|
|
@ -1,8 +1,8 @@
|
|
|
|
use std::collections::{HashSet, HashMap};
|
|
|
|
use std::collections::{HashMap, HashSet};
|
|
|
|
use std::path::Path;
|
|
|
|
use std::path::Path;
|
|
|
|
|
|
|
|
|
|
|
|
use rocket::http::ContentType;
|
|
|
|
use rocket::http::ContentType;
|
|
|
|
use rocket::{request::Form, Data, Route, State};
|
|
|
|
use rocket::{request::Form, Data, Route};
|
|
|
|
|
|
|
|
|
|
|
|
use rocket_contrib::json::Json;
|
|
|
|
use rocket_contrib::json::Json;
|
|
|
|
use serde_json::Value;
|
|
|
|
use serde_json::Value;
|
|
|
@ -17,7 +17,7 @@ use crate::db::DbConn;
|
|
|
|
|
|
|
|
|
|
|
|
use crate::crypto;
|
|
|
|
use crate::crypto;
|
|
|
|
|
|
|
|
|
|
|
|
use crate::api::{self, EmptyResult, JsonResult, JsonUpcase, PasswordData, UpdateType, WebSocketUsers};
|
|
|
|
use crate::api::{self, EmptyResult, JsonResult, JsonUpcase, Notify, PasswordData, UpdateType};
|
|
|
|
use crate::auth::Headers;
|
|
|
|
use crate::auth::Headers;
|
|
|
|
|
|
|
|
|
|
|
|
use crate::CONFIG;
|
|
|
|
use crate::CONFIG;
|
|
|
@ -56,7 +56,6 @@ pub fn routes() -> Vec<Route> {
|
|
|
|
delete_all,
|
|
|
|
delete_all,
|
|
|
|
move_cipher_selected,
|
|
|
|
move_cipher_selected,
|
|
|
|
move_cipher_selected_put,
|
|
|
|
move_cipher_selected_put,
|
|
|
|
|
|
|
|
|
|
|
|
post_collections_update,
|
|
|
|
post_collections_update,
|
|
|
|
post_collections_admin,
|
|
|
|
post_collections_admin,
|
|
|
|
put_collections_admin,
|
|
|
|
put_collections_admin,
|
|
|
@ -80,9 +79,16 @@ fn sync(data: Form<SyncData>, headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
let collections_json: Vec<Value> = collections.iter().map(|c| c.to_json()).collect();
|
|
|
|
let collections_json: Vec<Value> = collections.iter().map(|c| c.to_json()).collect();
|
|
|
|
|
|
|
|
|
|
|
|
let ciphers = Cipher::find_by_user(&headers.user.uuid, &conn);
|
|
|
|
let ciphers = Cipher::find_by_user(&headers.user.uuid, &conn);
|
|
|
|
let ciphers_json: Vec<Value> = ciphers.iter().map(|c| c.to_json(&headers.host, &headers.user.uuid, &conn)).collect();
|
|
|
|
let ciphers_json: Vec<Value> = ciphers
|
|
|
|
|
|
|
|
.iter()
|
|
|
|
|
|
|
|
.map(|c| c.to_json(&headers.host, &headers.user.uuid, &conn))
|
|
|
|
|
|
|
|
.collect();
|
|
|
|
|
|
|
|
|
|
|
|
let domains_json = if data.exclude_domains { Value::Null } else { api::core::get_eq_domains(headers).unwrap().into_inner() };
|
|
|
|
let domains_json = if data.exclude_domains {
|
|
|
|
|
|
|
|
Value::Null
|
|
|
|
|
|
|
|
} else {
|
|
|
|
|
|
|
|
api::core::get_eq_domains(headers).unwrap().into_inner()
|
|
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
Ok(Json(json!({
|
|
|
|
Ok(Json(json!({
|
|
|
|
"Profile": user_json,
|
|
|
|
"Profile": user_json,
|
|
|
@ -98,7 +104,10 @@ fn sync(data: Form<SyncData>, headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
fn get_ciphers(headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
fn get_ciphers(headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
let ciphers = Cipher::find_by_user(&headers.user.uuid, &conn);
|
|
|
|
let ciphers = Cipher::find_by_user(&headers.user.uuid, &conn);
|
|
|
|
|
|
|
|
|
|
|
|
let ciphers_json: Vec<Value> = ciphers.iter().map(|c| c.to_json(&headers.host, &headers.user.uuid, &conn)).collect();
|
|
|
|
let ciphers_json: Vec<Value> = ciphers
|
|
|
|
|
|
|
|
.iter()
|
|
|
|
|
|
|
|
.map(|c| c.to_json(&headers.host, &headers.user.uuid, &conn))
|
|
|
|
|
|
|
|
.collect();
|
|
|
|
|
|
|
|
|
|
|
|
Ok(Json(json!({
|
|
|
|
Ok(Json(json!({
|
|
|
|
"Data": ciphers_json,
|
|
|
|
"Data": ciphers_json,
|
|
|
@ -111,7 +120,7 @@ fn get_ciphers(headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
fn get_cipher(uuid: String, headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
fn get_cipher(uuid: String, headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
None => err!("Cipher doesn't exist")
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if !cipher.is_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
if !cipher.is_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
@ -166,7 +175,7 @@ pub struct CipherData {
|
|
|
|
// These are used during key rotation
|
|
|
|
// These are used during key rotation
|
|
|
|
#[serde(rename = "Attachments")]
|
|
|
|
#[serde(rename = "Attachments")]
|
|
|
|
_Attachments: Option<Value>, // Unused, contains map of {id: filename}
|
|
|
|
_Attachments: Option<Value>, // Unused, contains map of {id: filename}
|
|
|
|
Attachments2: Option<HashMap<String, Attachments2Data>>
|
|
|
|
Attachments2: Option<HashMap<String, Attachments2Data>>,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[derive(Deserialize, Debug)]
|
|
|
|
#[derive(Deserialize, Debug)]
|
|
|
@ -177,44 +186,55 @@ pub struct Attachments2Data {
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/admin", data = "<data>")]
|
|
|
|
#[post("/ciphers/admin", data = "<data>")]
|
|
|
|
fn post_ciphers_admin(data: JsonUpcase<ShareCipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn post_ciphers_admin(data: JsonUpcase<ShareCipherData>, headers: Headers, conn: DbConn, nt: Notify) -> JsonResult {
|
|
|
|
let data: ShareCipherData = data.into_inner().data;
|
|
|
|
let data: ShareCipherData = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
let mut cipher = Cipher::new(data.Cipher.Type, data.Cipher.Name.clone());
|
|
|
|
let mut cipher = Cipher::new(data.Cipher.Type, data.Cipher.Name.clone());
|
|
|
|
cipher.user_uuid = Some(headers.user.uuid.clone());
|
|
|
|
cipher.user_uuid = Some(headers.user.uuid.clone());
|
|
|
|
cipher.save(&conn)?;
|
|
|
|
cipher.save(&conn)?;
|
|
|
|
|
|
|
|
|
|
|
|
