Changeset 426 for binary-improvements2/WebServer/src

Timestamp:

Apr 24, 2023, 2:40:34 PM (19 months ago)

Author:

alloc

Message:

*Updated web permissions system
*Fixed webpermissions command
*Moved API "webmods" to "mods", also lists non-webmod mods

Location:

binary-improvements2/WebServer/src

Files:

• Commands/WebPermissionsCmd.cs (modified) (4 diffs)
• ERequestMethod.cs (added)
• Permissions/AdminWebModules.cs (modified) (7 diffs)
• RequestContext.cs (modified) (1 diff)
• UrlHandlers/AbsHandler.cs (modified) (1 diff)
• UrlHandlers/SseHandler.cs (modified) (1 diff)
• UrlHandlers/UserStatusHandler.cs (modified) (3 diffs)
• Web.cs (modified) (7 diffs)
• WebAPI/APIs/Command.cs (modified) (2 diffs)
• WebAPI/APIs/Mods.cs (moved) (moved from binary-improvements2/WebServer/src/WebAPI/APIs/WebMods.cs ) (3 diffs)
• WebAPI/APIs/Player.cs (modified) (1 diff)
• WebAPI/APIs/RegisterUser.cs (modified) (2 diffs)
• WebAPI/APIs/ServerStats.cs (modified) (2 diffs)
• WebAPI/APIs/WebUiUpdates.cs (modified) (2 diffs)
• WebAPI/AbsRestApi.cs (modified) (3 diffs)
• WebAPI/AbsWebAPI.cs (modified) (2 diffs)
• WebAPI/JsonCommons.cs (modified) (1 diff)
• WebMod.cs (modified) (1 diff)

binary-improvements2/WebServer/src/Commands/WebPermissionsCmd.cs

@@ -15 +15 @@
 
                 protected override string getHelp () {
-                        return "Set/get permission levels required to access a given web functionality. Default\n" +
-                               "level required for functions that are not explicitly specified is 0.\n" +
-                               "Usage:\n" +
-                               "   webpermission add <webfunction> <level>\n" +
-                               "   webpermission remove <webfunction>\n" +
-                               "   webpermission list [includedefaults]";
+                        return @"
+                                |Set/get permission levels required to access a given web functionality. Default
+                            |level required for functions that are not explicitly specified is 0.
+                            |Usage:
+                                |   1. webpermission add <webfunction> <method> <level>
+                            |   2. webpermission remove <webfunction>
+                            |   3. webpermission list [includedefaults]
+                                |1. Add a new override (or replace the existing one) for the given function. Method must be a HTTP method (like 'GET', 'POST')
+                                                supported by the function or the keyword 'global' for a per-API permission level. Use the permission level keyword
+                                                'inherit' to use the per-API permission level for the specified method instead of a custom one for just the single method.
+                                |2. Removes any custom overrides for the specified function.
+                                |3. List all permissions. Pass in 'true' for the includedefaults argument to also show functions that do not have a custom override defined.
+                                ".Unindent ();
                 }
 
@@ -40 +47 @@
 
                 private void ExecuteAdd (List<string> _params) {
-                        if (_params.Count != 3) {
-                                SdtdConsole.Instance.Output ($"Wrong number of arguments, expected 3, found {_params.Count}.");
+                        if (_params.Count != 4) {
+                                SdtdConsole.Instance.Output ($"Wrong number of arguments, expected 4, found {_params.Count}.");
                                 return;
                         }
 
-                        if (!AdminWebModules.Instance.IsKnownModule (_params [1])) {
-                                SdtdConsole.Instance.Output ($"\"{_params [1]}\" is not a valid web function.");
+                        string moduleString = _params [1];
+                        string methodString = _params [2];
+                        string permissionLevelString = _params [3];
+
+                        ERequestMethod method = ERequestMethod.Count;
+                        bool isGlobal = false;
+                        bool isInherit = false;
+                        int level;
+                        
+                        if (!AdminWebModules.Instance.IsKnownModule (moduleString)) {
+                                SdtdConsole.Instance.Output ($"\"{moduleString}\" is not a valid web function.");
                                 return;
                         }
 
-                        if (!int.TryParse (_params [2], out int level)) {
-                                SdtdConsole.Instance.Output ($"\"{_params [2]}\" is not a valid integer.");
-                                return;
+                        AdminWebModules.WebModule module = AdminWebModules.Instance.GetModule (moduleString);
+
+                        if (methodString.EqualsCaseInsensitive ("global")) {
+                                isGlobal = true;
+                        } else {
+                                if (!EnumUtils.TryParse (methodString, out method, true)) {
+                                        SdtdConsole.Instance.Output ($"\"{methodString}\" is neither a valid HTTP method nor the 'global' keyword.");
+                                        return;
+                                }
+
+                                if (module.LevelPerMethod == null || module.LevelPerMethod [(int)method] == AdminWebModules.MethodLevelNotSupported) {
+                                        SdtdConsole.Instance.Output ($"\"{methodString}\" is not a method supported by the \"{moduleString}\" function.");
+                                        return;
+                                }
                         }
 
