open source identity server

2026-08-17 05:50:18 +02:00 · 2022-12-28 17:24:47 +05:00
parent 8fcb5257eb
commit 4e9f82fe48
71 changed files with 7382 additions and 2 deletions
@@ -0,0 +1,115 @@
+/*
+This file is part of the Notesnook Sync Server project (https://notesnook.com/)
+
+Copyright (C) 2022 Streetwriters (Private) Limited
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the Affero GNU General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+Affero GNU General Public License for more details.
+
+You should have received a copy of the Affero GNU General Public License
+along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+using System.Collections.Generic;
+using System.Linq;
+using System.Security.Claims;
+using System.Threading.Tasks;
+using AspNetCore.Identity.Mongo.Model;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc;
+using Streetwriters.Common;
+using Streetwriters.Common.Models;
+using Streetwriters.Identity.Enums;
+using Streetwriters.Identity.Interfaces;
+using Streetwriters.Identity.Models;
+
+namespace Streetwriters.Identity.Controllers
+{
+    [ApiController]
+    [Route("signup")]
+    public class SignupController : IdentityControllerBase
+    {
+        public SignupController(UserManager<User> _userManager, IEmailSender _emailSender,
+        SignInManager<User> _signInManager, RoleManager<MongoRole> _roleManager, IMFAService _mfaService) : base(_userManager, _emailSender, _signInManager, _roleManager, _mfaService)
+        { }
+
+        private async Task AddClientRoleAsync(string clientId)
+        {
+            if (await RoleManager.FindByNameAsync(clientId) == null)
+                await RoleManager.CreateAsync(new MongoRole(clientId));
+        }
+
+        [HttpPost]
+        [AllowAnonymous]
+        public async Task<IActionResult> Signup([FromForm] SignupForm form)
+        {
+            var client = Clients.FindClientById(form.ClientId);
+            if (client == null) return BadRequest("Invalid client_id.");
+
+            await AddClientRoleAsync(client.Id);
+
+            // email addresses must be case-insensitive
+            form.Email = form.Email.ToLowerInvariant();
+            form.Username = form.Username?.ToLowerInvariant();
+
+            var result = await UserManager.CreateAsync(new User
+            {
+                Email = form.Email,
+                EmailConfirmed = false,
+                UserName = form.Username ?? form.Email,
+            }, form.Password);
+
+            if (result.Errors.Any((e) => e.Code == "DuplicateEmail"))
+            {
+                var user = await UserManager.FindByEmailAsync(form.Email);
+
+                if (!await UserManager.IsInRoleAsync(user, client.Id))
+                {
+                    if (!await UserManager.CheckPasswordAsync(user, form.Password))
+                    {
+                        // TODO
+                        await UserManager.RemovePasswordAsync(user);
+                        await UserManager.AddPasswordAsync(user, form.Password);
+                    }
+                    await UserManager.AddToRoleAsync(user, client.Id);
+                }
+                else
+                {
+                    return BadRequest(new string[] { "Email is invalid or already taken." });
+                }
+
+                return Ok(new
+                {
+                    userId = user.Id.ToString()
+                });
+            }
+
+            if (result.Succeeded)
+            {
+                var user = await UserManager.FindByEmailAsync(form.Email);
+
+                await UserManager.AddToRoleAsync(user, client.Id);
+                // await UserManager.AddClaimAsync(user, new Claim("verified", "false"));
+
+                var code = await UserManager.GenerateEmailConfirmationTokenAsync(user);
+                var callbackUrl = Url.TokenLink(user.Id.ToString(), code, client.Id, TokenType.CONFRIM_EMAIL, Request.Scheme);
+                await EmailSender.SendConfirmationEmailAsync(user.Email, callbackUrl, client);
+
+                return Ok(new
+                {
+                    userId = user.Id.ToString()
+                });
+            }
+
+            return BadRequest(result.Errors.ToErrors());
+        }
+    }
+}