# Conflicts: # Jellyfin.Api/Helpers/RequestHelpers.cspull/3324/head
David Ullmer
4 years ago
commit
d4c86b82e0
@ -0,0 +1,81 @@
|
|||||||
|
using System.ComponentModel.DataAnnotations;
|
||||||
|
using System.Threading;
|
||||||
|
using MediaBrowser.Controller.Persistence;
|
||||||
|
using MediaBrowser.Model.Entities;
|
||||||
|
using Microsoft.AspNetCore.Authorization;
|
||||||
|
using Microsoft.AspNetCore.Http;
|
||||||
|
using Microsoft.AspNetCore.Mvc;
|
||||||
|
using Microsoft.AspNetCore.Mvc.ModelBinding;
|
||||||
|
|
||||||
|
namespace Jellyfin.Api.Controllers
|
||||||
|
{
|
||||||
|
/// <summary>
|
||||||
|
/// Display Preferences Controller.
|
||||||
|
/// </summary>
|
||||||
|
[Authorize]
|
||||||
|
public class DisplayPreferencesController : BaseJellyfinApiController
|
||||||
|
{
|
||||||
|
private readonly IDisplayPreferencesRepository _displayPreferencesRepository;
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Initializes a new instance of the <see cref="DisplayPreferencesController"/> class.
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="displayPreferencesRepository">Instance of <see cref="IDisplayPreferencesRepository"/> interface.</param>
|
||||||
|
public DisplayPreferencesController(IDisplayPreferencesRepository displayPreferencesRepository)
|
||||||
|
{
|
||||||
|
_displayPreferencesRepository = displayPreferencesRepository;
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Get Display Preferences.
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="displayPreferencesId">Display preferences id.</param>
|
||||||
|
/// <param name="userId">User id.</param>
|
||||||
|
/// <param name="client">Client.</param>
|
||||||
|
/// <response code="200">Display preferences retrieved.</response>
|
||||||
|
/// <returns>An <see cref="OkResult"/> containing the display preferences on success, or a <see cref="NotFoundResult"/> if the display preferences could not be found.</returns>
|
||||||
|
[HttpGet("{DisplayPreferencesId}")]
|
||||||
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
||||||
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
||||||
|
public ActionResult<DisplayPreferences> GetDisplayPreferences(
|
||||||
|
[FromRoute] string displayPreferencesId,
|
||||||
|
[FromQuery] [Required] string userId,
|
||||||
|
[FromQuery] [Required] string client)
|
||||||
|
{
|
||||||
|
return _displayPreferencesRepository.GetDisplayPreferences(displayPreferencesId, userId, client);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// <summary>
|
||||||
|
/// Update Display Preferences.
|
||||||
|
/// </summary>
|
||||||
|
/// <param name="displayPreferencesId">Display preferences id.</param>
|
||||||
|
/// <param name="userId">User Id.</param>
|
||||||
|
/// <param name="client">Client.</param>
|
||||||
|
/// <param name="displayPreferences">New Display Preferences object.</param>
|
||||||
|
/// <response code="200">Display preferences updated.</response>
|
||||||
|
/// <returns>An <see cref="OkResult"/> on success, or a <see cref="NotFoundResult"/> if the display preferences could not be found.</returns>
|
||||||
|
[HttpPost("{DisplayPreferencesId}")]
|
||||||
|
[ProducesResponseType(StatusCodes.Status200OK)]
|
||||||
|
[ProducesResponseType(typeof(ModelStateDictionary), StatusCodes.Status400BadRequest)]
|
||||||
|
[ProducesResponseType(StatusCodes.Status404NotFound)]
|
||||||
|
public ActionResult UpdateDisplayPreferences(
|
||||||
|
[FromRoute] string displayPreferencesId,
|
||||||
|
[FromQuery, BindRequired] string userId,
|
||||||
|
[FromQuery, BindRequired] string client,
|
||||||
|
[FromBody, BindRequired] DisplayPreferences displayPreferences)
|
||||||
|
{
|
||||||
|
if (displayPreferencesId == null)
|
||||||
|
{
|
||||||
|
// TODO - refactor so parameter doesn't exist or is actually used.
