Mirrors/Teknik
1
0
Fork 0
mirror of https://git.teknik.io/Teknikode/Teknik.git synced 2023-08-02 14:16:22 +02:00
Code Releases Activity

- Added account status of either active or banned.

Browse Source 
- Cleaned up admin pages.
- Added Type and Status to user's profile page.
- Banned users cannot login, or associate API calls with their account
This commit is contained in:
Uncled1023 2018-01-09 22:06:43 -08:00
parent e3e5a60de7
commit 51b4260f3c
30 changed files with 476 additions and 162 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Teknik/Areas/Admin/AdminAreaRegistration.cs
View File

@ -1,4 +1,4 @@
using System.Collections.Generic;
using System.Collections.Generic;
using System.Web.Mvc;
using System.Web.Optimization;
using Teknik.Configuration;
@ -28,11 +28,11 @@ namespace Teknik.Areas.Admin
new[] { typeof(Controllers.AdminController).Namespace }
);
context.MapSubdomainRoute(
"Admin.Search", // Route name
"Admin.UserSearch", // Route name
new List<string>() { "admin" }, // Subdomains
new List<string>() { config.Host },
"Search/Users", // URL with parameters
new { controller = "Admin", action = "Search" }, // Parameter defaults
new { controller = "Admin", action = "UserSearch" }, // Parameter defaults
new[] { typeof(Controllers.AdminController).Namespace }
);
context.MapSubdomainRoute(
@ -61,8 +61,8 @@ namespace Teknik.Areas.Admin
);
// Register Script Bundles
BundleTable.Bundles.Add(new CdnScriptBundle("~/bundles/Search", config.CdnHost).Include(
"~/Areas/Admin/Scripts/Search.js"));
BundleTable.Bundles.Add(new CdnScriptBundle("~/bundles/UserSearch", config.CdnHost).Include(
"~/Areas/Admin/Scripts/UserSearch.js"));
// Register Script Bundles
BundleTable.Bundles.Add(new CdnScriptBundle("~/bundles/UploadSearch", config.CdnHost).Include(

28
Teknik/Areas/Admin/Controllers/AdminController.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
@ -27,9 +27,9 @@ namespace Teknik.Areas.Admin.Controllers
}
[HttpGet]
public ActionResult Search()
public ActionResult UserSearch()
{
SearchViewModel model = new SearchViewModel();
UserSearchViewModel model = new UserSearchViewModel();
return View(model);
}
@ -42,6 +42,7 @@ namespace Teknik.Areas.Admin.Controllers
UserInfoViewModel model = new UserInfoViewModel();
model.Username = user.Username;
model.AccountType = user.AccountType;
model.AccountStatus = user.AccountStatus;
return View(model);
}
return Redirect(Url.SubRouteUrl("error", "Error.Http404"));
@ -55,9 +56,9 @@ namespace Teknik.Areas.Admin.Controllers
}
[HttpPost]
public ActionResult GetSearchResults(string query)
public ActionResult GetUserSearchResults(string query)
{
List<SearchResultViewModel> models = new List<SearchResultViewModel>();
List<UserResultViewModel> models = new List<UserResultViewModel>();
var results = db.Users.Where(u => u.Username.Contains(query)).ToList();
if (results != null)
@ -66,7 +67,7 @@ namespace Teknik.Areas.Admin.Controllers
{
try
{
SearchResultViewModel model = new SearchResultViewModel();
UserResultViewModel model = new UserResultViewModel();
model.Username = user.Username;
if (Config.EmailConfig.Enabled)
{
@ -83,7 +84,7 @@ namespace Teknik.Areas.Admin.Controllers
}
}
return PartialView("~/Areas/Admin/Views/Admin/SearchResults.cshtml", models);
return PartialView("~/Areas/Admin/Views/Admin/UserResults.cshtml", models);
}
[HttpPost]
@ -118,5 +119,18 @@ namespace Teknik.Areas.Admin.Controllers
}
return Redirect(Url.SubRouteUrl("error", "Error.Http404"));
}
[HttpPost]
[ValidateAntiForgeryToken]
public ActionResult EditUserAccountStatus(string username, AccountStatus accountStatus)
{
if (UserHelper.UserExists(db, username))
{
// Edit the user's account type
UserHelper.EditAccountStatus(db, Config, username, accountStatus);
return Json(new { result = new { success = true } });
}
return Redirect(Url.SubRouteUrl("error", "Error.Http404"));
}
}
}

