diff --git a/src/BackOffice.BFF.Application/BackOffice.BFF.Application.csproj b/src/BackOffice.BFF.Application/BackOffice.BFF.Application.csproj index 44fbade..45732a3 100644 --- a/src/BackOffice.BFF.Application/BackOffice.BFF.Application.csproj +++ b/src/BackOffice.BFF.Application/BackOffice.BFF.Application.csproj @@ -1,19 +1,21 @@ - - net7.0 - enable - + + net7.0 + enable + - - - - - - - - - - + + + + + + + + + + + + diff --git a/src/BackOffice.BFF.Application/Common/Interfaces/IAfrinoIdpService.cs b/src/BackOffice.BFF.Application/Common/Interfaces/IAfrinoIdpService.cs new file mode 100644 index 0000000..882561a --- /dev/null +++ b/src/BackOffice.BFF.Application/Common/Interfaces/IAfrinoIdpService.cs @@ -0,0 +1,14 @@ +using System; +using System.Collections.Generic; +using System.Linq; +using System.Text; +using System.Threading.Tasks; + +namespace BackOffice.BFF.Application.Common.Interfaces; +public interface IAfrinoIdpService +{ + Task SendOtp(string mobile); + Task VerifyOtp(string mobile, string otpCode); + Task CreateUser(string mobile); + Task AddRole(string mobile, string role); +} diff --git a/src/BackOffice.BFF.Application/Common/Mappings/OtpProfile.cs b/src/BackOffice.BFF.Application/Common/Mappings/OtpProfile.cs new file mode 100644 index 0000000..e8a4efa --- /dev/null +++ b/src/BackOffice.BFF.Application/Common/Mappings/OtpProfile.cs @@ -0,0 +1,10 @@ +namespace BackOffice.BFF.Application.Common.Mappings; + +public class OtpProfile : IRegister +{ + void IRegister.Register(TypeAdapterConfig config) + { + //config.NewConfig() + // .Map(dest => dest.FullName, src => $"{src.Firstname} {src.Lastname}"); + } +} diff --git a/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommand.cs b/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommand.cs new file mode 100644 index 0000000..194d92a --- /dev/null +++ b/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommand.cs @@ -0,0 +1,7 @@ +namespace BackOffice.BFF.Application.OtpCQ.Commands.SendOtp; +public record SendOtpCommand : IRequest +{ + //شماره موبایل + public string Mobile { get; init; } + +} \ No newline at end of file diff --git a/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandHandler.cs b/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandHandler.cs new file mode 100644 index 0000000..b23b3ef --- /dev/null +++ b/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandHandler.cs @@ -0,0 +1,22 @@ +using BackOffice.BFF.Application.Common.Interfaces; + +namespace BackOffice.BFF.Application.OtpCQ.Commands.SendOtp; +public class SendOtpCommandHandler : IRequestHandler +{ + private readonly IApplicationContractContext _context; + private readonly IAfrinoIdpService _afrinoIdpService; + + public SendOtpCommandHandler(IApplicationContractContext context, IAfrinoIdpService afrinoIdpService) + { + _context = context; + _afrinoIdpService = afrinoIdpService; + } + + public async Task Handle(SendOtpCommand request, CancellationToken cancellationToken) + { + if (!await _afrinoIdpService.SendOtp(request.Mobile)) + throw new Exception(message: "خطا در ارسال OTP"); + + return Unit.Value; + } +} diff --git a/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandValidator.cs b/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandValidator.cs new file mode 100644 index 0000000..3b38552 --- /dev/null +++ b/src/BackOffice.BFF.Application/OtpCQ/Commands/SendOtp/SendOtpCommandValidator.cs @@ -0,0 +1,16 @@ +namespace BackOffice.BFF.Application.OtpCQ.Commands.SendOtp; +public class SendOtpCommandValidator : AbstractValidator +{ + public SendOtpCommandValidator() + { + RuleFor(model => model.Mobile) + .NotEmpty(); + } + public Func>> ValidateValue => async (model, propertyName) => + { + var result = await ValidateAsync(ValidationContext.CreateWithOptions((SendOtpCommand)model, x => x.IncludeProperties(propertyName))); + if (result.IsValid) + return Array.Empty(); + return result.Errors.Select(e => e.ErrorMessage); + }; +} diff --git a/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommand.cs b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommand.cs new file mode 100644 index 0000000..a890298 --- /dev/null +++ b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommand.cs @@ -0,0 +1,11 @@ +namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode; +public record VerifyOtpCodeCommand : IRequest +{ + //شماره موبایل + public string Mobile { get; init; } + //رمز پویا + public string Code { get; init; } + //شناسه پدر + public long? ParentId { get; init; } + +} \ No newline at end of file diff --git a/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandHandler.cs b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandHandler.cs new file mode 100644 index 0000000..2e37e7b --- /dev/null +++ b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandHandler.cs @@ -0,0 +1,46 @@ +namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode; +using System.IdentityModel.Tokens.Jwt; + +public class