|
||||||
|
}
|
||||||
|
|
||||||
|
_displayPreferencesRepository.SaveDisplayPreferences(
|
||||||
|
displayPreferences,
|
||||||
|
userId,
|
||||||
|
client,
|
||||||
|
CancellationToken.None);
|
||||||
|
|
||||||
|
return Ok();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@ -1,101 +0,0 @@
|
|||||||
using System.Threading;
|
|
||||||
using MediaBrowser.Controller.Configuration;
|
|
||||||
using MediaBrowser.Controller.Net;
|
|
||||||
using MediaBrowser.Controller.Persistence;
|
|
||||||
using MediaBrowser.Model.Entities;
|
|
||||||
using MediaBrowser.Model.Serialization;
|
|
||||||
using MediaBrowser.Model.Services;
|
|
||||||
using Microsoft.Extensions.Logging;
|
|
||||||
|
|
||||||
namespace MediaBrowser.Api
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Class UpdateDisplayPreferences
|
|
||||||
/// </summary>
|
|
||||||
[Route("/DisplayPreferences/{DisplayPreferencesId}", "POST", Summary = "Updates a user's display preferences for an item")]
|
|
||||||
public class UpdateDisplayPreferences : DisplayPreferences, IReturnVoid
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
[ApiMember(Name = "DisplayPreferencesId", Description = "DisplayPreferences Id", IsRequired = true, DataType = "string", ParameterType = "path", Verb = "POST")]
|
|
||||||
public string DisplayPreferencesId { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "UserId", Description = "User Id", IsRequired = true, DataType = "string", ParameterType = "query", Verb = "POST")]
|
|
||||||
public string UserId { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
[Route("/DisplayPreferences/{Id}", "GET", Summary = "Gets a user's display preferences for an item")]
|
|
||||||
public class GetDisplayPreferences : IReturn<DisplayPreferences>
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
[ApiMember(Name = "Id", Description = "Item Id", IsRequired = true, DataType = "string", ParameterType = "path", Verb = "GET")]
|
|
||||||
public string Id { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "UserId", Description = "User Id", IsRequired = true, DataType = "string", ParameterType = "query", Verb = "GET")]
|
|
||||||
public string UserId { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "Client", Description = "Client", IsRequired = true, DataType = "string", ParameterType = "query", Verb = "GET")]
|
|
||||||
public string Client { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class DisplayPreferencesService
|
|
||||||
/// </summary>
|
|
||||||
[Authenticated]
|
|
||||||
public class DisplayPreferencesService : BaseApiService
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// The _display preferences manager
|
|
||||||
/// </summary>
|
|
||||||
private readonly IDisplayPreferencesRepository _displayPreferencesManager;
|
|
||||||
/// <summary>
|
|
||||||
/// The _json serializer
|
|
||||||
/// </summary>
|
|
||||||
private readonly IJsonSerializer _jsonSerializer;
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Initializes a new instance of the <see cref="DisplayPreferencesService" /> class.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="jsonSerializer">The json serializer.</param>
|
|
||||||
/// <param name="displayPreferencesManager">The display preferences manager.</param>
|
|
||||||
public DisplayPreferencesService(
|
|
||||||
