Add auth.

ClientApp/app/app.module.ts

@@ -1,3 +1,4 @@
+import { Auth } from './services/auth.service';
 import { BrowserXhr } from '@angular/http';
 import { BrowserXhrWithProgress, ProgressService } from './services/progress.service';
 import { ViewVehicleComponent } from './components/view-vehicle/view-vehicle';
@@ -54,6 +55,7 @@ Raven.config('https://d37bba0c459b46e0857e6e2b3aeff09b@sentry.io/155312').instal
     providers: [
       { provide: ErrorHandler, useClass: AppErrorHandler },
       { provide: BrowserXhr, useClass: BrowserXhrWithProgress },
+      Auth,
       VehicleService,
       PhotoService,
       ProgressService

ClientApp/app/components/navmenu/navmenu.component.html

@@ -12,6 +12,14 @@
         <div class='clearfix'></div>
         <div class='navbar-collapse collapse'>
             <ul class='nav navbar-nav'>
+                <li [routerLinkActive]="['link-active']">
+                    <a href="https://vegaproject.auth0.com/login?client=RfRu3un13aOO73C7X2mH41qxfHRbUc33" *ngIf="!auth.authenticated()">
+                        <span class='glyphicon glyphicon-user'></span> Login
+                    </a>
+                    <a (click)="auth.logout()" *ngIf="auth.authenticated()">
+                        <span class='glyphicon glyphicon-user'></span> Logout
+                    </a>
+                </li>
                 <li [routerLinkActive]="['link-active']"  [routerLinkActiveOptions]="{exact: true}">
                     <a [routerLink]="['/vehicles']">
                         <span class='glyphicon glyphicon-home'></span> Vehicles

ClientApp/app/components/navmenu/navmenu.component.ts

@@ -1,3 +1,4 @@
+import { Auth } from './../../services/auth.service';
 import { Component } from '@angular/core';
 
 @Component({
@@ -6,4 +7,5 @@ import { Component } from '@angular/core';
     styleUrls: ['./navmenu.component.css']
 })
 export class NavMenuComponent {
+  constructor(private auth: Auth) {}
 }

ClientApp/app/services/auth.service.ts

@@ -0,0 +1,51 @@
+// app/auth.service.ts
+
+import { Injectable }      from '@angular/core';
+import { tokenNotExpired } from 'angular2-jwt';
+
+// Avoid name not found warnings
+import Auth0Lock from 'auth0-lock';
+
+@Injectable()
+export class Auth {
+  profile: any;
+
+  // Configure Auth0
+  lock = new Auth0Lock('RfRu3un13aOO73C7X2mH41qxfHRbUc33', 'vegaproject.auth0.com', {});
+
+  constructor() {
+    this.profile = JSON.parse(localStorage.getItem('profile'));
+
+    // Add callback for lock `authenticated` event
+    this.lock.on("authenticated", (authResult) => {
+      localStorage.setItem('token', authResult.accessToken);
+
+      this.lock.getUserInfo(authResult.accessToken, (error, profile) => {
+        if (error)
+          throw error;
+
+        console.log(profile);
+        localStorage.setItem('profile', JSON.stringify(profile));
+        this.profile = profile;
+      });
+    });
+  }
+
+  public login() {
+    // Call the show method to display the widget.
+    this.lock.show();
+  }
+
+  public authenticated() {
+    // Check if there's an unexpired JWT
+    // This searches for an item in localStorage with key == 'token'
+    return tokenNotExpired('token');
+  }
+
+  public logout() {
+    // Remove token from localStorage
+    localStorage.removeItem('token');
+    localStorage.removeItem('profile');
+    this.profile = null;
+  }
+}

Controllers/FeaturesController.cs

@@ -1,6 +1,7 @@
 using System.Collections.Generic;
 using System.Threading.Tasks;
 using AutoMapper;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
 using vega.Controllers.Resources;