share_cipher_by_uuid(&cipher.uuid, data, &headers, &conn, &ws)
|
|
|
|
share_cipher_by_uuid(&cipher.uuid, data, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/create", data = "<data>")]
|
|
|
|
#[post("/ciphers/create", data = "<data>")]
|
|
|
|
fn post_ciphers_create(data: JsonUpcase<ShareCipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn post_ciphers_create(data: JsonUpcase<ShareCipherData>, headers: Headers, conn: DbConn, nt: Notify) -> JsonResult {
|
|
|
|
post_ciphers_admin(data, headers, conn, ws)
|
|
|
|
post_ciphers_admin(data, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers", data = "<data>")]
|
|
|
|
#[post("/ciphers", data = "<data>")]
|
|
|
|
fn post_ciphers(data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn post_ciphers(data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, nt: Notify) -> JsonResult {
|
|
|
|
let data: CipherData = data.into_inner().data;
|
|
|
|
let data: CipherData = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
let mut cipher = Cipher::new(data.Type, data.Name.clone());
|
|
|
|
let mut cipher = Cipher::new(data.Type, data.Name.clone());
|
|
|
|
update_cipher_from_data(&mut cipher, data, &headers, false, &conn, &ws, UpdateType::SyncCipherCreate)?;
|
|
|
|
update_cipher_from_data(&mut cipher, data, &headers, false, &conn, &nt, UpdateType::CipherCreate)?;
|
|
|
|
|
|
|
|
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
pub fn update_cipher_from_data(cipher: &mut Cipher, data: CipherData, headers: &Headers, shared_to_collection: bool, conn: &DbConn, ws: &State<WebSocketUsers>, ut: UpdateType) -> EmptyResult {
|
|
|
|
pub fn update_cipher_from_data(
|
|
|
|
|
|
|
|
cipher: &mut Cipher,
|
|
|
|
|
|
|
|
data: CipherData,
|
|
|
|
|
|
|
|
headers: &Headers,
|
|
|
|
|
|
|
|
shared_to_collection: bool,
|
|
|
|
|
|
|
|
conn: &DbConn,
|
|
|
|
|
|
|
|
nt: &Notify,
|
|
|
|
|
|
|
|
ut: UpdateType,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
if let Some(org_id) = data.OrganizationId {
|
|
|
|
if let Some(org_id) = data.OrganizationId {
|
|
|
|
match UserOrganization::find_by_user_and_org(&headers.user.uuid, &org_id, &conn) {
|
|
|
|
match UserOrganization::find_by_user_and_org(&headers.user.uuid, &org_id, &conn) {
|
|
|
|
None => err!("You don't have permission to add item to organization"),
|
|
|
|
None => err!("You don't have permission to add item to organization"),
|
|
|
|
Some(org_user) => if shared_to_collection
|
|
|
|
Some(org_user) => {
|
|
|
|
|
|
|
|
if shared_to_collection
|
|
|
|
|| org_user.has_full_access()
|
|
|
|
|| org_user.has_full_access()
|
|
|
|
|| cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
|| cipher.is_write_accessible_to_user(&headers.user.uuid, &conn)
|
|
|
|
|
|
|
|
{
|
|
|
|
cipher.organization_uuid = Some(org_id);
|
|
|
|
cipher.organization_uuid = Some(org_id);
|
|
|
|
cipher.user_uuid = None;
|
|
|
|
cipher.user_uuid = None;
|
|
|
|
} else {
|
|
|
|
} else {
|
|
|
|
err!("You don't have permission to add cipher directly to organization")
|
|
|
|
err!("You don't have permission to add cipher directly to organization")
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
} else {
|
|
|
|
cipher.user_uuid = Some(headers.user.uuid.clone());
|
|
|
|
cipher.user_uuid = Some(headers.user.uuid.clone());
|
|
|
|
}
|
|
|
|
}
|
|
|
@ -226,7 +246,7 @@ pub fn update_cipher_from_data(cipher: &mut Cipher, data: CipherData, headers: &
|
|
|
|
err!("Folder is not owned by user")
|
|
|
|
err!("Folder is not owned by user")
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
None => err!("Folder doesn't exist")
|
|
|
|
None => err!("Folder doesn't exist"),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
@ -235,7 +255,7 @@ pub fn update_cipher_from_data(cipher: &mut Cipher, data: CipherData, headers: &
|
|
|
|
for (id, attachment) in attachments {
|
|
|
|
for (id, attachment) in attachments {
|
|
|
|
let mut saved_att = match Attachment::find_by_id(&id, &conn) {
|
|
|
|
let mut saved_att = match Attachment::find_by_id(&id, &conn) {
|
|
|
|
Some(att) => att,
|
|
|
|
Some(att) => att,
|
|
|
|
None => err!("Attachment doesn't exist")
|
|
|
|
None => err!("Attachment doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if saved_att.cipher_uuid != cipher.uuid {
|
|
|
|
if saved_att.cipher_uuid != cipher.uuid {
|
|
|
@ -254,12 +274,12 @@ pub fn update_cipher_from_data(cipher: &mut Cipher, data: CipherData, headers: &
|
|
|
|
2 => data.SecureNote,
|
|
|
|
2 => data.SecureNote,
|
|
|
|
3 => data.Card,
|
|
|
|
3 => data.Card,
|
|
|
|
4 => data.Identity,
|
|
|
|
4 => data.Identity,
|
|
|
|
_ => err!("Invalid type")
|
|
|
|
_ => err!("Invalid type"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
let mut type_data = match type_data_opt {
|
|
|
|
let mut type_data = match type_data_opt {
|
|
|
|
Some(data) => data,
|
|
|
|
Some(data) => data,
|
|
|
|
None => err!("Data missing")
|
|
|
|
None => err!("Data missing"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
// TODO: ******* Backwards compat start **********
|
|
|
|
// TODO: ******* Backwards compat start **********
|
|
|
@ -280,7 +300,7 @@ pub fn update_cipher_from_data(cipher: &mut Cipher, data: CipherData, headers: &
|
|
|
|
|
|
|
|
|
|
|
|
cipher.save(&conn)?;
|
|
|
|
cipher.save(&conn)?;
|
|
|
|
|
|
|
|
|
|
|
|
ws.send_cipher_update(ut, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
nt.send_cipher_update(ut, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
|
|
|
|
|
|
|
|
cipher.move_to_folder(data.FolderId, &headers.user.uuid, &conn)
|
|
|
|
cipher.move_to_folder(data.FolderId, &headers.user.uuid, &conn)
|
|
|
|
}
|
|
|
|
}
|
|
|
