using System.ComponentModel.DataAnnotations;

namespace MvcRoleBased.Models;

public class LoginViewModel
{
    [Required(ErrorMessage = "Informe o nome")]
    [Display(Name = "Usuário")]

    public string? UserName { get; set; }
    [Required(ErrorMessage = "Informe a senha")]

    [DataType(DataType.Password)]
    [Display(Name = "Senha")]
    public string? Password { get; set; }

    public string? ReturnUrl { get; set; }
}

using Microsoft.AspNetCore.Authentication.Cookies;

var builder = WebApplication.CreateBuilder(args);

// Add services to the container.
builder.Services.AddControllersWithViews();

builder.Services.Configure<CookiePolicyOptions>(options =>
{
    options.MinimumSameSitePolicy = SameSiteMode.None;
});

builder.Services
  .AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
  .AddCookie(options=>
  {
    options.LoginPath = "/Account/Login";
    options.AccessDeniedPath = "/Account/AccessDenied";
    // previne que o cookie seja acessado
    // via javascript no cliente
    options.Cookie.HttpOnly = true;
    options.ExpireTimeSpan = TimeSpan.FromMinutes(3);
    options.SlidingExpiration = true;
  });

builder.Services.AddHttpContextAccessor();

var app = builder.Build();

// Configure the HTTP request pipeline.
if (!app.Environment.IsDevelopment())
{
    app.UseExceptionHandler("/Home/Error");
    app.UseHsts();
}

app.UseHttpsRedirection();
app.UseStaticFiles();

app.UseRouting();

app.UseCookiePolicy();
app.UseAuthentication();
app.UseAuthorization();

app.MapControllerRoute(
    name: "default",
    pattern: "{controller=Home}/{action=Index}/{id?}");

app.Run();

using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using MvcRoleBased.Models;
using System.Diagnostics;
using System.Security.Claims;

namespace MvcRoleBased.Controllers;

public class HomeController : Controller
{
    private readonly ILogger<HomeController> _logger;
    private readonly IHttpContextAccessor _httpContextAccessor;

    public HomeController(ILogger<HomeController> logger, 
                         IHttpContextAccessor httpContextAccessor)
    {
        _logger = logger;
        _httpContextAccessor = httpContextAccessor;
    }
    public IActionResult Index()
    {
        var user = _httpContextAccessor.HttpContext?
                                       .User
                                       .FindFirstValue(ClaimTypes.Name);
        if (user == null)
            return RedirectToAction("Login", "Account");

        return View();
    }

    [Authorize(Roles = "Admin")]
    public IActionResult Segredo()
    {
        var user = _httpContextAccessor.HttpContext?.User.FindFirstValue(ClaimTypes.Name);
        var role = _httpContextAccessor.HttpContext?.User.FindFirstValue(ClaimTypes.Role);
        ViewBag.UserName = user;
        ViewBag.Role = role;
        return View();
    }

    [Authorize(Roles = "User")]
    public IActionResult Privacy()
    {
        var user = _httpContextAccessor.HttpContext?.User.FindFirstValue(ClaimTypes.Name);
        var role = _httpContextAccessor.HttpContext?.User.FindFirstValue(ClaimTypes.Role);
        ViewBag.UserName = user;
        ViewBag.Role = role;
        return View();
    }

    [Authorize(Roles = "Admin,User")]
    public IActionResult AcessoUser()
    {
        var user = _httpContextAccessor.HttpContext?.User.FindFirstValue(ClaimTypes.Name);
        var role = _httpContextAccessor.HttpContext?.User.FindFirstValue(ClaimTypes.Role);
        ViewBag.UserName = user;
        ViewBag.Role = role;
        return View();
    }

    [ResponseCache(Duration = 0, Location = ResponseCacheLocation.None, NoStore = true)]
    public IActionResult Error()
    {
        return View(new ErrorViewModel { RequestId = Activity.Current?.Id 
                                                             ?? HttpContext.TraceIdentifier });
    }
}

using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Mvc;
using System.Security.Claims;
using Microsoft.AspNetCore.Authorization;
using MvcRoleBased.Models;

namespace MvcRoleBased.Controllers;

public class AccountController : Controller
{
    [AllowAnonymous]
    public IActionResult Login(string returnUrl)
    {
        return View(new LoginViewModel()
        {
            ReturnUrl = returnUrl
        });
    }

