JWT Authorization

Glue/Controllers/AdminCensorController.cs

@@ -3,6 +3,7 @@
 using PetFoster.DAL;
 using System.Data;
 using System.Text.Json;
+using Microsoft.AspNetCore.Authorization;
 
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
@@ -26,6 +27,7 @@ public PostModel()
             }
         }
         // GET: api/<AdminCensorController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpGet("check")]
         public IActionResult Get()
         {
@@ -97,6 +99,7 @@ public void Delete(int id)
         }
         */
         // PATCH api/<AdminCensorController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpPatch("check-info-update")]
         public IActionResult Patch([FromBody] PostModel PostData)
         {

Glue/Controllers/AdminUserController.cs

@@ -3,6 +3,7 @@
 using PetFoster.DAL;
 using System.Data;
 using System.Text.Json;
+using Microsoft.AspNetCore.Authorization;
 
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
@@ -20,8 +21,9 @@ public class UserModel
             public string? address { get; set; }
             public string? account_status { get; set; }
         }
-        
+
         // GET: api/<AdminUserController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpGet("tableuser")]
         public IActionResult Get()
         {
@@ -98,19 +100,22 @@ private IActionResult _ChangeUserStatus(string id, string target_status)
         }
 
         // POST api/<AdminUserController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("block")] // 封号
         public IActionResult PostBlock([FromBody] string id)
         {
             return _ChangeUserStatus(id, "Banned");
         }
         // POST api/<AdminUserController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("ban")] // 禁言
         public IActionResult PostBan([FromBody] string id)
         {
             if (UserServer.GetStatus(id) == "Banned")
                 return Ok();
             return _ChangeUserStatus(id, "Under Review");
         }
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("remove-block")]
         [HttpPost("remove-ban")] // 解除禁言/解除封号，逻辑由UserManager.Ban实现，故在这里共用同一函数
         public IActionResult PostRemoveBan([FromBody] string id)

Glue/Controllers/DoctorController.cs

@@ -3,6 +3,7 @@
 using PetFoster.DAL;
 using PetFoster.Model;
 using System.Data;
+using Microsoft.AspNetCore.Authorization;
 
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
@@ -42,6 +43,7 @@ private List<Doctor> ConvertDataTableToVetList(DataTable dataTable)
         }
 
         // GET: api/<DoctorController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpGet("doctor")]
         public IActionResult Get()
         {
@@ -56,6 +58,7 @@ public IActionResult Get()
                 return StatusCode(500, ex.Message);
             }
         }
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("add-doctor")]
         public IActionResult AddEmployee([FromBody] Doctor vet)
         {
@@ -103,6 +106,7 @@ public IEnumerable<Doctor> Post()
         }
         */
         // PUT api/<DoctorController>/5
+        [Authorize(Policy = "AdminOnly")]
         [HttpPut("edit-doctor/{doctorId}")]
         public IActionResult Put(int doctorId, [FromBody] Doctor vet)
         {
@@ -137,8 +141,9 @@ public IActionResult Put(int doctorId, [FromBody] Doctor vet)
                 return StatusCode(500, ex.Message);
             }
         }
-        
+
         // DELETE api/<DoctorController>/5
+        [Authorize(Policy = "AdminOnly")]
         [HttpDelete("delete-doctor/{id}")]
         public IActionResult Delete(int id)
         {

Glue/Controllers/DonateController.cs

@@ -1,6 +1,7 @@
 using Microsoft.AspNetCore.Mvc;
 using PetFoster.BLL;
 using static Glue.Controllers.RegisterController;
+using Microsoft.AspNetCore.Authorization;
 
 namespace Glue.Controllers
 {
@@ -19,7 +20,7 @@ public DonateModel()
                 Amount = 0;
             }
         }
-
+        [Authorize]
         [HttpPost]
         public IActionResult Donate([FromBody] DonateModel donateModel)
         {

Glue/Controllers/EmployeeController.cs

@@ -3,6 +3,8 @@
 using PetFoster.DAL;
 using PetFoster.Model;
 using System.Data;
+using Microsoft.AspNetCore.Authorization;
+
 using static WebApplicationTest1.UserInfoController;
 
