protected async override Task HandleAuthenticateAsync()

in DeviceBridge/Common/Authentication/TokenAuthenticationHandler.cs [30:59]

24 lines of code
3 McCabe index (conditional complexity)


        protected async override Task<AuthenticateResult> HandleAuthenticateAsync()
        {
            var tmpLogger = this.logger.WithProperty("cv", Utils.GuidFromString(Request.HttpContext.TraceIdentifier));

            tmpLogger.Info("Starting api key authentication.");

            var masterApiKey = await this.secretsProvider.GetApiKey(this.logger);
            var headers = Request.Headers;
            var apiKey = headers["x-api-key"];

            if (string.IsNullOrEmpty(apiKey))
            {
                tmpLogger.Info("Api key is null");
                return AuthenticateResult.Fail("Api key is null");
            }

            bool isValidToken = masterApiKey.Equals(apiKey); // check token here

            if (!isValidToken)
            {
                tmpLogger.Info($"Apikey authentication failed.");
                return AuthenticateResult.Fail($"Apikey authentication failed.");
            }

            var claims = new[] { new Claim("apiKey", apiKey) };
            var identity = new ClaimsIdentity(claims, nameof(TokenAuthenticationHandler));
            var ticket = new AuthenticationTicket(new ClaimsPrincipal(identity), this.Scheme.Name);
            tmpLogger.Info("Successfully authenticated using api key.");
            return AuthenticateResult.Success(ticket);
        }