PalacePal/Pal.Client/Net/RemoteApi.Utils.cs

using System;
using System.Net.Security;
using System.Security.Cryptography.X509Certificates;
using Dalamud.Logging;
using Grpc.Core;
using Microsoft.Extensions.Logging;

namespace Pal.Client.Net;

internal partial class RemoteApi
{
    private Metadata UnauthorizedHeaders() => new()
    {
        { "User-Agent", _userAgent },
    };

    private Metadata AuthorizedHeaders() => new()
    {
        { "Authorization", $"Bearer {_loginInfo.AuthToken}" },
        { "User-Agent", _userAgent },
    };

    private SslClientAuthenticationOptions? GetSslClientAuthenticationOptions()
    {
#if !DEBUG
        var secrets = typeof(RemoteApi).Assembly.GetType("Pal.Client.Secrets");
        if (secrets == null)
            return null;

        var pass = secrets.GetProperty("CertPassword")?.GetValue(null) as string;
        if (pass == null)
            return null;

        var manifestResourceStream = typeof(RemoteApi).Assembly.GetManifestResourceStream("Pal.Client.Certificate.pfx");
        if (manifestResourceStream == null)
            return null;

        var bytes = new byte[manifestResourceStream.Length];
        int read = manifestResourceStream.Read(bytes, 0, bytes.Length);
        if (read != bytes.Length)
            throw new InvalidOperationException();

        var certificate = new X509Certificate2(bytes, pass, X509KeyStorageFlags.DefaultKeySet);
        _logger.LogDebug("Using client certificate {CertificateHash}", certificate.GetCertHashString());
        return new SslClientAuthenticationOptions
        {
            ClientCertificates = new X509CertificateCollection()
            {
                certificate,
            },
        };
#else
        _logger.LogDebug("Not using client certificate");
        return null;
#endif
    }
}