init

KretaWeb/Security/MvcSessionAuthorizeAttribute.cs

@@ -0,0 +1,126 @@
+using System;
+using System.Linq;
+using System.Net;
+using System.Web.Mvc;
+using Kreta.Enums.ManualEnums;
+using Kreta.Framework;
+using Kreta.Web.Areas.Adminisztracio.Controllers;
+using Kreta.Web.Classes;
+using Kreta.Web.Configuration;
+using Kreta.Web.Controllers;
+using Kreta.Web.Controllers.Logic;
+
+namespace Kreta.Web.Security
+{
+    public class MvcSessionAuthorizeAttribute : AuthorizeAttribute
+    {
+        public override void OnAuthorization(AuthorizationContext filterContext)
+        {
+            if (SkipExistsOrganization(filterContext))
+            {
+                return;
+            }
+
+            if (SkipAuthorization(filterContext))
+            {
+                return;
+            }
+
+            if (AuthorizeSessionVariables())
+            {
+                if (filterContext.Controller is LayoutController && filterContext.ActionDescriptor.ActionName.Equals("GetRemainingTime"))
+                    return;
+                SessionHandler.UpdateSessionTime();
+            }
+            else
+            {
+                if (!filterContext.HttpContext.Request.IsAjaxRequest())
+                {
+                    if (filterContext.HttpContext.Request.Headers.AllKeys.Contains(Enums.ManualEnums.KliensTipusEnum.Mobile.ToString()))
+                    {
+                        filterContext.Result = new HttpStatusCodeResult((int)CustomHTTPStatusEnum.NincsBelepve);
+                    }
+                    else
+                    {
+                        var url = new UrlHelper(filterContext.RequestContext);
+                        var idpConfiguration = DependencyResolver.Current.GetService<IIdpConfiguration>();
+                        if (idpConfiguration.LoginEnabled)
+                        {
+                            MasterLayoutLogic.LogOut();
+                            filterContext.Result = new RedirectResult(url.Action("Index", "Home", new { area = string.Empty }));
+                        }
+                        else
+                        {
+                            filterContext.Result = new RedirectResult(url.Action("Index", "Login", new { area = "Adminisztracio" }));
+                        }
+                    }
+                }
+                else
+                {
+                    filterContext.Result = new HttpStatusCodeResult(HttpStatusCode.Unauthorized);
+                    filterContext.HttpContext.Response.SuppressFormsAuthenticationRedirect = true;
+                }
+            }
+        }
+
+        private bool AuthorizeSessionVariables()
+        {
+            if (!ClaimData.IsAuthenticated)
+                return false;
+            if (!SDAServer.Instance.SessionManager.IsSessionAlive(ClaimData.SessionId))
+                return false;
+            return true;
+        }
+
+        private bool SkipAuthorization(AuthorizationContext filterContext)
+        {
+            var idpConfiguration = DependencyResolver.Current.GetService<IIdpConfiguration>();
+            if (idpConfiguration.LoginEnabled)
+            {
+                if (filterContext.Controller is HomeController && filterContext.ActionDescriptor.ActionName.Equals("Index"))
+                {
+                    if (ClaimData.IsAuthenticated && !SDAServer.Instance.SessionManager.IsSessionAlive(ClaimData.SessionId))
+                        return false;
+                    return true;
+                }
+            }
+            else
+            {
+                if (filterContext.Controller is LoginController && filterContext.ActionDescriptor.ActionName.Equals("Index"))
+                    return true;
+            }
+
+            return (IsAllowAnonymous(filterContext) || IsMvcSiteMapCalls(filterContext));
+        }
+
+        private static bool IsAllowAnonymous(AuthorizationContext filterContext)
+        {
+            bool result = filterContext.ActionDescriptor.IsDefined(typeof(AllowAnonymousAttribute), inherit: true)
+                          || filterContext.ActionDescriptor.ControllerDescriptor.IsDefined(typeof(AllowAnonymousAttribute), inherit: true);
+
+            return result;
+        }
+
+        private static bool IsMvcSiteMapCalls(AuthorizationContext filterContext)
+        {
+            return filterContext.HttpContext.Request is MvcSiteMapProvider.Web.Mvc.SiteMapHttpRequest;
+        }
+
+        /// <summary>
+        /// Megvizsgáljuk, hogy létezik-e az URL-ben megadott intézmény azonosító. Ha nem, akkor hiba!
+        /// A bejelentkezési oldalra sem szabad irányítani.
+        /// </summary>
+        /// <param name="filterContext"></param>
+        /// <returns></returns>
+        static bool SkipExistsOrganization(AuthorizationContext filterContext)
+        {
+            bool letezoIntezmeny = KretaServer.KretaServer.Instance.GetOsszesIntezmeny().Contains(LoginManager.OrganizationIdentifier, StringComparer.InvariantCultureIgnoreCase);
+            if (letezoIntezmeny == false && filterContext.RequestContext.RouteData.Values["controller"].ToString() != "HibaOldal")
+            {
+                throw new InvalidConfigurationException($"Az intézmény nem létezik: {LoginManager.OrganizationIdentifier}");
+            }
+
+            return false;
+        }
+    }
+}