mirror of
https://github.com/nestriness/nestri.git
synced 2025-12-12 08:45:38 +02:00
⭐ feat(www): Add logic to the homepage and Steam integration (#258)
## Description <!-- Briefly describe the purpose and scope of your changes --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit - **New Features** - Upgraded API and authentication services with dynamic scaling, enhanced load balancing, and real-time interaction endpoints. - Introduced new commands to streamline local development and container builds. - Added new endpoints for retrieving Steam account information and managing connections. - Implemented a QR code authentication interface for Steam, enhancing user login experiences. - **Database Updates** - Rolled out comprehensive schema migrations that improve data integrity and indexing. - Introduced new tables for managing Steam user credentials and machine information. - **UI Enhancements** - Added refreshed animated assets and an improved QR code login flow for a more engaging experience. - Introduced new styled components for displaying friends and games. - **Maintenance** - Completed extensive refactoring and configuration updates to optimize performance and development workflows. - Updated logging configurations and improved error handling mechanisms. - Streamlined resource definitions in the configuration files. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
This commit is contained in:
Wanjohi
GitHub
@@ -1,331 +1,118 @@
|
||||
using System.Text;
|
||||
using System.Text.Json;
|
||||
using Microsoft.IdentityModel.Tokens;
|
||||
using System.IdentityModel.Tokens.Jwt;
|
||||
using Microsoft.AspNetCore.Authorization;
|
||||
using Microsoft.AspNetCore.Http.Features;
|
||||
using Microsoft.AspNetCore.Authentication.JwtBearer;
|
||||
using Microsoft.EntityFrameworkCore;
|
||||
|
||||
// FYI: Am very new to C# if you find any bugs or have any feedback hit me up :P
|
||||
// TBH i dunno what this code does, only God and Claude know(in the slightest) what it does.
|
||||
// And yes! It does not sit right with me - am learning C# as we go, i guess 🤧
|
||||
// This is the server to connect to the Steam APIs and do stuff like:
|
||||
// - authenticate a user,
|
||||
// - get their library,
|
||||
// - generate .vdf files for Steam Client (Steam manifest files), etc etc
|
||||
var builder = WebApplication.CreateBuilder(args);
|
||||
|
||||
// Add JWT Authentication
|
||||
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
|
||||
.AddJwtBearer(options =>
|
||||
namespace Steam
|
||||
{
|
||||
public class Program
|
||||
{
|
||||
options.TokenValidationParameters = new TokenValidationParameters
|
||||
const string UnixSocketPath = "/tmp/steam.sock";
|
||||
|
||||
public static void Main(string[] args)
|
||||
{
|
||||
ValidateIssuer = true,
|
||||
ValidIssuer = Environment.GetEnvironmentVariable("NESTRI_AUTH_JWKS_URL"),
|
||||
ValidateAudience = false,
|
||||
ValidateLifetime = true,
|
||||
ValidateIssuerSigningKey = true,
|
||||
RequireSignedTokens = true,
|
||||
RequireExpirationTime = true,
|
||||
ClockSkew = TimeSpan.Zero,
|
||||
|
||||
// Configure the issuer signing key provider
|
||||
IssuerSigningKeyResolver = (token, securityToken, kid, validationParameters) =>
|
||||
// Delete the socket file if it exists
|
||||
if (File.Exists(UnixSocketPath))
|
||||
{
|
||||
