Initial "KnownApplication" sign-in.

Author: eben-roux

Shuttle.Access.Application/ActivateIdentityParticipant.cs

@@ -27,7 +27,7 @@ public async Task ProcessMessageAsync(IParticipantContext<RequestResponseMessage
         var message = context.Message.Request;
         var now = DateTime.UtcNow;
 
-        var specification = new DataAccess.Query.Identity.Specification();
+        var specification = new DataAccess.Identity.Specification();
 
         if (message.Id.HasValue)
         {

Shuttle.Access.Application/ConfigureApplicationParticipant.cs

@@ -49,7 +49,7 @@ public async Task ProcessMessageAsync(IParticipantContext<ConfigureApplication>
     {
         Guard.AgainstNull(context);
 
-        var roleSpecification = new DataAccess.Query.Role.Specification().AddName("Administrator");
+        var roleSpecification = new DataAccess.Role.Specification().AddName("Administrator");
 
         var administratorExists = await _roleQuery.CountAsync(roleSpecification) > 0;
 
@@ -81,7 +81,7 @@ public async Task ProcessMessageAsync(IParticipantContext<ConfigureApplication>
 
         foreach (var permission in _permissions)
         {
-            if (await _permissionQuery.ContainsAsync(new DataAccess.Query.Permission.Specification().AddName(permission)))
+            if (await _permissionQuery.ContainsAsync(new DataAccess.Permission.Specification().AddName(permission)))
             {
                 continue;
             }

Shuttle.Access.Application/GetPasswordResetTokenParticipant.cs

@@ -23,7 +23,7 @@ public GetPasswordResetTokenParticipant(IIdentityQuery identityQuery, IEventStor
     public async Task ProcessMessageAsync(IParticipantContext<RequestResponseMessage<GetPasswordResetToken, Guid>> context)
     {
         var identityName = context.Message.Request.Name;
-        var query = (await _identityQuery.SearchAsync(new DataAccess.Query.Identity.Specification().WithName(identityName))).SingleOrDefault();
+        var query = (await _identityQuery.SearchAsync(new DataAccess.Identity.Specification().WithName(identityName))).SingleOrDefault();
 
         if (query == null)
         {

Shuttle.Access.Application/Messages/RegisterSession.cs

@@ -20,6 +20,8 @@ public RegisterSession(string identityName)
     public SessionRegistrationType RegistrationType { get; private set; } = SessionRegistrationType.None;
     public SessionRegistrationResult Result { get; private set; } = SessionRegistrationResult.Forbidden;
     public Session? Session { get; private set; }
+    public string SessionTokenExchangeUrl { get; private set; } = string.Empty;
+    public bool HasKnownApplicationOptions => KnownApplicationOptions != null;
 
     public RegisterSession DelegationSessionInvalid()
     {
@@ -114,4 +116,20 @@ public RegisterSession UseToken(Guid token)
 
         return this;
     }
+
+    public RegisterSession WithKnownApplicationOptions(KnownApplicationOptions knownApplicationOptions)
+    {
+        KnownApplicationOptions = Guard.AgainstNull(knownApplicationOptions);
+
+        return this;
+    }
+
+    public KnownApplicationOptions? KnownApplicationOptions { get; private set; }
+
+    public RegisterSession WithSessionTokenExchangeUrl(string sessionTokenExchangeUrl)
+    {
+        SessionTokenExchangeUrl = Guard.AgainstNullOrEmptyString(sessionTokenExchangeUrl);
+
+        return this;
+    }
 }

Shuttle.Access.Application/RefreshSessionParticipant.cs

@@ -29,7 +29,7 @@ public async Task ProcessMessageAsync(IParticipantContext<RefreshSession> contex
     {
         Guard.AgainstNull(context);
 
-        DataAccess.Query.Session.Specification specification = new();
+        DataAccess.Session.Specification specification = new();
 
         if (context.Message.Token.HasValue)
         {

Shuttle.Access.Application/RegisterIdentityParticipant.cs

@@ -63,11 +63,11 @@ public async Task ProcessMessageAsync(IParticipantContext<RequestResponseMessage
 
         stream.Add(registered);
 
-        var count = await _identityQuery.CountAsync(new DataAccess.Query.Identity.Specification().WithRoleName("Administrator"));
+        var count = await _identityQuery.CountAsync(new DataAccess.Identity.Specification().WithRoleName("Administrator"));
 
         if (count == 0)
         {
-            var roles = (await _roleQuery.SearchAsync(new DataAccess.Query.Role.Specification().AddName("Administrator"))).ToList();
+            var roles = (await _roleQuery.SearchAsync(new DataAccess.Role.Specification().AddName("Administrator"))).ToList();
 
             if (roles.Count != 1)
             {

Shuttle.Access.Application/RegisterSessionParticipant.cs

@@ -10,21 +10,23 @@ namespace Shuttle.Access.Application;
 
 public class RegisterSessionParticipant : IParticipant<RegisterSession>
 {
+    private readonly ISessionTokenExchangeRepository _sessionTokenExchangeRepository;
     private readonly AccessOptions _accessOptions;
     private readonly IAuthenticationService _authenticationService;
     private readonly IAuthorizationService _authorizationService;
     private readonly IIdentityQuery _identityQuery;
     private readonly ISessionQuery _sessionQuery;
     private readonly ISessionRepository _sessionRepository;
 
