AuthenticationConfiguration.cs

using System.IdentityModel.Tokens.Jwt;
using System.Security.Claims;
using System.Text;
using Application.ViewModels.Users;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.IdentityModel.Tokens;
using API.Middlewares;

namespace API.Configurations
{
    public static class AuthenticationConfiguration
    {
        public static void ConfigureAuthentication(this IServiceCollection services, IConfiguration configuration)
        {
            ArgumentNullException.ThrowIfNull(services);

            ArgumentNullException.ThrowIfNull(configuration);

            var tokenKey = configuration["JwtToken:Key"];

            if (string.IsNullOrEmpty(tokenKey))
                throw new ArgumentNullException(nameof(tokenKey));

            services.AddAuthentication(options =>
            {
                options.DefaultAuthenticateScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultChallengeScheme = JwtBearerDefaults.AuthenticationScheme;
                options.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
            }).AddJwtBearer(o =>
            {
                o.TokenValidationParameters = new TokenValidationParameters
                {
                    ValidIssuer = configuration["JwtToken:Issuer"],
                    ValidAudience = configuration["JwtToken:Audience"],
                    IssuerSigningKey = new SymmetricSecurityKey
                    (Encoding.UTF8.GetBytes(tokenKey)),
                    ValidateIssuer = true,
                    ValidateAudience = true,
                    ValidateLifetime = true,
                    ValidateIssuerSigningKey = true
                };
            });

            services.AddAuthorizationBuilder()
                .AddPolicy("Moderator", policy => policy.RequireClaim("moderator", "True"));
        }

        public static void ConfigureApplicationAuthentication(this WebApplication app)
        {
            ArgumentNullException.ThrowIfNull(app);

            app.UseAuthentication();
            app.UseAuthorization();
        }

        public static string CreateAuthenticationToken(IConfiguration configuration, MyUserViewModel userViewModel)
        {
            ArgumentNullException.ThrowIfNull(configuration);

            ArgumentNullException.ThrowIfNull(userViewModel);

            var tokenKey = configuration["JwtToken:Key"];

            if (string.IsNullOrEmpty(tokenKey))
                throw new ArgumentNullException(nameof(tokenKey));

            var issuer = configuration["JwtToken:Issuer"];
            var audience = configuration["JwtToken:Audience"];
            var key = Encoding.ASCII.GetBytes(tokenKey);

            var tokenDescriptor = new SecurityTokenDescriptor
            {
                Subject = new ClaimsIdentity(
                [
                    new Claim("Id", Guid.NewGuid().ToString()),
                    new Claim(JwtRegisteredClaimNames.Sub, userViewModel.Id.ToString()),
                    new Claim(JwtRegisteredClaimNames.Email, userViewModel.Email!),
                    new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()),
                    new Claim("moderator", userViewModel.IsModerator.ToString())
                ]),
                Expires = DateTime.UtcNow.AddDays(365),
                Issuer = issuer,
                Audience = audience,
                SigningCredentials = new SigningCredentials(new SymmetricSecurityKey(key), SecurityAlgorithms.HmacSha512Signature)
            };

            var tokenHandler = new JwtSecurityTokenHandler();
            var token = tokenHandler.CreateToken(tokenDescriptor);
            return tokenHandler.WriteToken(token);
        }

        public static string CreateAuthenticationToken(this MyUserViewModel userViewModel, IConfiguration configuration)
        {
            ArgumentNullException.ThrowIfNull(userViewModel);

            ArgumentNullException.ThrowIfNull(configuration);

            return CreateAuthenticationToken(configuration, userViewModel);
        }

        public static void UseSetOnlineMiddleware(this WebApplication app)
        {
            if (app == null)
                throw new ArgumentNullException(nameof(app));

            app.UseMiddleware<SetOnlineMiddleware>();
        }
    }
}