api.accounts.ts

// This file is part of HFS - Copyright 2021-2023, Massimo Melina <a@rejetto.com> - License https://www.gnu.org/licenses/gpl-3.0.txt

import { changePasswordHelper, changeSrpHelper } from './api.helpers'
import { ApiError, ApiHandlers } from './apiMiddleware'
import { Account, accountCanLoginAdmin, accountHasPassword, accountsConfig, addAccount, delAccount, getAccount,
    setAccount } from './perm'
import _ from 'lodash'
import { HTTP_BAD_REQUEST, HTTP_CONFLICT, HTTP_NOT_FOUND } from './const'
import { getCurrentUsername, invalidSessions } from './auth'

export type AccountAdminSend = NonNullable<ReturnType<typeof prepareAccount>>
function prepareAccount(ac: Account | undefined) {
    return ac && {
        ..._.omit(ac, ['password','hashed_password','srp']),
        username: ac.username, // omit won't copy it because it's a hidden prop
        hasPassword: accountHasPassword(ac),
        adminActualAccess: accountCanLoginAdmin(ac),
        invalidated: invalidSessions.has(ac.username),
    }
}

const apis: ApiHandlers = {

    get_usernames() {
        return { list: Object.keys(accountsConfig.get()) }
    },

    get_account({ username }, ctx) {
        return prepareAccount(getAccount(username || getCurrentUsername(ctx)))
            || new ApiError(HTTP_NOT_FOUND)
    },

    get_accounts() {
        return { list: Object.values(accountsConfig.get()).map(prepareAccount) }
    },

    get_admins() {
        return { list: _.filter(accountsConfig.get(), accountCanLoginAdmin).map(ac => ac.username) }
    },

    set_account({ username, changes }, ctx) {
        const acc = getAccount(username)
        if (!acc)
            return new ApiError(HTTP_BAD_REQUEST)
        setAccount(acc, changes)
        if (changes.username && ctx.session?.username === username)
            ctx.session!.username = changes.username
        return _.pick(acc, 'username')
    },

    add_account({ overwrite, username, ...rest }) {
        const existing = getAccount(username)
        if (existing)
            return overwrite ? setAccount(existing, rest) : new ApiError(HTTP_CONFLICT)
        const acc = addAccount(username, rest)
        return acc ? _.pick(acc, 'username') : new ApiError(HTTP_BAD_REQUEST)
    },

    del_account({ username }) {
        return delAccount(username) ? {} : new ApiError(HTTP_BAD_REQUEST)
    },

    invalidate_sessions({ username }) {
        invalidSessions.add(username)
        return {}
    },

    async change_password_others({ username, newPassword }) {
        const a = getAccount(username)
        return a ? changePasswordHelper(a, newPassword)
            : new ApiError(HTTP_NOT_FOUND)
    },

    async change_srp_others({ username, salt, verifier }) {
        const a = getAccount(username)
        return a ? changeSrpHelper(a, salt, verifier)
            : new ApiError(HTTP_NOT_FOUND)
    }

}

export default apis