ow

CloudBuilder/CloudBuilder.Security.Service/Authorization/PermissionHandler.cs

@@ -0,0 +1,107 @@
+using CloudBuilder.Core.Application.Packs;
+using CloudBuilder.Core.Authorization;
+using CloudBuilder.Core.DatabaseAccessor;
+using CloudBuilder.Core.DatabaseAccessor.Entity;
+using CloudBuilder.Core.DependencyInjection.Request;
+using CloudBuilder.Core.Policy;
+using CloudBuilder.Core.Service;
+using CloudBuilder.Security.Policy;
+using DocumentFormat.OpenXml.Drawing.Charts;
+using DocumentFormat.OpenXml.EMMA;
+using DocumentFormat.OpenXml.Office2016.Drawing.ChartDrawing;
+using DocumentFormat.OpenXml.Wordprocessing;
+using EnvDTE;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.IdentityModel.Tokens;
+using System;
+using System.Collections.Generic;
+using System.IdentityModel.Tokens.Jwt;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+using static Microsoft.EntityFrameworkCore.DbLoggerCategory;
+
+namespace CloudBuilder.Security.Service.Authorization
+{
+    public class PermissionHandler : AuthorizationHandler<PermissionRequirement>, IAuthorize
+    {
+        private readonly WebService service;
+        private readonly IContext loginContext;
+        private readonly IHttpContextAccessor httpContextAccessor;
+
+        public PermissionHandler(WebService service, IContext loginContext, IHttpContextAccessor httpContextAccessor)
+        {
+            this.service = service;
+            this.loginContext = loginContext;
+            this.httpContextAccessor = httpContextAccessor;
+        }
+
+        protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, PermissionRequirement requirement)
+        {
+            if (context.HasFailed) return Task.CompletedTask;
+
+            var httpContext = httpContextAccessor.HttpContext;
+
+            EndpointMetadataCollection collection = httpContext.GetEndpoint().Metadata;
+
+            PermissionOperateAttribute permission = null;
+            foreach (var item in collection)
+            {
+                if (!(item is PermissionOperateAttribute)) continue;
+                permission = (PermissionOperateAttribute)item;
+                break;
+            }
+
+            //没有设置权限名出错
+            if (permission == null)
+            {
+                context.Fail();
+                return Task.CompletedTask;
+            }
+
+            string userName = ClaimPolicy.GetClaimValue(httpContextAccessor, ClaimPolicy.CLAINM_USERID);
+            loginContext.Requestor = userName;
+            loginContext.SetToken(ClaimPolicy.GetJwtBearerToken(httpContextAccessor.HttpContext));
+            loginContext.SetCulture(ClaimPolicy.GetClaimValue(httpContextAccessor, ClaimPolicy.CLAINM_LOCALE) ?? CulturePolicy.ZH_CN);
+
+            IApplicationService applicationService = service.Services.BuildServiceProvider().GetRequiredService<IApplicationService>();
+            PermissionContext permissionContext = new PermissionContext(applicationService);
+
+            bool result = false;
+            switch (permission.Operate)
+            {
+                case "None":
+                    result = permissionContext.CanNone(permission.Name);
+                    break;
+                case "Find":
+                case "Print":
+                    result = permissionContext.CanView(permission.Name);
+                    break;
+                case "Insert":
+                    result = permissionContext.CanCreate(permission.Name);
+                    break;
+                case "Update":
+                    result = permissionContext.CanAmend(permission.Name);
+                    break;
+                case "Delete":
+                    result = permissionContext.CanDelete(permission.Name);
+                    break;
+                default:
+                    result = permissionContext.CanNone(permission.Name, permission.Operate);
+                    break;
+            }
+
+            if (result && httpContext != null)
+            {
+                context.Succeed(requirement);
+                return Task.CompletedTask;
+            }
+
+            context.Fail();
+
+            return Task.CompletedTask;
+        }
+    }
+}