AuthenticationService.cs

using System.Security.Authentication;
using System.Web;
using Models;
using Repositories;
using Utils;
using static JWT.JWTService;

namespace UserAuthentication;

public interface UserAuthenticationServiceException;
public class UserAuthenticationServiceInvalidCredentials: Exception, UserAuthenticationServiceException;

public class UserAuthenticationServiceUserForbidden: Exception, UserAuthenticationServiceException;

public static class UserAuthenticationService {

   public static async Task<ITry<JWTToken>> Authenticate(HttpContext ctx,
        UserSignIn user, 
        UserRepository UserRepository){

        var r = await UserRepository.getUser(user.Username);

        if(r == null){
            return new FailedTry<JWTToken>(new InvalidCredentialException());
        }

        var hashedPassword = Convert.ToHexString(System.Security.Cryptography.SHA1.HashData(System
            .Text.Encoding.UTF8.GetBytes(user.Password)));

        if(!r.GetValue<bool>("active")){
            return new FailedTry<JWTToken>(new UserAuthenticationServiceUserForbidden());
        }

        if(r.GetValue<string>("password").CompareTo(hashedPassword) != 0){
            return new FailedTry<JWTToken>(new UserAuthenticationServiceInvalidCredentials());
        }

        var now = DateTime.UtcNow;
        var header = new JWT.JWTService.Header();

        var payload = new JWT.JWTService.Payload {
            Username = user.Username,
            LoginExpirationUTC = now.AddDays(10),
            TokenExpirationUTC = now.AddMinutes(2),
            Id = System.Guid.NewGuid().ToString(),
            Organization = "myorg"
        };

        var token = JWT.JWTService.createJWTToken(header, payload);

        //var result = await UserRepository.updateToken(user.Username, tokenInfo.Token);

        ctx.Response.Headers.Authorization = $"Bearer {token}";
        ctx.Response.Headers["X-JWT"] = token;
        ctx.Response.Cookies.Append("auth_token", HttpUtility
            .UrlEncode(token));

        /*var claims = new List<Claim> {
            //new Claim(ClaimTypes.Name, user.Username)
            new Claim("jwt-token", token)       
        };

        var identity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);
        var principal = new ClaimsPrincipal(identity);

        await HttpContext.SignInAsync(principal);*/
        
        return new SuccessTry<JWTToken>(JWT.JWTService.validateJWTToken(token));
   }

}