ExternalAuthFacebookController.cs

using System.Web.Mvc;
using SmartStore.ComponentModel;
using SmartStore.Core.Domain.Customers;
using SmartStore.FacebookAuth.Core;
using SmartStore.FacebookAuth.Models;
using SmartStore.Services;
using SmartStore.Services.Authentication.External;
using SmartStore.Services.Security;
using SmartStore.Web.Framework;
using SmartStore.Web.Framework.Controllers;
using SmartStore.Web.Framework.Security;
using SmartStore.Web.Framework.Settings;

namespace SmartStore.FacebookAuth.Controllers
{
	//[UnitOfWork]
	public class ExternalAuthFacebookController : PluginControllerBase
    {
        private readonly IOAuthProviderFacebookAuthorizer _oAuthProviderFacebookAuthorizer;
        private readonly IOpenAuthenticationService _openAuthenticationService;
        private readonly ExternalAuthenticationSettings _externalAuthenticationSettings;
		private readonly ICommonServices _services;

        public ExternalAuthFacebookController(
            IOAuthProviderFacebookAuthorizer oAuthProviderFacebookAuthorizer,
            IOpenAuthenticationService openAuthenticationService,
            ExternalAuthenticationSettings externalAuthenticationSettings,
			ICommonServices services)
        {
            _oAuthProviderFacebookAuthorizer = oAuthProviderFacebookAuthorizer;
            _openAuthenticationService = openAuthenticationService;
            _externalAuthenticationSettings = externalAuthenticationSettings;
			_services = services;
        }

		private bool HasPermission(bool notify = true)
		{
			var hasPermission = _services.Permissions.Authorize(StandardPermissionProvider.ManageExternalAuthenticationMethods);

			if (notify && !hasPermission)
				NotifyError(_services.Localization.GetResource("Admin.AccessDenied.Description"));

			return hasPermission;
		}
        
		[LoadSetting, AdminAuthorize, ChildActionOnly]
        public ActionResult Configure(FacebookExternalAuthSettings settings)
        {
			if (!HasPermission(false))
				return AccessDeniedPartialView();

            var model = new ConfigurationModel();
			MiniMapper.Map(settings, model);

			var host = _services.StoreContext.CurrentStore.GetHost(true);
			model.RedirectUrl = $"{host}Plugins/SmartStore.FacebookAuth/logincallback/";

			return View(model);
        }

		[SaveSetting, HttpPost, AdminAuthorize, ChildActionOnly]
		public ActionResult Configure(FacebookExternalAuthSettings settings, ConfigurationModel model)
        {
			if (!HasPermission(false))
				return Configure(settings);

            if (!ModelState.IsValid)
                return Configure(settings);

			MiniMapper.Map(model, settings);
			settings.ClientKeyIdentifier = model.ClientKeyIdentifier.TrimSafe();
			settings.ClientSecret = model.ClientSecret.TrimSafe();

			NotifySuccess(_services.Localization.GetResource("Admin.Common.DataSuccessfullySaved"));

			return RedirectToConfiguration(FacebookExternalAuthMethod.SystemName, true);
        }

        [ChildActionOnly]
        public ActionResult PublicInfo()
        {
            var settings = _services.Settings.LoadSetting<FacebookExternalAuthSettings>(_services.StoreContext.CurrentStore.Id);

            if (settings.ClientKeyIdentifier.HasValue() && settings.ClientSecret.HasValue())
                return View();
            else
                return new EmptyResult();
        }

		public ActionResult Login(string returnUrl)
		{
			return LoginInternal(returnUrl, false);
		}

		public ActionResult LoginCallback(string returnUrl)
		{
			return LoginInternal(returnUrl, true);
		}

		[NonAction]
		private ActionResult LoginInternal(string returnUrl, bool verifyResponse)
		{
			var processor = _openAuthenticationService.LoadExternalAuthenticationMethodBySystemName(FacebookExternalAuthMethod.SystemName, _services.StoreContext.CurrentStore.Id);
			if (processor == null || !processor.IsMethodActive(_externalAuthenticationSettings))
			{
                NotifyError(T("Plugins.CannotLoadModule", T("Plugins.FriendlyName.SmartStore.FacebookAuth")));
                return new RedirectResult(Url.LogOn(returnUrl));
			}

			var viewModel = new LoginModel();
			TryUpdateModel(viewModel);

			var result = _oAuthProviderFacebookAuthorizer.Authorize(returnUrl, verifyResponse);
			switch (result.AuthenticationStatus)
			{
				case OpenAuthenticationStatus.Error:
					{
						if (!result.Success)
						{
							result.Errors.Each(x => NotifyError(x));
						}

						return new RedirectResult(Url.LogOn(returnUrl));
					}
				case OpenAuthenticationStatus.AssociateOnLogon:
					{
						return new RedirectResult(Url.LogOn(returnUrl));
					}
				case OpenAuthenticationStatus.AutoRegisteredEmailValidation:
					{
						return RedirectToRoute("RegisterResult", new { resultId = (int)UserRegistrationType.EmailValidation, returnUrl });
					}
				case OpenAuthenticationStatus.AutoRegisteredAdminApproval:
					{
						return RedirectToRoute("RegisterResult", new { resultId = (int)UserRegistrationType.AdminApproval, returnUrl });
					}
				case OpenAuthenticationStatus.AutoRegisteredStandard:
					{
						return RedirectToRoute("RegisterResult", new { resultId = (int)UserRegistrationType.Standard, returnUrl });
					}
				default:
					break;
			}

			if (result.Result != null)
				return result.Result;

			return HttpContext.Request.IsAuthenticated ?
				RedirectToReferrer(returnUrl, "~/") :
				new RedirectResult(Url.LogOn(returnUrl));
		}
	}
}