AccountUser.cs

using System.Collections.Generic;
using System;
using System.Threading.Tasks;
using Waher.IoTGateway;
using Waher.Security.JWT;
using Waher.Things;
using Waher.Content;
using Waher.Networking.SMTP.Server;
 
namespace Waher.Service.IoTBroker.DataStorage
{
    public class AccountUser : IUserWithClaims, IRequestOrigin
    {
        private readonly Account account;
 
        public AccountUser(Account Account)
        {
            this.account = Account;
        }
 
        public Account Account => this.account;
 
        public string UserName => this.account.UserName;
 
        public string PasswordHash => this.account.Password;
 
        public string PasswordHashType => string.Empty;
 
        public bool HasPrivilege(string Privilege)
        {
            return false;
        }
 
        public Task<RequestOrigin> GetOrigin()
        {
            return Task.FromResult(new RequestOrigin(this.UserName + "@" + Gateway.Domain, null, null, null));
        }
 
        public Task<IEnumerable<KeyValuePair<string, object>>> CreateClaims(bool Encrypted)
        {
            if (!this.account.Enabled)
                return Task.FromResult<IEnumerable<KeyValuePair<string, object>>>(null);
 
            int IssuedAt = (int)Math.Round(DateTime.UtcNow.Subtract(JSON.UnixEpoch).TotalSeconds);
            int Expires = IssuedAt + 3600;
 
            List<KeyValuePair<string, object>> Claims = new List<KeyValuePair<string, object>>()
            {
                new KeyValuePair<string, object>(JwtClaims.JwtId, Convert.ToBase64String(Gateway.NextBytes(32))),
                new KeyValuePair<string, object>(JwtClaims.Subject, this.account.UserName + "@" + Gateway.Domain),
                new KeyValuePair<string, object>(JwtClaims.IssueTime, IssuedAt),
                new KeyValuePair<string, object>(JwtClaims.ExpirationTime, Expires),
                new KeyValuePair<string, object>(JwtClaims.Issuer, Gateway.Domain)
            };
 
            if (Encrypted)
            {
                if (!string.IsNullOrWhiteSpace(this.account.EMail))
                    Claims.Add(new KeyValuePair<string, object>(JwtClaims.EMail, this.account.EMail));
 
                if (!string.IsNullOrWhiteSpace(this.account.PhoneNr))
                    Claims.Add(new KeyValuePair<string, object>(JwtClaims.PhoneNumber, this.account.PhoneNr));
 
                if (this.account.CanRelayMessages)
                    Claims.Add(new KeyValuePair<string, object>(JwtClaims.Entitlements, "+" + SmtpServer.SmtpRelayPrivilegeID.Replace(".", "\\.")));
            }
 
            return Task.FromResult<IEnumerable<KeyValuePair<string, object>>>(Claims);
        }
 
        public async Task<string> CreateToken(JwtFactory Factory, bool Encrypted)
        {
            IEnumerable<KeyValuePair<string, object>> Claims = await this.CreateClaims(Encrypted);
            if (Claims is null)
                return null;
 
            return Factory.Create(Claims);
        }
    }
}