Day 14 - Login

fdeniz07 · Sep 30, 2021 · 3ddebda · 3ddebda
1 parent b0b5076
commit 3ddebda
Show file tree

Hide file tree

Showing 36 changed files with 827 additions and 149 deletions.
diff --git a/BlogWeb/Areas/Admin/Controllers/CategoryController.cs b/BlogWeb/Areas/Admin/Controllers/CategoryController.cs
@@ -6,11 +6,13 @@
 using CoreLayer.Utilities.Extensions;
 using CoreLayer.Utilities.Results.ComplexTypes;
 using EntityLayer.Dtos;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 
 namespace BlogWeb.Areas.Admin.Controllers
 {
     [Area("Admin")]
+    [Authorize(Roles = "Admin,Editor")]
     public class CategoryController : Controller
     {
         private readonly ICategoryService _categoryService;

diff --git a/BlogWeb/Areas/Admin/Controllers/HomeController.cs b/BlogWeb/Areas/Admin/Controllers/HomeController.cs
@@ -1,11 +1,10 @@
-using BlogWeb.Models;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
-using Microsoft.Extensions.Logging;
-using System.Diagnostics;
 
 namespace BlogWeb.Areas.Admin.Controllers
 {
     [Area("Admin")]
+    [Authorize(Roles = "Admin,Editor")]
     public class HomeController : Controller
     {
 

diff --git a/BlogWeb/Areas/Admin/Controllers/UserController.cs b/BlogWeb/Areas/Admin/Controllers/UserController.cs
@@ -12,6 +12,7 @@
 using AutoMapper;
 using BlogWeb.Areas.Admin.Models;
 using CoreLayer.Utilities.Extensions;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Hosting;
 using Microsoft.AspNetCore.Http;
 
@@ -21,16 +22,19 @@ namespace BlogWeb.Areas.Admin.Controllers
     public class UserController : Controller
     {
         private readonly UserManager<User> _userManager;
+        private readonly SignInManager<User> _signInManager;
         private readonly IWebHostEnvironment _env;
         private readonly IMapper _mapper;
 
-        public UserController(UserManager<User> userManager, IMapper mapper, IWebHostEnvironment env)
+        public UserController(UserManager<User> userManager, IMapper mapper, IWebHostEnvironment env, SignInManager<User> signInManager)
         {
             _userManager = userManager;
             _mapper = mapper;
             _env = env;
+            _signInManager = signInManager;
         }
 
+        [Authorize(Roles = "Admin")]
         public async Task<IActionResult> Index()
         {
             var users = await _userManager.Users.ToListAsync();
@@ -42,6 +46,45 @@ public async Task<IActionResult> Index()
             });
         }
 
+        [HttpGet]
+        public IActionResult Login()
+        {
+            return View("UserLogin");
+        }
+
+        [HttpPost]
+        public async Task<IActionResult> Login(UserLoginDto userLoginDto)
+        {
+            if (ModelState.IsValid)
+            {
+                var user = await _userManager.FindByEmailAsync(userLoginDto.Email);
+                if (user != null)
+                {
+                    var result = await _signInManager.PasswordSignInAsync(user, userLoginDto.Password,
+                        userLoginDto.RememberMe, false);// bu islem sonucunda bize bir result dönüyor.
+                    if (result.Succeeded) // eger bir islem sonucunda result dönülüyorsa, basarili olup olmadigi her zaman kontrol edilir
+                    {
+                        return RedirectToAction("Index", "Home");
+                    }
+                    else
+                    {
+                        ModelState.AddModelError("", "E-posta adresiniz veya şifreniz yanlıştır.");
+                        return View("UserLogin");
+                    }
+                }
+                else
+                {
+                    ModelState.AddModelError("", "E-posta adresiniz veya şifreniz yanlıştır.");
+                    return View("UserLogin");
+                }
+            }
+            else
+            {
+                return View("UserLogin");
+            }
+        }
+
+        [Authorize(Roles = "Admin")]
         [HttpGet]
         public async Task<JsonResult> GetAllUsers()
         {
@@ -57,12 +100,14 @@ public async Task<JsonResult> GetAllUsers()
             return Json(userListDto);
         }
 