-    public RegisterSessionParticipant(IOptions<AccessOptions> accessOptions, IAuthenticationService authenticationService, IAuthorizationService authorizationService, ISessionRepository sessionRepository, ISessionQuery sessionQuery, IIdentityQuery identityQuery)
+    public RegisterSessionParticipant(IOptions<AccessOptions> accessOptions, IAuthenticationService authenticationService, IAuthorizationService authorizationService, ISessionRepository sessionRepository, ISessionQuery sessionQuery, IIdentityQuery identityQuery, ISessionTokenExchangeRepository sessionTokenExchangeRepository)
     {
         _accessOptions = Guard.AgainstNull(accessOptions).Value;
         _authenticationService = Guard.AgainstNull(authenticationService);
         _sessionQuery = Guard.AgainstNull(sessionQuery);
         _authorizationService = Guard.AgainstNull(authorizationService);
         _sessionRepository = Guard.AgainstNull(sessionRepository);
         _identityQuery = Guard.AgainstNull(identityQuery);
+        _sessionTokenExchangeRepository = Guard.AgainstNull(sessionTokenExchangeRepository);
     }
 
     public async Task ProcessMessageAsync(IParticipantContext<RegisterSession> context)
@@ -71,14 +73,14 @@ public async Task ProcessMessageAsync(IParticipantContext<RegisterSession> conte
             }
         }
 
-        if ((await _identityQuery.SearchAsync(new DataAccess.Query.Identity.Specification().WithName(message.IdentityName), context.CancellationToken)).SingleOrDefault() == null)
+        if ((await _identityQuery.SearchAsync(new DataAccess.Identity.Specification().WithName(message.IdentityName), context.CancellationToken)).SingleOrDefault() == null)
         {
             message.UnknownIdentity();
 
             return;
         }
 
-        var specification = new DataAccess.Query.Session.Specification();
+        var specification = new DataAccess.Session.Specification();
 
         if (message.RegistrationType == SessionRegistrationType.Token)
         {
@@ -127,6 +129,8 @@ public async Task ProcessMessageAsync(IParticipantContext<RegisterSession> conte
             message.Registered(session);
         }
 
+        return;
+
         async Task SaveAsync()
         {
             foreach (var permission in await _authorizationService.GetPermissionsAsync(message.IdentityName, context.CancellationToken))
@@ -135,6 +139,15 @@ async Task SaveAsync()
             }
 
             await _sessionRepository.SaveAsync(session, context.CancellationToken);
+
+            if (message.HasKnownApplicationOptions)
+            {
+                var sessionTokenExchange = new SessionTokenExchange(Guid.NewGuid(), session.Token, DateTime.UtcNow.Add(_accessOptions.SessionTokenExchangeValidityTimeSpan));
+
+                await _sessionTokenExchangeRepository.SaveAsync(sessionTokenExchange, context.CancellationToken);
+
+                message.WithSessionTokenExchangeUrl($"{message.KnownApplicationOptions!.SessionTokenExchangeUrl}/{sessionTokenExchange.ExchangeToken}");
+            }
         }
     }
 }

Shuttle.Access.Application/ResetPasswordParticipant.cs

@@ -25,7 +25,7 @@ public async Task ProcessMessageAsync(IParticipantContext<RequestMessage<ResetPa
     {
         Guard.AgainstNull(context);
 
-        var queryIdentity = (await _identityQuery.SearchAsync(new DataAccess.Query.Identity.Specification().WithName(context.Message.Request.Name))).SingleOrDefault();
+        var queryIdentity = (await _identityQuery.SearchAsync(new DataAccess.Identity.Specification().WithName(context.Message.Request.Name))).SingleOrDefault();
 
         if (queryIdentity == null)
         {

Shuttle.Access.Application/ReviewSetIdentityRoleParticipant.cs

@@ -23,7 +23,7 @@ public async Task ProcessMessageAsync(IParticipantContext<RequestMessage<SetIden
         Guard.AgainstNull(context);
 
         var request = context.Message.Request;
-        var roles = (await _roleQuery.SearchAsync(new DataAccess.Query.Role.Specification().AddName("Administrator"))).ToList();
+        var roles = (await _roleQuery.SearchAsync(new DataAccess.Role.Specification().AddName("Administrator"))).ToList();
 
         if (roles.Count != 1)
         {