using System; using System.Collections.Generic; using System.Net; using System.Net.Http; using System.Text; using System.Threading.Tasks; using Newtonsoft.Json; using SpotifyAPI.Web.Enums; using SpotifyAPI.Web.Models; using Unosquare.Labs.EmbedIO; using Unosquare.Labs.EmbedIO.Constants; using Unosquare.Labs.EmbedIO.Modules; namespace SpotifyAPI.Web.Auth { public class AuthorizationCodeAuth : SpotifyAuthServer { public string SecretId { get; set; } public AuthorizationCodeAuth(string redirectUri, string serverUri, Scope scope = Scope.None, string state = "") : base("code", "AuthorizationCodeAuth", redirectUri, serverUri, scope, state) { } public AuthorizationCodeAuth(string clientId, string secretId, string redirectUri, string serverUri, Scope scope = Scope.None, string state = "") : this(redirectUri, serverUri, scope, state) { ClientId = clientId; SecretId = secretId; } private bool ShouldRegisterNewApp() { return string.IsNullOrEmpty(SecretId) || string.IsNullOrEmpty(ClientId); } public override string GetUri() { return ShouldRegisterNewApp() ? $"{RedirectUri}/start.html#{State}" : base.GetUri(); } protected override void AdaptWebServer(WebServer webServer) { webServer.Module().RegisterController(); } private string GetAuthHeader() => $"Basic {Convert.ToBase64String(Encoding.UTF8.GetBytes(ClientId + ":" + SecretId))}"; public async Task RefreshToken(string refreshToken) { List> args = new List>() { new KeyValuePair("grant_type", "refresh_token"), new KeyValuePair("refresh_token", refreshToken) }; HttpClient client = new HttpClient(); client.DefaultRequestHeaders.Add("Authorization", GetAuthHeader()); HttpContent content = new FormUrlEncodedContent(args); HttpResponseMessage resp = await client.PostAsync("https://accounts.spotify.com/api/token", content); string msg = await resp.Content.ReadAsStringAsync(); return JsonConvert.DeserializeObject(msg); } public async Task ExchangeCode(string code) { List> args = new List>() { new KeyValuePair("grant_type", "authorization_code"), new KeyValuePair("code", code), new KeyValuePair("redirect_uri", RedirectUri) }; HttpClient client = new HttpClient(); client.DefaultRequestHeaders.Add("Authorization", GetAuthHeader()); HttpContent content = new FormUrlEncodedContent(args); HttpResponseMessage resp = await client.PostAsync("https://accounts.spotify.com/api/token", content); string msg = await resp.Content.ReadAsStringAsync(); return JsonConvert.DeserializeObject(msg); } } public class AuthorizationCode { public string Code { get; set; } public string Error { get; set; } } internal class AuthorizationCodeAuthController : WebApiController { [WebApiHandler(HttpVerbs.Get, "/")] public Task GetEmpty() { string state = Request.QueryString["state"]; AuthorizationCodeAuth.Instances.TryGetValue(state, out SpotifyAuthServer auth); string code = null; string error = Request.QueryString["error"]; if (error == null) code = Request.QueryString["code"]; Task.Factory.StartNew(() => auth?.TriggerAuth(new AuthorizationCode { Code = code, Error = error })); return this.StringResponseAsync("OK - This window can be closed now"); } [WebApiHandler(HttpVerbs.Post, "/")] public bool PostValues() { Dictionary formParams = this.RequestFormDataDictionary(); string state = (string) formParams["state"]; AuthorizationCodeAuth.Instances.TryGetValue(state, out SpotifyAuthServer authServer); AuthorizationCodeAuth auth = (AuthorizationCodeAuth) authServer; auth.ClientId = (string) formParams["clientId"]; auth.SecretId = (string) formParams["secretId"]; string uri = auth.GetUri(); return this.Redirect(uri, false); } public AuthorizationCodeAuthController(IHttpContext context) : base(context) { } } }