refresh token endpoint created

Author: TL\anwarahm

src/Common/General/SiteSettings.cs

@@ -24,5 +24,6 @@ public class JwtSettings
         public string Audience { get; set; }
         public int NotBeforeMinutes { get; set; }
         public int ExpirationMinutes { get; set; }
+        public int RefreshTokenValidityInDays { get; set; }
     }
 }

src/Core/Application/Users/Command/RefreshToken/RefreshTokenCommand.cs

@@ -0,0 +1,15 @@
+using MediatR;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace CleanTemplate.Application.Users.Command.RefreshToken
+{
+    public class RefreshTokenCommand : IRequest<RefreshTokenResponse>
+    {
+        public string RefreshToken { get; set; }
+        public string AccessToken { get; set; }
+    }
+}

src/Core/Application/Users/Command/RefreshToken/RefreshTokenResponse.cs

@@ -0,0 +1,14 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace CleanTemplate.Application.Users.Command.RefreshToken
+{
+    public class RefreshTokenResponse
+    {
+        public string RefreshToken { get; set; }
+        public string AccessToken { get; set; }
+    }
+}

src/Core/Domain/Entities/Users/User.cs

@@ -21,6 +21,8 @@ public User()
         public bool IsActive { get; set; }
 
         public DateTimeOffset? LastLoginDate { get; set; }
+        public string? RefreshToken { get; set; }
+        public DateTime? RefreshTokenExpiryTime { get; set; }
     }
 
     public enum GenderType

src/Infrastructure/Persistance/CommandHandlers/Users/LoginCommandHandler.cs

@@ -37,7 +37,9 @@ public async Task<LoginResponse> Handle(LoginCommand request, CancellationToken
                 throw new CleanArchAppException("username or password is incorrect");
 
             var jwt = await _jwtService.GenerateAsync(user);
-
+            user.RefreshToken = jwt.refresh_token;
+            user.RefreshTokenExpiryTime = DateTime.Now.AddDays(jwt.refreshToken_expiresIn);
+            await _userManager.UpdateAsync(user);
             return new LoginResponse
             {
                 accessToken = jwt.access_token,

src/Infrastructure/Persistance/CommandHandlers/Users/RefreshTokenCommandHandler.cs

@@ -0,0 +1,51 @@
+using CleanTemplate.Application.Users.Command.RefreshToken;
+using CleanTemplate.Common;
+using CleanTemplate.Domain.Entities.Users;
+using CleanTemplate.Domain.IRepositories;
+using CleanTemplate.Persistance.Jwt;
+using MediatR;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.IdentityModel.Tokens;
+using System;
+using System.Collections.Generic;
+using System.IdentityModel.Tokens.Jwt;
+using System.Linq;
+using System.Text;
+using System.Threading;
+using System.Threading.Tasks;
+
+namespace CleanTemplate.Persistance.CommandHandlers.Users
+{
+    public class RefreshTokenCommandHandler : IRequestHandler<RefreshTokenCommand, RefreshTokenResponse>
+    {
+        private readonly IUserRepository _userRepository;
+        private readonly IJwtService _jwtService;
+
+        public RefreshTokenCommandHandler(IUserRepository userRepository,
+                                   IJwtService jwtService)
+        {
+            _userRepository = userRepository ?? throw new ArgumentNullException(nameof(userRepository));
+            _jwtService = jwtService ?? throw new ArgumentNullException(nameof(jwtService));
+        }
+        public async Task<RefreshTokenResponse> Handle(RefreshTokenCommand request, CancellationToken cancellationToken)
+        {
+            var userId = _jwtService.ValidateJwtAccessTokenAsync(request.AccessToken);
+            if (userId == null)
+                throw new CleanArchAppException("AccessToken is not valid");
+
+            var user = await _userRepository.GetByIdAsync(cancellationToken, userId);
+            if (user.RefreshToken != request.RefreshToken)
+                throw new CleanArchAppException("RefreshToken is not valid");
+
+            var jwt = await _jwtService.GenerateAsync(user);
+            user.RefreshToken = jwt.refresh_token;
+            user.RefreshTokenExpiryTime = DateTime.Now.AddDays(jwt.refreshToken_expiresIn);
+            await _userRepository.UpdateAsync(user, cancellationToken);
+            return new RefreshTokenResponse
+            {
+                AccessToken = jwt.access_token,
+                RefreshToken = jwt.refresh_token
+            };
+        }
+    }
+}