ILogger<DisplayPreferencesService> logger,
|
|
||||||
IServerConfigurationManager serverConfigurationManager,
|
|
||||||
IHttpResultFactory httpResultFactory,
|
|
||||||
IJsonSerializer jsonSerializer,
|
|
||||||
IDisplayPreferencesRepository displayPreferencesManager)
|
|
||||||
: base(logger, serverConfigurationManager, httpResultFactory)
|
|
||||||
{
|
|
||||||
_jsonSerializer = jsonSerializer;
|
|
||||||
_displayPreferencesManager = displayPreferencesManager;
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
public object Get(GetDisplayPreferences request)
|
|
||||||
{
|
|
||||||
var result = _displayPreferencesManager.GetDisplayPreferences(request.Id, request.UserId, request.Client);
|
|
||||||
|
|
||||||
return ToOptimizedResult(result);
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Posts the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
public void Post(UpdateDisplayPreferences request)
|
|
||||||
{
|
|
||||||
// Serialize to json and then back so that the core doesn't see the request dto type
|
|
||||||
var displayPreferences = _jsonSerializer.DeserializeFromString<DisplayPreferences>(_jsonSerializer.SerializeToString(request));
|
|
||||||
|
|
||||||
_displayPreferencesManager.SaveDisplayPreferences(displayPreferences, request.UserId, request.Client, CancellationToken.None);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -1,605 +0,0 @@
|
|||||||
using System;
|
|
||||||
using System.Linq;
|
|
||||||
using System.Threading.Tasks;
|
|
||||||
using Jellyfin.Data.Enums;
|
|
||||||
using MediaBrowser.Common.Extensions;
|
|
||||||
using MediaBrowser.Common.Net;
|
|
||||||
using MediaBrowser.Controller.Authentication;
|
|
||||||
using MediaBrowser.Controller.Configuration;
|
|
||||||
using MediaBrowser.Controller.Devices;
|
|
||||||
using MediaBrowser.Controller.Library;
|
|
||||||
using MediaBrowser.Controller.Net;
|
|
||||||
using MediaBrowser.Controller.Session;
|
|
||||||
using MediaBrowser.Model.Configuration;
|
|
||||||
using MediaBrowser.Model.Dto;
|
|
||||||
using MediaBrowser.Model.Services;
|
|
||||||
using MediaBrowser.Model.Users;
|
|
||||||
using Microsoft.Extensions.Logging;
|
|
||||||
|
|
||||||
namespace MediaBrowser.Api
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Class GetUsers
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users", "GET", Summary = "Gets a list of users")]
|
|
||||||
[Authenticated]
|
|
||||||
public class GetUsers : IReturn<UserDto[]>
|
|
||||||
{
|
|
||||||
[ApiMember(Name = "IsHidden", Description = "Optional filter by IsHidden=true or false", IsRequired = false, DataType = "bool", ParameterType = "query", Verb = "GET")]
|
|
||||||
public bool? IsHidden { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "IsDisabled", Description = "Optional filter by IsDisabled=true or false", IsRequired = false, DataType = "bool", ParameterType = "query", Verb = "GET")]
|
|
||||||
public bool? IsDisabled { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "IsGuest", Description = "Optional filter by IsGuest=true or false", IsRequired = false, DataType = "bool", ParameterType = "query", Verb = "GET")]
|
|
||||||
public bool? IsGuest { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
[Route("/Users/Public", "GET", Summary = "Gets a list of publicly visible users for display on a login screen.")]