25
Teknik/Areas/Admin/Scripts/UserInfo.js
View File

@ -1,4 +1,4 @@
$(function () {
$(function () {
$('.userAccountType').on('change', function () {
var selected = $(this).find("option:selected").val();
@ -23,4 +23,27 @@
});
});
$('.userAccountStatus').on('change', function () {
var selected = $(this).find("option:selected").val();
$.ajax({
type: "POST",
url: editAccountStatus,
data: AddAntiForgeryToken({ username: username, accountStatus: selected }),
success: function (html) {
if (html) {
if (html.error) {
$("#top_msg").css('display', 'inline', 'important');
$("#top_msg").html('<div class="alert alert-danger alert-dismissable"><button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>' + html.error.message + '</div>');
}
else {
$("#top_msg").css('display', 'none');
$("#top_msg").html('');
alert('Successfully changed the account status for \'' + username + '\' to: ' + selected);
}
}
}
});
});
});

4
Teknik/Areas/Admin/Scripts/Search.js → Teknik/Areas/Admin/Scripts/UserSearch.js
View File

@ -1,9 +1,9 @@
$(document).ready(function () {
$(document).ready(function () {
$('#Query').on('input', function (e) {
query = $(this).val();
$.ajax({
type: "POST",
url: searchResultsURL,
url: userSearchResultsURL,
data: { query: query },
success: function (html) {
if (html) {

3
Teknik/Areas/Admin/ViewModels/UserInfoViewModel.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
@ -11,5 +11,6 @@ namespace Teknik.Areas.Admin.ViewModels
{
public string Username { get; set; }
public AccountType AccountType { get; set; }
public AccountStatus AccountStatus { get; set; }
}
}

4
Teknik/Areas/Admin/ViewModels/SearchResultViewModel.cs → Teknik/Areas/Admin/ViewModels/UserResultViewModel.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
@ -6,7 +6,7 @@ using Teknik.ViewModels;
namespace Teknik.Areas.Admin.ViewModels
{
public class SearchResultViewModel : ViewModelBase
public class UserResultViewModel : ViewModelBase
{
public string Username { get; set; }

4
Teknik/Areas/Admin/ViewModels/SearchViewModel.cs → Teknik/Areas/Admin/ViewModels/UserSearchViewModel.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
@ -6,7 +6,7 @@ using Teknik.ViewModels;
namespace Teknik.Areas.Admin.ViewModels
{
public class SearchViewModel : ViewModelBase
public class UserSearchViewModel : ViewModelBase
{
}
}

4
Teknik/Areas/Admin/Views/Admin/Dashboard.cshtml
View File

@ -1,11 +1,11 @@
@model Teknik.Areas.Admin.ViewModels.DashboardViewModel
@model Teknik.Areas.Admin.ViewModels.DashboardViewModel
@using Teknik.Utilities
<div class="container">
<div class="row">
<div class="col-sm-10 col-sm-offset-1">
<a href="@Url.SubRouteUrl("admin", "Admin.Search")">Search</a>
<a href="@Url.SubRouteUrl("admin", "Admin.UserSearch")">User Search</a>
</div>
</div>
<div class="row">

