blob: 08ccd147e1150a5d16b6150237990c7ac3901938 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
using System.Net;
using System.Text.Json;
namespace MatrixMediaGate.Services;
public class AuthValidator(ILogger<AuthValidator> logger, ProxyConfiguration cfg, IHttpContextAccessor ctx) {
private static Dictionary<string, DateTime> _authCache = new();
public async Task<bool> UpdateAuth() {
if (ctx.HttpContext is null) return false;
if (ctx.HttpContext.Connection.RemoteIpAddress is null) return false;
var remote = ctx.HttpContext.Connection.RemoteIpAddress.ToString();
if (_authCache.TryGetValue(remote, out var value)) {
if (value > DateTime.Now.AddSeconds(30)) {
return true;
}
_authCache.Remove(remote);
}
string? token = getToken();
if (token is null) return false;
using var hc = new HttpClient();
using var req = new HttpRequestMessage(HttpMethod.Get, $"{cfg.Upstream}/_matrix/client/v3/account/whoami?access_token={token}");
req.Headers.Host = cfg.Host;
var response = await hc.SendAsync(req);
if (response.Content.Headers.ContentType?.MediaType != "application/json") return false;
var content = await response.Content.ReadAsStringAsync();
var json = JsonDocument.Parse(content);
if (json.RootElement.TryGetProperty("user_id", out var userId)) {
_authCache[remote] = DateTime.Now.AddMinutes(5);
logger.LogInformation("Authenticated {userId} on {remote}, expiring at {time}", userId, remote, _authCache[remote]);
return true;
}
return false;
}
public bool ValidateAuth() {
if (ctx.HttpContext is null) return false;
if (ctx.HttpContext.Connection.RemoteIpAddress is null) return false;
var remote = ctx.HttpContext.Connection.RemoteIpAddress.ToString();
if (_authCache.ContainsKey(remote)) {
if (_authCache[remote] > DateTime.Now) {
return true;
}
_authCache.Remove(remote);
}
return false;
}
private string? getToken() {
if (ctx is null) return null;
if (ctx.HttpContext.Request.Headers.ContainsKey("Authorization")) {
return ctx.HttpContext.Request.Headers["Authorization"].ToString().Split(' ', 2)[1];
}
else if (ctx.HttpContext.Request.Query.ContainsKey("access_token")) {
return ctx.HttpContext.Request.Query["access_token"]!;
}
else {
return null;
}
}
}
|