|
|
||||||
public class GetPublicUsers : IReturn<UserDto[]>
|
|
||||||
{
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class GetUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}", "GET", Summary = "Gets a user by Id")]
|
|
||||||
[Authenticated(EscapeParentalControl = true)]
|
|
||||||
public class GetUser : IReturn<UserDto>
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
[ApiMember(Name = "User Id", IsRequired = true, DataType = "string", ParameterType = "path", Verb = "GET")]
|
|
||||||
public Guid Id { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class DeleteUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}", "DELETE", Summary = "Deletes a user")]
|
|
||||||
[Authenticated(Roles = "Admin")]
|
|
||||||
public class DeleteUser : IReturnVoid
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
[ApiMember(Name = "User Id", IsRequired = true, DataType = "string", ParameterType = "path", Verb = "DELETE")]
|
|
||||||
public Guid Id { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class AuthenticateUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}/Authenticate", "POST", Summary = "Authenticates a user")]
|
|
||||||
public class AuthenticateUser : IReturn<AuthenticationResult>
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
[ApiMember(Name = "User Id", IsRequired = true, DataType = "string", ParameterType = "path", Verb = "POST")]
|
|
||||||
public Guid Id { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "Pw", IsRequired = true, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Pw { get; set; }
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the password.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The password.</value>
|
|
||||||
[ApiMember(Name = "Password", IsRequired = true, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Password { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class AuthenticateUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/AuthenticateByName", "POST", Summary = "Authenticates a user")]
|
|
||||||
public class AuthenticateUserByName : IReturn<AuthenticationResult>
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
[ApiMember(Name = "Username", IsRequired = true, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Username { get; set; }
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the password.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The password.</value>
|
|
||||||
[ApiMember(Name = "Password", IsRequired = true, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Password { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "Pw", IsRequired = true, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Pw { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class UpdateUserPassword
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}/Password", "POST", Summary = "Updates a user's password")]
|
|
||||||
[Authenticated]
|
|
||||||
public class UpdateUserPassword : IReturnVoid
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
public Guid Id { get; set; }
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the password.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The password.</value>
|
|
||||||
public string CurrentPassword { get; set; }
|
|
||||||
|
|
||||||
public string CurrentPw { get; set; }
|
|
||||||
|
|
||||||
public string NewPw { get; set; }
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets a value indicating whether [reset password].
|
|
||||||
/// </summary>
|
|
||||||
/// <value><c>true</c> if [reset password]; otherwise, <c>false</c>.</value>
|
|
||||||
public bool ResetPassword { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class UpdateUserEasyPassword
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}/EasyPassword", "POST", Summary = "Updates a user's easy password")]
|
|
||||||
[Authenticated]
|
|
||||||
public class UpdateUserEasyPassword : IReturnVoid
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the id.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The id.</value>
|
|
||||||
public Guid Id { get; set; }
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets the new password.
|
|
||||||
/// </summary>
|
|
||||||
/// <value>The new password.</value>
|
|
||||||
public string NewPassword { get; set; }
|
|
||||||
|
|
||||||
public string NewPw { get; set; }
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets or sets a value indicating whether [reset password].
|
|
||||||
/// </summary>
|
|
||||||
/// <value><c>true</c> if [reset password]; otherwise, <c>false</c>.</value>
|
|
||||||
public bool ResetPassword { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class UpdateUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}", "POST", Summary = "Updates a user")]
|
|
||||||
[Authenticated]
|
|
||||||
public class UpdateUser : UserDto, IReturnVoid
|
|
||||||
{
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class UpdateUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}/Policy", "POST", Summary = "Updates a user policy")]
|
|
||||||
[Authenticated(Roles = "admin")]
|
|
||||||
public class UpdateUserPolicy : UserPolicy, IReturnVoid
|
|
||||||
{
|
|
||||||
[ApiMember(Name = "User Id", IsRequired = true, DataType = "string", ParameterType = "path", Verb = "POST")]
|
|
||||||
public Guid Id { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class UpdateUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/{Id}/Configuration", "POST", Summary = "Updates a user configuration")]
|
|
||||||
[Authenticated]
|
|
||||||
public class UpdateUserConfiguration : UserConfiguration, IReturnVoid
|
|
||||||
{
|
|
||||||
[ApiMember(Name = "User Id", IsRequired = true, DataType = "string", ParameterType = "path", Verb = "POST")]
|
|
||||||
public Guid Id { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class CreateUser
|
|
||||||
/// </summary>
|
|
||||||
[Route("/Users/New", "POST", Summary = "Creates a user")]
|
|
||||||
[Authenticated(Roles = "Admin")]
|
|
||||||
public class CreateUserByName : IReturn<UserDto>
|
|
||||||
{
|
|
||||||
[ApiMember(Name = "Name", IsRequired = true, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Name { get; set; }
|
|
||||||
|
|
||||||
[ApiMember(Name = "Password", IsRequired = false, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Password { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
[Route("/Users/ForgotPassword", "POST", Summary = "Initiates the forgot password process for a local user")]
|
|
||||||
public class ForgotPassword : IReturn<ForgotPasswordResult>
|
|
||||||
{
|
|
||||||
[ApiMember(Name = "EnteredUsername", IsRequired = false, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string EnteredUsername { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
[Route("/Users/ForgotPassword/Pin", "POST", Summary = "Redeems a forgot password pin")]
|
|
||||||
public class ForgotPasswordPin : IReturn<PinRedeemResult>
|
|
||||||
{
|
|
||||||
[ApiMember(Name = "Pin", IsRequired = false, DataType = "string", ParameterType = "body", Verb = "POST")]
|
|
||||||
public string Pin { get; set; }
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Class UsersService
|
|
||||||
/// </summary>
|
|
||||||
public class UserService : BaseApiService
|
|
||||||
{
|
|
||||||
/// <summary>
|
|
||||||
/// The user manager.