-                        AdminWebModules.Instance.AddModule (_params [1], level);
-                        SdtdConsole.Instance.Output ($"{_params [1]} added with permission level of {level}.");
+                        if (permissionLevelString.EqualsCaseInsensitive ("inherit")) {
+                                if (isGlobal) {
+                                        SdtdConsole.Instance.Output ($"Permission level can not use the 'inherit' keyword with the 'global' method keyword.");
+                                        return;
+                                }
+                                
+                                isInherit = true;
+                                level = AdminWebModules.MethodLevelInheritGlobal;
+                        } else {
+                                if (!int.TryParse (permissionLevelString, out level)) {
+                                        SdtdConsole.Instance.Output ($"\"{permissionLevelString}\" is neither a valid integer nor the 'inherit' keyword.");
+                                        return;
+                                }
+                        }
+
+                        module.IsDefault = false;
+                        if (isGlobal) {
+                                module.LevelGlobal = level;
+                        } else {
+                                module.LevelPerMethod [(int)method] = level;
+                        }
+                        
+                        AdminWebModules.Instance.AddModule (module);
+                        
+                        SdtdConsole.Instance.Output (
+                                $"{moduleString}, method {methodString} added {(isInherit ? ", inheriting the APIs global permission level" : "with permission level " + level)}.");
                 }
 
@@ -78 +129 @@
                         
                         SdtdConsole.Instance.Output ("Defined web function permissions:");
-                        SdtdConsole.Instance.Output ("  Level: Web function");
                         
                         List<AdminWebModules.WebModule> wmps = AdminWebModules.Instance.GetModules ();
-                        for (int i = 0; i < wmps.Count; i++) {
-                                AdminWebModules.WebModule wmp = wmps [i];
+                        for (int iModule = 0; iModule < wmps.Count; iModule++) {
+                                AdminWebModules.WebModule wmp = wmps [iModule];
 
                                 if (!includeDefaults && wmp.IsDefault) {
@@ -88 +138 @@
                                 }
 
-                                if (wmp.IsDefault) {
-                                        if (wmp.PermissionLevel == int.MinValue) {
-                                                SdtdConsole.Instance.Output ($"    -  : {wmp.Name} (default permission)");
-                                        } else {
-                                                SdtdConsole.Instance.Output ($"  {wmp.PermissionLevel,5}: {wmp.Name} (default permission)");
+                                SdtdConsole.Instance.Output ($"  {wmp.Name,-25}: {wmp.LevelGlobal,4}{(wmp.IsDefault ? " (default permissions)" : "")}");
+                                if (wmp.LevelPerMethod != null) {
+                                        for (int iMethod = 0; iMethod < wmp.LevelPerMethod.Length; iMethod++) {
+                                                int methodLevel = wmp.LevelPerMethod [iMethod];
+                                                ERequestMethod method = (ERequestMethod)iMethod;
+                                                
+                                                if (methodLevel == AdminWebModules.MethodLevelNotSupported) {
+                                                        continue;
+                                                }
+                                                
+                                                if (methodLevel == AdminWebModules.MethodLevelInheritGlobal) {
+                                                        SdtdConsole.Instance.Output ($"  {method.ToStringCached (),25}: {wmp.LevelGlobal,4} (Using API level)");
+                                                } else {
+                                                        SdtdConsole.Instance.Output ($"  {method.ToStringCached (),25}: {methodLevel,4}");
+                                                }
                                         }
-                                } else {
-                                        SdtdConsole.Instance.Output ($"  {wmp.PermissionLevel,5}: {wmp.Name}");
                                 }
                         }

binary-improvements2/WebServer/src/Permissions/AdminWebModules.cs

@@ -1 +1 @@
 using System.Collections.Generic;
 using System.Xml;
+using UnityEngine;
 
 namespace Webserver.Permissions {
@@ -40 +41 @@
 
 
-                public void AddModule (string _module, int _permissionLevel) {
-                        WebModule p = new WebModule (_module, _permissionLevel, false);
+                public void AddModule (WebModule _module) {
                         lock (this) {
                                 allModulesList.Clear ();
                                 
-                                modules [_module] = p;
+                                modules [_module.Name] = _module;
                                 Parent.Save ();
                         }
@@ -80 +80 @@
 
