_type", "code id_token");
//dic.Add("scope", "openid profile basket orders locations marketing offline_access");
//dic.Add("redirect_uri", GlobalSetting.Instance.IdentityCallback);
//dic.Add("nonce", Guid.NewGuid().ToString("N"));
//dic.Add("code_challenge", CreateCodeChallenge());
//dic.Add("code_challenge_method", "S256");
// Dictionary with values for the authorize request
var dic = new Dictionary<string, string>();
dic.Add("client_id", GlobalSetting.Instance.ClientId);
dic.Add("client_secret", GlobalSetting.Instance.ClientSecret);
dic.Add("response_type", "code id_token");
dic.Add("scope", "openid profile basket orders locations marketing offline_access");
dic.Add("redirect_uri", GlobalSetting.Instance.IdentityCallback);
dic.Add("nonce", Guid.NewGuid().ToString("N"));
dic.Add("code_challenge", CreateCodeChallenge());
dic.Add("code_challenge_method", "S256");
//// Add CSRF token to protect against cross-site request forgery attacks.
//var currentCSRFToken = Guid.NewGuid().ToString("N");
//dic.Add("state", currentCSRFToken);
// Add CSRF token to protect against cross-site request forgery attacks.
var currentCSRFToken = Guid.NewGuid().ToString("N");
dic.Add("state", currentCSRFToken);
//var authorizeUri = authorizeRequest.Create(dic);
//return authorizeUri;
return string.Empty;
var authorizeUri = authorizeRequest.Create(dic);
return authorizeUri;
}
public string CreateLogoutRequest(string token)