Merge pull request #5 from MarimerLLC/may25

May25

Author: rockfordlhotka

labs/05 - State Management/BlazorHolState/BlazorHolState/BlazorHolState/Controllers/StateController.cs

@@ -1,7 +1,7 @@
 using BlazorHolState;
 using Microsoft.AspNetCore.Mvc;
 
-namespace WebApi1.Controllers
+namespace BlazorHolState.Controllers
 {
     [ApiController]
     [Route("[controller]")]

labs/06 - Authn Fundamentals/BlazorHolAuthentication/BlazorHolAuthentication/Components/Pages/Login.razor

@@ -22,7 +22,7 @@
           <label>Password</label>
           <InputText type="password" @bind-Value="userInfo.Password" />
       </div>
-      <button>Login</button>
+      <button type="submit">Login</button>
   </EditForm>
 </div>
 

labs/07 - Authn EntraId/BlazorHolEntraId/BlazorHolEntraId/Pages/Home.razor

@@ -23,26 +23,27 @@
                 following:
             </p>
 
-            <p><pre><code class="language-js">@JsonSerializer.Serialize(graphApiResponse, new JsonSerializerOptions { WriteIndented = true })</code></pre></p>
+            <p><pre><code class="language-js">@JsonResult</code></pre></p>
         }
+    </Authorized>
+</AuthorizeView>
 
-        @code {
-        private JsonDocument? graphApiResponse = null;
+@code {
+    private JsonDocument? graphApiResponse = null;
+    private string? JsonResult { get; set; }
 
-        protected override async Task OnInitializedAsync()
+    protected override async Task OnInitializedAsync()
+    {
+        try
         {
-            try
-            {
-                using var response = await Http.GetAsync("https://graph.microsoft.com/v1.0/me");
-                response.EnsureSuccessStatusCode();
-                graphApiResponse = await response.Content.ReadFromJsonAsync<JsonDocument>().ConfigureAwait(false);
-            }
-            catch (AccessTokenNotAvailableException exception)
-            {
-                exception.Redirect();
-            }
+            using var response = await Http.GetAsync("https://graph.microsoft.com/v1.0/me");
+            response.EnsureSuccessStatusCode();
+            graphApiResponse = await response.Content.ReadFromJsonAsync<JsonDocument>().ConfigureAwait(false);
+            JsonResult = JsonSerializer.Serialize(graphApiResponse, new JsonSerializerOptions { WriteIndented = true });
         }
-
+        catch (AccessTokenNotAvailableException exception)
+        {
+            exception.Redirect();
         }
-    </Authorized>
-</AuthorizeView>
+    }
+}