 #endregion
-
-                public readonly struct WebModule {
-                        public readonly string Name;
-                        public readonly int PermissionLevel;
-                        public readonly bool IsDefault;
-
-                        public WebModule (string _name, int _permissionLevel, bool _isDefault) {
+                
+                public struct WebModule {
+                        public string Name;
+                        public int LevelGlobal;
+                        public int[] LevelPerMethod;
+                        public bool IsDefault;
+
+                        public WebModule (string _name, int _level, bool _isDefault = false) {
+                                LevelPerMethod = null;
+                                
                                 Name = _name;
-                                PermissionLevel = _permissionLevel;
+                                LevelGlobal = _level;
+                                IsDefault = _isDefault;
+                        }
+
+                        public WebModule (string _name, int _levelGlobal, int[] _levelPerMethod, bool _isDefault = false) {
+                                if (_levelPerMethod == null || _levelPerMethod.Length != (int)ERequestMethod.Count) {
+                                        LevelPerMethod = createDefaultPerMethodArray ();
+
+                                        for (int i = 0; i < (int)ERequestMethod.Count; i++) {
+                                                if (_levelPerMethod != null && i < _levelPerMethod.Length) {
+                                                        LevelPerMethod [i] = _levelPerMethod [i];
+                                                }
+                                        }
+                                } else {
+                                        LevelPerMethod = _levelPerMethod;
+                                }
+
+                                Name = _name;
+                                LevelGlobal = _levelGlobal;
                                 IsDefault = _isDefault;
                         }
                         
                         public void ToXml (XmlElement _parent) {
-                                _parent.AddXmlElement ("module")
-                                                .SetAttrib ("name", Name)
-                                                .SetAttrib ("permission_level", PermissionLevel.ToString ());
+                                bool hasPerMethodLevels = LevelPerMethod != null;
+
+                                XmlElement permissionElement = _parent.AddXmlElement ("module")
+                                        .SetAttrib ("name", Name)
+                                        .SetAttrib ("permission_level", LevelGlobal.ToString ());
+                                
+                                if (!hasPerMethodLevels) {
+                                        return;
+                                }
+
+                                for (int i = 0; i < LevelPerMethod.Length; i++) {
+                                        ERequestMethod method = (ERequestMethod)i;
+                                        int level = LevelPerMethod [i];
+                                        
+                                        if (level == MethodLevelNotSupported) {
+                                                continue;
+                                        }
+
+                                        permissionElement.AddXmlElement ("method")
+                                                .SetAttrib ("name", method.ToStringCached ())
+                                                .SetAttrib ("permission_level", level.ToString ());
+                                }
                         }
 
@@ -117 +157 @@
                                         return false;
                                 }
-                                
-                                _result = new WebModule (name, permissionLevel, false);
+
+                                int[] perMethodLevels = null;
+                                
+                                foreach (XmlNode child in _element.ChildNodes) {
+                                        if (child.NodeType != XmlNodeType.Element) {
+                                                continue;
+                                        }
+
+                                        XmlElement childElem = (XmlElement)child;
+                                        if (childElem.Name != "method") {
+                                                Log.Warning ($"[Web] [Perms] Ignoring module child element, invalid element name: {childElem.OuterXml}");
+                                                continue;
+                                        }
+
+                                        if (!childElem.TryGetAttribute ("name", out string methodName)) {
+                                                Log.Warning ($"[Web] [Perms] Ignoring module child element, missing 'name' attribute: {childElem.OuterXml}");
+                                                continue;
+                                        }
+
+                                        if (!EnumUtils.TryParse (methodName, out ERequestMethod method, true)) {
+                                                Log.Warning (
+                                                        $"[Web] [Perms] Ignoring module child element, unknown method name in 'name' attribute: {childElem.OuterXml}");
+                                                continue;
+                                        }
+
+                                        if (method >= ERequestMethod.Count) {
+                                                Log.Warning (
+                                                        $"[Web] [Perms] Ignoring module child element, invalid method name in 'name' attribute: {childElem.OuterXml}");
+                                                continue;
+                                        }
+                                        
+                                        if (!childElem.TryGetAttribute ("permission_level", out permissionLevelString)) {
+                                                Log.Warning ($"[Web] [Perms] Ignoring module child element, missing 'permission_level' attribute: {childElem.OuterXml}");
+                                                continue;
+                                        }
+
+                                        if (!int.TryParse (permissionLevelString, out int methodPermissionLevel)) {
+                                                Log.Warning (
+                                                        $"[Web] [Perms] Ignoring module child element, invalid (non-numeric) value for 'permission_level' attribute: {childElem.OuterXml}");
+                                                continue;
+                                        }
+
+                                        perMethodLevels ??= createDefaultPerMethodArray ();
+                                        perMethodLevels [(int)method] = methodPermissionLevel;
+                                }
+
+                                _result = perMethodLevels != null ? new WebModule (name, permissionLevel, perMethodLevels) : new WebModule (name, permissionLevel);
+
                                 return true;
                         }
+
+                        private static int[] createDefaultPerMethodArray () {
+                                int[] result = new int[(int)ERequestMethod.Count];
+
+                                for (int i = 0; i < (int)ERequestMethod.Count; i++) {
+                                        result [i] = MethodLevelNotSupported;
+                                }
+
+                                return result;
+                        }
                 }
 
