77 lines
2.8 KiB
C#
77 lines
2.8 KiB
C#
using System.Security.Claims;
|
|
using Microsoft.AspNetCore.Authorization;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.AspNetCore.RateLimiting;
|
|
|
|
|
|
/// <summary>
|
|
/// JWT authentication, token refresh, logout, and current user info.
|
|
/// </summary>
|
|
[ApiController]
|
|
[Route("api/v1/auth")]
|
|
[Produces("application/json")]
|
|
public class AuthController : ControllerBase
|
|
{
|
|
private readonly IAuthService _auth;
|
|
|
|
public AuthController(IAuthService auth) => _auth = auth;
|
|
|
|
/// <summary>
|
|
/// Authenticates a user and returns a JWT access token, refresh token, and profile.
|
|
/// </summary>
|
|
[HttpPost("login")]
|
|
[AllowAnonymous]
|
|
[EnableRateLimiting("auth")]
|
|
[ProducesResponseType(typeof(ApiResponse<LoginResponse>), StatusCodes.Status200OK)]
|
|
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status422UnprocessableEntity)]
|
|
[ProducesResponseType(StatusCodes.Status429TooManyRequests)]
|
|
public async Task<IActionResult> Login([FromBody] LoginRequest req)
|
|
{
|
|
var result = await _auth.LoginAsync(req);
|
|
return Ok(ApiResponse<LoginResponse>.Ok(result));
|
|
}
|
|
|
|
/// <summary>
|
|
/// Rotates the refresh token and issues a new access token.
|
|
/// </summary>
|
|
[HttpPost("refresh")]
|
|
[AllowAnonymous]
|
|
[EnableRateLimiting("auth")]
|
|
[ProducesResponseType(typeof(ApiResponse<TokenResponse>), StatusCodes.Status200OK)]
|
|
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status422UnprocessableEntity)]
|
|
[ProducesResponseType(StatusCodes.Status429TooManyRequests)]
|
|
public async Task<IActionResult> Refresh([FromBody] RefreshRequest req)
|
|
{
|
|
var result = await _auth.RefreshAsync(req);
|
|
return Ok(ApiResponse<TokenResponse>.Ok(result));
|
|
}
|
|
|
|
/// <summary>
|
|
/// Revokes the refresh token server-side.
|
|
/// </summary>
|
|
[HttpPost("logout")]
|
|
[AllowAnonymous]
|
|
[ProducesResponseType(StatusCodes.Status204NoContent)]
|
|
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status422UnprocessableEntity)]
|
|
public async Task<IActionResult> Logout([FromBody] LogoutRequest req)
|
|
{
|
|
await _auth.LogoutAsync(req);
|
|
return NoContent();
|
|
}
|
|
|
|
/// <summary>
|
|
/// Returns the current authenticated user's profile.
|
|
/// </summary>
|
|
[HttpGet("me")]
|
|
[Authorize]
|
|
[ProducesResponseType(typeof(ApiResponse<UserProfileResponse>), StatusCodes.Status200OK)]
|
|
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status401Unauthorized)]
|
|
public async Task<IActionResult> Me()
|
|
{
|
|
var userId = Guid.Parse(User.FindFirstValue(ClaimTypes.NameIdentifier)!);
|
|
var user = await _auth.GetCurrentUserAsync(userId);
|
|
return Ok(ApiResponse<UserProfileResponse>.Ok(new UserProfileResponse(
|
|
user.Id, user.Username, user.FullName, user.Role.ToDbString())));
|
|
}
|
|
}
|