// Fetch the JWKS manually
|
||||
var jwksUrl = $"{Environment.GetEnvironmentVariable("NESTRI_AUTH_JWKS_URL")}/.well-known/jwks.json";
|
||||
var httpClient = new HttpClient();
|
||||
var jwksJson = httpClient.GetStringAsync(jwksUrl).Result;
|
||||
var jwks = JsonSerializer.Deserialize<JsonWebKeySet>(jwksJson);
|
||||
|
||||
// Return all keys or filter by kid if provided
|
||||
if (string.IsNullOrEmpty(kid))
|
||||
return jwks?.Keys;
|
||||
else
|
||||
return jwks?.Keys.Where(k => k.Kid == kid);
|
||||
File.Delete(UnixSocketPath);
|
||||
}
|
||||
};
|
||||
|
||||
// Add logging for debugging
|
||||
options.Events = new JwtBearerEvents
|
||||
{
|
||||
OnAuthenticationFailed = context =>
|
||||
var builder = WebApplication.CreateBuilder(args);
|
||||
|
||||
// Configure Kestrel to listen on Unix socket
|
||||
builder.WebHost.ConfigureKestrel(options =>
|
||||
{
|
||||
Console.WriteLine($"Authentication failed: {context.Exception.Message}");
|
||||
return Task.CompletedTask;
|
||||
},
|
||||
OnTokenValidated = context =>
|
||||
options.ListenUnixSocket(UnixSocketPath);
|
||||
options.Limits.KeepAliveTimeout = TimeSpan.FromMinutes(10);
|
||||
options.Limits.RequestHeadersTimeout = TimeSpan.FromMinutes(5);
|
||||
});
|
||||
|
||||
builder.Services.AddControllers();
|
||||
builder.Services.AddSingleton<SteamAuthService>();
|
||||
|
||||
var app = builder.Build();
|
||||
|
||||
// Health check endpoint
|
||||
app.MapGet("/", () => "Steam Auth Service is running");
|
||||
|
||||
// QR Code login endpoint with Server-Sent Events
|
||||
app.MapGet("/api/steam/login", async (HttpResponse response, SteamAuthService steamService) =>
|
||||
{
|
||||
Console.WriteLine("Token successfully validated");
|
||||
return Task.CompletedTask;
|
||||
}
|
||||
};
|
||||
});
|
||||
// Generate a unique session ID for this login attempt
|
||||
string sessionId = Guid.NewGuid().ToString();
|
||||
|
||||
Console.WriteLine($"Starting new login session: {sessionId}");
|
||||
|
||||
builder.Services.AddAuthorization();
|
||||
// Set up SSE response
|
||||
response.Headers.Append("Content-Type", "text/event-stream");
|
||||
response.Headers.Append("Cache-Control", "no-cache");
|
||||
response.Headers.Append("Connection", "keep-alive");
|
||||
|
||||
// Configure CORS
|
||||
builder.Services.AddCors(options =>
|
||||
{
|
||||
options.AddDefaultPolicy(
|
||||
policy =>
|
||||
{
|
||||
policy.AllowAnyOrigin()
|
||||
.AllowAnyHeader()
|
||||
.AllowAnyMethod();
|
||||
});
|
||||
});
|
||||
|
||||
builder.Services.AddSingleton<SteamService>();
|
||||
|
||||
builder.Services.AddDbContext<SteamDbContext>(options =>
|
||||
options.UseSqlite($"Data Source=/tmp/steam.db"));
|
||||
|
||||
var app = builder.Build();
|
||||
|
||||
app.UseCors();
|
||||
app.UseAuthentication();
|
||||
app.UseAuthorization();
|
||||
|
||||
|
||||
app.MapGet("/", () => "Hello World!");
|
||||
|
||||
app.MapGet("/status", [Authorize] async (HttpContext context, SteamService steamService) =>
|
||||
{
|
||||
// Validate JWT
|
||||
var jwtToken = context.Request.Headers["Authorization"].ToString().Replace("Bearer ", "");
|
||||
var (isValid, userId, email) = await ValidateJwtToken(jwtToken);
|
||||
|
||||
if (!isValid)
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
|
||||
// Get team ID
|
||||
var teamId = context.Request.Headers["x-nestri-team"].ToString();