@@ -127 +223 @@
 
                 /// <summary>
+                /// Use global (API based) permission level for the method
+                /// </summary>
+                public const int MethodLevelInheritGlobal = int.MinValue;
+                
+                /// <summary>
+                /// Method not supported
+                /// </summary>
+                public const int MethodLevelNotSupported = int.MinValue + 1;
+
+                public const int PermissionLevelUser = 1000;
+                public const int PermissionLevelGuest = 2000;
+
+                /// <summary>
                 /// Contains all registered modules and their default permission
                 /// </summary>
@@ -136 +245 @@
                 private readonly List<WebModule> allModulesList = new List<WebModule> ();
 
-                public void AddKnownModule (string _module, int _defaultPermission) {
-                        if (string.IsNullOrEmpty (_module)) {
+                public void AddKnownModule (WebModule _module) {
+                        if (string.IsNullOrEmpty (_module.Name)) {
                                 return;
                         }
 
-                        WebModule p = new WebModule (_module, _defaultPermission, true);
-
+                        _module.IsDefault = true;
+                        
                         lock (this) {
                                 allModulesList.Clear ();
-                                knownModules [_module] = p;
+                                knownModules [_module.Name] = _module;
                         }
                 }
@@ -160 +269 @@
 
                 public bool ModuleAllowedWithLevel (string _module, int _level) {
-                        WebModule permInfo = GetModule (_module)!.Value;
-                        return permInfo.PermissionLevel >= _level;
-                }
-
-                public WebModule? GetModule (string _module, bool _returnDefaults = true) {
+                        return GetModule (_module).LevelGlobal >= _level;
+                }
+
+                public WebModule GetModule (string _module) {
                         if (modules.TryGetValue (_module, out WebModule result)) {
                                 return result;
-                        }
-
-                        if (!_returnDefaults) {
-                                return null;
                         }
 

binary-improvements2/WebServer/src/RequestContext.cs

@@ -2 +2 @@
 
 namespace Webserver {
-        public enum ERequestMethod {
-                Other,
-                // ReSharper disable InconsistentNaming
-                GET,
-                PUT,
-                POST,
-                DELETE,
-                HEAD,
-                OPTIONS,
-                // ReSharper restore InconsistentNaming
-                Count
-        }
-        
         public class RequestContext {
                 public string RequestPath;

binary-improvements2/WebServer/src/UrlHandlers/AbsHandler.cs

@@ -12 +12 @@
                 protected AbsHandler (string _moduleName, int _defaultPermissionLevel = 0) {
                         moduleName = _moduleName;
-                        AdminWebModules.Instance.AddKnownModule (_moduleName, _defaultPermissionLevel);
+                        AdminWebModules.Instance.AddKnownModule (new AdminWebModules.WebModule(_moduleName, _defaultPermissionLevel, true));
                 }
 

binary-improvements2/WebServer/src/UrlHandlers/SseHandler.cs

@@ -53 +53 @@
                 public void AddEvent (string _eventName, AbsEvent _eventInstance) {
                         events.Add (_eventName, _eventInstance);
-                        AdminWebModules.Instance.AddKnownModule ($"webevent.{_eventName}", _eventInstance.DefaultPermissionLevel ());
+                        AdminWebModules.Instance.AddKnownModule (new AdminWebModules.WebModule($"webevent.{_eventName}", _eventInstance.DefaultPermissionLevel (), true));
                 }
 

binary-improvements2/WebServer/src/UrlHandlers/UserStatusHandler.cs

@@ -16 +16 @@
                 private static readonly byte[] jsonAllowedKey = JsonWriter.GetEncodedPropertyNameWithPrefixValueSeparator ("allowed");
 
+                private static readonly byte[][] jsonMethodNameKeys;
+
+                static UserStatusHandler () {
+                        jsonMethodNameKeys = new byte[(int)ERequestMethod.Count][];
+                        for (int i = 0; i < jsonMethodNameKeys.Length; i++) {
+                                ERequestMethod method = (ERequestMethod)i;
+                                jsonMethodNameKeys [i] = JsonWriter.GetEncodedPropertyName (method.ToStringCached ());
+                        }
+                }
+
                 public override void HandleRequest (RequestContext _context) {
                         WebUtils.PrepareEnvelopedResult (out JsonWriter writer);
@@ -32 +42 @@
 
                         List<AdminWebModules.WebModule> list = AdminWebModules.Instance.GetModules ();
-                        for (int i = 0; i < list.Count; i++) {
-                                AdminWebModules.WebModule perm = list [i];
+                        for (int iModule = 0; iModule < list.Count; iModule++) {
+                                AdminWebModules.WebModule perm = list [iModule];
                                 
-                                if (i > 0) {
+                                if (iModule > 0) {
                                         writer.WriteValueSeparator ();
                                 }
@@ -43 +53 @@
 