src/Infrastructure/Persistance/Jwt/AccessToken.cs

@@ -9,12 +9,21 @@ public class AccessToken
         public string refresh_token { get; set; }
         public string token_type { get; set; }
         public int expires_in { get; set; }
+        public int refreshToken_expiresIn { get; set; }
 
         public AccessToken(JwtSecurityToken securityToken)
         {
             access_token = new JwtSecurityTokenHandler().WriteToken(securityToken);
             token_type = "Bearer";
             expires_in = (int)(securityToken.ValidTo - DateTime.UtcNow).TotalSeconds;
         }
+        public AccessToken(JwtSecurityToken securityToken,string refreshToken, int refreshTokenExpiresIn)
+        {
+            access_token = new JwtSecurityTokenHandler().WriteToken(securityToken);
+            token_type = "Bearer";
+            expires_in = (int)(securityToken.ValidTo - DateTime.UtcNow).TotalSeconds;
+            refresh_token = refreshToken;
+            refreshToken_expiresIn = refreshTokenExpiresIn;
+        }
     }
 }

src/Infrastructure/Persistance/Jwt/IJwtService.cs

@@ -6,5 +6,6 @@ namespace CleanTemplate.Persistance.Jwt
     public interface IJwtService
     {
         Task<AccessToken> GenerateAsync(User user);
+        int? ValidateJwtAccessTokenAsync(string token);
     }
 }

src/Infrastructure/Persistance/Jwt/JwtService.cs

@@ -7,7 +7,9 @@
 using System;
 using System.Collections.Generic;
 using System.IdentityModel.Tokens.Jwt;
+using System.Linq;
 using System.Security.Claims;
+using System.Security.Cryptography;
 using System.Text;
 using System.Threading.Tasks;
 
@@ -51,7 +53,38 @@ public async Task<AccessToken> GenerateAsync(User user)
 
             var securityToken = tokenHandler.CreateJwtSecurityToken(descriptor);
 
-            return new AccessToken(securityToken);
+            return new AccessToken(securityToken: securityToken,
+                refreshToken: GenerateRefreshToken(),
+                refreshTokenExpiresIn: _siteSetting.JwtSettings.RefreshTokenValidityInDays);
+        }
+
+        public int? ValidateJwtAccessTokenAsync(string token)
+        {
+            var secretKey = Encoding.UTF8.GetBytes(_siteSetting.JwtSettings.SecretKey); // longer that 16 character
+            var encryptionkey = Encoding.UTF8.GetBytes(_siteSetting.JwtSettings.EncryptKey); //must be 16 character
+
+            var tokenHandler = new JwtSecurityTokenHandler();
+            try
+            {
+                tokenHandler.ValidateToken(token, new TokenValidationParameters
+                {
+                    ValidateIssuerSigningKey = true,
+                    IssuerSigningKey = new SymmetricSecurityKey(secretKey),
+                    TokenDecryptionKey = new SymmetricSecurityKey(encryptionkey), 
+                    ValidateIssuer = false,
+                    ValidateAudience = false,
+                    // set clockskew to zero so tokens expire exactly at token expiration time (instead of 5 minutes later)
+                    ClockSkew = TimeSpan.Zero
+                }, out SecurityToken validatedToken);
+
+                var jwtSecurityToken = (JwtSecurityToken)validatedToken;
+                var userId = int.Parse(jwtSecurityToken.Claims.First(claim => claim.Type == "nameid").Value);
+                return userId;
+            }
+            catch 
+            {
+                return null;
+            }
         }
 
         private async Task<IEnumerable<Claim>> GetClaimsAsync(User user)
@@ -69,5 +102,12 @@ private async Task<IEnumerable<Claim>> GetClaimsAsync(User user)
 
             return claims;
         }
+        private static string GenerateRefreshToken()
+        {
+            var randomNumber = new byte[64];
+            using var rng = RandomNumberGenerator.Create();
+            rng.GetBytes(randomNumber);
+            return Convert.ToBase64String(randomNumber);
+        }
     }
 }