PrepareRemoteQuickLogin.cs

using System;
using System.Collections.Generic;
using System.Threading.Tasks;
using System.Xml;
using Waher.Content;
using Waher.Networking.HTTP;
using Waher.Persistence;
using Waher.Runtime.IO;
using Waher.Script;
using Waher.Script.Abstraction.Elements;
using Waher.Service.IoTBroker.DataStorage;
 
namespace Waher.Service.IoTBroker.WebServices.Agent.Account
{
    public class PrepareRemoteQuickLogin : AgentPostResource
    {
        public PrepareRemoteQuickLogin()
            : base("Account/PrepareRemoteQuickLogin",
                new KeyValuePair<Type, Expression>(typeof(Dictionary<string, object>), new Expression(jsonPattern)),
                new KeyValuePair<Type, Expression>(typeof(XmlDocument), new Expression(xmlPattern)))
        {
        }
 
        private static readonly string jsonPattern = Resources.LoadResourceAsText(typeof(Login).Namespace + ".JSON.PrepareRemoteQuickLogin.req");
        private static readonly string xmlPattern = Resources.LoadResourceAsText(typeof(Login).Namespace + ".XML.PrepareRemoteQuickLogin.req");
 
        public override bool UserSessions => true;
 
        public override async Task POST(HttpRequest Request, HttpResponse Response, Dictionary<string, IElement> Parameters)
        {
            AccountUser User = AssertUserAuthenticated(Request, true);
            string LegalId;
 
            if (!CaseInsensitiveString.IsNullOrEmpty(User.Account?.LatestIdentity))
                LegalId = User.Account?.LatestIdentity.Value;
            else
            {
                if (Request.Session is null)
                    throw new ForbiddenException(Request, "No session established.");
 
                if (Request.Session.TryGetVariable(IoTBroker.Legal.MFA.QuickLogin.UserVariableName, out Variable v) &&
                    v.ValueObject is IoTBroker.Legal.MFA.QuickLoginUser QuickLoginUser &&
                    !string.IsNullOrEmpty(QuickLoginUser.LegalId.Id))
                {
                    LegalId = QuickLoginUser.LegalId.Id;
                }
                else
                    throw new ServiceUnavailableException("No legal identity associated with user account.");
            }
 
            await Response.Return(new NamedDictionary<string, object>("PrepareRemoteQuickLoginResponse", AgentNamespace)
            {
                { "legalId", LegalId }
            });
        }
    }
}