Controllers/VehiclesController.cs

@@ -7,6 +7,7 @@
 using vega.Controllers.Resources;
 using vega.Core.Models;
 using vega.Core;
+using Microsoft.AspNetCore.Authorization;
 
 namespace vega.Controllers
 {
@@ -25,6 +26,7 @@ public VehiclesController(IMapper mapper, IVehicleRepository repository, IUnitOf
     }
 
     [HttpPost]
+    [Authorize]
     public async Task<IActionResult> CreateVehicle([FromBody] SaveVehicleResource vehicleResource)
     {
       if (!ModelState.IsValid)
@@ -44,6 +46,7 @@ public async Task<IActionResult> CreateVehicle([FromBody] SaveVehicleResource ve
     }
 
     [HttpPut("{id}")]
+    [Authorize]
     public async Task<IActionResult> UpdateVehicle(int id, [FromBody] SaveVehicleResource vehicleResource)
     {
       if (!ModelState.IsValid)
@@ -66,6 +69,7 @@ public async Task<IActionResult> UpdateVehicle(int id, [FromBody] SaveVehicleRes
     }
 
     [HttpDelete("{id}")]
+    [Authorize]
     public async Task<IActionResult> DeleteVehicle(int id)
     {
       var vehicle = await repository.GetVehicle(id, includeRelated: false);

Startup.cs

@@ -13,66 +13,73 @@
 namespace Vega
 {
   public class Startup
+  {
+    public Startup(IHostingEnvironment env)
     {
-        public Startup(IHostingEnvironment env)
-        {
-            var builder = new ConfigurationBuilder()
-                .SetBasePath(env.ContentRootPath)
-                .AddJsonFile("appsettings.json", optional: true, reloadOnChange: true)
-                .AddJsonFile($"appsettings.{env.EnvironmentName}.json", optional: true)
-                .AddEnvironmentVariables();
-            Configuration = builder.Build();
-        }
+        var builder = new ConfigurationBuilder()
+            .SetBasePath(env.ContentRootPath)
+            .AddJsonFile("appsettings.json", optional: true, reloadOnChange: true)
+            .AddJsonFile($"appsettings.{env.EnvironmentName}.json", optional: true)
+            .AddEnvironmentVariables();
+        Configuration = builder.Build();
+    }
 
-        public IConfigurationRoot Configuration { get; }
+    public IConfigurationRoot Configuration { get; }
 
-        // This method gets called by the runtime. Use this method to add services to the container.
-        public void ConfigureServices(IServiceCollection services)
-        {
-            services.Configure<PhotoSettings>(Configuration.GetSection("PhotoSettings"));
+    // This method gets called by the runtime. Use this method to add services to the container.
+    public void ConfigureServices(IServiceCollection services)
+    {
+        services.Configure<PhotoSettings>(Configuration.GetSection("PhotoSettings"));
 
-            services.AddScoped<IVehicleRepository, VehicleRepository>();
-            services.AddScoped<IPhotoRepository, PhotoRepository>();
-            services.AddScoped<IUnitOfWork, UnitOfWork>();
+        services.AddScoped<IVehicleRepository, VehicleRepository>();
+        services.AddScoped<IPhotoRepository, PhotoRepository>();
+        services.AddScoped<IUnitOfWork, UnitOfWork>();
 
-            services.AddAutoMapper();
+        services.AddAutoMapper();
 
-            services.AddDbContext<VegaDbContext>(options => options.UseSqlServer(Configuration.GetConnectionString("Default")));
+        services.AddDbContext<VegaDbContext>(options => options.UseSqlServer(Configuration.GetConnectionString("Default")));
 
-            // Add framework services.
-            services.AddMvc();
-        }
+        // Add framework services.
+        services.AddMvc();
+    }
+
+    // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
+    public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
+    {
+        loggerFactory.AddConsole(Configuration.GetSection("Logging"));
+        loggerFactory.AddDebug();
 
