sync full source from private myoffice

2026-08-05 10:55:09 +00:00
parent 874796c860
commit 405abdfe69
714 changed files with 70352 additions and 234 deletions
@@ -0,0 +1,41 @@
+namespace MyOffice.Web.Auth;
+
+using System.Security.Claims;
+using Identity.Domain;
+using Microsoft.IdentityModel.Tokens;
+using OpenIddict.Abstractions;
+using static OpenIddict.Abstractions.OpenIddictConstants;
+
+public static class OpenIddictClaimsHelper
+{
+	public static ClaimsPrincipal CreatePrincipal(
+		ApplicationUser<Guid> user,
+		IEnumerable<string> scopes
+	)
+	{
+		var identity = new ClaimsIdentity(
+			authenticationType: TokenValidationParameters.DefaultAuthenticationType,
+			nameType: Claims.Name,
+			roleType: Claims.Role);
+
+		var userId = user.Id.ToString();
+		identity.SetClaim(Claims.Subject, userId);
+		identity.SetClaim(Claims.Name, user.UserName);
+		identity.SetClaim(Claims.PreferredUsername, user.UserName);
+		identity.SetClaim(Claims.Email, user.Email);
+		identity.SetClaim(Claims.EmailVerified, user.IsEmailConfirmed);
+
+		if (!string.IsNullOrWhiteSpace(user.FullName))
+			identity.SetClaim(Claims.GivenName, user.FullName);
+
+		identity.SetScopes(scopes);
+		identity.SetDestinations(static claim => claim.Type switch
+		{
+			Claims.Name or Claims.PreferredUsername or Claims.Email or Claims.EmailVerified or Claims.GivenName
+				=> [Destinations.AccessToken, Destinations.IdentityToken],
+			_ => [Destinations.AccessToken]
+		});
+
+		return new ClaimsPrincipal(identity);
+	}
+}