demo user middleware

Author: chrisK00

BugLab.API/Middlewares/DemoUserMiddleware.cs

@@ -0,0 +1,37 @@
+using BugLab.Data.Extensions;
+using BugLab.Shared.Responses;
+using Microsoft.AspNetCore.Hosting;
+using Microsoft.AspNetCore.Http;
+using Microsoft.Extensions.Hosting;
+using System.Threading.Tasks;
+
+namespace BugLab.API.Middlewares
+{
+ public class DemoUserMiddleware
+ {
+ private readonly RequestDelegate _next;
+ private readonly IWebHostEnvironment _env;
+
+ public DemoUserMiddleware(RequestDelegate next, IWebHostEnvironment env)
+ {
+ _next = next;
+ _env = env;
+ }
+
+ public async Task InvokeAsync(HttpContext context)
+ {
+ var requestType = context.Request.Method;
+ var userId = context.User.UserId();
+
+ if (requestType == "GET" || _env.IsDevelopment() || string.IsNullOrWhiteSpace(userId) || userId != "757b2158-40c3-4917-9523-5861973a4d2e")
+ {
+ await _next(context);
+ return;
+ }
+
+ context.Response.StatusCode = StatusCodes.Status403Forbidden;
+ var response = new ApiError($"You are not allowed to make a {requestType} request using the demo user");
+ await context.Response.WriteAsJsonAsync(response);
+ }
+ }
+}

BugLab.API/Startup.cs

@@ -41,8 +41,9 @@ public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
  app.UseSwagger();
  app.UseSwaggerUI(c => c.SwaggerEndpoint("/swagger/v1/swagger.json", "BugLab.API v1"));
  }
- 
+
  app.UseMiddleware<ExceptionMiddleware>();
+
  app.UseHttpsRedirection();
 
  app.UseCors();
@@ -51,6 +52,7 @@ public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
 
  app.UseAuthentication();
  app.UseAuthorization();
+ app.UseMiddleware<DemoUserMiddleware>();
 
  app.UseEndpoints(endpoints =>
  {