using DotNetOpenAuth.OpenId;
using DotNetOpenAuth.OpenId.Extensions.AttributeExchange;
using DotNetOpenAuth.OpenId.Extensions.SimpleRegistration; 
using DotNetOpenAuth.OpenId.RelyingParty;
using OpenIdRelyingPartyWebForms;

public class SSOLogin : System.Web.UI.Page
{
    private const string OpenIdProviderURL = "https://testopenid.dga.or.th/";
    private static OpenIdRelyingParty relyingParty = new OpenIdRelyingParty();

    static SSOLogin()
    {
        // Configure the RP to only allow assertions from our trusted OP endpoint.
        EndpointSelector ep = new EndpointSelector(EndpointFilter);
        relyingParty.EndpointFilter = ep;
    }

    protected static bool EndpointFilter(IProviderEndpoint ipep) 
    {
        return ipep.Uri.AbsoluteUri == OpenIdProviderURL + "server.aspx";
    }

    protected void Page_Load(object sender, EventArgs e)
    {
        //ทำการสร้าง url ของหน้าที่ต้องการให้ส่งกลับ โดยในที่นี้ให้ส่งกลับมายังหน้าเดิม
        string[] segments = Request.Url.Segments;
        string pathToPage = ""; 
        for(int i=0; i<segments.Length-1; i++) {
            pathToPage += segments[i]; 
        } 
        UriBuilder returnToBuilder = new UriBuilder(Request.Url);
        returnToBuilder.Path = pathToPage+"SSOLogin.aspx";
        returnToBuilder.Query = null;
        returnToBuilder.Fragment = null;
        Uri returnTo = returnToBuilder.Uri;
        returnToBuilder.Path = "/";

        //บันทึก Url ลงใน Realm
        Realm realm = returnToBuilder.Uri;
        
        try
        {
            IAuthenticationRequest request = relyingParty.CreateRequest(
            OpenIdProviderURL, realm, returnTo);

            // Attributes ที่ต้องการร้องขอจาก OpenID Provider
            // โดยใช้หลักการ AttributeExcahnge (AX)
            var ax = new FetchRequest();
            ax.Attributes.Add(new AttributeRequest(WellKnownAttributes.Contact.Email, true));
            ax.Attributes.Add(new AttributeRequest(WellKnownAttributes.Name.FullName, true));
            ax.Attributes.Add(new AttributeRequest(WellKnownAttributes.Name.Alias, true));
            
            request.AddExtension(ax);

            //ส่ง Request ไปยัง OpenID Provider      
            request.RedirectToProvider();
        }
        catch (Exception ex)
        {
            Response.Write("ไม่พบ OpenID end point สาเหตุอาจมาจากการที่ท่านระบุ url ผิด หรือ ท่านไม่ได้ทำการเพิ่ม 
                            SSL Certificate ไปยัง Trusted Root Store บนเครื่อง Server");
        }
    }
} 
                        

using DotNetOpenAuth.OpenId;
using DotNetOpenAuth.OpenId.Extensions.AttributeExchange;
using DotNetOpenAuth.OpenId.Extensions.SimpleRegistration; 
using DotNetOpenAuth.OpenId.RelyingParty;
using OpenIdRelyingPartyWebForms;

public class SSOLogin : System.Web.UI.Page
{
    private const string OpenIdProviderURL = "https://testopenid.dga.or.th/";
    private static OpenIdRelyingParty relyingParty = new OpenIdRelyingParty();

    static SSOLogin()
    {
        // Configure the RP to only allow assertions from our trusted OP endpoint.
        EndpointSelector ep = new EndpointSelector(EndpointFilter);
        relyingParty.EndpointFilter = ep;
    }

    protected static bool EndpointFilter(IProviderEndpoint ipep) 
    {
        return ipep.Uri.AbsoluteUri == OpenIdProviderURL + "server.aspx";
    }

    protected void Page_Load(object sender, EventArgs e)
    {
        try
        {
            IAuthenticationResponse response = relyingParty.GetResponse();

            switch (response.Status)
            {
                case AuthenticationStatus.Canceled:
                    // ผู้ใช้ยกเลิก
                    break;
                case AuthenticationStatus.Failed:
                    // ผู้ใช้ Authenticate ไม่ผ่าน
                    break;
                case AuthenticationStatus.Authenticated:

                    // ทำการดึงข้อมูลที่ได้รับมาจาก OpenID Provider ออกมา
                    FetchResponse fetchResponse = response.GetExtension<FetchResponse>();
                    State.FetchResponse = fetchResponse;
                    string claimed = response.FriendlyIdentifierForDisplay;
                    string userName = State.FetchResponse.Attributes[WellKnownAttributes
                    .Name.Alias].Values[0];
                    string fullName = State.FetchResponse.Attributes[WellKnownAttributes
                    .Name.FullName].Values[0];
                    string email = State.FetchResponse.Attributes[WellKnownAttributes
                    .Contact.Email].Values[0];
                    string identifier = State.FetchResponse
                    .Attributes["http://www.egov.go.th/2012/identifier/citizenid"].Values[0];
                    string userType = State.FetchResponse
                    .Attributes["http://www.egov.go.th/2012/identifier/usertype"].Values[0];

                    UserMappingAndAuthorization(claimed, userName, fullName, email, identifier, userType); 

                    break;
                default:
                    break;
            }
        }
        catch (Exception ex)
        {
            
        }
    }
}