friendlynamazu/server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add logging to jwt controller

Browse Source
This commit is contained in:
rootdarkarchon
2023-10-24 22:32:24 +02:00
parent f77bde46ed
commit 2f17a47378
1 changed files with 68 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

101
MareSynchronosServer/MareSynchronosServer/Controllers/JwtController.cs
View File

@@ -21,17 +21,20 @@ namespace MareSynchronosServer.Controllers;
[Route(MareAuth.Auth)] [Route(MareAuth.Auth)]
public class JwtController : Controller public class JwtController : Controller
{ {
private readonly ILogger<JwtController> _logger;
private readonly IHttpContextAccessor _accessor; private readonly IHttpContextAccessor _accessor;
private readonly IConfigurationService<MareConfigurationAuthBase> _configuration; private readonly IConfigurationService<MareConfigurationAuthBase> _configuration;
private readonly MareDbContext _mareDbContext; private readonly MareDbContext _mareDbContext;
private readonly IRedisDatabase _redis; private readonly IRedisDatabase _redis;
private readonly SecretKeyAuthenticatorService _secretKeyAuthenticatorService; private readonly SecretKeyAuthenticatorService _secretKeyAuthenticatorService;
public JwtController(IHttpContextAccessor accessor, MareDbContext mareDbContext, public JwtController(ILogger<JwtController> logger,
IHttpContextAccessor accessor, MareDbContext mareDbContext,
SecretKeyAuthenticatorService secretKeyAuthenticatorService, SecretKeyAuthenticatorService secretKeyAuthenticatorService,
IConfigurationService<MareConfigurationAuthBase> configuration, IConfigurationService<MareConfigurationAuthBase> configuration,
IRedisDatabase redisDb) IRedisDatabase redisDb)
{ {
_logger = logger;
_accessor = accessor; _accessor = accessor;
_redis = redisDb; _redis = redisDb;
_mareDbContext = mareDbContext; _mareDbContext = mareDbContext;
@@ -50,51 +53,83 @@ public class JwtController : Controller
[HttpGet("renewToken")] [HttpGet("renewToken")]
public async Task<IActionResult> RenewToken() public async Task<IActionResult> RenewToken()
{ {
var uid = HttpContext.User.Claims.Single(p => string.Equals(p.Type, MareClaimTypes.Uid, StringComparison.Ordinal))!.Value; try
var ident = HttpContext.User.Claims.Single(p => string.Equals(p.Type, MareClaimTypes.CharaIdent, StringComparison.Ordinal))!.Value;
if (await _mareDbContext.Auth.Where(u => u.UserUID == uid || u.PrimaryUserUID == uid).AnyAsync(a => a.IsBanned))
{ {
await EnsureBan(uid, ident); var uid = HttpContext.User.Claims.Single(p => string.Equals(p.Type, MareClaimTypes.Uid, StringComparison.Ordinal))!.Value;
var ident = HttpContext.User.Claims.Single(p => string.Equals(p.Type, MareClaimTypes.CharaIdent, StringComparison.Ordinal))!.Value;
return Unauthorized("You are permanently banned."); if (await _mareDbContext.Auth.Where(u => u.UserUID == uid || u.PrimaryUserUID == uid).AnyAsync(a => a.IsBanned))
{
await EnsureBan(uid, ident);
return Unauthorized("You are permanently banned.");
}
if (await IsIdentBanned(uid, ident))
{
return Unauthorized("Your character is banned from using the service.");
}
_logger.LogInformation("RenewToken:SUCCESS:{id}:{ident}", uid, ident);
return CreateJwtFromId(uid, ident);
} }
catch (Exception ex)
if (await IsIdentBanned(uid, ident))
{ {
return Unauthorized("Your character is banned from using the service."); _logger.LogError(ex, "RenewToken:FAILURE");
return Unauthorized("Unknown error while renewing authentication token");
} }
return CreateJwtFromId(uid, ident);
} }
private async Task<IActionResult> AuthenticateInternal(string auth, string charaIdent) private async Task<IActionResult> AuthenticateInternal(string auth, string charaIdent)
{ {
if (string.IsNullOrEmpty(auth)) return BadRequest("No Authkey"); try
if (string.IsNullOrEmpty(charaIdent)) return BadRequest("No CharaIdent");
var ip = _accessor.GetIpAddress();
var authResult = await _secretKeyAuthenticatorService.AuthorizeAsync(ip, auth);
if (await IsIdentBanned(authResult.Uid, charaIdent))
{ {
return Unauthorized("Your character is banned from using the service."); if (string.IsNullOrEmpty(auth)) return BadRequest("No Authkey");
} if (string.IsNullOrEmpty(charaIdent)) return BadRequest("No CharaIdent");
if (!authResult.Success && !authResult.TempBan) return Unauthorized("The provided secret key is invalid. Verify your accounts existence and/or recover the secret key."); var ip = _accessor.GetIpAddress();
if (!authResult.Success && authResult.TempBan) return Unauthorized("You are temporarily banned. Try connecting again in 5 minutes.");
if (authResult.Permaban) var authResult = await _secretKeyAuthenticatorService.AuthorizeAsync(ip, auth);
if (await IsIdentBanned(authResult.Uid, charaIdent))
{
_logger.LogWarning("Authenticate:IDENTBAN:{id}:{ident}", authResult.Uid, charaIdent);
return Unauthorized("Your character is banned from using the service.");
}
if (!authResult.Success && !authResult.TempBan)
{
_logger.LogWarning("Authenticate:INVALID:{id}:{ident}", authResult?.Uid ?? "NOUID", charaIdent);
return Unauthorized("The provided secret key is invalid. Verify your accounts existence and/or recover the secret key.");
}
if (!authResult.Success && authResult.TempBan)
{
_logger.LogWarning("Authenticate:TEMPBAN:{id}:{ident}", authResult.Uid ?? "NOUID", charaIdent);
return Unauthorized("You are temporarily banned. Try connecting again in 5 minutes.");
}
if (authResult.Permaban)
{
await EnsureBan(authResult.Uid, charaIdent);
_logger.LogWarning("Authenticate:UIDBAN:{id}:{ident}", authResult.Uid, charaIdent);
return Unauthorized("You are permanently banned.");
}
var existingIdent = await _redis.GetAsync<string>("UID:" + authResult.Uid);
if (!string.IsNullOrEmpty(existingIdent))
{
_logger.LogWarning("Authenticate:DUPLICATE:{id}:{ident}", authResult.Uid, charaIdent);
return Unauthorized("Already logged in to this account. Reconnect in 60 seconds. If you keep seeing this issue, restart your game.");
}
_logger.LogInformation("Authenticate:SUCCESS:{id}:{ident}", authResult.Uid, charaIdent);
return CreateJwtFromId(authResult.Uid, charaIdent);
}
catch (Exception ex)
{ {
await EnsureBan(authResult.Uid, charaIdent); _logger.LogWarning(ex, "Authenticate:UNKNOWN");
return Unauthorized("Unknown internal server error during authentication");
return Unauthorized("You are permanently banned.");
} }
var existingIdent = await _redis.GetAsync<string>("UID:" + authResult.Uid);
if (!string.IsNullOrEmpty(existingIdent)) return Unauthorized("Already logged in to this account. Reconnect in 60 seconds. If you keep seeing this issue, restart your game.");
return CreateJwtFromId(authResult.Uid, charaIdent);
} }
private JwtSecurityToken CreateJwt(IEnumerable<Claim> authClaims) private JwtSecurityToken CreateJwt(IEnumerable<Claim> authClaims)