Changeset 404 for binary-improvements2/WebServer/src/UrlHandlers/SessionHandler.cs

Timestamp:

Feb 16, 2023, 3:50:53 PM (21 months ago)

Author:

alloc

Message:

Latest state including reworking to the permissions system

File:

• binary-improvements2/WebServer/src/UrlHandlers/SessionHandler.cs (modified) (7 diffs)

binary-improvements2/WebServer/src/UrlHandlers/SessionHandler.cs

@@ -5 +5 @@
 using Platform.Steam;
 using Utf8Json;
+using Webserver.Permissions;
 
 namespace Webserver.UrlHandlers {
@@ -10 +11 @@
                 private const string pageBasePath = "/app";
                 private const string pageErrorPath = "/app/error/";
-                
+
                 private const string steamOpenIdVerifyUrl = "verifysteamopenid";
                 private const string steamLoginUrl = "loginsteam";
+                private const string steamLoginFailedPage = "SteamLoginFailed";
+
                 private const string userPassLoginUrl = "login";
 
@@ -29 +32 @@
                         string subpath = _context.RequestPath.Remove (0, urlBasePath.Length);
 
+                        string remoteEndpointString = _context.Request.RemoteEndPoint!.ToString ();
+
                         if (subpath.StartsWith (steamOpenIdVerifyUrl)) {
-                                HandleSteamVerification (_context);
+                                HandleSteamVerification (_context, remoteEndpointString);
                                 return;
                         }
@@ -43 +48 @@
                                 return;
                         }
-                        
+
                         if (subpath.StartsWith (userPassLoginUrl)) {
-                                HandleUserPassLogin (_context);
+                                HandleUserPassLogin (_context, remoteEndpointString);
                                 return;
                         }
@@ -52 +57 @@
                 }
 
-                private void HandleUserPassLogin (RequestContext _context) {
+                private void HandleUserPassLogin (RequestContext _context, string _remoteEndpointString) {
                         if (!_context.Request.HasEntityBody) {
                                 _context.Response.Redirect (pageErrorPath + "NoLoginData");
@@ -83 +88 @@
                         }
 
-                        // TODO: Apply login
+                        AdminWebUsers.WebUser? webUser = AdminWebUsers.Instance.GetUser (username, password);
 
-                        string remoteEndpointString = _context.Request.RemoteEndPoint!.ToString ();
-
-                        if (username != "test" || password != "123") {
-                                // TODO: failed login
-                                Log.Out ($"[Web] User/pass login failed from {remoteEndpointString}");
+                        if (!webUser.HasValue) {
+                                Log.Out ($"[Web] User/pass login failed from {_remoteEndpointString}");
                                 _context.Response.Redirect (pageErrorPath + "UserPassInvalid");
                                 return;
                         }
-                        
-                        try {
-                                // TODO: Match username/password to UserIdentifierAbs / serveradmins.xml
-                                
-                                WebConnection con = connectionHandler.LogIn (new UserIdentifierSteam (76561198066968172ul), _context.Request.RemoteEndPoint.Address);
-                                int level = GameManager.Instance.adminTools.GetUserPermissionLevel (con.UserId);
-                                Log.Out ($"[Web] User/pass login from {remoteEndpointString} with ID {con.UserId}, permission level {level}");
 
-                                Cookie cookie = new Cookie ("sid", con.SessionID, "/") {
-                                        Expired = false,
-                                        Expires = DateTime.MinValue,
-                                        HttpOnly = true,
-                                        Secure = false
-                                };
-                                _context.Response.AppendCookie (cookie);
-                                _context.Response.Redirect (pageBasePath);
-
-                                return;
-                        } catch (Exception e) {
-                                Log.Error ("[Web] Error during user/pass login:");
-                                Log.Exception (e);
-                        }
-
-                        _context.Response.Redirect (pageErrorPath + "UserPassLoginFailed");
+                        HandleUserIdLogin (_context, _remoteEndpointString, "user/pass", "UserPassLoginFailed", webUser.Value.Name, webUser.Value.PlatformUser, webUser.Value.CrossPlatformUser);
                 }
 
