AdminAuthService.cs

이 파일의 문서화 페이지로 가기

using System.IO;
using System.Text.Json;
using Dreamine.Identity;
using DreamineWeb.Models;
 
namespace DreamineWeb.Services;

public class AdminAuthService
{
    private readonly string _filePath;
    private readonly string _fallbackPassword;
    private string? _overridePassword;

    private static readonly JsonSerializerOptions _json = new() { WriteIndented = true };

    public AdminAuthService(DreamineOptions opts)
    {
        _fallbackPassword = opts.SuperAdminPassword;
        _filePath = Path.Combine(opts.ResolvedDataPath, "admin_auth.json");
 
        if (File.Exists(_filePath))
        {
            try
            {
                var doc = JsonSerializer.Deserialize<AdminAuthData>(File.ReadAllText(_filePath));
                _overridePassword = doc?.Password;
            }
            catch { }
        }
    }

    public bool Verify(string password)
    {
        var storedPassword = _overridePassword ?? _fallbackPassword;
        var verification = DreaminePasswordHasher.VerifyPassword(password, storedPassword, out var upgradedHash);
        if (verification is PasswordHashVerificationResult.Failed)
        {
            return false;
        }
 
        if (_overridePassword is not null &&
            verification is PasswordHashVerificationResult.SuccessRehashNeeded &&
            upgradedHash is not null)
        {
            _overridePassword = upgradedHash;
            WriteOverridePassword(upgradedHash);
        }
 
        return true;
    }

    public async Task ChangePasswordAsync(string newPassword)
    {
        _overridePassword = DreaminePasswordHasher.HashPassword(newPassword);
        Directory.CreateDirectory(Path.GetDirectoryName(_filePath)!);
        await File.WriteAllTextAsync(_filePath,
            JsonSerializer.Serialize(new AdminAuthData { Password = _overridePassword }, _json));
    }

    private void WriteOverridePassword(string passwordHash)
    {
        Directory.CreateDirectory(Path.GetDirectoryName(_filePath)!);
        File.WriteAllText(_filePath, JsonSerializer.Serialize(new AdminAuthData { Password = passwordHash }, _json));
    }

    private sealed class AdminAuthData
    {
        public string Password { get; set; } = string.Empty;
    }
}