32 lines
1.0 KiB
C#
32 lines
1.0 KiB
C#
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.AspNetCore.Mvc.Filters;
|
|
using Newsbot.Collector.Domain.Consts;
|
|
|
|
namespace Newsbot.Collector.Api.Filters;
|
|
|
|
[AttributeUsage(AttributeTargets.Class| AttributeTargets.Method)]
|
|
public class ApiKeyAuthAttribute : Attribute, IAsyncActionFilter
|
|
{
|
|
private const string ApiKeyHeaderName = "X-API-KEY";
|
|
|
|
public async Task OnActionExecutionAsync(ActionExecutingContext context, ActionExecutionDelegate next)
|
|
{
|
|
if (!context.HttpContext.Request.Headers.TryGetValue(ApiKeyHeaderName, out var foundKey))
|
|
{
|
|
context.Result = new BadRequestResult();
|
|
return;
|
|
}
|
|
|
|
var config = context.HttpContext.RequestServices.GetRequiredService<IConfiguration>();
|
|
var apiKeys = config.GetValue<string[]>(ConfigConst.ApiKeys);
|
|
|
|
foreach (var key in apiKeys ?? Array.Empty<string?>())
|
|
{
|
|
if (key != foundKey) continue;
|
|
await next();
|
|
return;
|
|
}
|
|
|
|
context.Result = new BadRequestResult();
|
|
}
|
|
} |