38
Teknik/Areas/Admin/Views/Admin/UserInfo.cshtml
View File

@ -1,10 +1,11 @@
@model Teknik.Areas.Admin.ViewModels.UserInfoViewModel
@model Teknik.Areas.Admin.ViewModels.UserInfoViewModel
@using Teknik.Utilities
<script>
// We need to define the action URLs for the script
var editAccountType = '@Url.SubRouteUrl("admin", "Admin.Action", new { action = "EditUserAccountType" })';
var editAccountStatus = '@Url.SubRouteUrl("admin", "Admin.Action", new { action = "EditUserAccountStatus" })';
var username = '@Model.Username';
</script>
@ -12,18 +13,41 @@
<div class="container">
<div class="row">
<div class="col-sm-10 col-sm-offset-1">
<div class="col-sm-2 col-sm-offset-1">
Username:
</div>
<div class="col-sm-8">
<a href="@Url.SubRouteUrl("user", "User.ViewProfile", new { username = Model.Username })">@Model.Username</a>
</div>
</div>
<br />
<div class="row">
<div class="col-sm-4 col-sm-offset-1">Account Type:
<div class="col-sm-2 col-sm-offset-1">
Account Type:
</div>
<div class="col-sm-8">
<select class="userAccountType">
@{
foreach (AccountType value in Enum.GetValues(typeof(AccountType)))
{
<option @(value == Model.AccountType ? "selected" : string.Empty)>@value.ToString()</option>
}
foreach (AccountType value in Enum.GetValues(typeof(AccountType)))
{
<option @(value == Model.AccountType ? "selected" : string.Empty)>@value.ToString()</option>
}
}
</select>
</div>
</div>
<br />
<div class="row">
<div class="col-sm-2 col-sm-offset-1">
Account Status:
</div>
<div class="col-sm-8">
<select class="userAccountStatus">
@{
foreach (AccountStatus value in Enum.GetValues(typeof(AccountStatus)))
{
<option @(value == Model.AccountStatus ? "selected" : string.Empty)>@value.ToString()</option>
}
}
</select>
</div>

2
Teknik/Areas/Admin/Views/Admin/SearchResult.cshtml → Teknik/Areas/Admin/Views/Admin/UserResult.cshtml
View File

@ -1,4 +1,4 @@
@model Teknik.Areas.Admin.ViewModels.SearchResultViewModel
@model Teknik.Areas.Admin.ViewModels.UserResultViewModel
@using Teknik.Utilities

4
Teknik/Areas/Admin/Views/Admin/SearchResults.cshtml → Teknik/Areas/Admin/Views/Admin/UserResults.cshtml
View File

@ -1,4 +1,4 @@
@model List<Teknik.Areas.Admin.ViewModels.SearchResultViewModel>
@model List<Teknik.Areas.Admin.ViewModels.UserResultViewModel>
@if (Model.Any())
{
@ -10,7 +10,7 @@
</div>
foreach (var post in Model)
{
@Html.Partial("SearchResult", post)
@Html.Partial("UserResult", post)
}
}
else

6
Teknik/Areas/Admin/Views/Admin/Search.cshtml → Teknik/Areas/Admin/Views/Admin/UserSearch.cshtml
View File

@ -1,13 +1,13 @@
@model Teknik.Areas.Admin.ViewModels.SearchViewModel
@model Teknik.Areas.Admin.ViewModels.UserSearchViewModel
@using Teknik.Utilities
<script>
// We need to define the action URLs for the script
var searchResultsURL = '@Url.SubRouteUrl("admin", "Admin.Action", new { action = "GetSearchResults" })';
var userSearchResultsURL = '@Url.SubRouteUrl("admin", "Admin.Action", new { action = "GetUserSearchResults" })';
</script>
@Scripts.Render("~/bundles/Search")
@Scripts.Render("~/bundles/UserSearch")
<div class="container">
<div class="row">

2
Teknik/Areas/Error/Controllers/ErrorController.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Net.Mail;

2
Teknik/Areas/Error/ErrorAreaRegistration.cs
View File

@ -1,4 +1,4 @@
using System.Collections.Generic;
using System.Collections.Generic;
using System.Web.Mvc;
using Teknik.Configuration;

13
Teknik/Areas/User/Controllers/UserController.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Data.Entity;
using System.Linq;
@ -69,6 +69,8 @@ namespace Teknik.Areas.Users.Controllers
}
model.JoinDate = user.JoinDate;
model.LastSeen = UserHelper.GetLastAccountActivity(db, Config, user);
model.AccountType = user.AccountType;
model.AccountStatus = user.AccountStatus;
model.UserSettings = user.UserSettings;
model.SecuritySettings = user.SecuritySettings;
@ -197,6 +199,15 @@ namespace Teknik.Areas.Users.Controllers
db.Entry(user).State = EntityState.Modified;
db.SaveChanges();
// Make sure they aren't banned or anything
if (user.AccountStatus == AccountStatus.Banned)
{
model.Error = true;
model.ErrorMessage = "Account has been banned.";
return GenerateActionResult(new { error = model.ErrorMessage }, View("/Areas/User/Views/User/ViewLogin.cshtml", model));
}
// Let's double check their email and git accounts to make sure they exist
string email = UserHelper.GetUserEmailAddress(Config, username);
if (Config.EmailConfig.Enabled && !UserHelper.UserEmailExists(Config, email))

