<\/div>\n

Merhaba,<\/p>\n

Asp.NET Core ile geli\u015ftirdi\u011fimiz uygulamalar\u0131n \u00e7o\u011funda authentication ve authorization yayg\u0131n olarak kulland\u0131\u011f\u0131m\u0131z g\u00fcvenlik protokolleridir. Genellikle, bu protokoller neticesinde do\u011frulanan kullan\u0131c\u0131lar\u0131n bilgilerine eri\u015fim g\u00f6sterebildikleri noktalarda bizler taraf\u0131ndan ihtiya\u00e7 duyulabilmektedir. Bu konuya dair kaynaklar\u0131 tarad\u0131\u011f\u0131m\u0131zda kimi uygulamalarda kullan\u0131c\u0131 bilgisi i\u00e7in identity provider’la etkile\u015fim kuruldu\u011funu g\u00f6rmekteyiz. Halbuki her kullan\u0131c\u0131 bilgisi ihtiyac\u0131na kar\u015f\u0131n bu davran\u0131\u015f\u0131n hem maliyetli hem de mimarisel olarak ilke d\u0131\u015f\u0131 bir y\u00f6ntem oldu\u011funu s\u00f6yleyebiliriz. Burada yap\u0131lmas\u0131 gereken claim tabanl\u0131 kullan\u0131c\u0131 bilgisinin client’a aktar\u0131lmas\u0131 ve ihtiya\u00e7 noktalar\u0131nda bu bilgilerin claim \u00fczerinden elde edilmesidir. Tabi bunun i\u00e7in de bir soyutlama \u00e7al\u0131\u015fmas\u0131 elzemdir. \u0130\u015fte bu i\u00e7eri\u011fimizde bu basit ama etkili y\u00f6ntemi teknik olarak de\u011ferlendiriyor olaca\u011f\u0131z. Buyurun ba\u015flayal\u0131m…<\/p>\n

\u0130lk olarak a\u015fa\u011f\u0131daki gibi bir abstraction yap\u0131s\u0131 olu\u015fturarak ba\u015flayal\u0131m;<\/p>\n

\r\n    public interface IUserContext\r\n    {\r\n        bool IsAuthenticated { get; }\r\n        Guid UserId { get; }\r\n        string Username { get; }\r\n    }\r\n<\/pre>\n<\/div>\nBurada mevcut kullan\u0131c\u0131ya dair ihtiyac\u0131m\u0131z olan bilgileri tutuyoruz. Tabi ki de gerekli oldu\u011fu d\u00fc\u015f\u00fcn\u00fclen farkl\u0131 veriler s\u00f6z konusuysa e\u011fer bunlar\u0131 da ekleyerek bu interface geni\u015fletilebilir. \u015eimdi bu abstraction’\u0131 bir concrete class’a uygulayarak mevcut kullan\u0131c\u0131n\u0131n claim’lerini i\u00e7eren ClaimsPrincipal<\/code>‘a eri\u015felim. Tabi bunun i\u00e7in de a\u015fa\u011f\u0131daki gibi extension metot’lardan istifade edece\u011fiz.<\/p>\n
\n\r\n    public static class ClaimsPrincipalExtensions\r\n    {\r\n        public static Guid GetUserId(this ClaimsPrincipal? claimsPrincipal)\r\n        {\r\n            string? userId = claimsPrincipal?.FindFirstValue("UserId");\r\n            return Guid.TryParse(userId, out Guid parsedUserId) ? parsedUserId : throw new ApplicationException();\r\n        }\r\n\r\n        public static string GetUsername(this ClaimsPrincipal? claimsPrincipal)\r\n        {\r\n            string? username = claimsPrincipal?.FindFirstValue(ClaimTypes.NameIdentifier);\r\n            return username;\r\n        }\r\n    }\r\n<\/pre>\n<\/div>\nVe concrete class’\u0131 olu\u015fturup, implementasyonu ger\u00e7ekle\u015ftirelim.<\/p>\n
\n\r\n    public sealed class UserContext(IHttpContextAccessor httpContextAccessor) : IUserContext\r\n    {\r\n        public bool IsAuthenticated =>\r\n            httpContextAccessor\r\n            .HttpContext?\r\n            .User\r\n            .Identity?\r\n            .IsAuthenticated ?? false;\r\n\r\n        public Guid UserId =>\r\n            httpContextAccessor\r\n            .HttpContext?\r\n            .User\r\n            .GetUserId() ?? throw new ApplicationException();\r\n\r\n        public string Username =>\r\n            httpContextAccessor\r\n            .HttpContext?\r\n            .User\r\n            .GetUsername() ?? throw new ApplicationException();\r\n    }\r\n<\/pre>\n<\/div>\nVe bu i\u015flemin ard\u0131ndan a\u015fa\u011f\u0131daki gibi IoC Container tan\u0131mlamas\u0131nda bulunduktan sonra mevcut kullan\u0131c\u0131 bilgilerine istedi\u011fimiz noktadan eri\u015fim g\u00f6sterebiliriz.<\/p>\n
\n\r\nbuilder.Services.AddSingleton<IUserContext, UserContext>();\r\n<\/pre>\n<\/div>\n\u015e\u00f6yle ki;<\/p>\n
\n\r\napp.MapGet("\/get-userid", (IUserContext userContext) => userContext.UserId)\r\n    .RequireAuthorization();\r\n\r\napp.MapGet("\/get-username", (IUserContext userContext) => userContext.Username)\r\n    .RequireAuthorization();\r\n<\/pre>\n<\/div>\nTabi buradaki \u00f6rne\u011fin d\u0131\u015f\u0131nda mevcut kullan\u0131c\u0131 bilgilerine onion architecture gibi profesyonel mimarilerin application katmanlar\u0131ndan ya da CQRS pattern davran\u0131\u015f\u0131n\u0131n uyguland\u0131\u011f\u0131 handle s\u0131n\u0131flar\u0131ndan rahatl\u0131kla eri\u015fim g\u00f6sterebilir ve etkin bir \u015fekilde y\u00f6netebiliriz.<\/p>\n
\u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle…
\nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere…
\n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n
Not : \u00d6rnek \u00e7al\u0131\u015fmaya a\u015fa\u011f\u0131daki github adresinden eri\u015febilirsiniz.
\nhttps:\/\/github.com\/gncyyldz\/Get.Current.User.Example<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, Asp.NET Core ile geli\u015ftirdi\u011fimiz uygulamalar\u0131n \u00e7o\u011funda authentication ve authorization yayg\u0131n olarak kulland\u0131\u011f\u0131m\u0131z g\u00fcvenlik protokolleridir. Genellikle, bu protokoller neticesinde do\u011frulanan kullan\u0131c\u0131lar\u0131n bilgilerine eri\u015fim g\u00f6sterebildikleri noktalarda bizler taraf\u0131ndan ihtiya\u00e7 duyulabilmektedir. Bu konuya dair kaynaklar\u0131 tarad\u0131\u011f\u0131m\u0131zda...<\/p>\n","protected":false},"author":1,"featured_media":9596,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2739,3102],"tags":[2679,5044,5045],"class_list":["post-26951","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-net-core","category-asp-net-core","tag-asp-net-core","tag-asp-net-core-current-user","tag-current-user"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/26951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=26951"}],"version-history":[{"count":6,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/26951\/revisions"}],"predecessor-version":[{"id":26957,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/26951\/revisions\/26957"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/9596"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=26951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=26951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=26951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}