+        [Authorize(Roles = "Admin")]
         [HttpGet]
         public IActionResult Add()
         {
             return PartialView("_UserAddPartial");
         }
 
+        [Authorize(Roles = "Admin")]
         [HttpPost]
         public async Task<IActionResult> Add(UserAddDto userAddDto)
         {
@@ -92,7 +137,7 @@ public async Task<IActionResult> Add(UserAddDto userAddDto)
 
             if (ModelState.IsValid)
             {
-                userAddDto.Image = await ImageUpload(userAddDto.UserName,userAddDto.ImageFile);
+                userAddDto.Image = await ImageUpload(userAddDto.UserName, userAddDto.ImageFile);
                 var user = _mapper.Map<User>(userAddDto);
                 var result = await _userManager.CreateAsync(user, userAddDto.Password); //burada bize IdentityResult dönüyor
                 if (result.Succeeded) //IdentityResult basarili ise
@@ -132,6 +177,24 @@ public async Task<IActionResult> Add(UserAddDto userAddDto)
             return Json(userAddAjaxModelStateErrorModel);
         }
 
+        [HttpGet]
+        public ViewResult AccessDenied()
+        {
+            return View();
+        }
+
+        [Authorize]
+        [HttpGet]
+        public async Task<IActionResult> Logut()
+        {
+            await _signInManager.SignOutAsync();
+            return RedirectToAction("Index", "Home", new
+            {
+                Area = ""
+            });
+        }
+
+        [Authorize(Roles = "Admin")]
         public async Task<JsonResult> Delete(int userId)
         {
             var user = await _userManager.FindByIdAsync(userId.ToString());
@@ -164,6 +227,7 @@ public async Task<JsonResult> Delete(int userId)
             }
         }
 
+        [Authorize(Roles = "Admin")]
         [HttpGet]
         public async Task<PartialViewResult> Update(int userId)
         {
@@ -172,6 +236,7 @@ public async Task<PartialViewResult> Update(int userId)
             return PartialView("_UserUpdatePartial", userUpdateDto);
         }
 
+        [Authorize(Roles = "Admin")]
         [HttpPost]
         public async Task<IActionResult> Update(UserUpdateDto userUpdateDto)
         {
@@ -212,25 +277,82 @@ public async Task<IActionResult> Update(UserUpdateDto userUpdateDto)
                 {
                     foreach (var error in result.Errors) //hatalar kullaniciya model üzerinden json a dönüstürülerek yansitilir
                     {
-                        ModelState.AddModelError("",error.Description);
+                        ModelState.AddModelError("", error.Description);
                     }
                     var userUpdateErrorViewModel = JsonSerializer.Serialize(new UserUpdateAjaxViewModel //Basarisiz update isleminden sonra view e bir model dönüyoruz ki, frontend e kullanici bu bilgileri görsün
                     {
                         UserUpdateDto = userUpdateDto,
-                       UserUpdatePartial = await this.RenderViewToStringAsync("_UserUpdatePartial", userUpdateDto)
+                        UserUpdatePartial = await this.RenderViewToStringAsync("_UserUpdatePartial", userUpdateDto)
                     });
                     return Json(userUpdateErrorViewModel);
                 }
             }
-            var userUpdateModelStateErrorViewModel = JsonSerializer.Serialize(new UserUpdateAjaxViewModel 
+            var userUpdateModelStateErrorViewModel = JsonSerializer.Serialize(new UserUpdateAjaxViewModel
             {
                 UserUpdateDto = userUpdateDto,
                 UserUpdatePartial = await this.RenderViewToStringAsync("_UserUpdatePartial", userUpdateDto)
             });
             return Json(userUpdateModelStateErrorViewModel);
         }
 