|
|
||||||
/// </summary>
|
|
||||||
private readonly IUserManager _userManager;
|
|
||||||
private readonly ISessionManager _sessionMananger;
|
|
||||||
private readonly INetworkManager _networkManager;
|
|
||||||
private readonly IDeviceManager _deviceManager;
|
|
||||||
private readonly IAuthorizationContext _authContext;
|
|
||||||
|
|
||||||
public UserService(
|
|
||||||
ILogger<UserService> logger,
|
|
||||||
IServerConfigurationManager serverConfigurationManager,
|
|
||||||
IHttpResultFactory httpResultFactory,
|
|
||||||
IUserManager userManager,
|
|
||||||
ISessionManager sessionMananger,
|
|
||||||
INetworkManager networkManager,
|
|
||||||
IDeviceManager deviceManager,
|
|
||||||
IAuthorizationContext authContext)
|
|
||||||
: base(logger, serverConfigurationManager, httpResultFactory)
|
|
||||||
{
|
|
||||||
_userManager = userManager;
|
|
||||||
_sessionMananger = sessionMananger;
|
|
||||||
_networkManager = networkManager;
|
|
||||||
_deviceManager = deviceManager;
|
|
||||||
_authContext = authContext;
|
|
||||||
}
|
|
||||||
|
|
||||||
public object Get(GetPublicUsers request)
|
|
||||||
{
|
|
||||||
// If the startup wizard hasn't been completed then just return all users
|
|
||||||
if (!ServerConfigurationManager.Configuration.IsStartupWizardCompleted)
|
|
||||||
{
|
|
||||||
return Get(new GetUsers
|
|
||||||
{
|
|
||||||
IsDisabled = false
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
return Get(new GetUsers
|
|
||||||
{
|
|
||||||
IsHidden = false,
|
|
||||||
IsDisabled = false
|
|
||||||
}, true, true);
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
/// <returns>System.Object.</returns>
|
|
||||||
public object Get(GetUsers request)
|
|
||||||
{
|
|
||||||
return Get(request, false, false);
|
|
||||||
}
|
|
||||||
|
|
||||||
private object Get(GetUsers request, bool filterByDevice, bool filterByNetwork)
|
|
||||||
{
|
|
||||||
var users = _userManager.Users;
|
|
||||||
|
|
||||||
if (request.IsDisabled.HasValue)
|
|
||||||
{
|
|
||||||
users = users.Where(i => i.HasPermission(PermissionKind.IsDisabled) == request.IsDisabled.Value);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (request.IsHidden.HasValue)
|
|
||||||
{
|
|
||||||
users = users.Where(i => i.HasPermission(PermissionKind.IsHidden) == request.IsHidden.Value);
|
|
||||||
}
|
|
||||||
|
|
||||||
if (filterByDevice)
|
|
||||||
{
|
|
||||||
var deviceId = _authContext.GetAuthorizationInfo(Request).DeviceId;
|
|
||||||
|
|
||||||
if (!string.IsNullOrWhiteSpace(deviceId))
|
|
||||||
{
|
|
||||||
users = users.Where(i => _deviceManager.CanAccessDevice(i, deviceId));
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
if (filterByNetwork)
|
|
||||||
{
|
|
||||||
if (!_networkManager.IsInLocalNetwork(Request.RemoteIp))
|
|
||||||
{
|
|
||||||
users = users.Where(i => i.HasPermission(PermissionKind.EnableRemoteAccess));
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
var result = users
|
|
||||||
.OrderBy(u => u.Username)
|
|
||||||
.Select(i => _userManager.GetUserDto(i, Request.RemoteIp))