|
||||
if (string.IsNullOrEmpty(teamId))
|
||||
{
|
||||
return Results.BadRequest("Missing team ID");
|
||||
}
|
||||
|
||||
// Check if user is authenticated with Steam
|
||||
var userInfo = await steamService.GetUserInfoFromStoredCredentials(teamId, userId!);
|
||||
if (userInfo == null)
|
||||
{
|
||||
return Results.Ok(new { isAuthenticated = false });
|
||||
}
|
||||
|
||||
return Results.Ok(new
|
||||
{
|
||||
isAuthenticated = true,
|
||||
steamId = userInfo.SteamId,
|
||||
username = userInfo.Username
|
||||
});
|
||||
});
|
||||
|
||||
app.MapGet("/login", [Authorize] async (HttpContext context, SteamService steamService) =>
|
||||
{
|
||||
// Validate JWT
|
||||
var jwtToken = context.Request.Headers["Authorization"].ToString().Replace("Bearer ", "");
|
||||
var (isValid, userId, email) = await ValidateJwtToken(jwtToken);
|
||||
|
||||
Console.WriteLine($"User data: {userId}:{email}");
|
||||
|
||||
if (!isValid)
|
||||
{
|
||||
context.Response.StatusCode = 401;
|
||||
await context.Response.WriteAsync("Invalid JWT token");
|
||||
return;
|
||||
}
|
||||
|
||||
// Get team ID
|
||||
var teamId = context.Request.Headers["x-nestri-team"].ToString();
|
||||
if (string.IsNullOrEmpty(teamId))
|
||||
{
|
||||
context.Response.StatusCode = 400;
|
||||
await context.Response.WriteAsync("Missing team ID");
|
||||
return;
|
||||
}
|
||||
|
||||
// Set SSE headers
|
||||
context.Response.Headers.Append("Connection", "keep-alive");
|
||||
context.Response.Headers.Append("Cache-Control", "no-cache");
|
||||
context.Response.Headers.Append("Content-Type", "text/event-stream");
|
||||
context.Response.Headers.Append("Access-Control-Allow-Origin", "*");
|
||||
|
||||
// Disable response buffering
|
||||
var responseBodyFeature = context.Features.Get<IHttpResponseBodyFeature>();
|
||||
if (responseBodyFeature != null)
|
||||
{
|
||||
responseBodyFeature.DisableBuffering();
|
||||
}
|
||||
|
||||
// Create unique client ID
|
||||
var clientId = $"{teamId}:{userId}";
|
||||
var cancellationToken = context.RequestAborted;
|
||||
|
||||
// Start Steam authentication
|
||||
await steamService.StartAuthentication(teamId, userId!);
|
||||
|
||||
// Register for updates
|
||||
var subscription = steamService.SubscribeToEvents(clientId, async (evt) =>
|
||||
{
|
||||
try
|
||||
{
|
||||
// Serialize the event to SSE format
|
||||
string eventMessage = evt.Serialize();
|
||||
byte[] buffer = Encoding.UTF8.GetBytes(eventMessage);
|
||||
|
||||
await context.Response.Body.WriteAsync(buffer, 0, buffer.Length, cancellationToken);
|
||||
await context.Response.Body.FlushAsync(cancellationToken);
|
||||
|
||||
Console.WriteLine($"Sent event type '{evt.Type}' to client {clientId}");
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine($"Error sending event to client {clientId}: {ex.Message}");
|
||||
}
|
||||
});
|
||||
|
||||
// Keep the connection alive until canceled
|
||||
try
|
||||
{
|
||||
await Task.Delay(Timeout.Infinite, cancellationToken);
|
||||
}
|
||||
catch (TaskCanceledException)
|
||||
{
|
||||
Console.WriteLine($"Client {clientId} disconnected");
|
||||
}
|
||||
finally
|
||||
{
|
||||
steamService.Unsubscribe(clientId, subscription);
|
||||
}
|
||||
});
|
||||
|
||||
app.MapGet("/user", [Authorize] async (HttpContext context, SteamService steamService) =>