VerifyOtpCodeCommandHandler : IRequestHandler +{ + private readonly IApplicationContractContext _context; + private readonly IAfrinoIdpService _afrinoIdpService; + + public VerifyOtpCodeCommandHandler(IApplicationContractContext context, IAfrinoIdpService afrinoIdpService) + { + _context = context; + _afrinoIdpService = afrinoIdpService; + + } + + public async Task Handle(VerifyOtpCodeCommand request, CancellationToken cancellationToken) + { + var response = await _afrinoIdpService.VerifyOtp(mobile: request.Mobile, otpCode: request.Code); + + return new VerifyOtpCodeResponseDto() + { + Token = response + }; + } + public static string? GetUserIdFromToken(string token) + { + if (string.IsNullOrWhiteSpace(token)) + { + throw new ArgumentException("توکن نمی‌تواند خالی باشد."); + } + + var handler = new JwtSecurityTokenHandler(); + + if (!handler.CanReadToken(token)) + { + throw new ArgumentException("توکن نامعتبر است."); + } + + var jwtToken = handler.ReadJwtToken(token); + + // بررسی اینکه آیا claim مربوط به userId موجود است + var userIdClaim = jwtToken.Claims.FirstOrDefault(c => c.Type == "UserId"); + + return userIdClaim?.Value; + } +} diff --git a/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandValidator.cs b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandValidator.cs new file mode 100644 index 0000000..7ad58f4 --- /dev/null +++ b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeCommandValidator.cs @@ -0,0 +1,18 @@ +namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode; +public class VerifyOtpCodeCommandValidator : AbstractValidator +{ + public VerifyOtpCodeCommandValidator() + { + RuleFor(model => model.Mobile) + .NotEmpty(); + RuleFor(model => model.Code) + .NotEmpty(); + } + public Func>> ValidateValue => async (model, propertyName) => + { + var result = await ValidateAsync(ValidationContext.CreateWithOptions((VerifyOtpCodeCommand)model, x => x.IncludeProperties(propertyName))); + if (result.IsValid) + return Array.Empty(); + return result.Errors.Select(e => e.ErrorMessage); + }; +} diff --git a/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeResponseDto.cs b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeResponseDto.cs new file mode 100644 index 0000000..158e27c --- /dev/null +++ b/src/BackOffice.BFF.Application/OtpCQ/Commands/VerifyOtpCode/VerifyOtpCodeResponseDto.cs @@ -0,0 +1,7 @@ +namespace BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode; +public class VerifyOtpCodeResponseDto +{ + //توکن + public string Token { get; set; } + +} \ No newline at end of file diff --git a/src/BackOffice.BFF.Infrastructure/ConfigureServices.cs b/src/BackOffice.BFF.Infrastructure/ConfigureServices.cs index a0f3445..e549cb2 100644 --- a/src/BackOffice.BFF.Infrastructure/ConfigureServices.cs +++ b/src/BackOffice.BFF.Infrastructure/ConfigureServices.cs @@ -1,9 +1,10 @@ -using System.Diagnostics; using BackOffice.BFF.Application.Common.Interfaces; using BackOffice.BFF.Infrastructure.Services; using Microsoft.AspNetCore.Authentication.JwtBearer; using Microsoft.AspNetCore.Http; using Microsoft.Extensions.Configuration; +using Microsoft.IdentityModel.Tokens; +using System.Diagnostics; namespace Microsoft.Extensions.DependencyInjection; @@ -11,6 +12,7 @@ public static class ConfigureServices { public static IServiceCollection AddInfrastructureServices(this IServiceCollection services, IConfiguration configuration) { + services.AddSingleton(); services.AddSingleton(); services.AddInfrastructureGrpcServices(configuration); #region AddAuthentication @@ -19,11 +21,24 @@ public static class ConfigureServices services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme) .AddJwtBearer(jwtBearerOptions => { - jwtBearerOptions.Authority = configuration["Authentication:Authority"]; - jwtBearerOptions.Audience = configuration["Authentication:Audience"]; - jwtBearerOptions.TokenValidationParameters.ValidateAudience = false; - jwtBearerOptions.TokenValidationParameters.ValidateIssuer = true; - jwtBearerOptions.TokenValidationParameters.ValidateIssuerSigningKey = false; + //jwtBearerOptions.Authority = configuration["Authentication:Authority"]; + //jwtBearerOptions.Audience = configuration["Authentication:Audience"]; + //jwtBearerOptions.TokenValidationParameters.ValidateAudience = false; + //jwtBearerOptions.TokenValidationParameters.ValidateIssuer = true; + //jwtBearerOptions.TokenValidationParameters.ValidateIssuerSigningKey = false; + + jwtBearerOptions.SaveToken = true; + jwtBearerOptions.RequireHttpsMetadata = false; + jwtBearerOptions.TokenValidationParameters = new TokenValidationParameters + { + ValidateIssuer = true, + ValidateAudience = true, + ValidateLifetime = true, + ValidateIssuerSigningKey = true, + ValidIssuer = configuration["JwtIssuer"], + ValidAudience = configuration["JwtAudience"], + IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(configuration["JwtSecurityKey"])) + }; try { jwtBearerOptions.Events = new JwtBearerEvents diff --git