Initial commit
1 files changed, 71 insertions, 0 deletions
diff --git a/MatrixMediaGate/Services/AuthValidator.cs b/MatrixMediaGate/Services/AuthValidator.cs
new file mode 100644
index 0000000..08ccd14
--- /dev/null
+++ b/MatrixMediaGate/Services/AuthValidator.cs
@@ -0,0 +1,71 @@
+using System.Net;
+using System.Text.Json;
+
+namespace MatrixMediaGate.Services;
+
+public class AuthValidator(ILogger<AuthValidator> logger, ProxyConfiguration cfg, IHttpContextAccessor ctx) {
+ private static Dictionary<string, DateTime> _authCache = new();
+
+ public async Task<bool> UpdateAuth() {
+ if (ctx.HttpContext is null) return false;
+ if (ctx.HttpContext.Connection.RemoteIpAddress is null) return false;
+ var remote = ctx.HttpContext.Connection.RemoteIpAddress.ToString();
+
+
+ if (_authCache.TryGetValue(remote, out var value)) {
+ if (value > DateTime.Now.AddSeconds(30)) {
+ return true;
+ }
+
+ _authCache.Remove(remote);
+ }
+
+ string? token = getToken();
+ if (token is null) return false;
+
+ using var hc = new HttpClient();
+ using var req = new HttpRequestMessage(HttpMethod.Get, $"{cfg.Upstream}/_matrix/client/v3/account/whoami?access_token={token}");
+ req.Headers.Host = cfg.Host;
+ var response = await hc.SendAsync(req);
+
+ if (response.Content.Headers.ContentType?.MediaType != "application/json") return false;
+ var content = await response.Content.ReadAsStringAsync();
+ var json = JsonDocument.Parse(content);
+ if (json.RootElement.TryGetProperty("user_id", out var userId)) {
+ _authCache[remote] = DateTime.Now.AddMinutes(5);
+ logger.LogInformation("Authenticated {userId} on {remote}, expiring at {time}", userId, remote, _authCache[remote]);
+ return true;
+ }
+
+ return false;
+ }
+
+ public bool ValidateAuth() {
+ if (ctx.HttpContext is null) return false;
+ if (ctx.HttpContext.Connection.RemoteIpAddress is null) return false;
+ var remote = ctx.HttpContext.Connection.RemoteIpAddress.ToString();
+
+ if (_authCache.ContainsKey(remote)) {
+ if (_authCache[remote] > DateTime.Now) {
+ return true;
+ }
+
+ _authCache.Remove(remote);
+ }
+
+ return false;
+ }
+
+ private string? getToken() {
+ if (ctx is null) return null;
+ if (ctx.HttpContext.Request.Headers.ContainsKey("Authorization")) {
+ return ctx.HttpContext.Request.Headers["Authorization"].ToString().Split(' ', 2)[1];
+ }
+ else if (ctx.HttpContext.Request.Query.ContainsKey("access_token")) {
+ return ctx.HttpContext.Request.Query["access_token"]!;
+ }
+ else {
+ return null;
+ }
+ }
+}
\ No newline at end of file
|
