AuthenticationContext.cs

Go to the documentation of this file.

using System;
using System.Linq;
 
using Tgstation.Server.Api.Rights;
using Tgstation.Server.Host.Models;
 
namespace Tgstation.Server.Host.Security
{
    sealed class AuthenticationContext : IAuthenticationContext
    {
        public User User { get; }
 
        public PermissionSet PermissionSet { get; }
 
        public InstancePermissionSet InstancePermissionSet { get; }
 
        public ISystemIdentity SystemIdentity { get; }
 
        public AuthenticationContext()
        {
        }
 
        public AuthenticationContext(ISystemIdentity systemIdentity, User user, InstancePermissionSet instanceUser)
        {
            User = user ?? throw new ArgumentNullException(nameof(user));
            if (systemIdentity == null && User.SystemIdentifier != null)
                throw new ArgumentNullException(nameof(systemIdentity));
            PermissionSet = user.PermissionSet
                ?? user.Group.PermissionSet
                ?? throw new ArgumentException("No PermissionSet provider", nameof(user));
            InstancePermissionSet = instanceUser;
            SystemIdentity = systemIdentity;
        }
 
        public void Dispose() => SystemIdentity?.Dispose();
 
        public ulong GetRight(RightsType rightsType)
        {
            var isInstance = RightsHelper.IsInstanceRight(rightsType);
 
            if (User == null)
                throw new InvalidOperationException("Authentication context has no user!");
 
            if (isInstance && InstancePermissionSet == null)
                return 0;
            var rightsEnum = RightsHelper.RightToType(rightsType);
 
            // use the api versions because they're the ones that contain the actual properties
            var typeToCheck = isInstance ? typeof(InstancePermissionSet) : typeof(PermissionSet);
 
            var nullableType = typeof(Nullable<>);
            var nullableRightsType = nullableType.MakeGenericType(rightsEnum);
 
            var prop = typeToCheck.GetProperties().Where(x => x.PropertyType == nullableRightsType).First();
 
            var right = prop.GetMethod.Invoke(isInstance ? (object)InstancePermissionSet : PermissionSet, Array.Empty<object>());
 
            if (right == null)
                throw new InvalidOperationException("A user right was null!");
            return (ulong)right;
        }
    }
}