|
||||
{
|
||||
// Validate JWT
|
||||
var jwtToken = context.Request.Headers["Authorization"].ToString().Replace("Bearer ", "");
|
||||
var (isValid, userId, email) = await ValidateJwtToken(jwtToken);
|
||||
|
||||
if (!isValid)
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
|
||||
// Get team ID
|
||||
var teamId = context.Request.Headers["x-nestri-team"].ToString();
|
||||
if (string.IsNullOrEmpty(teamId))
|
||||
{
|
||||
return Results.BadRequest("Missing team ID");
|
||||
}
|
||||
|
||||
// Get user info from stored credentials
|
||||
var userInfo = await steamService.GetUserInfoFromStoredCredentials(teamId, userId);
|
||||
if (userInfo == null)
|
||||
{
|
||||
return Results.NotFound(new { error = "User not authenticated with Steam" });
|
||||
}
|
||||
|
||||
return Results.Ok(new
|
||||
{
|
||||
steamId = userInfo.SteamId,
|
||||
username = userInfo.Username
|
||||
});
|
||||
});
|
||||
|
||||
app.MapPost("/logout", [Authorize] async (HttpContext context, SteamService steamService) =>
|
||||
{
|
||||
// Validate JWT
|
||||
var jwtToken = context.Request.Headers["Authorization"].ToString().Replace("Bearer ", "");
|
||||
var (isValid, userId, email) = await ValidateJwtToken(jwtToken);
|
||||
|
||||
if (!isValid)
|
||||
{
|
||||
return Results.Unauthorized();
|
||||
}
|
||||
|
||||
// Get team ID
|
||||
var teamId = context.Request.Headers["x-nestri-team"].ToString();
|
||||
if (string.IsNullOrEmpty(teamId))
|
||||
{
|
||||
return Results.BadRequest("Missing team ID");
|
||||
}
|
||||
|
||||
// Delete the stored credentials
|
||||
using var scope = context.RequestServices.CreateScope();
|
||||
var dbContext = scope.ServiceProvider.GetRequiredService<SteamDbContext>();
|
||||
|
||||
var credentials = await dbContext.SteamUserCredentials
|
||||
.FirstOrDefaultAsync(c => c.TeamId == teamId && c.UserId == userId);
|
||||
|
||||
if (credentials != null)
|
||||
{
|
||||
dbContext.SteamUserCredentials.Remove(credentials);
|
||||
await dbContext.SaveChangesAsync();
|
||||
return Results.Ok(new { message = "Steam authentication revoked" });
|
||||
}
|
||||
|
||||
return Results.NotFound(new { error = "No Steam authentication found" });
|
||||
});
|
||||
|
||||
// JWT validation function
|
||||
async Task<(bool IsValid, string? UserId, string? Email)> ValidateJwtToken(string token)
|
||||
{
|
||||
try
|
||||
{
|
||||
var jwksUrl = Environment.GetEnvironmentVariable("NESTRI_AUTH_JWKS_URL");
|
||||
var handler = new JwtSecurityTokenHandler();
|
||||
var jwtToken = handler.ReadJwtToken(token);
|
||||
|
||||
// Log all claims for debugging
|
||||
// Console.WriteLine("JWT Claims:");
|
||||
// foreach (var claim in jwtToken.Claims)
|
||||
// {
|
||||
// Console.WriteLine($" {claim.Type}: {claim.Value}");
|
||||
// }
|
||||
|
||||
// Validate token using JWKS
|
||||
var httpClient = new HttpClient();
|
||||
var jwksJson = await httpClient.GetStringAsync($"{jwksUrl}/.well-known/jwks.json");
|
||||
var jwks = JsonSerializer.Deserialize<JsonWebKeySet>(jwksJson);
|
||||
|
||||
// Extract the properties claim which contains nested JSON
|
||||
var propertiesClaim = jwtToken.Claims.FirstOrDefault(c => c.Type == "properties")?.Value;
|
||||
if (!string.IsNullOrEmpty(propertiesClaim))
|
||||
{
|
||||
// Parse the nested JSON
|
||||
var properties = JsonSerializer.Deserialize<Dictionary<string, string>>(propertiesClaim);