                                 writer.WriteRaw (jsonAllowedKey);
-                                writer.WriteBoolean (perm.PermissionLevel >= _context.PermissionLevel);
+                                
+                                writer.WriteBeginObject ();
+
+                                if (perm.LevelPerMethod == null) {
+                                        writer.WriteRaw (jsonMethodNameKeys [(int)ERequestMethod.GET]);
+                                        writer.WriteBoolean (perm.LevelGlobal >= _context.PermissionLevel);
+                                } else {
+                                        bool first = true;
+                                        for (int iMethod = 0; iMethod < perm.LevelPerMethod.Length; iMethod++) {
+                                                int methodLevel = perm.LevelPerMethod [iMethod];
+                                                
+                                                if (methodLevel == AdminWebModules.MethodLevelNotSupported) {
+                                                        continue;
+                                                }
+
+                                                if (methodLevel == AdminWebModules.MethodLevelInheritGlobal) {
+                                                        methodLevel = perm.LevelGlobal;
+                                                }
+
+                                                if (!first) {
+                                                        writer.WriteValueSeparator ();
+                                                }
+
+                                                first = false;
+                                                
+                                                writer.WriteRaw (jsonMethodNameKeys [iMethod]);
+                                                writer.WriteBoolean (methodLevel >= _context.PermissionLevel);
+                                        }
+                                }
+
+                                writer.WriteEndObject ();
+                                
 
                                 writer.WriteEndObject ();

binary-improvements2/WebServer/src/Web.cs

@@ -16 +16 @@
                 public static event Action<Web> ServerInitialized;
                 
-                private const int guestPermissionLevel = 2000;
                 private const string indexPageUrl = "/app";
                 
@@ -51 +50 @@
                                 }
 
-                                // TODO: Read from config
-                                bool useCacheForStatic = StringParsers.ParseBool ("false");
-
-                                string webfilesFolder = DetectWebserverFolder (_modInstancePath);
-
                                 ConnectionHandler = new ConnectionHandler ();
                                 
-                                RegisterPathHandler ("/", new RewriteHandler ("/files/"));
-
-                                // React virtual routing
-                                RegisterPathHandler ("/app", new RewriteHandler ("/files/index.html", true));
-                                
-                                // Do mods relatively early as they should not be requested a lot, unlike the later registrations, especially for API and map tiles
-                                RegisterWebMods (useCacheForStatic);
-
-                                RegisterPathHandler ("/session/", new SessionHandler (ConnectionHandler));
-                                RegisterPathHandler ("/userstatus", new UserStatusHandler ());
-                                RegisterPathHandler ("/sse/", new SseHandler ());
-                                RegisterPathHandler ("/files/", new StaticHandler (
-                                        webfilesFolder,
-                                        useCacheForStatic ? new SimpleCache () : new DirectAccess (),
-                                        false)
-                                );
-                                RegisterPathHandler ("/itemicons/", new ItemIconHandler (true));
-                                RegisterPathHandler ("/api/", new ApiHandler ());
+                                RegisterDefaultHandlers (_modInstancePath);
                                 
                                 // Allow other code to add their stuff
@@ -94 +71 @@
                 }
 
+                private void RegisterDefaultHandlers (string _modInstancePath) {
+                        // TODO: Read from config
+                        bool useCacheForStatic = StringParsers.ParseBool ("false");
+
+                        string webfilesFolder = DetectWebserverFolder (_modInstancePath);
+
+                        RegisterPathHandler ("/", new RewriteHandler ("/files/"));
+
+                        // React virtual routing
+                        RegisterPathHandler ("/app", new RewriteHandler ("/files/index.html", true));
+                                
+                        // Do mods relatively early as they should not be requested a lot, unlike the later registrations, especially for API and map tiles
+                        RegisterWebMods (useCacheForStatic);
+
+                        RegisterPathHandler ("/session/", new SessionHandler (ConnectionHandler));
+                        RegisterPathHandler ("/userstatus", new UserStatusHandler ());
+                        RegisterPathHandler ("/sse/", new SseHandler ());
+                        RegisterPathHandler ("/files/", new StaticHandler (
+                                webfilesFolder,
+                                useCacheForStatic ? new SimpleCache () : new DirectAccess (),
+                                false)
+                        );
+                        RegisterPathHandler ("/itemicons/", new ItemIconHandler (true));
+                        RegisterPathHandler ("/api/", new ApiHandler ());
+                }
+
                 private static string DetectWebserverFolder (string _modInstancePath) {
                         string webserverFolder = $"{_modInstancePath}/webserver";
@@ -127 +130 @@
                         foreach (Mod mod in ModManager.GetLoadedMods ()) {
                                 try {
-                                        string webModPath = $"{mod.Path}/WebMod";
-                                        if (!Directory.Exists (webModPath)) {
-                                                continue;
-                                        }
-
                                         try {
                                                 WebMod webMod = new WebMod (this, mod, _useStaticCache);
@@ -298 +296 @@
                         if (reqRemoteEndPoint == null) {
                                 Log.Warning ("[Web] No RemoteEndPoint on web request");
-                                return guestPermissionLevel;
+                                return AdminWebModules.PermissionLevelGuest;
                         }
                         
@@ -316 +314 @@
                         if (!_req.Headers.TryGetValue ("X-SDTD-API-TOKENNAME", out string apiTokenName) ||
                             !_req.Headers.TryGetValue ("X-SDTD-API-SECRET", out string apiTokenSecret)) {
-                                return guestPermissionLevel;
+                                return AdminWebModules.PermissionLevelGuest;
                         }
 