+        [Authorize]
+        [HttpGet]
+        public async Task<ViewResult> ChangeDetails()
+        {
+            var user = await _userManager.GetUserAsync(HttpContext.User);
+            var updateDto = _mapper.Map<UserUpdateDto>(user);
+            return View(updateDto);
+        }
+
+        [Authorize]
+        [HttpPost]
+        public async Task<ViewResult> ChangeDetails(UserUpdateDto userUpdateDto)
+        {
+            if (ModelState.IsValid)
+            {
+                bool isNewImageUploaded = false;
+                var oldUser = await _userManager.GetUserAsync(HttpContext.User); //kullaniciyi güncellemeden bilgilerini oturumdan alip, burada sakliyoruz
+                var oldUserImage = oldUser.Image; //kullanicinin eski resmini bir degiskene atiyoruz
+                if (userUpdateDto.ImageFile != null) //Eger kullanici yeni bir resim yüklerse
+                {
+                    userUpdateDto.Image = await ImageUpload(userUpdateDto.UserName, userUpdateDto.ImageFile); //kullanicinin yeni resmini güncelle
+                    if (oldUserImage!="defaultUser.png") // Diger kullanicilarinda kullandigi ortak resmin kontrolü yapiliyor, ortak resim ise silme isleminin önüne geciyoruz
+                    {
+                        isNewImageUploaded = true;
+                    }
+                }
+
+                var updatedUser = _mapper.Map<UserUpdateDto, User>(userUpdateDto, oldUser);
+                var result = await _userManager.UpdateAsync(updatedUser); // bilgileri db ye kaydediyoruz
+                if (result.Succeeded) //Bu kullanıcı dogru sekilde db ye gönderilmisse,
+                {
+                    if (isNewImageUploaded) // yeni bir resim db ye eklendiyse
+                    {
+                        ImageDelete(oldUserImage); //eski resmi db den siliyoruz
+                    }
+                    TempData.Add("SuccessMessage", $"{ updatedUser.UserName} adlı kullanıcı başarıyla güncellenmiştir.");
+                    return View(userUpdateDto);
+                }
+                else //Kullanici güncelleme bilgileri db ye dogru sekilde yansimamissa,
+                {
+                    foreach (var error in result.Errors) //hatalar kullaniciya model üzerinden json a dönüstürülerek yansitilir
+                    {
+                        ModelState.AddModelError("", error.Description);
+                    }
+                    return View(userUpdateDto);
+                }
+            }
+            return View(userUpdateDto);
+        }
+
+        [Authorize]
+        [HttpGet]
+        public ViewResult PasswordChange()
+        {
+            return View();
+        }
 
+        [Authorize(Roles = "Admin,Editor")]
         public async Task<string> ImageUpload(string userName, IFormFile imageFile)
         {
             // ~/img/user.Picture
@@ -254,6 +376,7 @@ public async Task<string> ImageUpload(string userName, IFormFile imageFile)
             return fileName; // FatihDeniz_587_5_38_12_28_09_2021.png - "~/img/user.Image"
         }
 
+        [Authorize(Roles = "Admin,Editor")]
         public bool ImageDelete(string imageName)
         {
             // Amac : Kullanici resmini güncelledikten sonra eski resmin sunucudan silinmesi veyahut silinen bir kullanicinin resmininde silinmesi