@ -304,9 +324,8 @@ struct RelationsData {
|
|
|
|
Value: usize,
|
|
|
|
Value: usize,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/import", data = "<data>")]
|
|
|
|
#[post("/ciphers/import", data = "<data>")]
|
|
|
|
fn post_ciphers_import(data: JsonUpcase<ImportData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn post_ciphers_import(data: JsonUpcase<ImportData>, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
let data: ImportData = data.into_inner().data;
|
|
|
|
let data: ImportData = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
// Read and create the folders
|
|
|
|
// Read and create the folders
|
|
|
@ -327,49 +346,67 @@ fn post_ciphers_import(data: JsonUpcase<ImportData>, headers: Headers, conn: DbC
|
|
|
|
|
|
|
|
|
|
|
|
// Read and create the ciphers
|
|
|
|
// Read and create the ciphers
|
|
|
|
for (index, cipher_data) in data.Ciphers.into_iter().enumerate() {
|
|
|
|
for (index, cipher_data) in data.Ciphers.into_iter().enumerate() {
|
|
|
|
let folder_uuid = relations_map.get(&index)
|
|
|
|
let folder_uuid = relations_map.get(&index).map(|i| folders[*i].uuid.clone());
|
|
|
|
.map(|i| folders[*i].uuid.clone());
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
let mut cipher = Cipher::new(cipher_data.Type, cipher_data.Name.clone());
|
|
|
|
let mut cipher = Cipher::new(cipher_data.Type, cipher_data.Name.clone());
|
|
|
|
update_cipher_from_data(&mut cipher, cipher_data, &headers, false, &conn, &ws, UpdateType::SyncCipherCreate)?;
|
|
|
|
update_cipher_from_data(
|
|
|
|
|
|
|
|
&mut cipher,
|
|
|
|
|
|
|
|
cipher_data,
|
|
|
|
|
|
|
|
&headers,
|
|
|
|
|
|
|
|
false,
|
|
|
|
|
|
|
|
&conn,
|
|
|
|
|
|
|
|
&nt,
|
|
|
|
|
|
|
|
UpdateType::CipherCreate,
|
|
|
|
|
|
|
|
)?;
|
|
|
|
|
|
|
|
|
|
|
|
cipher.move_to_folder(folder_uuid, &headers.user.uuid.clone(), &conn).ok();
|
|
|
|
cipher.move_to_folder(folder_uuid, &headers.user.uuid.clone(), &conn)?;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
let mut user = headers.user;
|
|
|
|
let mut user = headers.user;
|
|
|
|
user.update_revision(&conn)
|
|
|
|
user.update_revision(&conn)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#[put("/ciphers/<uuid>/admin", data = "<data>")]
|
|
|
|
#[put("/ciphers/<uuid>/admin", data = "<data>")]
|
|
|
|
fn put_cipher_admin(uuid: String, data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn put_cipher_admin(
|
|
|
|
put_cipher(uuid, data, headers, conn, ws)
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: JsonUpcase<CipherData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> JsonResult {
|
|
|
|
|
|
|
|
put_cipher(uuid, data, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/admin", data = "<data>")]
|
|
|
|
#[post("/ciphers/<uuid>/admin", data = "<data>")]
|
|
|
|
fn post_cipher_admin(uuid: String, data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn post_cipher_admin(
|
|
|
|
post_cipher(uuid, data, headers, conn, ws)
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: JsonUpcase<CipherData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> JsonResult {
|
|
|
|
|
|
|
|
post_cipher(uuid, data, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>", data = "<data>")]
|
|
|
|
#[post("/ciphers/<uuid>", data = "<data>")]
|
|
|
|
fn post_cipher(uuid: String, data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn post_cipher(uuid: String, data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, nt: Notify) -> JsonResult {
|
|
|
|
put_cipher(uuid, data, headers, conn, ws)
|
|
|
|
put_cipher(uuid, data, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[put("/ciphers/<uuid>", data = "<data>")]
|
|
|
|
#[put("/ciphers/<uuid>", data = "<data>")]
|
|
|
|
fn put_cipher(uuid: String, data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn put_cipher(uuid: String, data: JsonUpcase<CipherData>, headers: Headers, conn: DbConn, nt: Notify) -> JsonResult {
|
|
|
|
let data: CipherData = data.into_inner().data;
|
|
|
|
let data: CipherData = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
let mut cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
let mut cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
None => err!("Cipher doesn't exist")
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
err!("Cipher is not write accessible")
|
|
|
|
err!("Cipher is not write accessible")
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
update_cipher_from_data(&mut cipher, data, &headers, false, &conn, &ws, UpdateType::SyncCipherUpdate)?;
|
|
|
|
update_cipher_from_data(&mut cipher, data, &headers, false, &conn, &nt, UpdateType::CipherUpdate)?;
|
|
|
|
|
|
|
|
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
}
|
|
|
|
}
|
|
|
@ -381,22 +418,37 @@ struct CollectionsAdminData {
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/collections", data = "<data>")]
|
|
|
|
#[post("/ciphers/<uuid>/collections", data = "<data>")]
|
|
|
|
fn post_collections_update(uuid: String, data: JsonUpcase<CollectionsAdminData>, headers: Headers, conn: DbConn) -> EmptyResult {
|
|
|
|
fn post_collections_update(
|
|
|
|
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: JsonUpcase<CollectionsAdminData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
post_collections_admin(uuid, data, headers, conn)
|
|
|
|
post_collections_admin(uuid, data, headers, conn)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[put("/ciphers/<uuid>/collections-admin", data = "<data>")]
|
|
|
|
#[put("/ciphers/<uuid>/collections-admin", data = "<data>")]
|
|
|
|
fn put_collections_admin(uuid: String, data: JsonUpcase<CollectionsAdminData>, headers: Headers, conn: DbConn) -> EmptyResult {
