OpenChaynsAuth 1.1.0

Open chayns Auth

This package is to Authenticate your users into your .NET Core project with the chayns AccessToken. You're also able to define wether an admin token will required.

usage

Get the package here: https://www.nuget.org/packages/OpenChaynsAuth/

Mostly the package will be useful in projects when the BackendApi from chayns will be used ("https://github.com/TobitSoftware/chayns-backend")

locationIds

get the locationIds from your site into the console with: chayns.env.site.locationId

UacGroupId

get the Id from your uacGroup at following Endpoint: https://sub50.tobit.com/backend//{YOUR_LOCATIONID}/UserGroup?countUsers=true

using OpenChaynsAuth

[Route("[Controller]")]
    public class TestController : Controller
    {
        [Auth(true)]
        [HttpGet("Admin")]
        public IActionResult testAdmin()
        {
            // Otherwise will return unauthorized / forbidden
            return Ok("Content only accessable for Admins");
        }
        
        [Auth( AsAdmin: true, requiredLocationIds: new[]{ 165509, 16321 })]
        [HttpGet("Admin")]
        public IActionResult testAuthUser()
        {
            // Otherwise will return unauthorized / forbidden
            return Ok("Content Accessable for all Admins on the given locations");
        }

        [Auth( AsAdmin: false )]
        [HttpGet("User")]
        public IActionResult testAuthUser()
        {
            // Otherwise will return unauthorized
            return Ok("Content Accessable for all authenticated users");
        }
        
         [Auth(AsAdmin: false, requiredUacGroups: new[]{ 1, 12, 23 }, requiredLocationIds: new[]{ 165509, 16321 })]
         [HttpGet("UserOnLocation")]
         public IActionResult testAuthUser()
         {
             // Otherwise will return unauthorized
             return Ok("Content Accessable for all authenticated Members of the given groups on the given locationIds");
         }

        [HttpGet("All")]
        public IActionResult testUnauthenticated()
        {
            return Ok("Content Accessable for everyone");
        }
    }

Coming soon

• Own Token validation provider for checking the locationId you'll need with the token credential locationId (to avoid validation with a token from an other site)