    [AllowAnonymous]
    [HttpPost]
    public IActionResult Login(LoginViewModel loginVM)
    {
        if (!string.IsNullOrEmpty(loginVM.UserName) && 
             string.IsNullOrEmpty(loginVM.Password))
        {
            return RedirectToAction("Login");
        }

        ClaimsIdentity? identity = null;

        bool isAuthenticate = false;

        if (loginVM.UserName == "admin" && loginVM.Password == "numsey#2023")
        {
            identity = new ClaimsIdentity(new[]
            {
                new Claim(ClaimTypes.Name,loginVM.UserName),
                new Claim(ClaimTypes.Role,"Admin")
            }, CookieAuthenticationDefaults.AuthenticationScheme);
            isAuthenticate = true;
        }

        if (loginVM.UserName == "macoratti" && loginVM.Password == "numsey@2023")
        {
            identity = new ClaimsIdentity(new[]
            {
                new Claim(ClaimTypes.Name,loginVM.UserName),
                new Claim(ClaimTypes.Role,"User")
            }, CookieAuthenticationDefaults.AuthenticationScheme);
            isAuthenticate = true;
        }

        if (isAuthenticate)
        {
            var principal = new ClaimsPrincipal(identity);

            var perfil = principal.IsInRole("User");

            var login = HttpContext.SignInAsync(CookieAuthenticationDefaults
                                                        .AuthenticationScheme, principal);

            return RedirectToAction("AcessoUser", "Home");
        }

        ModelState.AddModelError("", "Falha ao realizar o login!!");
        return View();
    }

    public IActionResult AccessDenied(string returnUrl)
    {
        return View(new LoginViewModel()
        {
            ReturnUrl = returnUrl
        });
    }

    public IActionResult Logout()
    {
        HttpContext.SignOutAsync();
        return RedirectToAction("Index", "Home");
    }
}

@model LoginViewModel
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
</head>
<body>
    <table class="table">
        <tr>
            <td><img src="~/images/login128.png" alt="Fazer o Login" class="center-block" /></td>
            <td>
                <div class="row">
                    <div class="col-12 col-md-12 col-lg-12">
                        <h3>Login</h3>
                        <br />
                        <form asp-controller="Account" asp-action="Login" method="post" 
                                                                   class="form-horizontal" role="form">
                            <div asp-validation-summary="ModelOnly" class="text-danger"></div>
                            <input type="hidden" asp-for="ReturnUrl" />
                            <div class="form-group">
                                <label asp-for="UserName" class="col-md-2 control-label"></label>
                                <div class="col-md-6">
                                    <input asp-for="UserName" class="form-control" />
                                    <span asp-validation-for="UserName" class="text-danger"></span>
                                </div>
                            </div>
                            <div class="form-group" style="margin-top: 15px;">
                                <label asp-for="Password" class="col-md-2 control-label"></label>
                                <div class="col-md-6">
                                    <input asp-for="Password" class="form-control" id="Password" />
                                    <input type="checkbox" style="margin-top:10px" onclick="MostrarSenha()" />
                                                                                                                       Mostrar senha
                                    <span asp-validation-for="Password" class="text-danger"></span>
                                </div>
                            </div>
                            <br />
                            <div class="form-group">
                                <div class="col-md-8">
                                    <input type="submit" class="btn btn-primary" value="Fazer Log in" />
                                </div>
                            </div>
                        </form>
                    </div>
                </div>
            </td>
        </tr>
    </table>
</body>
</html>

@{
    ViewData["Title"] = "Home Page";
}

<div>
   <img src="~/images/secreto1.jpg" alt="Fazer o Login" class="center-block" />
</div>
@if (ViewBag.UserName != null)
{
    <h4>(@ViewBag.UserName - @ViewBag.Role)</h4>
}

<div class="text-center">
    <h3>Bem-Vindo a àrea de Segurança</h3>
</div>