JwtMiddleware berakva

2025-03-14 10:25:24 +01:00
parent 9d0a577c1f
commit 52ac278316
6 changed files with 73 additions and 15 deletions
@@ -0,0 +1,42 @@
+namespace WorkFlowCheck.API.Middleware
+{
+    public class ApiKeyMiddleware
+    {
+        private readonly RequestDelegate _next;
+        private const string ApiKeyHeaderName = "X-Api-Key";
+        private readonly ILogger<ApiKeyMiddleware> _logger;
+
+        public ApiKeyMiddleware(RequestDelegate next, ILogger<ApiKeyMiddleware> logger)
+        {
+            _next = next;
+            _logger = logger;
+        }
+
+        public async Task InvokeAsync(HttpContext context)
+        {
+            if (!context.Request.Headers.TryGetValue(ApiKeyHeaderName, out var extractedApiKey))
+            {
+                _logger.LogWarning("API Key is missing.");
+                context.Response.StatusCode = 401; // Unauthorized
+                context.Response.ContentType = "text/html; charset=utf-8";
+                await context.Response.WriteAsync("API Key hiányzik.");
+                return;
+            }
+
+            var appSettings = context.RequestServices.GetRequiredService<IConfiguration>();
+            var apiKey = appSettings.GetValue<string>("ApiKey");
+
+            if (!apiKey.Equals(extractedApiKey))
+            {
+                _logger.LogWarning("Invalid API Key.");
+                context.Response.StatusCode = 403; // Forbidden
+                context.Response.ContentType = "text/html; charset=utf-8";
+                await context.Response.WriteAsync("Helytelen API Key.");
+                return;
+            }
+
+            await _next(context);
+        }
+    }
+
+}