|
|
|
@ -29,7 +29,7 @@ fn login(connect_data: Form<ConnectData>, device_type: DeviceType, conn: DbConn)
|
|
|
|
|
|
|
|
|
|
fn _refresh_login(data: &ConnectData, _device_type: DeviceType, conn: DbConn) -> JsonResult {
|
|
|
|
|
// Extract token
|
|
|
|
|
let token = data.get("refresh_token").unwrap();
|
|
|
|
|
let token = data.get("refresh_token");
|
|
|
|
|
|
|
|
|
|
// Get device by refresh token
|
|
|
|
|
let mut device = match Device::find_by_refresh_token(token, &conn) {
|
|
|
|
@ -56,20 +56,20 @@ fn _refresh_login(data: &ConnectData, _device_type: DeviceType, conn: DbConn) ->
|
|
|
|
|
|
|
|
|
|
fn _password_login(data: &ConnectData, device_type: DeviceType, conn: DbConn) -> JsonResult {
|
|
|
|
|
// Validate scope
|
|
|
|
|
let scope = data.get("scope").unwrap();
|
|
|
|
|
let scope = data.get("scope");
|
|
|
|
|
if scope != "api offline_access" {
|
|
|
|
|
err!("Scope not supported")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Get the user
|
|
|
|
|
let username = data.get("username").unwrap();
|
|
|
|
|
let username = data.get("username");
|
|
|
|
|
let user = match User::find_by_mail(username, &conn) {
|
|
|
|
|
Some(user) => user,
|
|
|
|
|
None => err!("Username or password is incorrect. Try again.")
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
// Check password
|
|
|
|
|
let password = data.get("password").unwrap();
|
|
|
|
|
let password = data.get("password");
|
|
|
|
|
if !user.check_valid_password(password) {
|
|
|
|
|
err!("Username or password is incorrect. Try again.")
|
|
|
|
|
}
|
|
|
|
@ -77,14 +77,13 @@ fn _password_login(data: &ConnectData, device_type: DeviceType, conn: DbConn) ->
|
|
|
|
|
// Let's only use the header and ignore the 'devicetype' parameter
|
|
|
|
|
let device_type_num = device_type.0;
|
|
|
|
|
|
|
|
|
|
let (device_id, device_name) = match data.is_device {
|
|
|
|
|
false => { (format!("web-{}", user.uuid), String::from("web")) }
|
|
|
|
|
true => {
|
|
|
|
|
(
|
|
|
|
|
data.get("deviceidentifier").unwrap().clone(),
|
|
|
|
|
data.get("devicename").unwrap().clone(),
|
|
|
|
|
)
|
|
|
|
|
}
|
|
|
|
|
let (device_id, device_name) = if data.is_device {
|
|
|
|
|
(
|
|
|
|
|
data.get("deviceidentifier").clone(),
|
|
|
|
|
data.get("devicename").clone(),
|
|
|
|
|
)
|
|
|
|
|
} else {
|
|
|
|
|
(format!("web-{}", user.uuid), String::from("web"))
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
// Find device or create new
|
|
|
|
@ -105,8 +104,8 @@ fn _password_login(data: &ConnectData, device_type: DeviceType, conn: DbConn) ->
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
let twofactor_token = if user.requires_twofactor() {
|
|
|
|
|
let twofactor_provider = util::parse_option_string(data.get("twoFactorProvider")).unwrap_or(0);
|
|
|
|
|
let twofactor_code = match data.get("twoFactorToken") {
|
|
|
|
|
let twofactor_provider = util::parse_option_string(data.get_opt("twoFactorProvider")).unwrap_or(0);
|
|
|
|
|
let twofactor_code = match data.get_opt("twoFactorToken") {
|
|
|
|
|
Some(code) => code,
|
|
|
|
|
None => err_json!(_json_err_twofactor())
|
|
|
|
|
};
|
|
|
|
@ -122,7 +121,7 @@ fn _password_login(data: &ConnectData, device_type: DeviceType, conn: DbConn) ->