labs/07 - Authn EntraId/readme.md

@@ -66,6 +66,12 @@ builder.Services.AddScoped(sp =>
 await builder.Build().RunAsync();
 ```
 
+In `_Imports.razor` file, add the following code:
+
+```razor
+@using Microsoft.AspNetCore.Components.Authorization
+```
+
 3. Open the `wwwroot/index.html` file
 4. Add the following code near the bottom where other `<script>` tags exist:
 

labs/08 - Authz/BlazorHolAuthentication/BlazorHolAuthentication/Components/Pages/Login.razor

@@ -13,22 +13,22 @@
 <h1>Login</h1>
 
 <div>
-  <EditForm Model="userInfo" OnSubmit="LoginUser" FormName="loginform">
-      <div>
-          <label>Username</label>
-          <InputText @bind-Value="userInfo.Username" />
-      </div>
-      <div>
-          <label>Password</label>
-          <InputText type="password" @bind-Value="userInfo.Password" />
-      </div>
-      <button>Login</button>
-  </EditForm>
+    <EditForm Model="userInfo" OnSubmit="LoginUser" FormName="loginform">
+        <div>
+            <label>Username</label>
+            <InputText @bind-Value="userInfo.Username" />
+        </div>
+        <div>
+            <label>Password</label>
+            <InputText type="password" @bind-Value="userInfo.Password" />
+        </div>
+        <button>Login</button>
+    </EditForm>
 </div>
 
 <div style="background-color:lightgray">
-  <p>User identities:</p>
-  <p>admin, admin</p>
+    <p>User identities:</p>
+    <p>admin, admin</p>
 </div>
 
 <div><p class="alert-danger">@Message</p></div>
@@ -65,6 +65,9 @@
             var roles = UserValidation.GetRoles(userInfo.Username);
             foreach (var item in roles)
                 claims.Add(new Claim(ClaimTypes.Role, item));
+            
+            claims.Add(new Claim(ClaimTypes.Country, "FR"));
+
             identity.AddClaims(claims);
             principal = new ClaimsPrincipal(identity);
 

labs/08 - Authz/BlazorHolAuthentication/BlazorHolAuthentication/Components/Pages/Logout.razor

@@ -1,9 +1,12 @@
 @page "/logout"
 
+@using BlazorHolAuthentication.Services
 @using Microsoft.AspNetCore.Authentication
 @using Microsoft.AspNetCore.Authentication.Cookies
+@using Microsoft.AspNetCore.Mvc
 
 @inject IHttpContextAccessor httpContextAccessor
+@inject AuthenticationStateProvider authenticationStateProvider
 @inject NavigationManager NavigationManager
 
 <h3>Logout</h3>
@@ -16,6 +19,7 @@
         if (principal.Identity is not null && principal.Identity.IsAuthenticated)
         {
             await httpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+            ((CustomAuthenticationStateProvider)authenticationStateProvider).Logout();
         }
         NavigationManager.NavigateTo("/");
     }

labs/08 - Authz/BlazorHolAuthentication/BlazorHolAuthentication/Components/Pages/Weather.razor

@@ -6,6 +6,15 @@
 
 <p>This component demonstrates showing data.</p>
 
+<AuthorizeView Policy="IsInEU">
+    <Authorized>
+        <p>You are EUROPEAN.</p>
+    </Authorized>
+    <NotAuthorized>
+        <p>You are not European.</p>
+    </NotAuthorized>
+</AuthorizeView>
+
 @if (forecasts == null)
 {
     <p><em>Loading...</em></p>

labs/08 - Authz/BlazorHolAuthentication/BlazorHolAuthentication/Policies/EuPolicy.cs

@@ -0,0 +1,32 @@
+namespace BlazorHolAuthentication.Policies;
+
+using Microsoft.AspNetCore.Authorization;
+using System.Security.Claims;
+
+public class EuRequirement : IAuthorizationRequirement
+{
+    // List of EU countries (simplified for demonstration)
+    public readonly string[] EuCountries = new[] { "DE", "FR", "IT", "ES", "NL", "BE", "PL", "SE", "AT" };
+}
+
+
+public class EuHandler : AuthorizationHandler<EuRequirement>
+{
+    protected override Task HandleRequirementAsync(AuthorizationHandlerContext context, EuRequirement requirement)
+    {
+        // Check if the user has a claim indicating their region or country
+        var countryClaim = context.User.FindFirst(
+            claim => claim.Type == ClaimTypes.Country);
+
+        if (countryClaim != null)
+        {
+
+            if (requirement.EuCountries.Contains(countryClaim.Value))
+            {
+                context.Succeed(requirement);
+            }
+        }
+
+        return Task.CompletedTask;
+    }
+}

labs/08 - Authz/BlazorHolAuthentication/BlazorHolAuthentication/Program.cs

@@ -1,6 +1,10 @@
 using BlazorHolAuthentication.Components;
+using BlazorHolAuthentication.Policies;
 using BlazorHolAuthentication.Services;
 using Microsoft.AspNetCore.Authentication.Cookies;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Components.Authorization;
+using Microsoft.Extensions.Options;
 using System.Security.Claims;
 
 var builder = WebApplication.CreateBuilder(args);
@@ -9,6 +13,14 @@
 builder.Services.AddRazorComponents()
     .AddInteractiveServerComponents();
 
+builder.Services.AddSingleton<AuthenticationStateProvider, CustomAuthenticationStateProvider>();
+
+builder.Services.AddAuthorizationBuilder()
+    .AddPolicy("IsAdmin", policy => policy.RequireClaim(ClaimTypes.Role, "Admin"))
+    .AddPolicy("IsInEU", policy =>
+        policy.Requirements.Add(new EuRequirement()));
+
+builder.Services.AddSingleton<IAuthorizationHandler, EuHandler>();
 builder.Services.AddHttpContextAccessor();
 builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
   .AddCookie();

labs/08 - Authz/BlazorHolAuthentication/BlazorHolAuthentication/Services/CustomAuthenticationStateProvider.cs

@@ -0,0 +1,25 @@
+using Microsoft.AspNetCore.Components.Authorization;
+using Microsoft.AspNetCore.Components.Server;
+using System.Security.Claims;
+
+namespace BlazorHolAuthentication.Services
+{
+    public class CustomAuthenticationStateProvider : ServerAuthenticationStateProvider
+    {
+        private readonly ClaimsPrincipal anonymous = new(new ClaimsIdentity());
+
+        public CustomAuthenticationStateProvider()
+        {
+            SetAuthenticationState(Task.FromResult(
+                new AuthenticationState(anonymous)));
+        }
+
+        public void Logout()
+        {
+            var authenticationState = Task.FromResult(
+                new AuthenticationState(anonymous));
+            SetAuthenticationState(authenticationState);
+            NotifyAuthenticationStateChanged(authenticationState);
+        }
+    }
+}