@@ -326 +324 @@
                         Log.Warning ($"[Web] Invalid Admintoken used from {reqRemoteEndPoint}");
 
-                        return guestPermissionLevel;
+                        return AdminWebModules.PermissionLevelGuest;
                 }
         }

binary-improvements2/WebServer/src/WebAPI/APIs/Command.cs

@@ -3 +3 @@
 using JetBrains.Annotations;
 using Utf8Json;
+using Webserver.Permissions;
 
 namespace Webserver.WebAPI.APIs {
@@ -130 +131 @@
                 }
 
-                public override int DefaultPermissionLevel () => 2000;
+                public override int DefaultPermissionLevel () => AdminWebModules.PermissionLevelGuest;
         }
 }

binary-improvements2/WebServer/src/WebAPI/APIs/Mods.cs

@@ -1 +1 @@
 using JetBrains.Annotations;
 using Utf8Json;
+using Webserver.Permissions;
 
 namespace Webserver.WebAPI.APIs {
         [UsedImplicitly]
-        public class WebMods : AbsRestApi {
+        public class Mods : AbsRestApi {
                 private readonly byte[] loadedWebMods;
 
-                public WebMods (Web _parent) {
+                public Mods (Web _parent) {
                         JsonWriter writer = new JsonWriter ();
                         writer.WriteBeginArray ();
@@ -13 +14 @@
                         for (int i = 0; i < _parent.webMods.Count; i++) {
                                 WebMod webMod = _parent.webMods [i];
-                                
+
                                 if (i > 0) {
                                         writer.WriteValueSeparator ();
                                 }
-
+                                
                                 writer.WriteBeginObject ();
 
-                                writer.WriteString ("name");
-                                writer.WriteNameSeparator ();
-                                writer.WriteString (webMod.ParentMod.Name);
+                                writeModJson (ref writer, webMod);
 
-                                string webModReactBundle = webMod.ReactBundle;
-                                if (webModReactBundle != null) {
+                                if (webMod.ReactBundle != null || webMod.CssPath != null) {
                                         writer.WriteValueSeparator ();
-                                        writer.WriteString ("bundle");
-                                        writer.WriteNameSeparator ();
-                                        writer.WriteString (webModReactBundle);
-                                }
 
-                                string webModCssFile = webMod.CssPath;
-                                if (webModCssFile != null) {
-                                        writer.WriteValueSeparator ();
-                                        writer.WriteString ("css");
-                                        writer.WriteNameSeparator ();
-                                        writer.WriteString (webModCssFile);
+                                        writer.WritePropertyName ("web");
+                                        writer.WriteBeginObject ();
+                                        
+                                        string webModReactBundle = webMod.ReactBundle;
+                                        if (webModReactBundle != null) {
+                                                writer.WritePropertyName ("bundle");
+                                                writer.WriteString (webModReactBundle);
+                                        }
+
+                                        string webModCssFile = webMod.CssPath;
+                                        if (webModCssFile != null) {
+                                                if (webModReactBundle != null) {
+                                                        writer.WriteValueSeparator ();
+                                                }
+
+                                                writer.WritePropertyName ("css");
+                                                writer.WriteString (webModCssFile);
+                                        }
+                                        
+                                        writer.WriteEndObject ();
                                 }
 
@@ -54 +62 @@
                 }
 
-                public override int DefaultPermissionLevel () => 2000;
+                public override int DefaultPermissionLevel () => AdminWebModules.PermissionLevelGuest;
+
+                private void writeModJson (ref JsonWriter _writer, WebMod _webMod) {
+                        _writer.WritePropertyName ("name");
+                        _writer.WriteString (_webMod.ParentMod.Name);
+                        
+                        _writer.WriteValueSeparator ();
+                        _writer.WritePropertyName ("displayName");
+                        JsonCommons.WriteStringOrNull (ref _writer, _webMod.ParentMod.DisplayName);
+
+                        _writer.WriteValueSeparator ();
+                        _writer.WritePropertyName ("description");
+                        JsonCommons.WriteStringOrNull (ref _writer, _webMod.ParentMod.Description);
+
+                        _writer.WriteValueSeparator ();
+                        _writer.WritePropertyName ("author");
+                        JsonCommons.WriteStringOrNull (ref _writer, _webMod.ParentMod.Author);
+
+                        _writer.WriteValueSeparator ();
+                        _writer.WritePropertyName ("version");
+                        JsonCommons.WriteStringOrNull (ref _writer, _webMod.ParentMod.VersionString);
+
+                        _writer.WriteValueSeparator ();
+                        _writer.WritePropertyName ("website");
+                        JsonCommons.WriteStringOrNull (ref _writer, _webMod.ParentMod.Website);
+                }
         }
 }

binary-improvements2/WebServer/src/WebAPI/APIs/Player.cs

@@ -256 +256 @@
                 }
 
-                public override int DefaultPermissionLevel () => 2000;
+                public override int DefaultPermissionLevel () => AdminWebModules.PermissionLevelGuest;
         }
 }

binary-improvements2/WebServer/src/WebAPI/APIs/RegisterUser.cs

@@ -80 +80 @@
                         }
                         
-                        // TODO: Check if username is already used!
+                        // TODO: Check if username is already used by someone else!
+                        // TODO: Remove existing username if player already had one!
 
