| /* |
| * Copyright (C) 2022 Savoir-faire Linux Inc. |
| * |
| * This program is free software; you can redistribute it and/or modify |
| * it under the terms of the GNU Affero General Public License as |
| * published by the Free Software Foundation; either version 3 of the |
| * License, or (at your option) any later version. |
| * |
| * This program is distributed in the hope that it will be useful, |
| * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| * GNU Affero General Public License for more details. |
| * |
| * You should have received a copy of the GNU Affero General Public |
| * License along with this program. If not, see |
| * <https://www.gnu.org/licenses/>. |
| */ |
| import argon2 from 'argon2'; |
| import { Router } from 'express'; |
| import asyncHandler from 'express-async-handler'; |
| import { ParamsDictionary, Request } from 'express-serve-static-core'; |
| import { AccessToken, AdminCredentials, HttpStatusCode } from 'jami-web-common'; |
| import { Container } from 'typedi'; |
| |
| import { checkAdminSetup } from '../middleware/setup.js'; |
| import { AdminAccount } from '../storage/admin-account.js'; |
| import { signJwt } from '../utils/jwt.js'; |
| |
| const adminAccount = Container.get(AdminAccount); |
| |
| export const setupRouter = Router(); |
| |
| setupRouter.get('/check', (_req, res) => { |
| const isSetupComplete = adminAccount.get() !== undefined; |
| res.send({ isSetupComplete }); |
| }); |
| |
| setupRouter.post( |
| '/admin/create', |
| asyncHandler(async (req: Request<ParamsDictionary, string, Partial<AdminCredentials>>, res) => { |
| const { password } = req.body; |
| if (password === undefined) { |
| res.status(HttpStatusCode.BadRequest).send('Missing password in body'); |
| return; |
| } |
| |
| if (password === '') { |
| res.status(HttpStatusCode.BadRequest).send('Password may not be empty'); |
| return; |
| } |
| |
| const isAdminCreated = adminAccount.get() !== undefined; |
| if (isAdminCreated) { |
| res.status(HttpStatusCode.Conflict).send('Admin already exists'); |
| return; |
| } |
| |
| const hashedPassword = await argon2.hash(password, { type: argon2.argon2id }); |
| |
| adminAccount.set(hashedPassword); |
| await adminAccount.save(); |
| |
| res.sendStatus(HttpStatusCode.Created); |
| }) |
| ); |
| |
| // Every request handler after this line will be submitted to this middleware |
| // in order to ensure that the admin account is set up before proceeding with |
| // setup-related requests |
| setupRouter.use(checkAdminSetup); |
| |
| setupRouter.post( |
| '/admin/login', |
| asyncHandler(async (req: Request<ParamsDictionary, AccessToken | string, Partial<AdminCredentials>>, res) => { |
| const { password } = req.body; |
| if (password === undefined) { |
| res.status(HttpStatusCode.BadRequest).send('Missing password in body'); |
| return; |
| } |
| |
| const hashedPassword = adminAccount.get(); |
| if (hashedPassword === undefined) { |
| res.status(HttpStatusCode.InternalServerError).send('Admin password not found'); |
| return; |
| } |
| |
| const isPasswordVerified = await argon2.verify(hashedPassword, password); |
| if (!isPasswordVerified) { |
| res.status(HttpStatusCode.Forbidden).send('Incorrect password'); |
| return; |
| } |
| |
| const jwt = await signJwt('admin'); |
| res.send({ accessToken: jwt }); |
| }) |
| ); |