huahaofeng
/
aspnetcore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

React to forbid changes

This commit is contained in:
Hao Kung 2017-05-25 18:37:27 -07:00
parent d6a653145d
commit 273b25fb3a
2 changed files with 12 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
src/Microsoft.AspNetCore.Server.IISIntegration/AuthenticationHandler.cs
View File

@ -2,6 +2,7 @@
// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information. // Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
using System; using System;
using System.Security.Claims;
using System.Globalization; using System.Globalization;
using System.Security.Principal; using System.Security.Principal;
using System.Threading.Tasks; using System.Threading.Tasks;
@ -58,29 +59,16 @@ namespace Microsoft.AspNetCore.Server.IISIntegration
return _user; return _user;
} }
public Task ChallengeAsync(AuthenticationProperties properties)
public Task ChallengeAsync(ChallengeContext context)
{ {
switch (context.Behavior) // We would normally set the www-authenticate header here, but IIS does that for us.
{ _context.Response.StatusCode = 401;
case ChallengeBehavior.Automatic: return TaskCache.CompletedTask;
// If there is a principal already, invoke the forbidden code path }
if (GetUser() == null)
{ public Task ForbidAsync(AuthenticationProperties properties)
goto case ChallengeBehavior.Unauthorized; {
} _context.Response.StatusCode = 403;
else
{
goto case ChallengeBehavior.Forbidden;
}
case ChallengeBehavior.Unauthorized:
context.HttpContext.Response.StatusCode = 401;
// We would normally set the www-authenticate header here, but IIS does that for us.
break;
case ChallengeBehavior.Forbidden:
context.HttpContext.Response.StatusCode = 403;
break;
}
return TaskCache.CompletedTask; return TaskCache.CompletedTask;
} }
@ -91,12 +79,12 @@ namespace Microsoft.AspNetCore.Server.IISIntegration
return TaskCache.CompletedTask; return TaskCache.CompletedTask;
} }
public Task SignInAsync(SignInContext context) public Task SignInAsync(ClaimsPrincipal user, AuthenticationProperties properties)
{ {
throw new NotSupportedException(); throw new NotSupportedException();
} }
public Task SignOutAsync(SignOutContext context) public Task SignOutAsync(AuthenticationProperties properties)
{ {
return TaskCache.CompletedTask; return TaskCache.CompletedTask;
} }

1
test/Microsoft.AspNetCore.Server.IISIntegration.Tests/Microsoft.AspNetCore.Server.IISIntegration.Tests.csproj
View File

@ -12,7 +12,6 @@
</ItemGroup> </ItemGroup>
<ItemGroup> <ItemGroup>
<PackageReference Include="Microsoft.AspNetCore.Authentication.Core" Version="$(AspNetCoreVersion)" />
<PackageReference Include="Microsoft.AspNetCore.TestHost" Version="$(AspNetCoreVersion)" /> <PackageReference Include="Microsoft.AspNetCore.TestHost" Version="$(AspNetCoreVersion)" />
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="$(TestSdkVersion)" /> <PackageReference Include="Microsoft.NET.Test.Sdk" Version="$(TestSdkVersion)" />
<PackageReference Include="xunit.runner.visualstudio" Version="$(XunitVersion)" /> <PackageReference Include="xunit.runner.visualstudio" Version="$(XunitVersion)" />