// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.
 
using System.Diagnostics;
using System.Security.Principal;
using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Http;
 
namespace Microsoft.AspNetCore.Server.IISIntegration;
 
internal sealed class AuthenticationHandler : IAuthenticationHandler
{
    private WindowsPrincipal? _user;
    private HttpContext? _context;
    private AuthenticationScheme? _scheme;
 
    public Task<AuthenticateResult> AuthenticateAsync()
    {
        Debug.Assert(_scheme != null, "Handler must be initialized.");
 
        if (_user != null)
        {
            return Task.FromResult(AuthenticateResult.Success(new AuthenticationTicket(_user, _scheme.Name)));
        }
        else
        {
            return Task.FromResult(AuthenticateResult.NoResult());
        }
    }
 
    public Task ChallengeAsync(AuthenticationProperties? properties)
    {
        Debug.Assert(_context != null, "Handler must be initialized.");
 
        // We would normally set the www-authenticate header here, but IIS does that for us.
        _context.Response.StatusCode = 401;
        return Task.CompletedTask;
    }
 
    public Task ForbidAsync(AuthenticationProperties? properties)
    {
        Debug.Assert(_context != null, "Handler must be initialized.");
 
        _context.Response.StatusCode = 403;
        return Task.CompletedTask;
    }
 
    public Task InitializeAsync(AuthenticationScheme scheme, HttpContext context)
    {
        _scheme = scheme;
        _context = context;
        _user = context.Features.Get<WindowsPrincipal>(); // See IISMiddleware
        return Task.CompletedTask;
    }
}