a/src/BackOffice.BFF.Infrastructure/Services/AfrinoIdpService.cs b/src/BackOffice.BFF.Infrastructure/Services/AfrinoIdpService.cs new file mode 100644 index 0000000..c5c010e --- /dev/null +++ b/src/BackOffice.BFF.Infrastructure/Services/AfrinoIdpService.cs @@ -0,0 +1,156 @@ +using BackOffice.BFF.Application.Common.Interfaces; +using Microsoft.Extensions.Logging; +using System; +using System.Collections.Generic; +using System.Linq; +using System.Net.Http; +using System.Net.Http.Json; +using System.Text; +using System.Threading.Tasks; + +namespace BackOffice.BFF.Infrastructure.Services; +public class AfrinoIdpService : IAfrinoIdpService +{ + private readonly HttpClient _httpClient; + private readonly ILogger _logger; + + public AfrinoIdpService(HttpClient httpClient, ILogger logger) + { + _httpClient = httpClient; + _logger = logger; + + _httpClient.BaseAddress = new Uri("https://ids.afrino.co"); + } + + public async Task SendOtp(string mobile) + { + if (string.IsNullOrWhiteSpace(mobile)) + { + _logger.LogError(message: "شماره موبایل نمی‌تواند خالی باشد!!"); + return false; + } + + var response = await _httpClient.PostAsJsonAsync("api/Auth/send-otp", new() { PhoneNumber = mobile }); + if (!response.IsSuccessStatusCode) + { + var errorMessage = await response.Content.ReadAsStringAsync(); + _logger.LogError($"خطا در ارسال OTP: {errorMessage}"); + return false; + } + + _logger.LogInformation("OTP با موفقیت ارسال شد."); + return true; + } + + public async Task VerifyOtp(string mobile, string otpCode) + { + if (string.IsNullOrWhiteSpace(mobile)) + { + _logger.LogError("شماره موبایل نمی‌تواند خالی باشد!!"); + throw new ArgumentException("شماره موبایل نمی‌تواند خالی باشد!!"); + } + + if (string.IsNullOrWhiteSpace(otpCode)) + { + _logger.LogError("رمز پویا نمی‌تواند خالی باشد!!"); + throw new ArgumentException("رمز پویا نمی‌تواند خالی باشد!!"); + } + + var response = await _httpClient.PostAsJsonAsync("api/Auth/verify-otp", new() { PhoneNumber = mobile, OtpCode = otpCode }); + if (!response.IsSuccessStatusCode) + { + var errorMessage = await response.Content.ReadAsStringAsync(); + _logger.LogError($"خطا در فعال سازی OTP: {errorMessage}"); + throw new HttpRequestException($"خطا در فعال سازی OTP: {errorMessage}"); + } + + var result = await response.Content.ReadFromJsonAsync(); + if (result == null || string.IsNullOrEmpty(result.Token)) + { + _logger.LogError("توکن دریافتی از سرور خالی است."); + throw new Exception("توکن دریافتی از سرور خالی است."); + } + + return result.Token; + } + + public async Task CreateUser(string mobile) + { + if (string.IsNullOrWhiteSpace(mobile)) + { + _logger.LogError(message: "شماره موبایل نمی‌تواند خالی باشد!!"); + throw new ArgumentException("شماره موبایل نمی‌تواند خالی باشد!!"); + } + + var response = await _httpClient.PostAsJsonAsync("api/Auth/create-user", new() { PhoneNumber = mobile }); + if (!response.IsSuccessStatusCode) + { + var errorMessage = await response.Content.ReadAsStringAsync(); + _logger.LogError($"خطا : {errorMessage}"); + throw new HttpRequestException($"خطا : {errorMessage}"); + } + + var result = await response.Content.ReadFromJsonAsync(); + if (result == null || string.IsNullOrEmpty(result.UserId)) + { + _logger.LogError("شناسه کاربر دریافتی از سرور خالی است."); + throw new Exception("شناسه کاربر دریافتی از سرور خالی است."); + } + + return result.UserId; + } + + public async Task AddRole(string mobile, string role) + { + if (string.IsNullOrWhiteSpace(mobile)) + { + _logger.LogError(message: "شماره موبایل نمی‌تواند خالی باشد!!"); + return false; + } + if (string.IsNullOrWhiteSpace(role)) + { + _logger.LogError(message: "نقش نمی‌تواند خالی باشد!!"); + return false; + } + var response = await _httpClient.PostAsJsonAsync("api/Auth/add-role", new() { PhoneNumber = mobile, Role = role }); + if (!response.IsSuccessStatusCode) + { + var errorMessage = await response.Content.ReadAsStringAsync(); + _logger.LogError($"خطا : {errorMessage}"); + return false; + } + + _logger.LogInformation("نقش با موفقیت اضافه شد."); + return true; + } +} + +public class SendOtpRequestDto +{ + public string PhoneNumber { get; set; } +} + +public class VerifyOtpRequestDto +{ + public string PhoneNumber { get; set; } + public string OtpCode { get; set; } +} +public class VerifyOtpResponseDto +{ + public string Token { get; set; } +} +public class CreateUserRequestDto +{ + public string PhoneNumber { get; set; } +} + +public class CreateUserResponseDto +{ + public string UserId { get; set; } +} + +public class AddRoleRequestDto +{ + public string PhoneNumber { get; set; } + public string Role { get; set; } +} \ No newline at end of file diff --git a/src/BackOffice.BFF.WebApi/BackOffice.BFF.WebApi.csproj b/src/BackOffice.BFF.WebApi/BackOffice.BFF.WebApi.csproj index 60859ee..b9eb7c6 100644 --- a/src/BackOffice.BFF.WebApi/BackOffice.BFF.WebApi.csproj +++ b/src/BackOffice.BFF.WebApi/BackOffice.BFF.WebApi.csproj @@ -1,4 +1,4 @@ - + net7.0 @@ -20,6 +20,7 @@ + diff --git