restructuring

2025-11-25 21:34:24 +00:00 · 2023-07-18 09:00:57 +02:00
parent 98ac5c8dfc
commit 21afcdb036
94 changed files with 50 additions and 33 deletions
--- a/src/server/admin/adminRoutes.js
+++ b/src/server/admin/adminRoutes.js
@@ -0,0 +1,101 @@
+/*
+*				libreevent - routes.js (admin)
+*
+*	Created by Janis Hutz 03/11/2023, Licensed under the GPL V3 License
+*			https://janishutz.com, development@janishutz.com
+*
+*
+*/
+
+// const db = require( './db/db.js' );
+const pwdmanager = require( './pwdmanager.js' );
+const auth = require( './2fa.js' );
+const twoFA = new auth();
+const path = require( 'path' );
+
+let responseObjects = {};
+
+module.exports = ( app, settings ) => {
+    /* 
+        Admin login route that checks the password
+    */
+   
+    app.post( '/admin/auth', ( request, response ) => {
+        if ( request.body.mail && request.body.password ) {
+            pwdmanager.checkpassword( request.body.mail, request.body.password ).then( data => {
+                request.session.username = request.body.mail;
+                if ( data ) {
+                    // TODO: Send mails
+                    // TODO: Check if user has 2fa enabled
+                    if ( settings.twoFA === 'standard' ) {
+                        let tok = twoFA.registerStandardAuthentication()[ 'token' ];
+                        request.session.token = tok;
+                        console.log( 'http://localhost:8081/admin/2fa?token=' + tok );
+                        response.send( { 'status': '2fa' } );
+                    } else if ( settings.twoFA === 'enhanced' ) {
+                        let res = twoFA.registerEnhancedAuthentication();
+                        console.log( 'http://localhost:8081/admin/2fa?token=' + res.token );
+                        request.session.token = res.token;
+                        response.send( { 'status': '2fa+', 'code': res.code } );
+                    } else {
+                        request.session.loggedInUser = true;
+                        response.send( { 'status': 'ok' } );
+                    }
+                } else {
+                    response.send( { 'status': 'pwErr' } );
+                }
+            } );
+        } else {
+            response.send( 'missingCredentials' );
+        }
+    } );
+
+    app.get( '/admin/2fa', ( request, response ) => {
+        // TODO: Add multi language
+        let tokType = twoFA.verifySimple( request.query.token );
+        if ( tokType === 'standard' ) {
+            request.session.loggedInAdmin = true;
+            responseObjects[ request.query.token ].write( 'data: authenticated\n\n' );
+            response.sendFile( path.join( __dirname + '/../ui/en/2fa/2faSimple.html' ) );
+        } else if ( tokType === 'enhanced' ) {
+            response.sendFile( path.join( __dirname + '/../ui/en/2fa/2faEnhancedAdmin.html' ) );
+        } else {
+            response.sendFile( path.join( __dirname + '/../ui/en/2fa/2faInvalid.html' ) );
+        }
+    } );
+
+    app.post( '/admin/2fa/verify', ( request, response ) => {
+        let verified = twoFA.verifyEnhanced( request.body.token, request.body.code );
+        if ( verified ) {
+            request.session.loggedInAdmin = true;
+            responseObjects[ request.body.token ].write( 'data: authenticated\n\n' );
+            response.send( 'ok' );
+        } else response.send( 'wrong' );
+    } );
+
+    app.get( '/admin/2fa/check', ( request, response ) => {
+        response.writeHead( 200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            'Connection': 'keep-alive',
+        } );
+        response.status( 200 );
+        response.flushHeaders();
+        response.write( 'data: connected\n\n' );
+        responseObjects[ request.session.token ] = response;
+    } );
+
+    app.get( '/test/login', ( request, response ) => {
+        request.session.loggedInAdmin = true;
+        response.send( 'Logged in' );
+    } );
+    
+    app.get( '/admin/logout', ( request, response ) => {
+        request.session.loggedInAdmin = false;
+        response.send( 'logged out' );
+    } );
+
+    app.get( '/api/getAuth', ( request, response ) => {
+        response.send( { 'admin': request.session.loggedInAdmin ? true : false, 'user': request.session.loggedInUser ? true : false } );
+    } );
+};