Moonlight/Moonlight.Client/Services/IdentityService.cs

using MoonCore.Attributes;
using MoonCore.Blazor.Services;
using MoonCore.Exceptions;
using MoonCore.Helpers;
using Moonlight.Shared.Http.Responses.Auth;

namespace Moonlight.Client.Services;

[Scoped]
public class IdentityService
{
    public string Username { get; private set; } = "";
    public string Email { get; private set; } = "";
    public string[] Permissions { get; private set; } = [];
    public bool IsLoggedIn { get; private set; } = false;

    private readonly HttpApiClient HttpApiClient;
    private readonly LocalStorageService LocalStorageService;

    public IdentityService(HttpApiClient httpApiClient, LocalStorageService localStorageService)
    {
        HttpApiClient = httpApiClient;
        LocalStorageService = localStorageService;
    }

    public async Task Check()
    {
        IsLoggedIn = false;
        
        var response = await HttpApiClient.GetJson<CheckResponse>("api/auth/check");

        Username = response.Username;
        Email = response.Email;
        Permissions = response.Permissions;

        IsLoggedIn = true;

        //await OnStateChanged?.Invoke();
    }

    public async Task Logout()
    {
        await LocalStorageService.SetString("AccessToken", "unset");
        await LocalStorageService.SetString("RefreshToken", "unset");
        await LocalStorageService.Set("ExpiresAt", DateTime.MinValue);
    }
    
    public bool HasPermission(string requiredPermission)
    {
        // Check for wildcard permission
        if (Permissions.Contains("*"))
            return true;

        var requiredSegments = requiredPermission.Split('.');

        // Check if the user has the exact permission or a wildcard match
        foreach (var permission in Permissions)
        {
            var permissionSegments = permission.Split('.');

            // Iterate over the segments of the required permission
            for (var i = 0; i < requiredSegments.Length; i++)
            {
                // If the current segment matches or is a wildcard, continue to the next segment
                if (i < permissionSegments.Length && requiredSegments[i] == permissionSegments[i] ||
                    permissionSegments[i] == "*")
                {
                    // If we've reached the end of the permissionSegments array, it means we've found a match
                    if (i == permissionSegments.Length - 1)
                        return true; // Found an exact match or a wildcard match
                }
                else
                {
                    // If we reach here, it means the segments don't match and we break out of the loop
                    break;
                }
            }
        }

        // No matching permission found
        return false;
    }
}