diff --git a/BlogWeb/Areas/Admin/Models/UserViewModel.cs b/BlogWeb/Areas/Admin/Models/UserViewModel.cs
@@ -0,0 +1,9 @@
+using EntityLayer.Concrete;
+
+namespace BlogWeb.Areas.Admin.Models
+{
+    public class UserViewModel
+    {
+        public User User { get; set; }
+    }
+}
diff --git a/BlogWeb/Areas/Admin/Models/UserWithRolesViewModel.cs b/BlogWeb/Areas/Admin/Models/UserWithRolesViewModel.cs
@@ -0,0 +1,12 @@
+using EntityLayer.Concrete;
+using System.Collections.Generic;
+
+namespace BlogWeb.Areas.Admin.Models
+{
+    public class UserWithRolesViewModel
+    {
+        //Bu bölüm, yetkisiz kullanicilarin yetkisi olmayan bölümleri görmemesini saglar
+        public User User { get; set; }
+        public IList<string> Roles { get; set; }
+    }
+}
diff --git a/BlogWeb/Areas/Admin/ViewComponents/AdminMenuViewComponent.cs b/BlogWeb/Areas/Admin/ViewComponents/AdminMenuViewComponent.cs
@@ -0,0 +1,30 @@
+using BlogWeb.Areas.Admin.Models;
+using EntityLayer.Concrete;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.ViewComponents;
+
+namespace BlogWeb.Areas.Admin.ViewComponents
+{
+    public class AdminMenuViewComponent:ViewComponent
+    {
+        private readonly UserManager<User> _userManager;
+
+        public AdminMenuViewComponent(UserManager<User> userManager)
+        {
+            _userManager = userManager;
+        }
+
+        public ViewViewComponentResult Invoke()
+        {
+            var user = _userManager.GetUserAsync(HttpContext.User).Result;
+            var roles = _userManager.GetRolesAsync(user).Result;
+
+            return View(new UserWithRolesViewModel
+            {
+                User = user,
+                Roles = roles
+            });
+        }
+    }
+}
diff --git a/BlogWeb/Areas/Admin/ViewComponents/UserMenuViewComponent.cs b/BlogWeb/Areas/Admin/ViewComponents/UserMenuViewComponent.cs
@@ -0,0 +1,27 @@
+using BlogWeb.Areas.Admin.Models;
+using EntityLayer.Concrete;
+using Microsoft.AspNetCore.Identity;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.AspNetCore.Mvc.ViewComponents;
+
+namespace BlogWeb.Areas.Admin.ViewComponents
+{
+    public class UserMenuViewComponent:ViewComponent
+    {
+        private readonly UserManager<User> _userManager;
+
+        public UserMenuViewComponent(UserManager<User> userManager)
+        {
+            _userManager = userManager;
+        }
+
+        public ViewViewComponentResult Invoke()
+        {
+            var user = _userManager.GetUserAsync(HttpContext.User).Result;
+            return View(new UserViewModel
+            {
+                User = user
+            });
+        }
+    }
+}
diff --git a/BlogWeb/Areas/Admin/Views/Shared/Components/AdminMenu/Default.cshtml b/BlogWeb/Areas/Admin/Views/Shared/Components/AdminMenu/Default.cshtml
@@ -0,0 +1,44 @@
+@model BlogWeb.Areas.Admin.Models.UserWithRolesViewModel
+
+<div id="layoutSidenav_nav">
+    <nav class="sb-sidenav accordion sb-sidenav-dark" id="sidenavAccordion">
+        <div class="sb-sidenav-menu">
+            <div class="nav">
+                <div class="sb-sidenav-menu-heading">MENÜ</div>
+                <a class="nav-link" asp-area="Admin" asp-controller="Home" asp-action="Index">
+                    <div class="sb-nav-link-icon"><i class="fas fa-tachometer-alt"></i></div>
+                    Dashboard
+                </a>
+                <div class="sb-sidenav-menu-heading">İçerikler</div>
+                <a class="nav-link" asp-area="Admin" asp-controller="Category" asp-action="Index">
+                    <div class="sb-nav-link-icon"><i class="fas fa-th-list"></i></div>
+                    Kategoriler
+                </a>
+                <a class="nav-link" asp-area="Admin" asp-controller="Blog" asp-action="Index">
+                    <div class="sb-nav-link-icon"><i class="fas fa-file-alt"></i></div>
+                    Makaleler
+                </a>
+                <a class="nav-link" asp-area="Admin" asp-controller="Comment" asp-action="Index">
+                    <div class="sb-nav-link-icon"><i class="fas fa-comments"></i></div>
+                    Yorumlar
+                </a>
+                @if (Model.Roles.Any(r=>r.Equals("Admin")))
+                {
+                    <div class="sb-sidenav-menu-heading">Kullanıcılar</div>
+                    <a class="nav-link" asp-area="Admin" asp-controller="Role" asp-action="Index">
+                        <div class="sb-nav-link-icon"><i class="fas fa-user-shield"></i></div>
+                        Roller
+                    </a>
+                    <a class="nav-link" asp-area="Admin" asp-controller="User" asp-action="Index">
+                        <div class="sb-nav-link-icon"><i class="fas fa-users"></i></div>
+                        Kullanıcılar
+                    </a>
+                }
+            </div>
+        </div>
+        <div class="sb-sidenav-footer">
+            <div class="small">Giriş Yapan Kullanıcı:</div>
+            @Model.User.UserName
+        </div>
+    </nav>
+</div>