add admin related things

2022-06-30 01:53:28 +02:00
parent dd1a6e910e
commit 3e00bc4efd
14 changed files with 651 additions and 6 deletions
--- a/MareSynchronosServer/MareSynchronosServer/Hubs/AdminHub.cs
+++ b/MareSynchronosServer/MareSynchronosServer/Hubs/AdminHub.cs
@@ -0,0 +1,171 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Threading.Tasks;
+using MareSynchronos.API;
+using MareSynchronosServer.Authentication;
+using MareSynchronosServer.Data;
+using MareSynchronosServer.Models;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.SignalR;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+
+namespace MareSynchronosServer.Hubs
+{
+    public class AdminHub : BaseHub<AdminHub>
+    {
+        public AdminHub(MareDbContext context, ILogger<AdminHub> logger) : base(context, logger)
+        {
+        }
+
+        private List<string> OnlineAdmins => DbContext.Users.Where(u => !string.IsNullOrEmpty(u.CharacterIdentification) && (u.IsModerator || u.IsAdmin))
+                .Select(u => u.UID).ToList();
+
+        private bool IsModerator => DbContext.Users.Single(b => b.UID == AuthenticatedUserId).IsModerator || IsAdmin;
+        private bool IsAdmin => DbContext.Users.Single(b => b.UID == AuthenticatedUserId).IsAdmin;
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task<List<OnlineUserDto>> GetOnlineUsers()
+        {
+            if (!IsModerator) return null;
+
+            return await DbContext.Users.Where(b => !string.IsNullOrEmpty(b.CharacterIdentification)).Select(b => new OnlineUserDto
+            {
+                CharacterNameHash = b.CharacterIdentification,
+                UID = b.UID,
+                IsModerator = b.IsModerator,
+                IsAdmin = b.IsAdmin
+            }).ToListAsync();
+        }
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task<List<BannedUserDto>> GetBannedUsers()
+        {
+            if (!IsModerator) return null;
+
+            return await DbContext.BannedUsers.Select(b => new BannedUserDto()
+            {
+                CharacterHash = b.CharacterIdentification,
+                Reason = b.Reason
+            }).ToListAsync();
+        }
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task UpdateOrAddBannedUser(BannedUserDto dto)
+        {
+            if (!IsModerator || string.IsNullOrEmpty(dto.CharacterHash)) return;
+
+            var existingUser =
+                await DbContext.BannedUsers.SingleOrDefaultAsync(b => b.CharacterIdentification == dto.CharacterHash);
+            if (existingUser != null)
+            {
+                existingUser.Reason = dto.Reason;
+                DbContext.Update(existingUser);
+            }
+            else
+            {
+                await DbContext.BannedUsers.AddAsync(new Banned
+                {
+                    CharacterIdentification = dto.CharacterHash,
+                    Reason = dto.Reason
+                });
+            }
+
+            await DbContext.SaveChangesAsync();
+            await Clients.Users(OnlineAdmins).SendAsync("UpdateOrAddBannedUser", dto);
+            var bannedUser =
+                await DbContext.Users.SingleOrDefaultAsync(u => u.CharacterIdentification == dto.CharacterHash);
+            if (bannedUser != null)
+            {
+                await Clients.User(bannedUser.UID).SendAsync("ForcedReconnect");
+            }
+        }
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task DeleteBannedUser(BannedUserDto dto)
+        {
+            if (!IsModerator || string.IsNullOrEmpty(dto.CharacterHash)) return;
+
+            var existingUser =
+                await DbContext.BannedUsers.SingleOrDefaultAsync(b => b.CharacterIdentification == dto.CharacterHash);
+            if (existingUser == null)
+            {
+                return;
+            }
+
+            DbContext.Remove(existingUser);
+            await DbContext.SaveChangesAsync();
+            await Clients.Users(OnlineAdmins).SendAsync("DeleteBannedUser", dto);
+        }
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task<List<ForbiddenFileDto>> GetForbiddenFiles()
+        {
+            if (!IsModerator) return null;
+
+            return await DbContext.ForbiddenUploadEntries.Select(b => new ForbiddenFileDto()
+            {
+                Hash = b.Hash,
+                ForbiddenBy = b.ForbiddenBy
+            }).ToListAsync();
+        }
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task UpdateOrAddForbiddenFile(ForbiddenFileDto dto)
+        {
+            if (!IsAdmin || string.IsNullOrEmpty(dto.Hash)) return;
+
+            var existingForbiddenFile =
+                await DbContext.ForbiddenUploadEntries.SingleOrDefaultAsync(b => b.Hash == dto.Hash);
+            if (existingForbiddenFile != null)
+            {
+                existingForbiddenFile.ForbiddenBy = dto.ForbiddenBy;
+                DbContext.Update(existingForbiddenFile);
+            }
+            else
+            {
+                await DbContext.ForbiddenUploadEntries.AddAsync(new ForbiddenUploadEntry
+                {
+                    Hash = dto.Hash,
+                    ForbiddenBy = dto.ForbiddenBy
+                });
+            }
+
+            await DbContext.SaveChangesAsync();
+
+            await Clients.Users(OnlineAdmins).SendAsync("UpdateOrAddForbiddenFile", dto);
+        }
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task DeleteForbiddenFile(ForbiddenFileDto dto)
+        {
+            if (!IsAdmin || string.IsNullOrEmpty(dto.Hash)) return;
+
+            var existingFile =
+                await DbContext.ForbiddenUploadEntries.SingleOrDefaultAsync(b => b.Hash == dto.Hash);
+            if (existingFile == null)
+            {
+                return;
+            }
+
+            DbContext.Remove(existingFile);
+            await DbContext.SaveChangesAsync();
+            await Clients.Users(OnlineAdmins).SendAsync("DeleteForbiddenFile", dto);
+        }
+
+
+        [Authorize(AuthenticationSchemes = SecretKeyAuthenticationHandler.AuthScheme)]
+        public async Task ChangeModeratorStatus(string uid, bool isModerator)
+        {
+            if (!IsAdmin) return;
+            var user = await DbContext.Users.SingleOrDefaultAsync(u => u.UID == uid);
+
+            if (user == null) return;
+
+            user.IsModerator = isModerator;
+            DbContext.Update(user);
+            await DbContext.SaveChangesAsync();
+            await Clients.Users(user.UID).SendAsync("ForcedReconnect");
+        }
+    }
+}
--- a/MareSynchronosServer/MareSynchronosServer/Hubs/ConnectionHub.cs
+++ b/MareSynchronosServer/MareSynchronosServer/Hubs/ConnectionHub.cs
@@ -14,22 +14,23 @@ namespace MareSynchronosServer.Hubs
        {
        }

-        public async Task<UserDto> Heartbeat()
+        public async Task<LoggedInUserDto> Heartbeat()
        {
            var userId = Context.User!.Claims.SingleOrDefault(c => c.Type == ClaimTypes.NameIdentifier)?.Value;
            Logger.LogInformation("Heartbeat from " + (userId ?? "Unknown user"));

            if (userId != null)
            {
-                var isAdmin = (await DbContext.Users.SingleOrDefaultAsync(u => u.UID == userId))?.IsAdmin ?? false;
-                return new UserDto
+                var user = (await DbContext.Users.SingleAsync(u => u.UID == userId));
+                return new LoggedInUserDto
                {
                    UID = userId,
-                    IsAdmin = isAdmin
+                    IsModerator = user.IsModerator,
+                    IsAdmin = user.IsAdmin
                };
            }

-            return new UserDto();
+            return new LoggedInUserDto();
        }
    }
 }