5
Teknik/Areas/User/Models/User.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.ComponentModel.DataAnnotations;
using Microsoft.AspNet.Identity.EntityFramework;
using System.Collections.Generic;
@ -26,6 +26,8 @@ namespace Teknik.Areas.Users.Models
public AccountType AccountType { get; set; }
public AccountStatus AccountStatus { get; set; }
public virtual ICollection<Group> Groups { get; set; }
public virtual UserSettings UserSettings { get; set; }
@ -56,6 +58,7 @@ namespace Teknik.Areas.Users.Models
JoinDate = DateTime.Now;
LastSeen = DateTime.Now;
AccountType = AccountType.Basic;
AccountStatus = AccountStatus.Active;
Groups = new List<Group>();
TrustedDevices = new List<TrustedDevice>();
AuthTokens = new List<AuthToken>();

2
Teknik/Areas/User/Models/UserSettings.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.ComponentModel.DataAnnotations;
using System.ComponentModel.DataAnnotations.Schema;

114
Teknik/Areas/User/Utility/UserHelper.cs
View File

@ -261,6 +261,45 @@ namespace Teknik.Areas.Users.Utility
}
}
public static void EditAccountStatus(TeknikEntities db, Config config, string username, AccountStatus status)
{
try
{
if (!UserExists(db, username))
throw new Exception($"The user provided does not exist: {username}");
// Get the user to edit
User user = GetUser(db, username);
string email = GetUserEmailAddress(config, username);
// Edit the user type
user.AccountStatus = status;
EditUser(db, config, user);
// Add/Remove account type features depending on the type
switch (status)
{
case AccountStatus.Active:
// Enable Email
EnableUserEmail(config, email);
// Enable Git
EnableUserGit(config, username);
break;
case AccountStatus.Banned:
// Disable Email
DisableUserEmail(config, email);
// Disable Git
DisableUserGit(config, username);
break;
}
}
catch (Exception ex)
{
throw new Exception($"Unable to edit the account status [{status}] for: {username}", ex);
}
}
public static void DeleteAccount(TeknikEntities db, Config config, User user)
{
try
@ -385,7 +424,7 @@ namespace Teknik.Areas.Users.Utility
return false;
}
public static bool UserHasRoles(TeknikEntities db, User user, params string[] roles)
public static bool UserHasRoles(User user, params string[] roles)
{
bool hasRole = true;
if (user != null)
@ -862,6 +901,38 @@ If you recieved this email and you did not reset your password, you can ignore t
}
}
public static void EnableUserEmail(Config config, string email)
{
EditUserEmailActivity(config, email, true);
}
public static void DisableUserEmail(Config config, string email)
{
EditUserEmailActivity(config, email, false);
}
public static void EditUserEmailActivity(Config config, string email, bool active)
{
try
{
// If Email Server is enabled
if (config.EmailConfig.Enabled)
{
var app = new hMailServer.Application();
app.Connect();
app.Authenticate(config.EmailConfig.Username, config.EmailConfig.Password);
var domain = app.Domains.ItemByName[config.EmailConfig.Domain];
var account = domain.Accounts.ItemByAddress[email];
account.Active = active;
account.Save();
}
}
catch (Exception ex)
{
throw new Exception("Unable to edit email account mailbox size.", ex);
}
}
public static void EditUserEmailPassword(Config config, string email, string password)
{
try
@ -1069,6 +1140,47 @@ If you recieved this email and you did not reset your password, you can ignore t
}
}
public static void EnableUserGit(Config config, string username)
{
EditUserGitActivity(config, username, true);
}
public static void DisableUserGit(Config config, string username)
{
EditUserGitActivity(config, username, false);
}
public static void EditUserGitActivity(Config config, string username, bool active)
{
try
{
// If Git is enabled
if (config.GitConfig.Enabled)
{
// Git user exists?
if (!UserGitExists(config, username))
{
throw new Exception($"Git User '{username}' does not exist.");
}
string email = GetUserEmailAddress(config, username);
using (var client = new WebClient())
{
var obj = new { active = active, email = email };
string json = Newtonsoft.Json.JsonConvert.SerializeObject(obj);
client.Headers[HttpRequestHeader.ContentType] = "application/json";
Uri baseUri = new Uri(config.GitConfig.Host);
Uri finalUri = new Uri(baseUri, "api/v1/admin/users/" + username + "?token=" + config.GitConfig.AccessToken);
string result = client.UploadString(finalUri, "PATCH", json);
}
}
}
catch (Exception ex)
{
throw new Exception("Unable to edit git account password.", ex);
}
}
public static void CreateUserGitTwoFactor(Config config, string username, string secret, int unixTime)
{
try