|
|
|
|
|
err_json!(_json_err_twofactor())
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if util::parse_option_string(data.get("twoFactorRemember")).unwrap_or(0) == 1 {
|
|
|
|
|
if util::parse_option_string(data.get_opt("twoFactorRemember")).unwrap_or(0) == 1 {
|
|
|
|
|
device.refresh_twofactor_remember();
|
|
|
|
|
device.twofactor_remember.clone()
|
|
|
|
|
} else {
|
|
|
|
@ -174,39 +173,7 @@ fn _json_err_twofactor() -> Value {
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
ConnectData {
|
|
|
|
|
grant_type: Password,
|
|
|
|
|
is_device: false,
|
|
|
|
|
data: {
|
|
|
|
|
"scope": "api offline_access",
|
|
|
|
|
"client_id": "web",
|
|
|
|
|
"grant_type": "password",
|
|
|
|
|
"username": "dani@mail",
|
|
|
|
|
"password": "8IuV1sJ94tPjyYIK+E+PTjblzjm4W6C4N5wqM0KKsSg="
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
RETURNS "TwoFactorToken": "11122233333444555666777888999"
|
|
|
|
|
|
|
|
|
|
Next login
|
|
|
|
|
ConnectData {
|
|
|
|
|
grant_type: Password,
|
|
|
|
|
is_device: false,
|
|
|
|
|
data: {
|
|
|
|
|
"scope": "api offline_access",
|
|
|
|
|
"username": "dani@mail",
|
|
|
|
|
"client_id": "web",
|
|
|
|
|
"twofactorprovider": "5",
|
|
|
|
|
"twofactortoken": "11122233333444555666777888999",
|
|
|
|
|
"grant_type": "password",
|
|
|
|
|
"twofactorremember": "0",
|
|
|
|
|
"password": "8IuV1sJ94tPjyYIK+E+PTjblzjm4W6C4N5wqM0KKsSg="
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
#[derive(Clone, Copy)]
|
|
|
|
|
struct DeviceType(i32);
|
|
|
|
|
|
|
|
|
|
impl<'a, 'r> FromRequest<'a, 'r> for DeviceType {
|
|
|
|
@ -233,7 +200,11 @@ struct ConnectData {
|
|
|
|
|
enum GrantType { RefreshToken, Password }
|
|
|
|
|
|
|
|
|
|
impl ConnectData {
|
|
|
|
|
fn get(&self, key: &str) -> Option<&String> {
|
|
|
|
|
fn get(&self, key: &str) -> &String {
|
|
|
|
|
&self.data[&key.to_lowercase()]
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
fn get_opt(&self, key: &str) -> Option<&String> {
|
|
|
|
|
self.data.get(&key.to_lowercase())
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
@ -252,7 +223,7 @@ impl<'f> FromForm<'f> for ConnectData {
|
|
|
|
|
for (key, value) in items {
|
|
|
|
|
match (key.url_decode(), value.url_decode()) {
|
|
|
|
|
(Ok(key), Ok(value)) => data.insert(key.to_lowercase(), value),
|
|
|
|
|
_ => return Err(format!("Error decoding key or value")),
|
|
|
|
|
_ => return Err("Error decoding key or value".to_string()),
|
|
|
|
|
};
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
@ -266,13 +237,13 @@ impl<'f> FromForm<'f> for ConnectData {
|
|
|
|
|
Some("password") => {
|
|
|
|
|
check_values(&data, &VALUES_PASSWORD)?;
|
|
|
|
|
|
|
|
|
|
let is_device = match data.get("client_id").unwrap().as_ref() {
|
|
|
|
|
let is_device = match data["client_id"].as_ref() {
|
|
|
|
|
"browser" | "mobile" => check_values(&data, &VALUES_DEVICE)?,
|
|
|
|
|
_ => false
|
|
|
|
|
};
|
|
|
|
|
(GrantType::Password, is_device)
|
|
|
|
|
}
|
|
|
|
|
_ => return Err(format!("Grant type not supported"))
|
|
|
|
|
_ => return Err("Grant type not supported".to_string())
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
Ok(ConnectData { grant_type, is_device, data })
|
|
|
|
|