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
@@ -23,6 +25,7 @@ public class EmployeeModel
             public string? salary { get; set; }
         }
         // GET: api/<EmployeeController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpGet("employee")]
         public IActionResult Get()
         {
@@ -76,7 +79,7 @@ public IActionResult Get()
             }
 
         }
-
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("add-employee")]
         public IActionResult AddEmployee([FromBody] EmployeeModel employee)
         {
@@ -131,6 +134,7 @@ public void Post([FromBody] string value)
         }
         */
         // PUT api/<EmployeeController>/5
+        [Authorize(Policy = "AdminOnly")]
         [HttpPut("edit-employee/{employeeId}")]
         public IActionResult Put(int employeeId, [FromBody] EmployeeModel employee)
         {
@@ -196,6 +200,7 @@ public IActionResult Put(int employeeId, [FromBody] EmployeeModel employee)
         }
 
         // DELETE api/<EmployeeController>/5
+        [Authorize(Policy = "AdminOnly")]
         [HttpDelete("delete-employee/{employeeId}")]
         public IActionResult Delete(int employeeId)
         {

Glue/Controllers/ForumController.cs

@@ -14,6 +14,7 @@
 using Glue.PetFoster.Model;
 using static Glue.Controllers.RegisterController;
 using System.Net.NetworkInformation;
+using Microsoft.AspNetCore.Authorization;
 
 namespace Glue.Controllers
 {
@@ -61,6 +62,7 @@ public class PostRequestModel
             public string? post_content { get; set; }
             public List<IFormFile>? filename { get; set; }
         }
+        [Authorize]
         [HttpPost("postcontent")]
         public async Task<IActionResult> PostContent([FromForm] PostRequestModel postModel)
         {
@@ -115,7 +117,7 @@ public IActionResult PostComment([FromBody] PostModel postModel)
             Console.WriteLine("收到帖子评论列表请求：" + postModel.post_id);
             return Ok(AllComment);
         }
-
+        [Authorize]
         [HttpPost("addcomment")]
         public IActionResult AddComment([FromBody] PostModel postModel)
         {
@@ -128,6 +130,7 @@ public IActionResult AddComment([FromBody] PostModel postModel)
                 return Ok("评论成功");
             return BadRequest(-1);
         }
+        [Authorize]
         [HttpPost("likepost")]
         public IActionResult LikePost([FromBody] PostModel postModel)
         {
@@ -142,13 +145,15 @@ public IActionResult IfLikePost([FromBody] PostModel postModel)
             int status = LikePostManager.IfLike(postModel.user_id, postModel.post_id);
             return Ok(status);
         }
+        [Authorize]
         [HttpPost("deletecomment")]
         public IActionResult DeleteComment([FromBody] PostModel postModel)
         {
             Console.WriteLine("收到获取点赞信息请求,帖子ID：" + postModel.post_id + "点赞人ID：" + postModel.user_id);
             CommentPostManager.UndoACommentPost(postModel.user_id, postModel.post_id,postModel.comment_time);
             return Ok();
         }
+        [Authorize]
         [HttpPost("deletepost")]
         public IActionResult DeletePost([FromBody] PostModel postModel)
         {

Glue/Controllers/LoginController.cs

@@ -10,13 +10,23 @@
 using System.Text.Json;
 using System.Text;
 using System.Security.Cryptography;
+using System.Security.Claims;
+using Glue.Controllers;
+
 namespace WebApplicationTest1
 {
 
     [Route("api/[controller]")]
     [ApiController]
     public class LoginController : ControllerBase
     {
+        private readonly IConfiguration _configuration;
+        private readonly TokenHelper _tokenHelper;
+        public LoginController(IConfiguration configuration)
+        {
+            _configuration = configuration;
+            _tokenHelper = new TokenHelper(configuration);
+        }
         public class LoginModel
         {
             public string Username { get; set; }
@@ -76,11 +86,14 @@ public IActionResult Login([FromBody] LoginModel loginModel)
             }
             else
             {
+                //用户身份验证成功，生成JWT令牌
+                string tokenString = _tokenHelper.GenerateToken(candidate.User_ID);
 
                 var responseData = new
                 {
                     data = new
                     {
+                        token = tokenString,
                         User_ID = candidate.User_ID,
                         User_Name = candidate.User_Name,
                         Password = candidate.Password,