|
|
|
|
fn put_collections_admin(
|
|
|
|
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: JsonUpcase<CollectionsAdminData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
post_collections_admin(uuid, data, headers, conn)
|
|
|
|
post_collections_admin(uuid, data, headers, conn)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/collections-admin", data = "<data>")]
|
|
|
|
#[post("/ciphers/<uuid>/collections-admin", data = "<data>")]
|
|
|
|
fn post_collections_admin(uuid: String, data: JsonUpcase<CollectionsAdminData>, headers: Headers, conn: DbConn) -> EmptyResult {
|
|
|
|
fn post_collections_admin(
|
|
|
|
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: JsonUpcase<CollectionsAdminData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
let data: CollectionsAdminData = data.into_inner().data;
|
|
|
|
let data: CollectionsAdminData = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
None => err!("Cipher doesn't exist")
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
@ -404,16 +456,22 @@ fn post_collections_admin(uuid: String, data: JsonUpcase<CollectionsAdminData>,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
let posted_collections: HashSet<String> = data.CollectionIds.iter().cloned().collect();
|
|
|
|
let posted_collections: HashSet<String> = data.CollectionIds.iter().cloned().collect();
|
|
|
|
let current_collections: HashSet<String> = cipher.get_collections(&headers.user.uuid ,&conn).iter().cloned().collect();
|
|
|
|
let current_collections: HashSet<String> = cipher
|
|
|
|
|
|
|
|
.get_collections(&headers.user.uuid, &conn)
|
|
|
|
|
|
|
|
.iter()
|
|
|
|
|
|
|
|
.cloned()
|
|
|
|
|
|
|
|
.collect();
|
|
|
|
|
|
|
|
|
|
|
|
for collection in posted_collections.symmetric_difference(¤t_collections) {
|
|
|
|
for collection in posted_collections.symmetric_difference(¤t_collections) {
|
|
|
|
match Collection::find_by_uuid(&collection, &conn) {
|
|
|
|
match Collection::find_by_uuid(&collection, &conn) {
|
|
|
|
None => err!("Invalid collection ID provided"),
|
|
|
|
None => err!("Invalid collection ID provided"),
|
|
|
|
Some(collection) => {
|
|
|
|
Some(collection) => {
|
|
|
|
if collection.is_writable_by_user(&headers.user.uuid, &conn) {
|
|
|
|
if collection.is_writable_by_user(&headers.user.uuid, &conn) {
|
|
|
|
if posted_collections.contains(&collection.uuid) { // Add to collection
|
|
|
|
if posted_collections.contains(&collection.uuid) {
|
|
|
|
|
|
|
|
// Add to collection
|
|
|
|
CollectionCipher::save(&cipher.uuid, &collection.uuid, &conn)?;
|
|
|
|
CollectionCipher::save(&cipher.uuid, &collection.uuid, &conn)?;
|
|
|
|
} else { // Remove from collection
|
|
|
|
} else {
|
|
|
|
|
|
|
|
// Remove from collection
|
|
|
|
CollectionCipher::delete(&cipher.uuid, &collection.uuid, &conn)?;
|
|
|
|
CollectionCipher::delete(&cipher.uuid, &collection.uuid, &conn)?;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
} else {
|
|
|
@ -434,28 +492,45 @@ struct ShareCipherData {
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/share", data = "<data>")]
|
|
|
|
#[post("/ciphers/<uuid>/share", data = "<data>")]
|
|
|
|
fn post_cipher_share(uuid: String, data: JsonUpcase<ShareCipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn post_cipher_share(
|
|
|
|
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: JsonUpcase<ShareCipherData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> JsonResult {
|
|
|
|
let data: ShareCipherData = data.into_inner().data;
|
|
|
|
let data: ShareCipherData = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
share_cipher_by_uuid(&uuid, data, &headers, &conn, &ws)
|
|
|
|
share_cipher_by_uuid(&uuid, data, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[put("/ciphers/<uuid>/share", data = "<data>")]
|
|
|
|
#[put("/ciphers/<uuid>/share", data = "<data>")]
|
|
|
|
fn put_cipher_share(uuid: String, data: JsonUpcase<ShareCipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn put_cipher_share(
|
|
|
|
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: JsonUpcase<ShareCipherData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> JsonResult {
|
|
|
|
let data: ShareCipherData = data.into_inner().data;
|
|
|
|
let data: ShareCipherData = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
share_cipher_by_uuid(&uuid, data, &headers, &conn, &ws)
|
|
|
|
share_cipher_by_uuid(&uuid, data, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[derive(Deserialize)]
|
|
|
|
#[derive(Deserialize)]
|
|
|
|
#[allow(non_snake_case)]
|
|
|
|
#[allow(non_snake_case)]
|
|
|
|
struct ShareSelectedCipherData {
|
|
|
|
struct ShareSelectedCipherData {
|
|
|
|
Ciphers: Vec<CipherData>,
|
|
|
|
Ciphers: Vec<CipherData>,
|
|
|
|
CollectionIds: Vec<String>
|
|
|
|
CollectionIds: Vec<String>,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[put("/ciphers/share", data = "<data>")]
|
|
|
|
#[put("/ciphers/share", data = "<data>")]
|
|
|
|
fn put_cipher_share_seleted(data: JsonUpcase<ShareSelectedCipherData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn put_cipher_share_seleted(
|
|
|
|
|
|
|
|
data: JsonUpcase<ShareSelectedCipherData>,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
let mut data: ShareSelectedCipherData = data.into_inner().data;
|
|
|
|
let mut data: ShareSelectedCipherData = data.into_inner().data;
|
|
|
|
let mut cipher_ids: Vec<String> = Vec::new();
|
|
|
|
let mut cipher_ids: Vec<String> = Vec::new();
|
|
|
|
|
|
|
|
|
|
|
@ -470,7 +545,7 @@ fn put_cipher_share_seleted(data: JsonUpcase<ShareSelectedCipherData>, headers:
|
|
|
|
for cipher in data.Ciphers.iter() {