                         AdminWebUsers.Instance.AddUser (username, password, regData.PlatformUserId, regData.CrossPlatformUserId);
@@ -95 +96 @@
                 }
 
-                public override int DefaultPermissionLevel () => 2000;
+                public override int DefaultPermissionLevel () => AdminWebModules.PermissionLevelGuest;
         }
 }

binary-improvements2/WebServer/src/WebAPI/APIs/ServerStats.cs

@@ -2 +2 @@
 using Utf8Json;
 using Webserver.LiveData;
+using Webserver.Permissions;
 
 namespace Webserver.WebAPI.APIs {
@@ -47 +48 @@
                 }
 
-                public override int DefaultPermissionLevel () => 2000;
+                public override int DefaultPermissionLevel () => AdminWebModules.PermissionLevelGuest;
         }
 }

binary-improvements2/WebServer/src/WebAPI/APIs/WebUiUpdates.cs

@@ -2 +2 @@
 using Utf8Json;
 using Webserver.LiveData;
+using Webserver.Permissions;
 
 namespace Webserver.WebAPI.APIs {
@@ -57 +58 @@
                 }
 
-                public override int DefaultPermissionLevel () => 2000;
+                public override int DefaultPermissionLevel () => AdminWebModules.PermissionLevelGuest;
         }
 }

binary-improvements2/WebServer/src/WebAPI/AbsRestApi.cs

@@ -10 +10 @@
                 private static readonly UnityEngine.Profiling.CustomSampler jsonDeserializeSampler = UnityEngine.Profiling.CustomSampler.Create ("JSON_Deserialize");
 
-                protected readonly string[] CachedPerMethodModuleNames = new string[(int)ERequestMethod.Count];
-
                 protected AbsRestApi (string _name = null) : this(null, _name) {
                 }
@@ -19 +17 @@
 
                 protected override void RegisterPermissions () {
-                        base.RegisterPermissions ();
-                        
-                        for (int i = 0; i < (int)ERequestMethod.Count; i++) {
-                                ERequestMethod method = (ERequestMethod)i;
-
-                                if (method is not (ERequestMethod.GET or ERequestMethod.PUT or ERequestMethod.POST or ERequestMethod.DELETE)) {
-                                        continue;
-                                }
-
-                                CachedPerMethodModuleNames [i] = $"webapi.{Name}:{method.ToStringCached ()}";
-                                AdminWebModules.Instance.AddKnownModule (CachedPerMethodModuleNames [i], DefaultMethodPermissionLevel (method));
-                        }
+                        AdminWebModules.Instance.AddKnownModule (new AdminWebModules.WebModule (CachedApiModuleName, DefaultPermissionLevel (),
+                                DefaultMethodPermissionLevels (), true));
                 }
 
@@ -136 +124 @@
 
                 public override bool Authorized (RequestContext _context) {
-                        return ActiveMethodPermissionLevel (_context.Method) >= _context.PermissionLevel;
+                        AdminWebModules.WebModule module = AdminWebModules.Instance.GetModule (CachedApiModuleName);
+
+                        if (module.LevelPerMethod != null) {
+                                int perMethodLevel = module.LevelPerMethod [(int)_context.Method];
+                                if (perMethodLevel == AdminWebModules.MethodLevelNotSupported) {
+                                        return false;
+                                }
+
+                                if (perMethodLevel != AdminWebModules.MethodLevelInheritGlobal) {
+                                        return perMethodLevel >= _context.PermissionLevel;
+                                }
+                        }
+
+                        return module.LevelGlobal >= _context.PermissionLevel;
                 }
 