|
||||
|
||||
// Extract userID from properties
|
||||
var email = properties?.GetValueOrDefault("email");
|
||||
var userId = properties?.GetValueOrDefault("userID");
|
||||
|
||||
if (string.IsNullOrEmpty(userId) || string.IsNullOrEmpty(email))
|
||||
{
|
||||
// Also check standard claims as fallback
|
||||
userId = jwtToken.Claims.FirstOrDefault(c => c.Type == "sub")?.Value;
|
||||
email = jwtToken.Claims.FirstOrDefault(c => c.Type == "email")?.Value;
|
||||
|
||||
if (string.IsNullOrEmpty(userId) || string.IsNullOrEmpty(email))
|
||||
try
|
||||
{
|
||||
return (false, null, null);
|
||||
// Start QR login session with SSE updates
|
||||
await steamService.StartQrLoginSessionAsync(response, sessionId);
|
||||
}
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine($"Error in login session {sessionId}: {ex.Message}");
|
||||
|
||||
// Send error message as SSE
|
||||
await response.WriteAsync($"event: error\n");
|
||||
await response.WriteAsync($"data: {{\"message\":\"{ex.Message}\"}}\n\n");
|
||||
await response.Body.FlushAsync();
|
||||
}
|
||||
});
|
||||
|
||||
return (true, userId, email);
|
||||
// Login with credentials endpoint (returns JSON)
|
||||
app.MapPost("/api/steam/login-with-credentials", async (LoginCredentials credentials, SteamAuthService steamService) =>
|
||||
{
|
||||
if (string.IsNullOrEmpty(credentials.Username) || string.IsNullOrEmpty(credentials.RefreshToken))
|
||||
{
|
||||
return Results.BadRequest("Username and refresh token are required");
|
||||
}
|
||||
|
||||
try
|
||||
{
|
||||
var result = await steamService.LoginWithCredentialsAsync(
|
||||
credentials.Username,
|
||||
credentials.RefreshToken);
|
||||
|
||||
return Results.Ok(result);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine($"Error logging in with credentials: {ex.Message}");
|
||||
return Results.Problem(ex.Message);
|
||||
}
|
||||
});
|
||||
|
||||
// Get user info endpoint (returns JSON)
|
||||
app.MapGet("/api/steam/user", async (HttpRequest request, SteamAuthService steamService) =>
|
||||
{
|
||||
// Get credentials from headers
|
||||
var username = request.Headers["X-Steam-Username"].ToString();
|
||||
var refreshToken = request.Headers["X-Steam-Token"].ToString();
|
||||
|
||||
if (string.IsNullOrEmpty(username) || string.IsNullOrEmpty(refreshToken))
|
||||
{
|
||||
return Results.BadRequest("Username and refresh token headers are required");
|
||||
}
|
||||
|
||||
try
|
||||
{
|
||||
var userInfo = await steamService.GetUserInfoAsync(username, refreshToken);
|
||||
return Results.Ok(userInfo);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
Console.WriteLine($"Error getting user info: {ex.Message}");
|
||||
return Results.Problem(ex.Message);
|
||||
}
|
||||
});
|
||||
|
||||
app.Run();
|
||||
}
|
||||
|
||||
return (false, null, null);
|
||||
}
|
||||
catch (Exception ex)
|
||||
|
||||
public class LoginCredentials
|
||||
{
|
||||
Console.WriteLine($"JWT validation error: {ex.Message}");
|
||||
return (false, null, null);
|
||||
public string Username { get; set; } = string.Empty;
|
||||
public string RefreshToken { get; set; } = string.Empty;
|
||||
}
|
||||
}
|
||||
|
||||
Console.WriteLine("Server started. Press Ctrl+C to stop.");
|
||||
await app.RunAsync();
|
||||
}
|
||||
Reference in New Issue
Block a user