64 lines
2.3 KiB
C#
64 lines
2.3 KiB
C#
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
|
|
/// <summary>
|
|
/// JWT authentication: login, token refresh, logout, and current-user profile.
|
|
/// </summary>
|
|
[ApiController]
|
|
[Route("api/v1/auth")]
|
|
[Produces("application/json")]
|
|
public class AuthController : ControllerBase
|
|
{
|
|
private readonly IAuthService _auth;
|
|
|
|
public AuthController(IAuthService auth) => _auth = auth;
|
|
|
|
/// <summary>Authenticate and receive a JWT bearer token.</summary>
|
|
[HttpPost("login")]
|
|
[AllowAnonymous]
|
|
[ProducesResponseType(typeof(ApiResponse<LoginResponse>), StatusCodes.Status200OK)]
|
|
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status422UnprocessableEntity)]
|
|
public async Task<IActionResult> Login([FromBody] LoginRequest req)
|
|
{
|
|
var result = await _auth.LoginAsync(req);
|
|
return Ok(ApiResponse<LoginResponse>.Ok(result));
|
|
}
|
|
|
|
/// <summary>Exchange a refresh token for a new access + refresh token pair.</summary>
|
|
[HttpPost("refresh")]
|
|
[AllowAnonymous]
|
|
[ProducesResponseType(typeof(ApiResponse<RefreshResponse>), StatusCodes.Status200OK)]
|
|
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status422UnprocessableEntity)]
|
|
public async Task<IActionResult> Refresh([FromBody] RefreshRequest req)
|
|
{
|
|
var result = await _auth.RefreshAsync(req.RefreshToken);
|
|
return Ok(ApiResponse<RefreshResponse>.Ok(result));
|
|
}
|
|
|
|
/// <summary>Revoke the refresh token and end the session.</summary>
|
|
[HttpPost("logout")]
|
|
[Authorize]
|
|
[ProducesResponseType(StatusCodes.Status204NoContent)]
|
|
public async Task<IActionResult> Logout(
|
|
[FromBody] LogoutRequest req,
|
|
[FromServices] ICurrentUserService currentUser)
|
|
{
|
|
await _auth.LogoutAsync(req.RefreshToken, currentUser.UserId!.Value);
|
|
return NoContent();
|
|
}
|
|
|
|
/// <summary>Returns the authenticated user's profile.</summary>
|
|
[HttpGet("me")]
|
|
[Authorize]
|
|
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status200OK)]
|
|
public IActionResult Me([FromServices] ICurrentUserService currentUser)
|
|
{
|
|
return Ok(ApiResponse<object>.Ok(new
|
|
{
|
|
userId = currentUser.UserId,
|
|
username = currentUser.Username,
|
|
displayName = currentUser.DisplayName,
|
|
role = currentUser.Role?.ToDbString()
|
|
}));
|
|
}
|
|
} |