Merge pull request #5 from Maciejowski2006/auth

Created authorization

GettingStarted_WeatherAPI/Endpoints/GetWeather.cs

@@ -4,7 +4,6 @@
 using WeatherAPI.Models;
 using WeatherAPI.Services;
 
-
 namespace WeatherAPI.Endpoints;
 
 public class GetWeather : IEndpoint

SAPI/Config.cs

@@ -14,13 +14,11 @@ public static void Init()
 		if (File.Exists(configFile))
 		{
 			if (ReadConfig().ConfigVersion != new ConfigFile().ConfigVersion)
-			{
 				CreateConfig(true);
-			}
+
 			return;
 		}
 		CreateConfig();
-
 	}
 	private static void CreateConfig(bool update = false)
 	{

SAPI/SAPI.csproj

@@ -10,11 +10,11 @@
         <Copyright>Copyright © Maciejowski 2022</Copyright>
         <PackageLicenseUrl>https://github.com/Maciejowski2006/SAPI/blob/master/LICENSE.md</PackageLicenseUrl>
         <RepositoryUrl>https://github.com/Maciejowski2006/SAPI</RepositoryUrl>
-        <PackageVersion>4.0.0</PackageVersion>
+        <PackageVersion>5.0.0</PackageVersion>
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Newtonsoft.Json" Version="13.0.1" />
+        <PackageReference Include="Newtonsoft.Json" Version="13.0.2" />
     </ItemGroup>
 
 </Project>

SAPI/Utilities.cs

@@ -19,6 +19,8 @@ public enum HttpStatus
 	BadGateway,
 	ServiceUnavailable
 }
+public record BasicAuthCredentials(string username, string password);
+
 public class Utilities
 {
 	private static Dictionary<HttpStatus, string> httpStatusNames = new()
@@ -136,4 +138,63 @@ public static void Error(HttpStatus httpStatus, ref HttpListenerResponse respons
 
 		response.OutputStream.Write(data, 0, data.Length);
 	}
+
+	/// <summary>
+	/// Checks if user with provided API key exists.
+	/// </summary>
+	/// <param name="keys">List of all API keys authorized</param>
+	/// <param name="headerName">Name of the authorization header(the OpenAPI 3.0 specification says the default should be "X-Api-Key"</param>
+	/// <param name="request">Request ref you got from server - argument in Task()</param>
+	public static bool CheckForKeyAuthorization(List<string> keys, string headerName, ref HttpListenerRequest request)
+	{
+		try
+		{
+			foreach (string key in keys)
+			{
+				if (request.Headers.Get(headerName).Contains(key))
+					return true;
+			}
+			return false;
+		}
+		catch
+		{
+			Console.WriteLine($"Request does not have {headerName}.");
+			return false;
+		}
+	}
+	/// <summary>
+	/// Checks if user with provided credentials exists.
+	/// </summary>
+	/// <param name="credentialsList">List of all usernames and passwords authorized</param>
+	/// <param name="request">Request ref you got from server - argument in Task()</param>
+	public static bool CheckForUserPassAuthorization(List<BasicAuthCredentials> credentialsList, ref HttpListenerRequest request)
+	{
+		try
+		{
+			if (request.Headers.Get("Authorization").Contains("Basic "))
+			{
+				// Get data from header end remove "Basic " at the beginning
+				string authData = request.Headers.GetValues("Authorization").GetValue(0).ToString().Substring(6);
+
+				// Convert from Base64
+				byte[] decodedBase64 = Convert.FromBase64String(authData);
+
+				// Encode in UTF-8
+				string[] auth = Encoding.UTF8.GetString(decodedBase64).Split(':');
+				BasicAuthCredentials userCredentials = new BasicAuthCredentials(auth[0], auth[1]);
+
+				foreach (BasicAuthCredentials credentials in credentialsList)
+				{
+					if (String.Equals(userCredentials.username, credentials.username) && String.Equals(userCredentials.password, credentials.password))
+						return true;
+				}
+			}
+		}
+		catch
+		{
+			Console.WriteLine($"Request does not have Authorization header.");
+			return false;
+		}
+		return false;
+	}
 }

SAPI_Testing/Endpoints/ApiAuth.cs

@@ -0,0 +1,27 @@
+using System.Net;
+using SAPI.Endpoints;
+using SAPI.Utilities;
+
+namespace Testing.Endpoints;
+
+public class ApiAuth : IEndpoint
+{
+
+	public string url { get; } = "auth";
+	public Method method { get; } = Method.GET;
+	public void Task(ref HttpListenerRequest request, ref HttpListenerResponse response, Dictionary<string, string> parameters)
+	{
+		List<BasicAuthCredentials> credentials = new ()
+		{
+			new BasicAuthCredentials("dub", "iel"),
+			new BasicAuthCredentials("user", "pass"),
+			new BasicAuthCredentials("user", "inny"),
+
+		};
+		bool keyAuth = Utilities.CheckForKeyAuthorization(new List<string>() {"api", "bruh", "duh"}, "x-api-key", ref request);
+		bool userPassAuth = Utilities.CheckForUserPassAuthorization(credentials, ref request);
+
+		Console.WriteLine($"Key Auth: {keyAuth}");
+		Console.WriteLine($"User+Password Auth: {userPassAuth}");
+	}
+}

SAPI_Testing/Program.cs

@@ -11,6 +11,7 @@ public static void Main()
 		sapi.MountEndpoint(new SendJson());
 		sapi.MountEndpoint(new DynamicGet());
 		sapi.MountEndpoint(new Html());
+		sapi.MountEndpoint(new ApiAuth());
 
 		sapi.Start();
 	}