@@ -140 +120 @@
                 }
 
-                private void HandleSteamVerification (RequestContext _context) {
-                        string remoteEndpointString = _context.Request.RemoteEndPoint!.ToString ();
-
+                private void HandleSteamVerification (RequestContext _context, string _remoteEndpointString) {
+                        ulong id;
                         try {
-                                ulong id = OpenID.Validate (_context.Request);
-                                if (id > 0) {
-                                        WebConnection con = connectionHandler.LogIn (new UserIdentifierSteam (id), _context.Request.RemoteEndPoint.Address);
-                                        int level = GameManager.Instance.adminTools.GetUserPermissionLevel (con.UserId);
-                                        Log.Out ($"[Web] Steam OpenID login from {remoteEndpointString} with ID {con.UserId}, permission level {level}");
-
-                                        Cookie cookie = new Cookie ("sid", con.SessionID, "/") {
-                                                Expired = false,
-                                                Expires = DateTime.MinValue,
-                                                HttpOnly = true,
-                                                Secure = false
-                                        };
-                                        _context.Response.AppendCookie (cookie);
-                                        _context.Response.Redirect (pageBasePath);
-
-                                        return;
-                                }
+                                id = OpenID.Validate (_context.Request);
                         } catch (Exception e) {
-                                Log.Error ("[Web] Error validating Steam login:");
+                                Log.Error ($"[Web] Error validating Steam login from {_remoteEndpointString}:");
                                 Log.Exception (e);
+                                _context.Response.Redirect (pageErrorPath + steamLoginFailedPage);
+                                return;
                         }
 
-                        Log.Out ($"[Web] Steam OpenID login failed from {remoteEndpointString}");
-                        _context.Response.Redirect (pageErrorPath + "SteamLoginFailed");
+                        if (id <= 0) {
+                                Log.Out ($"[Web] Steam OpenID login failed (invalid ID) from {_remoteEndpointString}");
+                                _context.Response.Redirect (pageErrorPath + steamLoginFailedPage);
+                                return;
+                        }
+
+                        UserIdentifierSteam userId = new UserIdentifierSteam (id);
+                        HandleUserIdLogin (_context, _remoteEndpointString, "Steam OpenID", steamLoginFailedPage, userId.ToString (), userId);
                 }
 
+                private void HandleUserIdLogin (RequestContext _context, string _remoteEndpointString, string _loginName, string _errorPage, string _username,
+                        PlatformUserIdentifierAbs _userId, PlatformUserIdentifierAbs _crossUserId = null) {
+                        try {
+                                WebConnection con = connectionHandler.LogIn (_context.Request.RemoteEndPoint!.Address, _username, _userId, _crossUserId);
+
+                                int level1 = GameManager.Instance.adminTools.Users.GetUserPermissionLevel (_userId);
+                                int level2 = int.MaxValue;
+                                if (_crossUserId != null) {
+                                        level2 = GameManager.Instance.adminTools.Users.GetUserPermissionLevel (_crossUserId);
+                                }
+
+                                int higherLevel = Math.Min (level1, level2);
+
+                                Log.Out ($"[Web] {_loginName} login from {_remoteEndpointString}, name {_username} with ID {_userId}, CID {(_crossUserId != null ? _crossUserId : "none")}, permission level {higherLevel}");
+                                Cookie cookie = new Cookie ("sid", con.SessionID, "/") {
+                                        Expired = false,
+                                        Expires = DateTime.MinValue,
+                                        HttpOnly = true,
+                                        Secure = false
+                                };
+                                _context.Response.AppendCookie (cookie);
+                                _context.Response.Redirect (pageBasePath);
+                        } catch (Exception e) {
+                                Log.Error ($"[Web] Error during {_loginName} login:");
+                                Log.Exception (e);
+                                _context.Response.Redirect (pageErrorPath + _errorPage);
+                        }
+                }
         }
 }