|
|
|
|
for cipher in data.Ciphers.iter() {
|
|
|
|
match cipher.Id {
|
|
|
|
match cipher.Id {
|
|
|
|
Some(ref id) => cipher_ids.push(id.to_string()),
|
|
|
|
Some(ref id) => cipher_ids.push(id.to_string()),
|
|
|
|
None => err!("Request missing ids field")
|
|
|
|
None => err!("Request missing ids field"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
@ -483,20 +558,25 @@ fn put_cipher_share_seleted(data: JsonUpcase<ShareSelectedCipherData>, headers:
|
|
|
|
while let Some(cipher) = data.Ciphers.pop() {
|
|
|
|
while let Some(cipher) = data.Ciphers.pop() {
|
|
|
|
let mut shared_cipher_data = ShareCipherData {
|
|
|
|
let mut shared_cipher_data = ShareCipherData {
|
|
|
|
Cipher: cipher,
|
|
|
|
Cipher: cipher,
|
|
|
|
CollectionIds: data.CollectionIds.clone()
|
|
|
|
CollectionIds: data.CollectionIds.clone(),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
match shared_cipher_data.Cipher.Id.take() {
|
|
|
|
match shared_cipher_data.Cipher.Id.take() {
|
|
|
|
Some(id) => share_cipher_by_uuid(&id, shared_cipher_data , &headers, &conn, &ws)?,
|
|
|
|
Some(id) => share_cipher_by_uuid(&id, shared_cipher_data, &headers, &conn, &nt)?,
|
|
|
|
None => err!("Request missing ids field")
|
|
|
|
None => err!("Request missing ids field"),
|
|
|
|
|
|
|
|
|
|
|
|
};
|
|
|
|
};
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
Ok(())
|
|
|
|
Ok(())
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
fn share_cipher_by_uuid(uuid: &str, data: ShareCipherData, headers: &Headers, conn: &DbConn, ws: &State<WebSocketUsers>) -> JsonResult {
|
|
|
|
fn share_cipher_by_uuid(
|
|
|
|
|
|
|
|
uuid: &str,
|
|
|
|
|
|
|
|
data: ShareCipherData,
|
|
|
|
|
|
|
|
headers: &Headers,
|
|
|
|
|
|
|
|
conn: &DbConn,
|
|
|
|
|
|
|
|
nt: &Notify,
|
|
|
|
|
|
|
|
) -> JsonResult {
|
|
|
|
let mut cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
let mut cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
Some(cipher) => {
|
|
|
|
Some(cipher) => {
|
|
|
|
if cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
if cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
@ -504,8 +584,8 @@ fn share_cipher_by_uuid(uuid: &str, data: ShareCipherData, headers: &Headers, co
|
|
|
|
} else {
|
|
|
|
} else {
|
|
|
|
err!("Cipher is not write accessible")
|
|
|
|
err!("Cipher is not write accessible")
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
}
|
|
|
|
None => err!("Cipher doesn't exist")
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
match data.Cipher.OrganizationId.clone() {
|
|
|
|
match data.Cipher.OrganizationId.clone() {
|
|
|
@ -525,7 +605,15 @@ fn share_cipher_by_uuid(uuid: &str, data: ShareCipherData, headers: &Headers, co
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
update_cipher_from_data(&mut cipher, data.Cipher, &headers, shared_to_collection, &conn, &ws, UpdateType::SyncCipherUpdate)?;
|
|
|
|
update_cipher_from_data(
|
|
|
|
|
|
|
|
&mut cipher,
|
|
|
|
|
|
|
|
data.Cipher,
|
|
|
|
|
|
|
|
&headers,
|
|
|
|
|
|
|
|
shared_to_collection,
|
|
|
|
|
|
|
|
&conn,
|
|
|
|
|
|
|
|
&nt,
|
|
|
|
|
|
|
|
UpdateType::CipherUpdate,
|
|
|
|
|
|
|
|
)?;
|
|
|
|
|
|
|
|
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
}
|
|
|
|
}
|
|
|
@ -536,7 +624,7 @@ fn share_cipher_by_uuid(uuid: &str, data: ShareCipherData, headers: &Headers, co
|
|
|
|
fn post_attachment(uuid: String, data: Data, content_type: &ContentType, headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
fn post_attachment(uuid: String, data: Data, content_type: &ContentType, headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
None => err!("Cipher doesn't exist")
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
@ -551,7 +639,8 @@ fn post_attachment(uuid: String, data: Data, content_type: &ContentType, headers
|
|
|
|
|
|
|
|
|
|
|
|
let mut attachment_key = None;
|
|
|
|
let mut attachment_key = None;
|
|
|
|
|
|
|
|
|
|
|
|
Multipart::with_body(data.open(), boundary).foreach_entry(|mut field| {
|
|
|
|
Multipart::with_body(data.open(), boundary)
|
|
|
|
|
|
|
|
.foreach_entry(|mut field| {
|
|
|
|
match field.headers.name.as_str() {
|
|
|
|
match field.headers.name.as_str() {
|
|
|
|
"key" => {
|
|
|
|
"key" => {
|
|
|
|
use std::io::Read;
|
|
|
|
use std::io::Read;
|
|
|
@ -559,7 +648,7 @@ fn post_attachment(uuid: String, data: Data, content_type: &ContentType, headers
|
|
|
|
if field.data.read_to_string(&mut key_buffer).is_ok() {
|
|
|
|
if field.data.read_to_string(&mut key_buffer).is_ok() {
|
|
|
|
attachment_key = Some(key_buffer);
|
|
|
|
attachment_key = Some(key_buffer);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
}
|
|
|
|
"data" => {
|
|
|
|
"data" => {
|
|
|
|
// This is provided by the client, don't trust it
|
|
|
|
// This is provided by the client, don't trust it
|
|
|
|
let name = field.headers.filename.expect("No filename provided");
|
|
|
|
let name = field.headers.filename.expect("No filename provided");
|
|
|
@ -567,19 +656,16 @@ fn post_attachment(uuid: String, data: Data, content_type: &ContentType, headers
|
|
|
|
let file_name = HEXLOWER.encode(&crypto::get_random(vec![0; 10]));
|
|
|
|
let file_name = HEXLOWER.encode(&crypto::get_random(vec![0; 10]));
|
|
|
|
let path = base_path.join(&file_name);
|
|
|
|
let path = base_path.join(&file_name);
|
|
|
|
|
|
|
|
|
|
|
|
let size = match field.data.save()
|
|
|
|
let size = match field.data.save().memory_threshold(0).size_limit(None).with_path(path) {
|
|
|
|
.memory_threshold(0)
|
|
|
|
|
|
|
|
.size_limit(None)
|
|
|
|
|
|
|
|
.with_path(path) {
|
|
|
|
|
|
|
|
SaveResult::Full(SavedData::File(_, size)) => size as i32,
