gowthamece / apikeyauthentication Goto Github PK

if (!apiKey.Equals(extractedApiKey))
{
  context.Response.StatusCode = 401;
  await context.Response.WriteAsync("Unauthorized client");
  return;
}

var equals = CryptographicOperations.FixedTimeEquals(
  System.Text.Encoding.UTF8.GetBytes( apiKey ),
  System.Text.Encoding.UTF8.GetBytes( extractedApiKey ) );

if( !equals )
{
  context.Response.StatusCode = 401;
  await context.Response.WriteAsync( "Unauthorized client" );
  return;
}