                 /// <summary>
-                /// Define default permission levels per HTTP method
+                /// Define default permission levels per HTTP method as an array of levels. See <see cref="ERequestMethod"/> for the order of entries.
                 /// </summary>
-                /// <param name="_method">HTTP method to return the default value for</param>
-                /// <returns>Default permission level for the given HTTP method. A value of int.MinValue means no per-method default, use per-API default</returns>
-                public virtual int DefaultMethodPermissionLevel (ERequestMethod _method) => int.MinValue;
-
-                public virtual int ActiveMethodPermissionLevel (ERequestMethod _method) {
-                        string methodApiModuleName = CachedPerMethodModuleNames [(int)_method];
-
-                        if (methodApiModuleName == null) {
-                                return 0;
-                        }
-
-                        AdminWebModules.WebModule? overrideModule = AdminWebModules.Instance.GetModule (methodApiModuleName, false);
-                        if (overrideModule.HasValue) {
-                                return overrideModule.Value.PermissionLevel;
-                        }
-
-                        overrideModule = AdminWebModules.Instance.GetModule (CachedApiModuleName, false);
-                        if (overrideModule.HasValue) {
-                                return overrideModule.Value.PermissionLevel;
-                        }
-
-                        int defaultMethodPermissionLevel = DefaultMethodPermissionLevel (_method);
-                        // ReSharper disable once ConvertIfStatementToReturnStatement
-                        if (defaultMethodPermissionLevel != int.MinValue) {
-                                return defaultMethodPermissionLevel;
-                        }
-
-                        return DefaultPermissionLevel ();
-                }
+                /// <returns>Default permission levels for supported methods. See <see cref="AdminWebModules.MethodLevelNotSupported"/> and <see cref="AdminWebModules.MethodLevelInheritGlobal"/>.</returns>
+                public virtual int[] DefaultMethodPermissionLevels () => new[] {
+                        AdminWebModules.MethodLevelNotSupported,
+                        AdminWebModules.MethodLevelInheritGlobal,
+                        AdminWebModules.MethodLevelInheritGlobal,
+                        AdminWebModules.MethodLevelInheritGlobal,
+                        AdminWebModules.MethodLevelInheritGlobal
+                };
 
 #region Helpers

binary-improvements2/WebServer/src/WebAPI/AbsWebAPI.cs

@@ -19 +19 @@
 
                 protected virtual void RegisterPermissions () {
-                        AdminWebModules.Instance.AddKnownModule ($"webapi.{Name}", DefaultPermissionLevel ());
+                        AdminWebModules.Instance.AddKnownModule (new AdminWebModules.WebModule(CachedApiModuleName, DefaultPermissionLevel (), true));
                 }
 
@@ -25 +25 @@
 
                 public virtual bool Authorized (RequestContext _context) {
-                        return AdminWebModules.Instance.ModuleAllowedWithLevel (CachedApiModuleName, _context.PermissionLevel);
+                        return AdminWebModules.Instance.GetModule (CachedApiModuleName).LevelGlobal >= _context.PermissionLevel;
                 }
 

binary-improvements2/WebServer/src/WebAPI/JsonCommons.cs

@@ -60 +60 @@
                         _writer.WriteString (_dateTime.ToString ("o"));
                 }
+
+                public static void WriteStringOrNull (ref JsonWriter _writer, string _string) {
+                        if (_string == null) {
+                                _writer.WriteNull ();
+                        } else {
+                                _writer.WriteString (_string);
+                        }
+                }
         }
 }

binary-improvements2/WebServer/src/WebMod.cs

@@ -12 +12 @@
                 public readonly string ReactBundle; // Absolute web path to the React bundle if the mod has one, e.g. "/webmods/myMod/bundle.js"
                 public readonly string CssPath; // Absolute web path to a CSS if the mod has one, e.g. "/webmods/myMod/styling.css";
+                public readonly bool IsWebMod;
 
                 public WebMod (Web _parentWeb, Mod _parentMod, bool _useStaticCache) {
-                        string folder = $"{_parentMod.Path}/WebMod";
-                        if (!Directory.Exists (folder)) {
-                                throw new InvalidDataException("No WebMod folder in mod");
-                        }
-
-                        string urlWebModBase = $"{modsBaseUrl}{_parentMod.FolderName}/";
-
-                        ReactBundle = $"{folder}/{reactBundleName}";
-                        ReactBundle = File.Exists (ReactBundle) ? $"{urlWebModBase}{reactBundleName}" : null;
-
-                        CssPath = $"{folder}/{stylingFileName}";
-                        CssPath = File.Exists (CssPath) ? $"{urlWebModBase}{stylingFileName}" : null;
-
-                        if (ReactBundle == null && CssPath == null) {
-                                throw new InvalidDataException($"WebMod folder has neither a {reactBundleName} nor a {stylingFileName}");
-                        }
-
                         ParentMod = _parentMod;
 
-                        _parentWeb.RegisterPathHandler (urlWebModBase, new StaticHandler (
-                                folder,
-                                _useStaticCache ? new SimpleCache () : new DirectAccess (),
-                                false)
-                        );
+                        string folder = $"{_parentMod.Path}/WebMod";
+                        IsWebMod = Directory.Exists (folder);
+
+                        if (IsWebMod) {
+                                string urlWebModBase = $"{modsBaseUrl}{_parentMod.FolderName}/";
+
+                                ReactBundle = $"{folder}/{reactBundleName}";
+                                ReactBundle = File.Exists (ReactBundle) ? $"{urlWebModBase}{reactBundleName}" : null;
+
+                                CssPath = $"{folder}/{stylingFileName}";
+                                CssPath = File.Exists (CssPath) ? $"{urlWebModBase}{stylingFileName}" : null;
+
+                                _parentWeb.RegisterPathHandler (urlWebModBase, new StaticHandler (
+                                        folder,
+                                        _useStaticCache ? new SimpleCache () : new DirectAccess (),
+                                        false)
+                                );
+                        }
                 }
         }