|
|
|
|
SaveResult::Full(SavedData::File(_, size)) => size as i32,
|
|
|
|
SaveResult::Full(other) => {
|
|
|
|
SaveResult::Full(other) => {
|
|
|
|
error!("Attachment is not a file: {:?}", other);
|
|
|
|
error!("Attachment is not a file: {:?}", other);
|
|
|
|
return;
|
|
|
|
return;
|
|
|
|
},
|
|
|
|
}
|
|
|
|
SaveResult::Partial(_, reason) => {
|
|
|
|
SaveResult::Partial(_, reason) => {
|
|
|
|
error!("Partial result: {:?}", reason);
|
|
|
|
error!("Partial result: {:?}", reason);
|
|
|
|
return;
|
|
|
|
return;
|
|
|
|
},
|
|
|
|
}
|
|
|
|
SaveResult::Error(e) => {
|
|
|
|
SaveResult::Error(e) => {
|
|
|
|
error!("Error: {:?}", e);
|
|
|
|
error!("Error: {:?}", e);
|
|
|
|
return;
|
|
|
|
return;
|
|
|
@ -589,79 +675,116 @@ fn post_attachment(uuid: String, data: Data, content_type: &ContentType, headers
|
|
|
|
let mut attachment = Attachment::new(file_name, cipher.uuid.clone(), name, size);
|
|
|
|
let mut attachment = Attachment::new(file_name, cipher.uuid.clone(), name, size);
|
|
|
|
attachment.key = attachment_key.clone();
|
|
|
|
attachment.key = attachment_key.clone();
|
|
|
|
attachment.save(&conn).expect("Error saving attachment");
|
|
|
|
attachment.save(&conn).expect("Error saving attachment");
|
|
|
|
},
|
|
|
|
|
|
|
|
_ => error!("Invalid multipart name")
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}).expect("Error processing multipart data");
|
|
|
|
_ => error!("Invalid multipart name"),
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
})
|
|
|
|
|
|
|
|
.expect("Error processing multipart data");
|
|
|
|
|
|
|
|
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
Ok(Json(cipher.to_json(&headers.host, &headers.user.uuid, &conn)))
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/attachment-admin", format = "multipart/form-data", data = "<data>")]
|
|
|
|
#[post("/ciphers/<uuid>/attachment-admin", format = "multipart/form-data", data = "<data>")]
|
|
|
|
fn post_attachment_admin(uuid: String, data: Data, content_type: &ContentType, headers: Headers, conn: DbConn) -> JsonResult {
|
|
|
|
fn post_attachment_admin(
|
|
|
|
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
data: Data,
|
|
|
|
|
|
|
|
content_type: &ContentType,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
) -> JsonResult {
|
|
|
|
post_attachment(uuid, data, content_type, headers, conn)
|
|
|
|
post_attachment(uuid, data, content_type, headers, conn)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/attachment/<attachment_id>/share", format = "multipart/form-data", data = "<data>")]
|
|
|
|
#[post(
|
|
|
|
fn post_attachment_share(uuid: String, attachment_id: String, data: Data, content_type: &ContentType, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> JsonResult {
|
|
|
|
"/ciphers/<uuid>/attachment/<attachment_id>/share",
|
|
|
|
_delete_cipher_attachment_by_id(&uuid, &attachment_id, &headers, &conn, &ws)?;
|
|
|
|
format = "multipart/form-data",
|
|
|
|
|
|
|
|
data = "<data>"
|
|
|
|
|
|
|
|
)]
|
|
|
|
|
|
|
|
fn post_attachment_share(
|
|
|
|
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
attachment_id: String,
|
|
|
|
|
|
|
|
data: Data,
|
|
|
|
|
|
|
|
content_type: &ContentType,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> JsonResult {
|
|
|
|
|
|
|
|
_delete_cipher_attachment_by_id(&uuid, &attachment_id, &headers, &conn, &nt)?;
|
|
|
|
post_attachment(uuid, data, content_type, headers, conn)
|
|
|
|
post_attachment(uuid, data, content_type, headers, conn)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/attachment/<attachment_id>/delete-admin")]
|
|
|
|
#[post("/ciphers/<uuid>/attachment/<attachment_id>/delete-admin")]
|
|
|
|
fn delete_attachment_post_admin(uuid: String, attachment_id: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_attachment_post_admin(
|
|
|
|
delete_attachment(uuid, attachment_id, headers, conn, ws)
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
attachment_id: String,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
|
|
|
|
delete_attachment(uuid, attachment_id, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/attachment/<attachment_id>/delete")]
|
|
|
|
#[post("/ciphers/<uuid>/attachment/<attachment_id>/delete")]
|
|
|
|
fn delete_attachment_post(uuid: String, attachment_id: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_attachment_post(
|
|
|
|
delete_attachment(uuid, attachment_id, headers, conn, ws)
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
attachment_id: String,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
|
|
|
|
delete_attachment(uuid, attachment_id, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[delete("/ciphers/<uuid>/attachment/<attachment_id>")]
|
|
|
|
#[delete("/ciphers/<uuid>/attachment/<attachment_id>")]
|
|
|
|
fn delete_attachment(uuid: String, attachment_id: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_attachment(uuid: String, attachment_id: String, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
_delete_cipher_attachment_by_id(&uuid, &attachment_id, &headers, &conn, &ws)
|
|
|
|
_delete_cipher_attachment_by_id(&uuid, &attachment_id, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[delete("/ciphers/<uuid>/attachment/<attachment_id>/admin")]
|
|
|
|
#[delete("/ciphers/<uuid>/attachment/<attachment_id>/admin")]
|
|
|
|
fn delete_attachment_admin(uuid: String, attachment_id: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_attachment_admin(
|
|
|
|
_delete_cipher_attachment_by_id(&uuid, &attachment_id, &headers, &conn, &ws)
|
|
|
|
uuid: String,
|
|
|
|
|
|
|
|
attachment_id: String,
|
|
|
|
|
|
|
|