a/src/BackOffice.BFF.WebApi/Common/Mappings/OtpProfile.cs b/src/BackOffice.BFF.WebApi/Common/Mappings/OtpProfile.cs new file mode 100644 index 0000000..7c6f21c --- /dev/null +++ b/src/BackOffice.BFF.WebApi/Common/Mappings/OtpProfile.cs @@ -0,0 +1,10 @@ +namespace BackOffice.BFF.WebApi.Common.Mappings; + +public class OtpProfile : IRegister +{ + void IRegister.Register(TypeAdapterConfig config) + { + //config.NewConfig() + // .Map(dest => dest.FullName, src => $"{src.Firstname} {src.Lastname}"); + } +} diff --git a/src/BackOffice.BFF.WebApi/Services/OtpService.cs b/src/BackOffice.BFF.WebApi/Services/OtpService.cs new file mode 100644 index 0000000..25aa82d --- /dev/null +++ b/src/BackOffice.BFF.WebApi/Services/OtpService.cs @@ -0,0 +1,22 @@ +using BackOffice.BFF.Otp.Protobuf.Protos.Otp; +using BackOffice.BFF.WebApi.Common.Services; +using BackOffice.BFF.Application.OtpCQ.Commands.SendOtp; +using BackOffice.BFF.Application.OtpCQ.Commands.VerifyOtpCode; +namespace BackOffice.BFF.WebApi.Services; +public class OtpService : OtpContract.OtpContractBase +{ + private readonly IDispatchRequestToCQRS _dispatchRequestToCQRS; + + public OtpService(IDispatchRequestToCQRS dispatchRequestToCQRS) + { + _dispatchRequestToCQRS = dispatchRequestToCQRS; + } + public override async Task SendOtp(SendOtpRequest request, ServerCallContext context) + { + return await _dispatchRequestToCQRS.Handle(request, context); + } + public override async Task VerifyOtpCode(VerifyOtpCodeRequest request, ServerCallContext context) + { + return await _dispatchRequestToCQRS.Handle(request, context); + } +} diff --git a/src/BackOffice.BFF.WebApi/appsettings.json b/src/BackOffice.BFF.WebApi/appsettings.json index f0820e3..5ca56b5 100644 --- a/src/BackOffice.BFF.WebApi/appsettings.json +++ b/src/BackOffice.BFF.WebApi/appsettings.json @@ -20,5 +20,9 @@ "Authentication": { "Authority": "https://ids.domain.com/", "Audience": "domain_api" + }, + "Kavenegar": { + "Sender": "1000001110100", + "ApiKey": "497263626F32626A48685A6137524C4F78575A766E4C74694A556B79317648424964655030682B554545413D" } } diff --git a/src/BackOffice.BFF.sln b/src/BackOffice.BFF.sln index d7fa122..aa1cd58 100644 --- a/src/BackOffice.BFF.sln +++ b/src/BackOffice.BFF.sln @@ -24,6 +24,8 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BackOffice.BFF.UserRole.Pro EndProject Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BackOffice.BFF.UserAddress.Protobuf", "Protobufs\BackOffice.BFF.UserAddress.Protobuf\BackOffice.BFF.UserAddress.Protobuf.csproj", "{CB811954-E42E-75BB-A02D-689180B72E28}" EndProject +Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BackOffice.BFF.Otp.Protobuf", "Protobufs\BackOffice.BFF.Otp.Protobuf\BackOffice.BFF.Otp.Protobuf.csproj", "{E1833EDA-39E9-C241-2772-E4C7E960AC41}" +EndProject Global GlobalSection(SolutionConfigurationPlatforms) = preSolution Debug|Any CPU = Debug|Any CPU @@ -70,6 +72,10 @@ Global {CB811954-E42E-75BB-A02D-689180B72E28}.Debug|Any CPU.Build.0 = Debug|Any CPU {CB811954-E42E-75BB-A02D-689180B72E28}.Release|Any CPU.ActiveCfg = Release|Any CPU {CB811954-E42E-75BB-A02D-689180B72E28}.Release|Any CPU.Build.0 = Release|Any CPU + {E1833EDA-39E9-C241-2772-E4C7E960AC41}.Debug|Any CPU.ActiveCfg = Debug|Any CPU + {E1833EDA-39E9-C241-2772-E4C7E960AC41}.Debug|Any CPU.Build.0 = Debug|Any CPU + {E1833EDA-39E9-C241-2772-E4C7E960AC41}.Release|Any CPU.ActiveCfg = Release|Any CPU + {E1833EDA-39E9-C241-2772-E4C7E960AC41}.Release|Any CPU.Build.0 = Release|Any CPU EndGlobalSection GlobalSection(SolutionProperties) = preSolution HideSolutionNode = FALSE @@ -81,6 +87,7 @@ Global {B688459B-67B0-3170-79C6-AB05DB7E911D} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8} {75481681-ABB4-2A4C-8901-FE7242DE5B20} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8} {CB811954-E42E-75BB-A02D-689180B72E28} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8} + {E1833EDA-39E9-C241-2772-E4C7E960AC41} = {02EA681E-C7D8-13C7-8484-4AC65E1B71E8} EndGlobalSection GlobalSection(ExtensibilityGlobals) = postSolution SolutionGuid = {0AE1AB4A-3C91-4853-93C2-C2476E79F845} diff --git a/src/Protobufs/BackOffice.BFF.Otp.Protobuf/BackOffice.BFF.Otp.Protobuf.csproj b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/BackOffice.BFF.Otp.Protobuf.csproj new file mode 100644 index 0000000..4aa3f56 --- /dev/null +++ b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/BackOffice.BFF.Otp.Protobuf.csproj @@ -0,0 +1,41 @@ + + + + net7.0 + enable + enable + 0.0.111 + None + False + False + Foursat.BackOffice.BFF.Otp.Protobuf + + + + + + + runtime; build; native; contentfiles; analyzers; buildtransitive + all + + + + + + + + + + + + $(PackageOutputPath)$(PackageId).