public Task AuthenticateRequestAsync()

in src/JetBrains.Space.AspNetCore/Experimental/WebHooks/EndpointAuthentication/VerifyHttpBearerTokenAuthenticationHandler.cs [26:61]

32 lines of code
7 McCabe index (conditional complexity)


    public Task<bool> AuthenticateRequestAsync(
        SpaceWebHookOptions options,
        HttpContext context,
        string requestBody,
        ApplicationPayload? payload)
    {
        var verificationOptions = options.VerifyHttpBearerToken;
        if (verificationOptions is not { IsEnabled: true })
        {
            return Task.FromResult(true);
        }
        if (string.IsNullOrEmpty(verificationOptions.BearerToken))
        {
                
            _logger.LogError("Endpoint request validation failed. " + nameof(SpaceWebHookOptions.VerifyHttpBearerToken) + " is enabled, but no " + nameof(VerifyHttpBearerTokenOptions.BearerToken) + " is configured");
            return Task.FromResult(false);
        }
            
        // Verify header
#if NET6_0_OR_GREATER
        foreach (var authorizationHeader in context.Request.Headers.Authorization)
#else
            foreach (var authorizationHeader in context.Request.Headers["Authorization"])
#endif
        {
            var authorizationHeaderValue = AuthenticationHeaderValue.Parse(authorizationHeader);
            if (authorizationHeaderValue.Scheme.Equals("Bearer", StringComparison.OrdinalIgnoreCase) &&
                authorizationHeaderValue.Parameter == verificationOptions.BearerToken)
            {
                return Task.FromResult(true);
            }
        }

        _logger.LogError("The HTTP request bearer token does not match the configured bearer token. Make sure the endpoint signing key is configured correctly in your Space organization, and the current application");
        return Task.FromResult(false);
    }