|
|
||||||
.ToArray();
|
|
||||||
|
|
||||||
return ToOptimizedResult(result);
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Gets the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
/// <returns>System.Object.</returns>
|
|
||||||
public object Get(GetUser request)
|
|
||||||
{
|
|
||||||
var user = _userManager.GetUserById(request.Id);
|
|
||||||
|
|
||||||
if (user == null)
|
|
||||||
{
|
|
||||||
throw new ResourceNotFoundException("User not found");
|
|
||||||
}
|
|
||||||
|
|
||||||
var result = _userManager.GetUserDto(user, Request.RemoteIp);
|
|
||||||
|
|
||||||
return ToOptimizedResult(result);
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Deletes the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
public Task Delete(DeleteUser request)
|
|
||||||
{
|
|
||||||
return DeleteAsync(request);
|
|
||||||
}
|
|
||||||
|
|
||||||
public Task DeleteAsync(DeleteUser request)
|
|
||||||
{
|
|
||||||
var user = _userManager.GetUserById(request.Id);
|
|
||||||
|
|
||||||
if (user == null)
|
|
||||||
{
|
|
||||||
throw new ResourceNotFoundException("User not found");
|
|
||||||
}
|
|
||||||
|
|
||||||
_sessionMananger.RevokeUserTokens(user.Id, null);
|
|
||||||
_userManager.DeleteUser(user);
|
|
||||||
return Task.CompletedTask;
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Posts the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
public object Post(AuthenticateUser request)
|
|
||||||
{
|
|
||||||
var user = _userManager.GetUserById(request.Id);
|
|
||||||
|
|
||||||
if (user == null)
|
|
||||||
{
|
|
||||||
throw new ResourceNotFoundException("User not found");
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!string.IsNullOrEmpty(request.Password) && string.IsNullOrEmpty(request.Pw))
|
|
||||||
{
|
|
||||||
throw new MethodNotAllowedException("Hashed-only passwords are not valid for this API.");
|
|
||||||
}
|
|
||||||
|
|
||||||
// Password should always be null
|
|
||||||
return Post(new AuthenticateUserByName
|
|
||||||
{
|
|
||||||
Username = user.Username,
|
|
||||||
Password = null,
|
|
||||||
Pw = request.Pw
|
|
||||||
});
|
|
||||||
}
|
|
||||||
|
|
||||||
public async Task<object> Post(AuthenticateUserByName request)
|
|
||||||
{
|
|
||||||
var auth = _authContext.GetAuthorizationInfo(Request);
|
|
||||||
|
|
||||||
try
|
|
||||||
{
|
|
||||||
var result = await _sessionMananger.AuthenticateNewSession(new AuthenticationRequest
|
|
||||||
{
|
|
||||||
App = auth.Client,
|
|
||||||
AppVersion = auth.Version,
|
|
||||||
DeviceId = auth.DeviceId,
|
|
||||||
DeviceName = auth.Device,
|
|
||||||
Password = request.Pw,
|
|
||||||
PasswordSha1 = request.Password,
|
|
||||||
RemoteEndPoint = Request.RemoteIp,
|
|
||||||
Username = request.Username
|
|
||||||
}).ConfigureAwait(false);
|
|
||||||
|
|
||||||
return ToOptimizedResult(result);
|
|
||||||
}
|
|
||||||
catch (SecurityException e)
|
|
||||||
{
|
|
||||||
// rethrow adding IP address to message
|
|
||||||