3
Teknik/Areas/User/ViewModels/EditSettingsViewModel.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
@ -29,6 +29,7 @@ namespace Teknik.Areas.Users.ViewModels
public string Quote { get; set; }
[AllowHtml]
public string About { get; set; }
public string BlogTitle { get; set; }

7
Teknik/Areas/User/ViewModels/ProfileViewModel.cs
View File

@ -1,8 +1,9 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using Teknik.Areas.Users.Models;
using Teknik.Utilities;
using Teknik.ViewModels;
namespace Teknik.Areas.Users.ViewModels
@ -19,6 +20,10 @@ namespace Teknik.Areas.Users.ViewModels
public DateTime LastSeen { get; set; }
public AccountType AccountType { get; set; }
public AccountStatus AccountStatus { get; set; }
public List<Upload.Models.Upload> Uploads { get; set; }
public List<Paste.Models.Paste> Pastes { get; set; }

23
Teknik/Areas/User/Views/User/ViewProfile.cshtml
View File

@ -1,4 +1,4 @@
@model Teknik.Areas.Users.ViewModels.ProfileViewModel
@model Teknik.Areas.Users.ViewModels.ProfileViewModel
@using Teknik.Utilities
@using Teknik.Utilities.Cryptography
@ -11,7 +11,7 @@
<div class="container">
@if (!Model.Error)
{
bool OwnProfile = (Model.Username == User.Identity.Name || User.IsInRole("Admin"));
bool OwnProfile = (Model.Username == User.Identity.Name || User.IsInRole("Admin")) && User.Identity.IsAuthenticated;
string gitHost = Model.Config.GitConfig.Host;
string gitFullUrl = string.Empty;
if (!string.IsNullOrEmpty(gitHost))
@ -32,6 +32,12 @@
<div class="row text-center">
<div class="col-sm-3"><h1>@Model.Username</h1></div>
</div>
if (User.IsInRole("Admin"))
{
<div class="row text-center">
<div class="col-sm-3"><a href="@Url.SubRouteUrl("admin", "Admin.UserInfo", new { username = Model.Username })">edit</a></div>
</div>
}
<div class="modal fade" id="pgpSignature" tabindex="-1" role="dialog" aria-labelledby="pgpSignatureLabel" aria-hidden="true">
<div class="modal-dialog">
<div class="modal-content">
@ -78,11 +84,18 @@
<!-- Left Info Box -->
<div class="col-sm-3"><!--left col-->
<ul class="list-group">
<li class="list-group-item text-muted">Profile</li>
<li class="list-group-item text-right"><span class="pull-left"><strong>Joined</strong></span> <time datetime="@Model.LastSeen.ToString("s")">@Model.JoinDate.ToString("MMMM dd, yyyy")</time></li>
@if (OwnProfile && User.Identity.IsAuthenticated)
@if (OwnProfile)
{
<li class="list-group-item text-right"><span class="pull-left"><strong>Last Seen</strong></span> <time datetime="@Model.LastSeen.ToString("s")">@Model.LastSeen.ToString("MMMM dd, yyyy hh:mm tt")</time></li>
<li class="list-group-item text-right"><span class="pull-left"><strong>Last Seen</strong></span> <time datetime="@Model.LastSeen.ToString("s")">@Model.LastSeen.ToString("dd/MM/yyyy hh:mm tt")</time></li>
}
@if (OwnProfile)
{
<li class="list-group-item text-right"><span class="pull-left"><strong>Account Type</strong></span> @Model.AccountType</li>
}
@if (User.IsInRole("Admin"))
{
<li class="list-group-item text-right"><span class="pull-left"><strong>Account Status</strong></span> @Model.AccountStatus</li>
}
@if (!string.IsNullOrEmpty(pgpFingerprint))
{

