107 lines
4.0 KiB
C#
107 lines
4.0 KiB
C#
using JNPF.Extras.CollectiveOAuth.Cache;
|
||
using JNPF.Extras.CollectiveOAuth.Config;
|
||
using JNPF.Extras.CollectiveOAuth.Enums;
|
||
using JNPF.Extras.CollectiveOAuth.Models;
|
||
|
||
namespace JNPF.Extras.CollectiveOAuth.Utils;
|
||
|
||
public class AuthChecker
|
||
{
|
||
/**
|
||
* 是否支持第三方登录
|
||
*
|
||
* @param config config
|
||
* @param source source
|
||
* @return true or false
|
||
* @since 1.6.1-beta
|
||
*/
|
||
public static bool isSupportedAuth(ClientConfig config, IAuthSource source)
|
||
{
|
||
|
||
bool isSupported = !string.IsNullOrWhiteSpace(config.clientId) && !string.IsNullOrWhiteSpace(config.clientSecret) && !string.IsNullOrWhiteSpace(config.redirectUri);
|
||
/*if (isSupported && DefaultAuthSource.ALIPAY == source)
|
||
{
|
||
isSupported = StringUtils.isNotEmpty(config.getAlipayPublicKey());
|
||
}
|
||
if (isSupported && AuthDefaultSource.STACK_OVERFLOW == source)
|
||
{
|
||
isSupported = StringUtils.isNotEmpty(config.getStackOverflowKey());
|
||
}
|
||
if (isSupported && AuthDefaultSource.WECHAT_ENTERPRISE == source)
|
||
{
|
||
isSupported = StringUtils.isNotEmpty(config.getAgentId());
|
||
}*/
|
||
|
||
return isSupported;
|
||
}
|
||
|
||
/**
|
||
* 检查配置合法性。针对部分平台， 对redirect uri有特定要求。一般来说redirect uri都是http://，而对于facebook平台， redirect uri 必须是https的链接
|
||
*
|
||
* @param config config
|
||
* @param source source
|
||
* @since 1.6.1-beta
|
||
*/
|
||
public static void checkConfig(ClientConfig config, IAuthSource source)
|
||
{
|
||
string redirectUri = config.redirectUri;
|
||
if (!GlobalAuthUtil.isHttpProtocol(redirectUri) && !GlobalAuthUtil.isHttpsProtocol(redirectUri))
|
||
{
|
||
throw new Exception(AuthResponseStatus.ILLEGAL_REDIRECT_URI.GetDesc());
|
||
}
|
||
|
||
// facebook的回调地址必须为https的链接
|
||
if ("FACEBOOK".Equals(source.getName().ToUpper()) && !GlobalAuthUtil.isHttpsProtocol(redirectUri))
|
||
{
|
||
// Facebook's redirect uri must use the HTTPS protocol
|
||
throw new Exception(AuthResponseStatus.ILLEGAL_REDIRECT_URI.GetDesc());
|
||
}
|
||
|
||
// 支付宝在创建回调地址时，不允许使用localhost或者127.0.0.1
|
||
if ("ALIPAY".Equals(source.getName().ToUpper()) && GlobalAuthUtil.isLocalHost(redirectUri))
|
||
{
|
||
// The redirect uri of alipay is forbidden to use localhost or 127.0.0.1
|
||
throw new Exception(AuthResponseStatus.ILLEGAL_REDIRECT_URI.GetDesc());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 校验回调传回的code
|
||
* <p>
|
||
* {@code v1.10.0}版本中改为传入{@code source}和{@code callback}，对于不同平台使用不同参数接受code的情况统一做处理
|
||
*
|
||
* @param source 当前授权平台
|
||
* @param callback 从第三方授权回调回来时传入的参数集合
|
||
* @since 1.8.0.
|
||
*/
|
||
public static void checkCode(IAuthSource source, AuthCallback callback)
|
||
{
|
||
string code = callback.code;
|
||
if (source.getName().ToUpper().Equals(DefaultAuthSourceEnum.ALIPAY_MP.ToString()))
|
||
{
|
||
code = callback.auth_code;
|
||
}
|
||
else if ("HUAWEI".Equals(source.getName().ToUpper()))
|
||
{
|
||
code = callback.authorization_code;
|
||
}
|
||
if (string.IsNullOrWhiteSpace(code))
|
||
{
|
||
throw new Exception(AuthResponseStatus.ILLEGAL_CODE.GetDesc());
|
||
}
|
||
}
|
||
|
||
/// <summary>
|
||
/// 校验回调传回的{@code state}，为空或者不存在.
|
||
/// </summary>
|
||
/// <param name="state">{@code state}一定不为空.</param>
|
||
/// <param name="source">当前授权平台.</param>
|
||
/// <param name="authStateCache">{@code authStateCache} state缓存实现.</param>
|
||
public static void checkState(string state, IAuthSource source, IAuthStateCache authStateCache)
|
||
{
|
||
if (string.IsNullOrWhiteSpace(state) || !authStateCache.containsKey(state))
|
||
{
|
||
//throw new Exception(AuthResponseStatus.ILLEGAL_STATUS.GetDesc());
|
||
}
|
||
}
|
||
} |