headers: Headers,
|
|
|
|
|
|
|
|
conn: DbConn,
|
|
|
|
|
|
|
|
nt: Notify,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
|
|
|
|
_delete_cipher_attachment_by_id(&uuid, &attachment_id, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/delete")]
|
|
|
|
#[post("/ciphers/<uuid>/delete")]
|
|
|
|
fn delete_cipher_post(uuid: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_cipher_post(uuid: String, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &ws)
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/<uuid>/delete-admin")]
|
|
|
|
#[post("/ciphers/<uuid>/delete-admin")]
|
|
|
|
fn delete_cipher_post_admin(uuid: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_cipher_post_admin(uuid: String, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &ws)
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[delete("/ciphers/<uuid>")]
|
|
|
|
#[delete("/ciphers/<uuid>")]
|
|
|
|
fn delete_cipher(uuid: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_cipher(uuid: String, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &ws)
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[delete("/ciphers/<uuid>/admin")]
|
|
|
|
#[delete("/ciphers/<uuid>/admin")]
|
|
|
|
fn delete_cipher_admin(uuid: String, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_cipher_admin(uuid: String, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &ws)
|
|
|
|
_delete_cipher_by_uuid(&uuid, &headers, &conn, &nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[delete("/ciphers", data = "<data>")]
|
|
|
|
#[delete("/ciphers", data = "<data>")]
|
|
|
|
fn delete_cipher_selected(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_cipher_selected(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
let data: Value = data.into_inner().data;
|
|
|
|
let data: Value = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
let uuids = match data.get("Ids") {
|
|
|
|
let uuids = match data.get("Ids") {
|
|
|
|
Some(ids) => match ids.as_array() {
|
|
|
|
Some(ids) => match ids.as_array() {
|
|
|
|
Some(ids) => ids.iter().filter_map(Value::as_str),
|
|
|
|
Some(ids) => ids.iter().filter_map(Value::as_str),
|
|
|
|
None => err!("Posted ids field is not an array")
|
|
|
|
None => err!("Posted ids field is not an array"),
|
|
|
|
},
|
|
|
|
},
|
|
|
|
None => err!("Request missing ids field")
|
|
|
|
None => err!("Request missing ids field"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
for uuid in uuids {
|
|
|
|
for uuid in uuids {
|
|
|
|
if let error @ Err(_) = _delete_cipher_by_uuid(uuid, &headers, &conn, &ws) {
|
|
|
|
if let error @ Err(_) = _delete_cipher_by_uuid(uuid, &headers, &conn, &nt) {
|
|
|
|
return error;
|
|
|
|
return error;
|
|
|
|
};
|
|
|
|
};
|
|
|
|
}
|
|
|
|
}
|
|
|
@ -670,46 +793,42 @@ fn delete_cipher_selected(data: JsonUpcase<Value>, headers: Headers, conn: DbCon
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/delete", data = "<data>")]
|
|
|
|
#[post("/ciphers/delete", data = "<data>")]
|
|
|
|
fn delete_cipher_selected_post(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_cipher_selected_post(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
delete_cipher_selected(data, headers, conn, ws)
|
|
|
|
delete_cipher_selected(data, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/move", data = "<data>")]
|
|
|
|
#[post("/ciphers/move", data = "<data>")]
|
|
|
|
fn move_cipher_selected(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn move_cipher_selected(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
let data = data.into_inner().data;
|
|
|
|
let data = data.into_inner().data;
|
|
|
|
|
|
|
|
|
|
|
|
let folder_id = match data.get("FolderId") {
|
|
|
|
let folder_id = match data.get("FolderId") {
|
|
|
|
Some(folder_id) => {
|
|
|
|
Some(folder_id) => match folder_id.as_str() {
|
|
|
|
match folder_id.as_str() {
|
|
|
|
Some(folder_id) => match Folder::find_by_uuid(folder_id, &conn) {
|
|
|
|
Some(folder_id) => {
|
|
|
|
|
|
|
|
match Folder::find_by_uuid(folder_id, &conn) {
|
|
|
|
|
|
|
|
Some(folder) => {
|
|
|
|
Some(folder) => {
|
|
|
|
if folder.user_uuid != headers.user.uuid {
|
|
|
|
if folder.user_uuid != headers.user.uuid {
|
|
|
|
err!("Folder is not owned by user")
|
|
|
|
err!("Folder is not owned by user")
|
|
|
|
}
|
|
|
|
}
|
|
|
|
Some(folder.uuid)
|
|
|
|
Some(folder.uuid)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
None => err!("Folder doesn't exist")
|
|
|
|
None => err!("Folder doesn't exist"),
|
|
|
|
}
|
|
|
|
},
|
|
|
|
}
|
|
|
|
None => err!("Folder id provided in wrong format"),
|
|
|
|
None => err!("Folder id provided in wrong format")
|
|
|
|
},
|
|
|
|
}
|
|
|
|
None => None,
|
|
|
|
}
|
|
|
|
|
|
|
|
None => None
|
|
|
|
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
let uuids = match data.get("Ids") {
|
|
|
|
let uuids = match data.get("Ids") {
|
|
|
|
Some(ids) => match ids.as_array() {
|
|
|
|
Some(ids) => match ids.as_array() {
|
|
|
|
Some(ids) => ids.iter().filter_map(Value::as_str),
|
|
|
|
Some(ids) => ids.iter().filter_map(Value::as_str),
|
|
|
|
None => err!("Posted ids field is not an array")
|
|
|
|
None => err!("Posted ids field is not an array"),
|
|
|
|
},
|
|
|
|
},
|
|
|
|
None => err!("Request missing ids field")
|
|
|
|
None => err!("Request missing ids field"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
for uuid in uuids {
|
|
|
|
for uuid in uuids {
|
|
|
|
let mut cipher = match Cipher::find_by_uuid(uuid, &conn) {
|
|
|
|
let mut cipher = match Cipher::find_by_uuid(uuid, &conn) {
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
None => err!("Cipher doesn't exist")
