Update sample.http to support user creation then token generation from the new users

TodoBasicWithAuth/AuthApi.cs

@@ -30,9 +30,9 @@ public AuthApi(JwtSettings jwtSettings)
 
         public async Task CreateUser(UserManager<TodoUser> userManager, HttpContext context)
         {
-            var loginInfo = await JsonSerializer.DeserializeAsync<LoginInfo>(context.Request.Body, _options);
+            var loginInfo = await JsonSerializer.DeserializeAsync<CreateUser>(context.Request.Body, _options);
 
-            var result = await userManager.CreateAsync(new TodoUser { UserName = loginInfo.UserName }, loginInfo.Password);
+            var result = await userManager.CreateAsync(new TodoUser { UserName = loginInfo.UserName, IsAdmin = loginInfo.IsAdmin }, loginInfo.Password);
 
             if (result.Succeeded)
             {
@@ -55,13 +55,15 @@ public async Task GenerateTokenAsync(UserManager<TodoUser> userManager, HttpCont
             }
 
             var claims = new List<Claim>();
-
+            claims.Add(new Claim("can_view", "true"));
+
             if (user.IsAdmin)
             {
                 claims.Add(new Claim("can_delete", "true"));
-                claims.Add(new Claim("can_view", "true"));
             }
 
+
+
             var key = new SymmetricSecurityKey(_jwtSettings.Key);
             var creds = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
             var token = new JwtSecurityToken(

TodoBasicWithAuth/CreateUser.cs

@@ -0,0 +1,19 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.Linq;
+using System.Threading.Tasks;
+
+namespace Todos
+{
+    public class CreateUser
+    {
+        [Required]
+        public string UserName { get; set; }
+
+        [Required]
+        public string Password { get; set; }
+
+        public bool IsAdmin { get; set; }
+    }
+}

TodoBasicWithAuth/sample.http

@@ -1,32 +1,54 @@
-@token = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjYW5fZGVsZXRlIjoidHJ1ZSIsImNhbl92aWV3IjoidHJ1ZSIsImV4cCI6MTU4MTU2NTU2MiwiaXNzIjoiZGVmYXVsdGlzc3VlciIsImF1ZCI6ImRlZmF1bHRhdWRpZW5jZSJ9.XJyk0vIcuy1x4Kdk2O6N9I3Ibg3Qs4dOlFiiQOle2pk
 @todo_id = 1
 ###
 
 // Needs https://marketplace.visualstudio.com/items?itemName=humao.rest-client
-// Get all todos (no authentication)
-GET http://localhost:5000/api/todos
 
+###
+
+//Create regular user
+POST http://localhost:5000/api/auth
+Content-Type: application/json
+
+{
+    "username" : "user",
+    "password" : "Hunter2!"
+}
 
 ###
 
-// Authenticate as Admin
-POST http://localhost:5000/api/auth/token
+// Create admin user
+POST http://localhost:5000/api/auth
 Content-Type: application/json
 
 {
     "username" : "admin",
-    "password" : "123456"
+    "password" : "Pass123456!",
+    "isAdmin"  : true
 }
 
 ###
 
 // Authenticate as regular user
+# @name LoginRegularUser
 POST http://localhost:5000/api/auth/token
 Content-Type: application/json
 
 {
     "username" : "user",
-    "password" : "hunter2"
+    "password" : "Hunter2!"
+}
+
+@token = {{LoginRegularUser.response.body.token}}
+###
+
+// New Todo
+POST http://localhost:5000/api/todos
+Authorization: Bearer {{token}}
+Content-Type: application/json
+
+{
+    "Name" : "Write unit tests.",
+    "IsComplete" : false
 }
 
 ###
@@ -43,21 +65,23 @@ Authorization: Bearer {{token}}
 GET http://localhost:5000/api/todos/{{todo_id}}
 Authorization: Bearer {{token}}
 
-
 ###
 
-// New Todo
-POST http://localhost:5000/api/todos
-Authorization: Bearer {{token}}
+// Authenticate as an admin user
+# @name LoginAdminUser
+POST http://localhost:5000/api/auth/token
 Content-Type: application/json
 
 {
-    "Name" : "Write unit tests.",
-    "IsComplete" : false
+    "username" : "admin",
+    "password" : "Pass123456!"
 }
 
 ###
 
-// Delete Todo
+// Delete Todo. must be authenticated as admim
+
+@admintoken = {{LoginAdminUser.response.body.token}}
+
 DELETE http://localhost:5000/api/todos/{{todo_id}}
-Authorization: Bearer {{token}}
+Authorization: Bearer {{admintoken}}