891894d136
Single helper extension: MapSvrntyAltchaChallenge() exposes
GET /api/altcha/challenge (configurable prefix) that fetches a fresh
challenge from IAltchaChallengeProvider and projects it onto the
JSON shape the altcha widget v3 expects from its challengeurl —
{ algorithm, challenge, salt, signature, maxnumber } in lowercase.
AllowAnonymous on purpose: the whole point is gating mutations from
unauthenticated callers, so the challenge endpoint must be reachable
without credentials.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
29 lines
911 B
C#
29 lines
911 B
C#
using System.Text.Json.Serialization;
|
|
|
|
namespace Svrnty.CQRS.Altcha.MinimalApi;
|
|
|
|
/// <summary>
|
|
/// JSON projection of <see cref="Svrnty.CQRS.Altcha.Abstractions.AltchaChallenge"/>
|
|
/// in the exact shape the
|
|
/// <a href="https://altcha.org/docs/v2/widget-v3/">altcha widget v3</a>
|
|
/// expects from a <c>challengeurl</c> response. Property names are
|
|
/// lowercased and <c>challenge</c> (no underscore) to match the widget.
|
|
/// </summary>
|
|
public sealed class AltchaChallengeDto
|
|
{
|
|
[JsonPropertyName("algorithm")]
|
|
public required string Algorithm { get; init; }
|
|
|
|
[JsonPropertyName("challenge")]
|
|
public required string Challenge { get; init; }
|
|
|
|
[JsonPropertyName("salt")]
|
|
public required string Salt { get; init; }
|
|
|
|
[JsonPropertyName("signature")]
|
|
public required string Signature { get; init; }
|
|
|
|
[JsonPropertyName("maxnumber")]
|
|
public required uint MaxNumber { get; init; }
|
|
}
|