Files
duplicati/Duplicati/WebserverCore/Endpoints/V1/RemoteOperation.cs
T
Kenneth Skovhede 3f29642f6c Implemented JWT tokens.
Added auth requirement on all endpoints.
Added SignIn-, Access- and Refresh-Tokens based on JWT.
Upgraded stored password to be based on PBKDF2.
Added default password assignment.
Updated logic to support auth-header and re-sign-in for tray-icon and web-ui.
2024-06-19 13:54:10 +02:00

136 lines
4.8 KiB
C#

using Duplicati.Library.Interface;
using Duplicati.Server;
using Duplicati.WebserverCore.Abstractions;
using Duplicati.WebserverCore.Exceptions;
using Microsoft.AspNetCore.Mvc;
namespace Duplicati.WebserverCore.Endpoints.V1
{
public class RemoteOperation : IEndpointV1
{
private record RemoteOperationInput(string path);
public static void Map(RouteGroupBuilder group)
{
group.MapPost("/remoteoperation/dbpath", ([FromBody] RemoteOperationInput input)
=> ExecuteDbPath(input.path))
.RequireAuthorization();
group.MapPost("/remoteoperation/test", ([FromQuery] bool? autocreate, [FromBody] RemoteOperationInput input)
=> ExecuteTest(input.path, autocreate ?? false))
.RequireAuthorization();
group.MapPost("/remoteoperation/create", ([FromBody] RemoteOperationInput input)
=> ExecuteCreate(input.path))
.RequireAuthorization();
}
private static Dto.GetDbPathDto ExecuteDbPath(string uri)
{
var path = Library.Main.DatabaseLocator.GetDatabasePath(uri, null, false, false);
return new Dto.GetDbPathDto(!string.IsNullOrWhiteSpace(path), path);
}
private static Dictionary<string, string> ParseUrlOptions(Library.Utility.Uri uri)
{
var qp = uri.QueryParameters;
var opts = Runner.GetCommonOptions();
foreach (var k in qp.Keys.Cast<string>())
opts[k] = qp[k];
return opts;
}
private static IEnumerable<IGenericModule> ConfigureModules(IDictionary<string, string> opts)
{
// TODO: This works because the generic modules are implemented
// with pre .NetCore logic, using static methods
// The modules are created to allow multipe dispose,
// which violates the .Net patterns
var modules = Library.DynamicLoader.GenericLoader.Modules.OfType<IConnectionModule>().ToArray();
foreach (var n in modules)
n.Configure(opts);
return modules;
}
private record TupleDisposeWrapper(IBackend Backend, IEnumerable<IGenericModule> Modules) : IDisposable
{
public void Dispose()
{
Backend.Dispose();
foreach (var n in Modules)
if (n is IDisposable disposable)
disposable.Dispose();
}
}
private static TupleDisposeWrapper GetBackend(string url)
{
var uri = new Library.Utility.Uri(url);
var opts = ParseUrlOptions(uri);
var modules = ConfigureModules(opts);
var backend = Library.DynamicLoader.BackendLoader.GetBackend(url, new Dictionary<string, string>());
return new TupleDisposeWrapper(backend, modules);
}
private static void ExecuteTest(string url, bool autoCreate)
{
TupleDisposeWrapper? wrapper = null;
try
{
wrapper = GetBackend(url);
using (var b = wrapper.Backend)
{
try { b.Test(); }
catch (FolderMissingException)
{
if (!autoCreate)
throw;
b.CreateFolder();
b.Test();
}
return;
}
}
catch (FolderMissingException)
{
if (autoCreate)
throw new ServerErrorException("error-creating-folder");
throw new ServerErrorException("missing-folder");
}
catch (Library.Utility.SslCertificateValidator.InvalidCertificateException icex)
{
if (string.IsNullOrWhiteSpace(icex.Certificate))
throw new ServerErrorException(icex.Message);
else
throw new ServerErrorException("incorrect-cert:" + icex.Certificate);
}
catch (Library.Utility.HostKeyException hex)
{
if (string.IsNullOrWhiteSpace(hex.ReportedHostKey))
throw new ServerErrorException(hex.Message);
else
{
throw new ServerErrorException($@"incorrect-host-key:""{hex.ReportedHostKey}"", accepted-host-key:""{hex.AcceptedHostKey}""");
}
}
finally
{
wrapper?.Dispose();
}
}
private static void ExecuteCreate(string uri)
{
using (var b = Duplicati.Library.DynamicLoader.BackendLoader.GetBackend(uri, new Dictionary<string, string>()))
b.CreateFolder();
}
}
}