Glue/Controllers/ManageAdoptController.cs

@@ -4,6 +4,7 @@
 using System.Text.Json;
 using PetFoster.DAL;
 using Microsoft.AspNetCore.Routing;
+using Microsoft.AspNetCore.Authorization;
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
 namespace Glue.Controllers
@@ -35,6 +36,7 @@ public AdoptionRecord()
         }
 
         // GET: api/<ManageAdoptController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpGet("manage-adopt")]
         public IActionResult Get()
         {
@@ -98,6 +100,7 @@ public IActionResult Get()
         }
 
         // PATCH: api/<ManageAdoptController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpPatch("manage-adopt-update")]
         public IActionResult UpdateAdoptRecord([FromBody] AdoptionRecord record)
         {

Glue/Controllers/ManageFosterController.cs

@@ -4,6 +4,7 @@
 using System.Data;
 using System.Text.Json;
 //using Microsoft.AspNetCore.JsonPatch;
+using Microsoft.AspNetCore.Authorization;
 
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
@@ -45,7 +46,7 @@ public void print()
         }
 
         // GET: api/<ManageFosterController>
-
+        [Authorize(Policy = "AdminOnly")]
         [HttpGet("manage-foster")]
         public IActionResult Get()
         {
@@ -108,8 +109,9 @@ public IActionResult Get()
             }
             return Ok(jsondata);
         }
-        
+
         // PATCH: api/<ManageFosterController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpPatch("manage-foster-update")]
         public IActionResult UpdateFosterRecord([FromBody] FosterRecord record)
         {

Glue/Controllers/ManageNoticeController.cs

@@ -10,6 +10,7 @@
 using System.Security.Cryptography;
 using System;
 using System.Numerics;
+using Microsoft.AspNetCore.Authorization;
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
 namespace Glue.Controllers
@@ -111,6 +112,7 @@ public IActionResult getDonation()
         }*/
 
         // 发送新公告
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("send-notice")]
         public IActionResult sendNewNotice([FromBody] NoticeModel notice)
         {
@@ -161,6 +163,7 @@ public IActionResult getNoticeContent(int noticeId)
         }*/
 
         // 发送编辑过的公告
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("send-edited-notice")]
         public IActionResult sendEditedNotice([FromBody] NoticeModel notice)
         {
@@ -195,6 +198,7 @@ public IActionResult sendEditedNotice([FromBody] NoticeModel notice)
         }
 
         // 删除公告
+        [Authorize(Policy = "AdminOnly")]
         [HttpDelete("delete-notice/{noticeId}")]
         public IActionResult deleteNotice(int noticeId)
         {

Glue/Controllers/ManagePetController.cs

@@ -3,6 +3,7 @@
 using PetFoster.DAL;
 using System.Data;
 using System.Data.Common;
+using Microsoft.AspNetCore.Authorization;
 
 // For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
 
@@ -18,6 +19,7 @@ public ManagePetController(FileHelper fileHelper)
             _fileHelper = fileHelper;
         }
         // GET: api/<ManagePetController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpGet("petlist")]
         public IActionResult Get()
         {
@@ -113,6 +115,7 @@ public class PetModelWithImgs
         }
 
         // POST api/<ManagePetController>
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("add-pet")]
         public IActionResult AddPet([FromBody] PetModel pet)
         {
@@ -192,6 +195,7 @@ public IActionResult AddPet([FromBody] PetModel pet)
         }
 
         // POST api/<ManagePetController>/5
+        [Authorize(Policy = "AdminOnly")]
         [HttpPost("edited-pet")]
         public async Task<IActionResult> Post([FromForm] PetModelWithImgs pet)
         {
@@ -252,6 +256,7 @@ public class DeletePetRequest
         {
             public string? pid { get; set; }
         }
+        [Authorize(Policy = "AdminOnly")]
         [HttpDelete("delete-pet")]
         public IActionResult Delete([FromBody] DeletePetRequest request)
         {