wt/auth_service
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

updated and added namespaces
Prepare Build and Testing executable binary / Prepare-Build-Testing-With-Make (push) Has been cancelled
Details
Prepare Build and Testing executable binary / Prepare-Build-Testing-With-CMake (push) Has been cancelled
Details
Prepare Build and Testing executable binary / Prepare-Build-Testing-With-Meson (push) Has been cancelled
Details

Browse Source
This commit is contained in:
wt committed 2025-04-18 16:43:57 +07:00
1 parent 886f0aed59
commit a06da5a6d4
18 files changed
+698 -641
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/users/change_user.cpp
+104 -98
View File
@@ -5,109 +5,115 @@
#include <jwt.hpp>
#include <syslog.h>
// function for change user data
void change_user(const httplib::Request& request, httplib::Response& response)
namespace AuthService
{
std::cout << GREEN << request.path << RESET << " " << request.method << std::endl;
response.set_header("Access-Control-Allow-Origin", "*");
if (request.body.empty()) {
response.set_content(
CHANGE_USER_REQUIRED_STRING,
JSON_TYPE);
syslog(LOG_ERR, "change user request body is empty");
return;
}
nlohmann::json json_body = nlohmann::json::parse(request.body);
if (json_body["token"] == nullptr) {
response.set_content(
CHANGE_USER_REQUIRED_STRING,
JSON_TYPE
);
syslog(LOG_ERR, "no token in change user request");
return;
}
if ((json_body["userid"] == nullptr) && (json_body["old_password"] == nullptr)) {
response.set_content(
CHANGE_USER_REQUIRED_STRING,
JSON_TYPE);
syslog(LOG_ERR, "no old_password in change user request");
return;
}
if (!verify_auth(json_body["token"])) {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
std::string userid = JWT::get_payload(json_body["token"], JWT_SECRET_KEY)["userId"];
if (userid.empty()) {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
nlohmann::json all_users;
namespace Users
{
std::lock_guard<std::mutex> lock(usersfilemutex);
std::ifstream usersfile(USERS_FILE);
all_users = nlohmann::json::parse(usersfile);
usersfile.close();
}
std::string changeusruserid = userid;
if (json_body["userid"] != nullptr) {
changeusruserid = json_body["userid"];
nlohmann::json response_user_data = nullptr;
for (nlohmann::json& user : all_users) {
if (user["id"] == userid) {
response_user_data = user;
// function for change user data
void change_user(const httplib::Request& request, httplib::Response& response)
{
std::cout << GREEN << request.path << RESET << " " << request.method << std::endl;
response.set_header("Access-Control-Allow-Origin", "*");
if (request.body.empty()) {
response.set_content(
CHANGE_USER_REQUIRED_STRING,
JSON_TYPE);
syslog(LOG_ERR, "change user request body is empty");
return;
}
}
if (response_user_data == nullptr) {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
if (response_user_data["is_superuser"] != "1") {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
}
nlohmann::json json_body = nlohmann::json::parse(request.body);
bool found = false;
if (json_body["userid"] != nullptr) {
for (nlohmann::basic_json<>& all_user : all_users) {
if ((all_user["id"] == changeusruserid)) {
if (json_body["username"] != nullptr) { all_user["username"] = json_body["username"]; }
if (json_body["password"] != nullptr) { all_user["password"] = json_body["password"]; }
if (json_body["group"] != nullptr) { all_user["group"] = json_body["group"]; }
if (json_body["is_superuser"] != nullptr) { all_user["is_superuser"] = json_body["is_superuser"]; }
found = true;
std::string syslogstring = "userdata changed for user [" + std::string(all_user["username"]) + "]";
syslog(LOG_INFO, syslogstring.c_str());
break;
if (json_body["token"] == nullptr) {
response.set_content(
CHANGE_USER_REQUIRED_STRING,
JSON_TYPE
);
syslog(LOG_ERR, "no token in change user request");
return;
}
if ((json_body["userid"] == nullptr) && (json_body["old_password"] == nullptr)) {
response.set_content(
CHANGE_USER_REQUIRED_STRING,
JSON_TYPE);
syslog(LOG_ERR, "no old_password in change user request");
return;
}
if (!AuthService::Auth::verify_auth(json_body["token"])) {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
std::string userid = JWT::get_payload(json_body["token"], JWT_SECRET_KEY)["userId"];
if (userid.empty()) {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
nlohmann::json all_users;
{
std::lock_guard<std::mutex> lock(AuthService::Includes::usersfilemutex);
std::ifstream usersfile(USERS_FILE);
all_users = nlohmann::json::parse(usersfile);
usersfile.close();
}
std::string changeusruserid = userid;
if (json_body["userid"] != nullptr) {
changeusruserid = json_body["userid"];
nlohmann::json response_user_data = nullptr;
for (nlohmann::json& user : all_users) {
if (user["id"] == userid) {
response_user_data = user;
}
}
if (response_user_data == nullptr) {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
if (response_user_data["is_superuser"] != "1") {
response.set_content(STRING403, JSON_TYPE);
syslog(LOG_ERR, "access reject in change user request");
return;
}
}
bool found = false;
if (json_body["userid"] != nullptr) {
for (nlohmann::basic_json<>& all_user : all_users) {
if ((all_user["id"] == changeusruserid)) {
if (json_body["username"] != nullptr) { all_user["username"] = json_body["username"]; }
if (json_body["password"] != nullptr) { all_user["password"] = json_body["password"]; }
if (json_body["group"] != nullptr) { all_user["group"] = json_body["group"]; }
if (json_body["is_superuser"] != nullptr) { all_user["is_superuser"] = json_body["is_superuser"]; }
found = true;
std::string syslogstring = "userdata changed for user [" + std::string(all_user["username"]) + "]";
syslog(LOG_INFO, syslogstring.c_str());
break;
}
}
}
else {
for (nlohmann::basic_json<>& all_user : all_users) {
if ((all_user["id"] == changeusruserid)) {
if (json_body["username"] != nullptr) { all_user["username"] = json_body["username"]; }
found = true;
std::string syslogstring = "userdata changed for user [" + std::string(all_user["username"]) + "]";
syslog(LOG_INFO, syslogstring.c_str());
break;
}
}
}
if (!found) {
response.set_content(R"({"status":"can't find this user"})", JSON_TYPE);
syslog(LOG_ERR, "can't find this user in change user request");
return;
}
std::lock_guard<std::mutex> lock(AuthService::Includes::usersfilemutex);
std::ofstream usersfilew(USERS_FILE);
usersfilew << all_users.dump(4);
usersfilew.close();
response.set_content(R"({"status":"ok"})", JSON_TYPE);
}
}
else {
for (nlohmann::basic_json<>& all_user : all_users) {
if ((all_user["id"] == changeusruserid)) {
if (json_body["username"] != nullptr) { all_user["username"] = json_body["username"]; }
found = true;
std::string syslogstring = "userdata changed for user [" + std::string(all_user["username"]) + "]";
syslog(LOG_INFO, syslogstring.c_str());
break;
}
}
}
if (!found) {
response.set_content(R"({"status":"can't find this user"})", JSON_TYPE);
syslog(LOG_ERR, "can't find this user in change user request");
return;
}
std::lock_guard<std::mutex> lock(usersfilemutex);
std::ofstream usersfilew(USERS_FILE);
usersfilew << all_users.dump(4);
usersfilew.close();
response.set_content(R"({"status":"ok"})", JSON_TYPE);
}