mirror of
https://github.com/DorkSquadRR/DorkNet.git
synced 2026-10-25 15:08:47 -07:00
Alexa
4edf25b2d5
Targets Rec Room 2020.12.18 client.
Re-import after adding:
- DorkNet.ClientMod/dorknet-clientmod.json.template — config schema
the launcher's manifest-driven patcher renders into UserData/.
- tools/build-patcher-zip.ps1 — produces the dorknet-clientpatch-{key}.zip
Release asset the launcher fetches.
- .github/workflows/release.yml — auto-publishes both Release assets
on v1-december-* tag push.
Scrubbed via maintainer-side scrub-for-public.ps1: same drop rules as
the prior import, plus build-patcher-zip.ps1 added to the tools/
allow-list so it survives the scrub.
46 lines
1.9 KiB
C#
46 lines
1.9 KiB
C#
using Microsoft.AspNetCore.Mvc;
|
|
using System.Security.Claims;
|
|
|
|
namespace DorkNet.Server.Auth;
|
|
|
|
/// <summary>
|
|
/// Single canonical place for "who is the bearer-resolved player on this
|
|
/// request." Replaces the per-controller copy-paste of:
|
|
/// <code>
|
|
/// private long CurrentPlayerId =>
|
|
/// long.Parse(User.FindFirstValue(ClaimTypes.NameIdentifier)!);
|
|
/// </code>
|
|
/// which historically existed in 10 controllers and silently NPE-bombed
|
|
/// the action when the bearer was missing instead of returning 401.
|
|
/// </summary>
|
|
public static class ControllerBaseExtensions
|
|
{
|
|
/// <summary>
|
|
/// Returns the bearer-resolved player id, or null when the caller is
|
|
/// anonymous / the bearer is malformed. Use on optional-auth endpoints.
|
|
/// </summary>
|
|
public static long? CurrentPlayerId(this ControllerBase controller) =>
|
|
CurrentPlayerId(controller.User);
|
|
|
|
/// <summary>Overload for non-controller callers (filters,
|
|
/// middleware) that hold a <see cref="ClaimsPrincipal"/> directly.</summary>
|
|
public static long? CurrentPlayerId(ClaimsPrincipal user)
|
|
{
|
|
var claim = user.FindFirstValue(ClaimTypes.NameIdentifier);
|
|
return long.TryParse(claim, out var id) ? id : null;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Returns the bearer-resolved player id; throws
|
|
/// <see cref="UnauthorizedAccessException"/> when missing. Use on
|
|
/// <c>[Authorize]</c>-decorated endpoints where a missing id is a
|
|
/// programming error (the framework should have already 401'd).
|
|
/// </summary>
|
|
public static long RequireCurrentPlayerId(this ControllerBase controller) =>
|
|
controller.CurrentPlayerId()
|
|
?? throw new UnauthorizedAccessException(
|
|
"Bearer token claim 'NameIdentifier' is missing or non-numeric. " +
|
|
"If this fired on an [Authorize] endpoint, JWT validation upstream " +
|
|
"is misconfigured.");
|
|
}
|