$(Version).nupkg + + dotnet nuget push **/*.nupkg --source https://git.afrino.co/api/packages/FourSat/nuget/index.json --api-key 061a5cb15517c6da39c16cfce8556c55ae104d0d --skip-duplicate + + + + + + + + diff --git a/src/Protobufs/BackOffice.BFF.Otp.Protobuf/ConfigureServices.cs b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/ConfigureServices.cs new file mode 100644 index 0000000..52c77ba --- /dev/null +++ b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/ConfigureServices.cs @@ -0,0 +1,14 @@ +using FluentValidation; +using System.Reflection; + +namespace Microsoft.Extensions.DependencyInjection; + +public static class ConfigureServices +{ + public static IServiceCollection AddOtpProtobufServices(this IServiceCollection services) + { + services.AddValidatorsFromAssembly(Assembly.GetExecutingAssembly()); + return services; + } +} + diff --git a/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/annotations.proto b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/annotations.proto new file mode 100644 index 0000000..85c361b --- /dev/null +++ b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/annotations.proto @@ -0,0 +1,31 @@ +// Copyright (c) 2015, Google Inc. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. + +syntax = "proto3"; + +package google.api; + +import "google/api/http.proto"; +import "google/protobuf/descriptor.proto"; + +option go_package = "google.golang.org/genproto/googleapis/api/annotations;annotations"; +option java_multiple_files = true; +option java_outer_classname = "AnnotationsProto"; +option java_package = "com.google.api"; +option objc_class_prefix = "GAPI"; + +extend google.protobuf.MethodOptions { + // See `HttpRule`. + HttpRule http = 72295728; +} diff --git a/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/http.proto b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/http.proto new file mode 100644 index 0000000..b8426ba --- /dev/null +++ b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/google/api/http.proto @@ -0,0 +1,377 @@ +// Copyright 2019 Google LLC. +// +// Licensed under the Apache License, Version 2.0 (the "License"); +// you may not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, software +// distributed under the License is distributed on an "AS IS" BASIS, +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +// See the License for the specific language governing permissions and +// limitations under the License. +// + +syntax = "proto3"; + +package google.api; + +option cc_enable_arenas = true; +option go_package = "google.golang.org/genproto/googleapis/api/annotations;annotations"; +option java_multiple_files = true; +option java_outer_classname = "HttpProto"; +option java_package = "com.google.api"; +option objc_class_prefix = "GAPI"; + +// Defines the HTTP configuration for an API service. It contains a list of +// [HttpRule][google.api.HttpRule], each specifying the mapping of an RPC method +// to one or more HTTP REST API methods. +message Http { + // A list of HTTP configuration rules that apply to individual API methods. + // + // **NOTE:** All service configuration rules follow "last one wins" order. + repeated HttpRule rules = 1; + + // When set to true, URL path parameters will be fully URI-decoded except in + // cases of single segment matches in reserved expansion, where "%2F" will be + // left encoded. + // + // The default behavior is to not decode RFC 6570 reserved characters in multi + // segment matches. + bool fully_decode_reserved_expansion = 2; +} + +// # gRPC Transcoding +// +// gRPC Transcoding is a feature for mapping between a gRPC method and one or +// more HTTP REST endpoints. It allows developers to build a single API service +// that supports both gRPC APIs and REST APIs. Many systems, including [Google +// APIs](https://github.com/googleapis/googleapis), +// [Cloud Endpoints](https://cloud.google.com/endpoints), [gRPC +// Gateway](https://github.com/grpc-ecosystem/grpc-gateway), +// and [Envoy](https://github.com/envoyproxy/envoy) proxy support this feature +// and use it for large scale production services. +// +// `HttpRule` defines the schema of the gRPC/REST mapping. The mapping specifies +// how different portions of the gRPC request message are mapped to the URL +// path, URL query parameters, and HTTP request body. It also controls how the +// gRPC response message is mapped to the HTTP response body. `HttpRule` is +// typically specified as an `google.api.http` annotation on the gRPC method. +// +// Each mapping specifies a URL path template and an HTTP method. The path +// template may refer to one or more fields in the gRPC request message, as long +// as each field is a non-repeated field with a primitive (non-message) type. +// The path template controls how fields of the request message are mapped to +// the URL path. +// +// Example: +// +// service Messaging { +// rpc GetMessage(GetMessageRequest) returns (Message) { +// option (google.api.http) = { +// get: "/v1/{name=messages/*}" +// }; +// } +// } +// message GetMessageRequest { +// string name = 1; // Mapped to URL path. +// } +// message Message { +// string text = 1; // The resource content. +// } +// +// This enables an HTTP REST to gRPC mapping as below: +// +// HTTP | gRPC +// -----|----- +// `GET /v1/messages/123456` | `GetMessage(name: "messages/123456")` +// +// Any fields in the request message which are not bound by the path template +// automatically become HTTP query parameters if there is no HTTP request body. +// For example: +// +// service Messaging { +// rpc GetMessage(GetMessageRequest) returns (Message) { +// option (google.api.http) = { +// get:"/v1/messages/{message_id}" +// }; +// } +// } +// message GetMessageRequest { +// message SubMessage { +// string subfield = 1; +// } +// string message_id = 1; // Mapped to URL path. +// int64 revision = 2; // Mapped to URL query parameter `revision`. +// SubMessage sub = 3; // Mapped to URL query parameter `sub.subfield`. +// } +// +// This enables a HTTP JSON to RPC mapping as below: +// +// HTTP | gRPC +// -----|----- +// `GET /v1/messages/123456?revision=2&sub.subfield=foo` | +// `GetMessage(message_id: "123456" revision: 2 sub: SubMessage(subfield: +// "foo"))` +// +// Note that fields which are mapped to URL query parameters must have a +// primitive type or a repeated primitive type or a non-repeated message type. +// In the case of a repeated type, the parameter can be repeated in the URL +// as `...?param=A¶m=B`. In the case of a message type, each field of the +// message is mapped to a separate parameter, such as +// `...?foo.a=A&foo.b=B&foo.c=C`. +// +// For HTTP methods that allow a request body, the `body` field +// specifies the mapping. Consider a REST update method on the +// message resource collection: +// +// service Messaging { +// rpc UpdateMessage(UpdateMessageRequest) returns (Message) { +// option (google.api.http) = { +// patch: "/v1/messages/{message_id}" +// body: "message" +// }; +// } +// } +// message UpdateMessageRequest { +// string message_id = 1; // mapped to the URL +// Message message = 2; // mapped to the body +// } +// +// The following HTTP JSON to RPC mapping is enabled, where the +// representation of the JSON in the request body is determined by +// protos JSON encoding: +// +// HTTP | gRPC +// -----|----- +// `PATCH /v1/messages/123456 { "text": "Hi!" }` | `UpdateMessage(message_id: +// "123456" message { text: "Hi!" })` +// +// The special name `*` can be used in the body mapping to define that +// every field not bound by the path template should be mapped to the +// request body. This enables the following alternative definition of +// the update method: +// +// service Messaging { +// rpc UpdateMessage(Message) returns (Message) { +// option (google.api.http) = { +// patch: "/v1/messages/{message_id}" +// body: "*" +// }; +// } +// } +// message Message { +// string message_id = 1; +// string text = 2; +// } +// +// +// The following HTTP JSON to RPC mapping is enabled: +// +// HTTP | gRPC +// -----|----- +// `PATCH /v1/messages/123456 { "text": "Hi!" }` | `UpdateMessage(message_id: +// "123456" text: "Hi!")` +// +// Note that when using `*` in the body mapping, it is not possible to +// have HTTP parameters, as all fields not bound by the path end in +// the body. This makes this option more rarely used in practice when +// defining REST APIs. The common usage of `*` is in custom methods +// which don't use the URL at all for transferring data. +// +// It is possible to define multiple HTTP methods for one RPC by using +// the `additional_bindings` option. Example: +// +// service Messaging { +// rpc GetMessage(GetMessageRequest) returns (Message) { +// option (google.api.http) = { +// get: "/v1/messages/{message_id}" +// additional_bindings { +// get: "/v1/users/{user_id}/messages/{message_id}" +// } +// }; +// } +// } +// message GetMessageRequest { +// string message_id = 1; +// string user_id = 2; +// } +// +// This enables the following two alternative HTTP JSON to RPC mappings: +// +// HTTP | gRPC +// -----|----- +// `GET /v1/messages/123456` | `GetMessage(message_id: "123456")` +// `GET /v1/users/me/messages/123456` | `GetMessage(user_id: "me" message_id: +// "123456")` +// +// ## Rules for HTTP mapping +// +// 1. Leaf request fields (recursive expansion nested messages in the request +// message) are classified into three categories: +// - Fields referred by the path template. They are passed via the URL path. +// - Fields referred by the [HttpRule.body][google.api.HttpRule.body]. They are passed via the HTTP +// request body. +// - All other fields are passed via the URL query parameters, and the +// parameter name is the field path in the request message. A repeated +// field can be represented as multiple query parameters under the same +// name. +// 2. If [HttpRule.body][google.api.HttpRule.body] is "*", there is no URL query parameter, all fields +// are passed via URL path and HTTP request body. +// 3. If [HttpRule.body][google.api.HttpRule.body] is omitted, there is no HTTP request body, all +// fields are passed via URL path and URL query parameters. +// +// ### Path template syntax +// +// Template = "/" Segments [ Verb ] ; +// Segments = Segment { "/" Segment } ; +// Segment = "*" | "**" | LITERAL | Variable ; +// Variable = "{" FieldPath [ "=" Segments ] "}" ; +// FieldPath = IDENT { "." IDENT } ; +// Verb = ":" LITERAL ; +// +// The syntax `*` matches a single URL path segment. The syntax `**` matches +// zero or more URL path segments, which must be the last part of the URL path +// except the `Verb`. +// +// The syntax `Variable` matches part of the URL path as specified by its +// template. A variable template must not contain other variables. If a variable +// matches a single path segment, its template may be omitted, e.g. `{var}` +// is equivalent to `{var=*}`. +// +// The syntax `LITERAL` matches literal text in the URL path. If the `LITERAL` +// contains any reserved character, such characters should be percent-encoded +// before the matching. +// +// If a variable contains exactly one path segment, such as `"{var}"` or +// `"{var=*}"`, when such a variable is expanded into a URL path on the client +// side, all characters except `[-_.~0-9a-zA-Z]` are percent-encoded. The +// server side does the reverse decoding. Such variables show up in the +// [Discovery +// Document](https://developers.google.com/discovery/v1/reference/apis) as +// `{var}`. +// +// If a variable contains multiple path segments, such as `"{var=foo/*}"` +// or `"{var=**}"`, when such a variable is expanded into a URL path on the +// client side, all characters except `[-_.~/0-9a-zA-Z]` are percent-encoded. +// The server side does the reverse decoding, except "%2F" and "%2f" are left +// unchanged. Such variables show up in the +// [Discovery +// Document](https://developers.google.com/discovery/v1/reference/apis) as +// `{+var}`. +// +// ## Using gRPC API Service Configuration +// +// gRPC API Service Configuration (service config) is a configuration language +// for configuring a gRPC service to become a user-facing product. The +// service config is simply the YAML representation of the `google.api.Service` +// proto message. +// +// As an alternative to annotating your proto file, you can configure gRPC +// transcoding in your service config YAML files. You do this by specifying a +// `HttpRule` that maps the gRPC method to a REST endpoint, achieving the same +// effect as the proto annotation. This can be particularly useful if you +// have a proto that is reused in multiple services. Note that any transcoding +// specified in the service config will override any matching transcoding +// configuration in the proto. +// +// Example: +// +// http: +// rules: +// # Selects a gRPC method and applies HttpRule to it. +// - selector: example.v1.Messaging.GetMessage +// get: /v1/messages/{message_id}/{sub.subfield} +// +// ## Special notes +// +// When gRPC Transcoding is used to map a gRPC to JSON REST endpoints, the +// proto to JSON conversion must follow the [proto3 +// specification](https://developers.google.com/protocol-buffers/docs/proto3#json). +// +// While the single segment variable follows the semantics of +// [RFC 6570](https://tools.ietf.org/html/rfc6570) Section 3.2.2 Simple String +// Expansion, the multi segment variable **does not** follow RFC 6570 Section +// 3.2.3 Reserved Expansion. The reason is that the Reserved Expansion +// does not expand special characters like `?` and `#`, which would lead +// to invalid URLs. As the result, gRPC Transcoding uses a custom encoding +// for multi segment variables. +// +// The path variables **must not** refer to any repeated or mapped field, +// because client libraries are not capable of handling such variable expansion. +// +// The path variables **must not** capture the leading "/" character. The reason +// is that the most common use case "{var}" does not capture the leading "/" +// character. For consistency, all path variables must share the same behavior. +// +// Repeated message fields must not be mapped to URL query parameters, because +// no client library can support such complicated mapping. +// +// If an API needs to use a JSON array for request or response body, it can map +// the request or response body to a repeated field. However, some gRPC +// Transcoding implementations may not support this feature. +message HttpRule { + // Selects a method to which this rule applies. + // + // Refer to [selector][google.api.DocumentationRule.selector] for syntax details. + string selector = 1; + + // Determines the URL pattern is matched by this rules. This pattern can be + // used with any of the {get|put|post|delete|patch} methods. A custom method + // can be defined using the 'custom' field. + oneof pattern { + // Maps to HTTP GET. Used for listing and getting information about + // resources. + string get = 2; + + // Maps to HTTP PUT. Used for replacing a resource. + string put = 3; + + // Maps to HTTP POST. Used for creating a resource or performing an action. + string post = 4; + + // Maps to HTTP DELETE. Used for deleting a