throw new SecurityException($"[{Request.RemoteIp}] {e.Message}", e);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Posts the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
public Task Post(UpdateUserPassword request)
|
|
||||||
{
|
|
||||||
return PostAsync(request);
|
|
||||||
}
|
|
||||||
|
|
||||||
public async Task PostAsync(UpdateUserPassword request)
|
|
||||||
{
|
|
||||||
AssertCanUpdateUser(_authContext, _userManager, request.Id, true);
|
|
||||||
|
|
||||||
var user = _userManager.GetUserById(request.Id);
|
|
||||||
|
|
||||||
if (user == null)
|
|
||||||
{
|
|
||||||
throw new ResourceNotFoundException("User not found");
|
|
||||||
}
|
|
||||||
|
|
||||||
if (request.ResetPassword)
|
|
||||||
{
|
|
||||||
await _userManager.ResetPassword(user).ConfigureAwait(false);
|
|
||||||
}
|
|
||||||
else
|
|
||||||
{
|
|
||||||
var success = await _userManager.AuthenticateUser(
|
|
||||||
user.Username,
|
|
||||||
request.CurrentPw,
|
|
||||||
request.CurrentPassword,
|
|
||||||
Request.RemoteIp,
|
|
||||||
false).ConfigureAwait(false);
|
|
||||||
|
|
||||||
if (success == null)
|
|
||||||
{
|
|
||||||
throw new ArgumentException("Invalid user or password entered.");
|
|
||||||
}
|
|
||||||
|
|
||||||
await _userManager.ChangePassword(user, request.NewPw).ConfigureAwait(false);
|
|
||||||
|
|
||||||
var currentToken = _authContext.GetAuthorizationInfo(Request).Token;
|
|
||||||
|
|
||||||
_sessionMananger.RevokeUserTokens(user.Id, currentToken);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
public void Post(UpdateUserEasyPassword request)
|
|
||||||
{
|
|
||||||
AssertCanUpdateUser(_authContext, _userManager, request.Id, true);
|
|
||||||
|
|
||||||
var user = _userManager.GetUserById(request.Id);
|
|
||||||
|
|
||||||
if (user == null)
|
|
||||||
{
|
|
||||||
throw new ResourceNotFoundException("User not found");
|
|
||||||
}
|
|
||||||
|
|
||||||
if (request.ResetPassword)
|
|
||||||
{
|
|
||||||
_userManager.ResetEasyPassword(user);
|
|
||||||
}
|
|
||||||
else
|
|
||||||
{
|
|
||||||
_userManager.ChangeEasyPassword(user, request.NewPw, request.NewPassword);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Posts the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
public async Task Post(UpdateUser request)
|
|
||||||
{
|
|
||||||
var id = Guid.Parse(GetPathValue(1));
|
|
||||||
|
|
||||||
AssertCanUpdateUser(_authContext, _userManager, id, false);
|
|
||||||
|
|
||||||
var dtoUser = request;
|
|
||||||
|
|
||||||
var user = _userManager.GetUserById(id);
|
|
||||||
|
|
||||||
if (string.Equals(user.Username, dtoUser.Name, StringComparison.Ordinal))
|
|
||||||
{
|
|
||||||
await _userManager.UpdateUserAsync(user);
|
|
||||||
_userManager.UpdateConfiguration(user.Id, dtoUser.Configuration);
|
|
||||||
}
|
|
||||||
else
|
|
||||||
{
|
|
||||||
await _userManager.RenameUser(user, dtoUser.Name).ConfigureAwait(false);
|
|
||||||
|
|
||||||
_userManager.UpdateConfiguration(dtoUser.Id, dtoUser.Configuration);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/// <summary>
|
|
||||||
/// Posts the specified request.
