WwwLogin.cs

using System;
using System.Collections.Generic;
using System.Threading.Tasks;
using System.Xml;
using Waher.Content;
using Waher.IoTGateway;
using Waher.Networking.HTTP;
using Waher.Script;
using Waher.Script.Abstraction.Elements;
using Waher.Security.JWT;
using Waher.Service.IoTBroker.DataStorage;
 
namespace Waher.Service.IoTBroker.WebServices.Agent.Account
{
    public class WwwLogin : AgentPostResource
    {
        public WwwLogin()
            : base("Account/WwwLogin",
                new KeyValuePair<Type, Expression>(typeof(Dictionary<string, object>), new Expression(jsonPattern)),
                new KeyValuePair<Type, Expression>(typeof(XmlDocument), new Expression(xmlPattern)))
        {
        }
 
        private static readonly string jsonPattern = Resources.LoadResourceAsText(typeof(WwwLogin).Namespace + ".JSON.WwwLogin.req");
        private static readonly string xmlPattern = Resources.LoadResourceAsText(typeof(WwwLogin).Namespace + ".XML.WwwLogin.req");
 
        public override async Task POST(HttpRequest Request, HttpResponse Response, Dictionary<string, IElement> Parameters)
        {
            // WWW-Authenticate mechanism already checks Login Auditor for blocks.
 
            AccountUser User = AssertUserAuthenticated(Request);
            double Seconds = (double)Parameters["PSeconds"].AssociatedObjectValue;
 
            int IssuedAt = (int)Math.Round(DateTime.UtcNow.Subtract(JSON.UnixEpoch).TotalSeconds);
            int Expires = IssuedAt + (int)Seconds;
 
            string Token = Factory.Create(
                new KeyValuePair<string, object>(JwtClaims.JwtId, Convert.ToBase64String(Gateway.NextBytes(32))),
                new KeyValuePair<string, object>(JwtClaims.Issuer, Gateway.Domain?.Value ?? string.Empty),
                new KeyValuePair<string, object>(JwtClaims.Subject, User.UserName + "@" + (Gateway.Domain?.Value ?? string.Empty)),
                new KeyValuePair<string, object>(JwtClaims.IssueTime, IssuedAt),
                new KeyValuePair<string, object>(JwtClaims.ExpirationTime, Expires));
 
            await Response.Return(new NamedDictionary<string, object>("LoggedIn", AgentNamespace)
            {
                { "jwt", Token },
                { "expires", Expires }
            });
        }
    }
}