resource. + string delete = 5; + + // Maps to HTTP PATCH. Used for updating a resource. + string patch = 6; + + // The custom pattern is used for specifying an HTTP method that is not + // included in the `pattern` field, such as HEAD, or "*" to leave the + // HTTP method unspecified for this rule. The wild-card rule is useful + // for services that provide content to Web (HTML) clients. + CustomHttpPattern custom = 8; + } + + // The name of the request field whose value is mapped to the HTTP request + // body, or `*` for mapping all request fields not captured by the path + // pattern to the HTTP body, or omitted for not having any HTTP request body. + // + // NOTE: the referred field must be present at the top-level of the request + // message type. + string body = 7; + + // Optional. The name of the response field whose value is mapped to the HTTP + // response body. When omitted, the entire response message will be used + // as the HTTP response body. + // + // NOTE: The referred field must be present at the top-level of the response + // message type. + string response_body = 12; + + // Additional HTTP bindings for the selector. Nested bindings must + // not contain an `additional_bindings` field themselves (that is, + // the nesting may only be one level deep). + repeated HttpRule additional_bindings = 11; +} + +// A custom pattern is used for defining custom HTTP verb. +message CustomHttpPattern { + // The name of this custom HTTP verb. + string kind = 1; + + // The path matched by this custom verb. + string path = 2; +} + diff --git a/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/otp.proto b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/otp.proto new file mode 100644 index 0000000..37e36f8 --- /dev/null +++ b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Protos/otp.proto @@ -0,0 +1,69 @@ +syntax = "proto3"; + +package otp; + +import "google/protobuf/empty.proto"; +import "google/protobuf/wrappers.proto"; +import "google/protobuf/duration.proto"; +import "google/protobuf/timestamp.proto"; +import "google/api/annotations.proto"; + +option csharp_namespace = "BackOffice.BFF.Otp.Protobuf.Protos.Otp"; + +service OtpContract +{ + rpc SendOtp(SendOtpRequest) returns (google.protobuf.Empty){ + option (google.api.http) = { + post: "/SendOtp" + body: "*" + }; + }; + rpc VerifyOtpCode(VerifyOtpCodeRequest) returns (VerifyOtpCodeResponse){ + option (google.api.http) = { + post: "/VerifyOtpCode" + body: "*" + }; + }; +} +message SendOtpRequest +{ + string mobile = 1; +} +message VerifyOtpCodeRequest +{ + string mobile = 1; + string code = 2; + google.protobuf.Int64Value parent_id = 3; +} +message VerifyOtpCodeResponse +{ + string token = 1; +} + +message PaginationState +{ + int32 page_number = 1; + + int32 page_size = 2; +} +message MetaData +{ + int64 current_page = 1; + + int64 total_page = 2; + + int64 page_size = 3; + + int64 total_count = 4; + + bool has_previous = 5; + + bool has_next = 6; +} +message DecimalValue +{ + + int64 units = 1; + + sfixed32 nanos = 2; +} diff --git a/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/SendOtpRequestValidator.cs b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/SendOtpRequestValidator.cs new file mode 100644 index 0000000..526870d --- /dev/null +++ b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/SendOtpRequestValidator.cs @@ -0,0 +1,19 @@ +using FluentValidation; +using BackOffice.BFF.Otp.Protobuf.Protos.Otp; +namespace BackOffice.BFF.Otp.Protobuf.Validator; + +public class SendOtpRequestValidator : AbstractValidator +{ + public SendOtpRequestValidator() + { + RuleFor(model => model.Mobile) + .NotEmpty(); + } + public Func>> ValidateValue => async (model, propertyName) => + { + var result = await ValidateAsync(ValidationContext.CreateWithOptions((SendOtpRequest)model, x => x.IncludeProperties(propertyName))); + if (result.IsValid) + return Array.Empty(); + return result.Errors.Select(e => e.ErrorMessage); + }; +} diff --git a/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/VerifyOtpCodeRequestValidator.cs b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/VerifyOtpCodeRequestValidator.cs new file mode 100644 index 0000000..34955e2 --- /dev/null +++ b/src/Protobufs/BackOffice.BFF.Otp.Protobuf/Validator/VerifyOtpCodeRequestValidator.cs @@ -0,0 +1,21 @@ +using FluentValidation; +using BackOffice.BFF.Otp.Protobuf.Protos.Otp; +namespace BackOffice.BFF.Otp.Protobuf.Validator; + +public class VerifyOtpCodeRequestValidator : AbstractValidator +{ + public VerifyOtpCodeRequestValidator() + { + RuleFor(model => model.Mobile) + .NotEmpty(); + RuleFor(model => model.Code) + .NotEmpty(); + } + public Func>> ValidateValue => async (model, propertyName) => + { + var result = await ValidateAsync(ValidationContext.CreateWithOptions((VerifyOtpCodeRequest)model, x => x.IncludeProperties(propertyName))); + if (result.IsValid) + return Array.Empty(); + return result.Errors.Select(e => e.ErrorMessage); + }; +}