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if !cipher.is_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
if !cipher.is_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
@ -720,19 +839,19 @@ fn move_cipher_selected(data: JsonUpcase<Value>, headers: Headers, conn: DbConn,
|
|
|
|
cipher.move_to_folder(folder_id.clone(), &headers.user.uuid, &conn)?;
|
|
|
|
cipher.move_to_folder(folder_id.clone(), &headers.user.uuid, &conn)?;
|
|
|
|
cipher.save(&conn)?;
|
|
|
|
cipher.save(&conn)?;
|
|
|
|
|
|
|
|
|
|
|
|
ws.send_cipher_update(UpdateType::SyncCipherUpdate, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
nt.send_cipher_update(UpdateType::CipherUpdate, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
Ok(())
|
|
|
|
Ok(())
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[put("/ciphers/move", data = "<data>")]
|
|
|
|
#[put("/ciphers/move", data = "<data>")]
|
|
|
|
fn move_cipher_selected_put(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn move_cipher_selected_put(data: JsonUpcase<Value>, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
move_cipher_selected(data, headers, conn, ws)
|
|
|
|
move_cipher_selected(data, headers, conn, nt)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
#[post("/ciphers/purge", data = "<data>")]
|
|
|
|
#[post("/ciphers/purge", data = "<data>")]
|
|
|
|
fn delete_all(data: JsonUpcase<PasswordData>, headers: Headers, conn: DbConn, ws: State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn delete_all(data: JsonUpcase<PasswordData>, headers: Headers, conn: DbConn, nt: Notify) -> EmptyResult {
|
|
|
|
let data: PasswordData = data.into_inner().data;
|
|
|
|
let data: PasswordData = data.into_inner().data;
|
|
|
|
let password_hash = data.MasterPasswordHash;
|
|
|
|
let password_hash = data.MasterPasswordHash;
|
|
|
|
|
|
|
|
|
|
|
@ -745,19 +864,19 @@ fn delete_all(data: JsonUpcase<PasswordData>, headers: Headers, conn: DbConn, ws
|
|
|
|
// Delete ciphers and their attachments
|
|
|
|
// Delete ciphers and their attachments
|
|
|
|
for cipher in Cipher::find_owned_by_user(&user.uuid, &conn) {
|
|
|
|
for cipher in Cipher::find_owned_by_user(&user.uuid, &conn) {
|
|
|
|
cipher.delete(&conn)?;
|
|
|
|
cipher.delete(&conn)?;
|
|
|
|
ws.send_cipher_update(UpdateType::SyncCipherDelete, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
nt.send_cipher_update(UpdateType::CipherDelete, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
// Delete folders
|
|
|
|
// Delete folders
|
|
|
|
for f in Folder::find_by_user(&user.uuid, &conn) {
|
|
|
|
for f in Folder::find_by_user(&user.uuid, &conn) {
|
|
|
|
f.delete(&conn)?;
|
|
|
|
f.delete(&conn)?;
|
|
|
|
ws.send_folder_update(UpdateType::SyncFolderCreate, &f);
|
|
|
|
nt.send_folder_update(UpdateType::FolderCreate, &f);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
Ok(())
|
|
|
|
Ok(())
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
fn _delete_cipher_by_uuid(uuid: &str, headers: &Headers, conn: &DbConn, ws: &State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn _delete_cipher_by_uuid(uuid: &str, headers: &Headers, conn: &DbConn, nt: &Notify) -> EmptyResult {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
@ -768,14 +887,20 @@ fn _delete_cipher_by_uuid(uuid: &str, headers: &Headers, conn: &DbConn, ws: &Sta
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
cipher.delete(&conn)?;
|
|
|
|
cipher.delete(&conn)?;
|
|
|
|
ws.send_cipher_update(UpdateType::SyncCipherDelete, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
nt.send_cipher_update(UpdateType::CipherDelete, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
Ok(())
|
|
|
|
Ok(())
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
fn _delete_cipher_attachment_by_id(uuid: &str, attachment_id: &str, headers: &Headers, conn: &DbConn, ws: &State<WebSocketUsers>) -> EmptyResult {
|
|
|
|
fn _delete_cipher_attachment_by_id(
|
|
|
|
|
|
|
|
uuid: &str,
|
|
|
|
|
|
|
|
attachment_id: &str,
|
|
|
|
|
|
|
|
headers: &Headers,
|
|
|
|
|
|
|
|
conn: &DbConn,
|
|
|
|
|
|
|
|
nt: &Notify,
|
|
|
|
|
|
|
|
) -> EmptyResult {
|
|
|
|
let attachment = match Attachment::find_by_id(&attachment_id, &conn) {
|
|
|
|
let attachment = match Attachment::find_by_id(&attachment_id, &conn) {
|
|
|
|
Some(attachment) => attachment,
|
|
|
|
Some(attachment) => attachment,
|
|
|
|
None => err!("Attachment doesn't exist")
|
|
|
|
None => err!("Attachment doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if attachment.cipher_uuid != uuid {
|
|
|
|
if attachment.cipher_uuid != uuid {
|
|
|
@ -784,7 +909,7 @@ fn _delete_cipher_attachment_by_id(uuid: &str, attachment_id: &str, headers: &He
|
|
|
|
|
|
|
|
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
let cipher = match Cipher::find_by_uuid(&uuid, &conn) {
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
Some(cipher) => cipher,
|
|
|
|
None => err!("Cipher doesn't exist")
|
|
|
|
None => err!("Cipher doesn't exist"),
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
|
if !cipher.is_write_accessible_to_user(&headers.user.uuid, &conn) {
|
|
|
@ -793,6 +918,6 @@ fn _delete_cipher_attachment_by_id(uuid: &str, attachment_id: &str, headers: &He
|
|
|
|
|
|
|
|
|
|
|
|
// Delete attachment
|
|
|
|
// Delete attachment
|
|
|
|
attachment.delete(&conn)?;
|
|
|
|
attachment.delete(&conn)?;
|
|
|
|
ws.send_cipher_update(UpdateType::SyncCipherDelete, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
nt.send_cipher_update(UpdateType::CipherDelete, &cipher, &cipher.update_users_revision(&conn));
|
|
|
|
Ok(())
|
|
|
|
Ok(())
|
|
|
|
}
|
|
|
|
}
|
|
|
|