-        // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
-        public void Configure(IApplicationBuilder app, IHostingEnvironment env, ILoggerFactory loggerFactory)
+        if (env.IsDevelopment())
         {
-            loggerFactory.AddConsole(Configuration.GetSection("Logging"));
-            loggerFactory.AddDebug();
+            app.UseDeveloperExceptionPage();
+            app.UseWebpackDevMiddleware(new WebpackDevMiddlewareOptions {
+                HotModuleReplacement = true
+            });
+        }
+        else
+        {
+            app.UseExceptionHandler("/Home/Error");
+        }
 
-            if (env.IsDevelopment())
-            {
-                app.UseDeveloperExceptionPage();
-                app.UseWebpackDevMiddleware(new WebpackDevMiddlewareOptions {
-                    HotModuleReplacement = true
-                });
-            }
-            else
-            {
-                app.UseExceptionHandler("/Home/Error");
-            }
+        app.UseStaticFiles();
 
-            app.UseStaticFiles();
+        var options = new JwtBearerOptions
+        {
+          Audience = "https://api.vega.com",
+          Authority = "https://vegaproject.auth0.com/"
+        };
+        app.UseJwtBearerAuthentication(options);
 
-            app.UseMvc(routes =>
-            {
-                routes.MapRoute(
-                    name: "default",
-                    template: "{controller=Home}/{action=Index}/{id?}");
+        app.UseMvc(routes =>
+        {
+            routes.MapRoute(
+                name: "default",
+                template: "{controller=Home}/{action=Index}/{id?}");
 
-                routes.MapSpaFallbackRoute(
-                    name: "spa-fallback",
-                    defaults: new { controller = "Home", action = "Index" });
-            });
-        }
+            routes.MapSpaFallbackRoute(
+                name: "spa-fallback",
+                defaults: new { controller = "Home", action = "Index" });
+        });
     }
+  }
 }

Vega.csproj

@@ -14,6 +14,7 @@
     <PackageReference Include="AutoMapper" Version="6.0.1" />
     <PackageReference Include="AutoMapper.Extensions.Microsoft.DependencyInjection" Version="1.2.0" />
     <PackageReference Include="Microsoft.AspNetCore" Version="1.1.0" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="1.1.1" />
     <PackageReference Include="Microsoft.AspNetCore.Mvc" Version="1.1.1" />
     <PackageReference Include="Microsoft.AspNetCore.SpaServices" Version="1.1.0" />
     <PackageReference Include="Microsoft.AspNetCore.StaticFiles" Version="1.1.0" />

Views/Home/Index.cshtml

@@ -2,7 +2,7 @@
     ViewData["Title"] = "Home Page";
 }
 
-<app asp-prerender-module="ClientApp/dist/main-server">Loading...</app>
+<app xasp-prerender-module="ClientApp/dist/main-server">Loading...</app>
 
 <script src="~/dist/vendor.js" asp-append-version="true"></script>
 @section scripts {

package.json

@@ -12,13 +12,15 @@
     "@angular/platform-server": "^2.4.5",
     "@angular/router": "^3.4.5",
     "@types/node": "^6.0.42",
+    "angular2-jwt": "^0.2.2",
     "angular2-platform-node": "~2.0.11",
     "angular2-template-loader": "^0.6.2",
     "angular2-universal": "^2.1.0-rc.1",
     "angular2-universal-patch": "^0.2.1",
     "angular2-universal-polyfills": "^2.1.0-rc.1",
     "aspnet-prerendering": "^2.0.0",
     "aspnet-webpack": "^1.0.17",
+    "auth0-lock": "^10.15.0",
     "awesome-typescript-loader": "^3.0.0",
     "bootstrap": "^3.3.7",
     "css": "^2.2.1",

webpack.config.vendor.js

@@ -24,8 +24,10 @@ module.exports = (env) => {
                 '@angular/platform-browser-dynamic',
                 '@angular/router',
                 '@angular/platform-server',
+                'angular2-jwt',
                 'angular2-universal',
                 'angular2-universal-polyfills',
+                'auth0-lock',
                 'bootstrap',
                 'bootstrap/dist/css/bootstrap.css',
                 'es6-shim',