|
|
||||||
/// </summary>
|
|
||||||
/// <param name="request">The request.</param>
|
|
||||||
/// <returns>System.Object.</returns>
|
|
||||||
public async Task<object> Post(CreateUserByName request)
|
|
||||||
{
|
|
||||||
var newUser = _userManager.CreateUser(request.Name);
|
|
||||||
|
|
||||||
// no need to authenticate password for new user
|
|
||||||
if (request.Password != null)
|
|
||||||
{
|
|
||||||
await _userManager.ChangePassword(newUser, request.Password).ConfigureAwait(false);
|
|
||||||
}
|
|
||||||
|
|
||||||
var result = _userManager.GetUserDto(newUser, Request.RemoteIp);
|
|
||||||
|
|
||||||
return ToOptimizedResult(result);
|
|
||||||
}
|
|
||||||
|
|
||||||
public async Task<object> Post(ForgotPassword request)
|
|
||||||
{
|
|
||||||
var isLocal = Request.IsLocal || _networkManager.IsInLocalNetwork(Request.RemoteIp);
|
|
||||||
|
|
||||||
var result = await _userManager.StartForgotPasswordProcess(request.EnteredUsername, isLocal).ConfigureAwait(false);
|
|
||||||
|
|
||||||
return result;
|
|
||||||
}
|
|
||||||
|
|
||||||
public async Task<object> Post(ForgotPasswordPin request)
|
|
||||||
{
|
|
||||||
var result = await _userManager.RedeemPasswordResetPin(request.Pin).ConfigureAwait(false);
|
|
||||||
|
|
||||||
return result;
|
|
||||||
}
|
|
||||||
|
|
||||||
public void Post(UpdateUserConfiguration request)
|
|
||||||
{
|
|
||||||
AssertCanUpdateUser(_authContext, _userManager, request.Id, false);
|
|
||||||
|
|
||||||
_userManager.UpdateConfiguration(request.Id, request);
|
|
||||||
}
|
|
||||||
|
|
||||||
public void Post(UpdateUserPolicy request)
|
|
||||||
{
|
|
||||||
var user = _userManager.GetUserById(request.Id);
|
|
||||||
|
|
||||||
// If removing admin access
|
|
||||||
if (!request.IsAdministrator && user.HasPermission(PermissionKind.IsAdministrator))
|
|
||||||
{
|
|
||||||
if (_userManager.Users.Count(i => i.HasPermission(PermissionKind.IsAdministrator)) == 1)
|
|
||||||
{
|
|
||||||
throw new ArgumentException("There must be at least one user in the system with administrative access.");
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
// If disabling
|
|
||||||
if (request.IsDisabled && user.HasPermission(PermissionKind.IsAdministrator))
|
|
||||||
{
|
|
||||||
throw new ArgumentException("Administrators cannot be disabled.");
|
|
||||||
}
|
|
||||||
|
|
||||||
// If disabling
|
|
||||||
if (request.IsDisabled && !user.HasPermission(PermissionKind.IsDisabled))
|
|
||||||
{
|
|
||||||
if (_userManager.Users.Count(i => !i.HasPermission(PermissionKind.IsDisabled)) == 1)
|
|
||||||
{
|
|
||||||
throw new ArgumentException("There must be at least one enabled user in the system.");
|
|
||||||
}
|
|
||||||
|
|
||||||
var currentToken = _authContext.GetAuthorizationInfo(Request).Token;
|
|
||||||
_sessionMananger.RevokeUserTokens(user.Id, currentToken);
|
|
||||||
}
|
|
||||||
|
|
||||||
_userManager.UpdatePolicy(request.Id, request);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
Loading…
Reference in new issue