code snippets for "Securing Your Agatha Service Layer" post

s1.cs

    public class MyProjectRequest : Request
    {
        public string UserName { get; set; }
        public byte[] PasswordHash { get; set; }
    }
 
    public class MyProjectResponse : Response {}

s2.cs

    public class MyProjectAsyncRequestDispatcher : AsyncRequestDispatcher
    {
        private readonly IUserContext userContext;
 
        public MyProjectAsyncRequestDispatcher(IAsyncRequestProcessor requestProcessor, IUserContext userContext) : base(requestProcessor)
        {
            this.userContext = userContext;
        }
 
        protected override void BeforeSendingRequests(IEnumerable<Request> requestsToProcess)
        {
            base.BeforeSendingRequests(requestsToProcess);
 
            foreach (var myProjectRequest in requestsToProcess.OfType<MyProjectRequest>())
            {
                myProjectRequest.UserName = userContext.UserName;
                myProjectRequest.PasswordHash = userContext.PasswordHash;
            }
        }
    }

s3.cs

            new ClientConfiguration(typeof(MyProjectRequest).Assembly, new Agatha.Castle.Container(myContainerWrapper))
                {
                    AsyncRequestDispatcherImplementation = typeof(MyProjectAsyncRequestDispatcher)
                }
                .Initialize();

s4.cs

    public class MyProjectRequestProcessor : RequestProcessor
    {
        private readonly IAuthenticator authenticator;
 
        public MyProjectRequestProcessor(IAuthenticator authenticator, ServiceLayerConfiguration serviceLayerConfiguration, ICacheManager cacheManager)
            : base(serviceLayerConfiguration, cacheManager)
        {
            this.authenticator = authenticator;
        }
 
        protected override void BeforeHandle(Request request)
        {
            var myProjectRequest = request as MyProjectRequest;
 
            if (myProjectRequest != null)
            {
                if (!authenticator.AreValidCredentials(myProjectRequest.UserName, myProjectRequest.PasswordHash))
                {
                    throw new MySecurityException();
                }
            }
        }
    }

s5.cs

    public class MyProjectRequestProcessor : RequestProcessor
    {
        private readonly IAuthenticator authenticator;
 
        public MyProjectRequestProcessor(IAuthenticator authenticator, ServiceLayerConfiguration serviceLayerConfiguration, ICacheManager cacheManager)
            : base(serviceLayerConfiguration, cacheManager)
        {
            this.authenticator = authenticator;
        }
 
        protected override void BeforeProcessing(IEnumerable<Request> requests)
        {
            var myProjectRequest = (MyProjectRequest)requests.ElementAt(0);
 
            if (!authenticator.AreValidCredentials(myProjectRequest.UserName, myProjectRequest.PasswordHash))
            {
                throw new MySecurityException();
            }
        }
    }

s6.cs

            new ServiceLayerConfiguration(Assembly.GetExecutingAssembly(), typeof(MyProjectRequest).Assembly,
                new Agatha.Castle.Container(containerWrapper))
                {
                    RequestProcessorImplementation = typeof(MyProjectRequestProcessor),
                    SecurityExceptionType = typeof(MySecurityException)
                }
                .Initialize();

s7.cs

    public abstract class MyProjectRequestHandler<TRequest, TResponse> : RequestHandler<TRequest, TResponse>
        where TRequest : MyProjectRequest
    {
        public IAuthenticator Authenticator { get; set; }
 
        public override void BeforeHandle(TRequest request)
        {
            base.BeforeHandle(request);
 
            if (!Authenticator.AreValidCredentials(request.UserName, request.PasswordHash))
            {
                throw new MySecurityException();
            }
 
            Authorize(request);
        }
 
        protected virtual void Authorize(TRequest request) {}
    }

s8.cs

            new ServiceLayerConfiguration(Assembly.GetExecutingAssembly(), typeof(MyProjectRequest).Assembly,
                new Agatha.Castle.Container(containerWrapper))
                {
                    SecurityExceptionType = typeof(MySecurityException)
                }
                .Initialize();