Adding security

2026-03-24 09:49:29 -05:00
parent 69648a3b8f
commit a3b74e62a9
59 changed files with 2480 additions and 0 deletions
@@ -0,0 +1,49 @@
+using System;
+using LCU.Library.Internal.Security.Models.Configuration;
+using Microsoft.AspNetCore.Authentication;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Options;
+using Microsoft.IdentityModel.Tokens;
+
+namespace LCU.Library.Internal.Security;
+
+public static class AzureAdServiceCollectionExtensions
+{
+    public static AuthenticationBuilder AddAzureAdBearer(this AuthenticationBuilder builder)
+        => builder.AddAzureAdBearer(_ => { });
+
+    public static AuthenticationBuilder AddAzureAdBearer(this AuthenticationBuilder builder, Action<AzureActiveDirectoryOptions> configureOptions)
+    {
+        builder.Services.Configure(configureOptions);
+        builder.Services.AddSingleton<IConfigureOptions<JwtBearerOptions>, ConfigureAzureOptions>();
+        builder.AddJwtBearer();
+        return builder;
+    }
+
+    private class ConfigureAzureOptions : IConfigureNamedOptions<JwtBearerOptions>
+    {
+        private readonly AzureActiveDirectoryOptions _azureOptions;
+
+        public ConfigureAzureOptions(IOptions<AzureActiveDirectoryOptions> azureOptions)
+        {
+            _azureOptions = azureOptions.Value;
+        }
+
+        public void Configure(string name, JwtBearerOptions options)
+        {
+            options.Audience = _azureOptions.ClientId;
+            options.Authority = $"{_azureOptions.Instance}{_azureOptions.TenantId}";
+
+            options.TokenValidationParameters = new TokenValidationParameters
+            {
+                ValidAudience = _azureOptions.ValidAudience
+            };
+        }
+
+        public void Configure(JwtBearerOptions options)
+        {
+            Configure(Options.DefaultName, options);
+        }
+    }
+}