VCST-4420: Skip password expire check when impersonating (#126)

Author: ksavosteev

src/VirtoCommerce.ProfileExperienceApiModule.Data/Schemas/ProfileSchema.cs

@@ -773,6 +773,8 @@ public async Task CheckAuthAsync(IResolveFieldContext context, object resource,
             var principal = context.GetCurrentPrincipal();
             var userId = principal.GetCurrentUserId();
             var isExternalSignIn = principal.IsExternalSignIn();
+            var isImpersonated = principal.IsImpersonated();
+
             var signInManager = _signInManagerFactory();
 
             try
@@ -783,7 +785,7 @@ public async Task CheckAuthAsync(IResolveFieldContext context, object resource,
                     UserName = Xapi.Core.ModuleConstants.AnonymousUser.UserName,
                 };
 
-                if (checkPasswordExpired && user.PasswordExpired && !isExternalSignIn)
+                if (checkPasswordExpired && user.PasswordExpired && !isExternalSignIn && !isImpersonated)
                 {
                     throw AuthorizationError.PasswordExpired();
                 }

src/VirtoCommerce.ProfileExperienceApiModule.Data/Schemas/UserType.cs

@@ -97,7 +97,7 @@ public UserType(IContactAggregateRepository contactAggregateRepository, IUserMan
 
         private static bool GetPasswordExpired(IResolveFieldContext<ApplicationUser> context)
         {
-            return context.Source.PasswordExpired && !IsExternalSignIn(context);
+            return context.Source.PasswordExpired && !IsExternalSignIn(context) && !IsImpersonated(context);
         }
 
         private static int? GetPasswordExpiryInDays(IResolveFieldContext<ApplicationUser> context, UserOptionsExtended userOptionsExtended)
@@ -108,6 +108,7 @@ private static bool GetPasswordExpired(IResolveFieldContext<ApplicationUser> con
 
             if (!user.PasswordExpired &&
                 !IsExternalSignIn(context) &&
+                !IsImpersonated(context) &&
                 userOptionsExtended.RemindPasswordExpiryInDays > 0 &&
                 userOptionsExtended.MaxPasswordAge != null &&
                 userOptionsExtended.MaxPasswordAge.Value > TimeSpan.Zero)
@@ -129,5 +130,10 @@ private static bool IsExternalSignIn(IResolveFieldContext<ApplicationUser> conte
         {
             return context.Source.Id == context.GetCurrentUserId() && context.GetCurrentPrincipal().IsExternalSignIn();
         }
+
+        private static bool IsImpersonated(IResolveFieldContext<ApplicationUser> context)
+        {
+            return context.GetCurrentPrincipal().IsImpersonated();
+        }
     }
 }