5
Teknik/Attributes/TeknikAuthorizeAttribute.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
@ -122,7 +122,8 @@ namespace Teknik.Attributes
if (validToken)
{
User user = UserHelper.GetUserFromToken(entities, authCreds.Key, authCreds.Value);
return UserHelper.UserHasRoles(entities, user, Roles);
return UserHelper.UserHasRoles(user, Roles);
}
break;
default:

116
Teknik/Global.asax.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
@ -77,70 +77,70 @@ namespace Teknik
}
}
protected void Application_PostAuthenticateRequest(Object sender, EventArgs e)
{
// We support both Auth Tokens and Cookie Authentication
//protected void Application_PostAuthenticateRequest(Object sender, EventArgs e)
//{
// // We support both Auth Tokens and Cookie Authentication
// Username and Roles for the current user
string username = string.Empty;
// // Username and Roles for the current user
// string username = string.Empty;
bool hasAuthToken = false;
if (Request != null)
{
if (Request.Headers.HasKeys())
{
string auth = Request.Headers["Authorization"];
if (!string.IsNullOrEmpty(auth))
{
string[] parts = auth.Split(new char[] { ' ' }, StringSplitOptions.RemoveEmptyEntries);
string type = string.Empty;
string value = string.Empty;
if (parts.Length > 0)
{
type = parts[0].ToLower();
}
if (parts.Length > 1)
{
value = parts[1];
}
// bool hasAuthToken = false;
// if (Request != null)
// {
// if (Request.Headers.HasKeys())
// {
// string auth = Request.Headers["Authorization"];
// if (!string.IsNullOrEmpty(auth))
// {
// string[] parts = auth.Split(new char[] { ' ' }, StringSplitOptions.RemoveEmptyEntries);
// string type = string.Empty;
// string value = string.Empty;
// if (parts.Length > 0)
// {
// type = parts[0].ToLower();
// }
// if (parts.Length > 1)
// {
// value = parts[1];
// }
using (TeknikEntities entities = new TeknikEntities())
{
// Get the user information based on the auth type
switch (type)
{
case "basic":
KeyValuePair<string, string> authCreds = StringHelper.ParseBasicAuthHeader(value);
// using (TeknikEntities entities = new TeknikEntities())
// {
// // Get the user information based on the auth type
// switch (type)
// {
// case "basic":
// KeyValuePair<string, string> authCreds = StringHelper.ParseBasicAuthHeader(value);
bool tokenValid = UserHelper.UserTokenCorrect(entities, authCreds.Key, authCreds.Value);
if (tokenValid)
{
// it's valid, so let's update it's Last Used date
UserHelper.UpdateTokenLastUsed(entities, authCreds.Key, authCreds.Value, DateTime.Now);
// bool tokenValid = UserHelper.UserTokenCorrect(entities, authCreds.Key, authCreds.Value);
// if (tokenValid)
// {
// // it's valid, so let's update it's Last Used date
// UserHelper.UpdateTokenLastUsed(entities, authCreds.Key, authCreds.Value, DateTime.Now);
// Set the username
username = authCreds.Key;
}
break;
default:
break;
}
}
}
}
}
// // Set the username
// username = authCreds.Key;
// }
// break;
// default:
// break;
// }
// }
// }
// }
// }
if (FormsAuthentication.CookiesSupported == true && !hasAuthToken)
{
if (Request.Cookies[FormsAuthentication.FormsCookieName] != null)
{
//let us take out the username now
username = FormsAuthentication.Decrypt(Request.Cookies[FormsAuthentication.FormsCookieName].Value).Name;
}
}
// if (FormsAuthentication.CookiesSupported == true && !hasAuthToken)
// {
// if (Request.Cookies[FormsAuthentication.FormsCookieName] != null)
// {
// //let us take out the username now
// username = FormsAuthentication.Decrypt(Request.Cookies[FormsAuthentication.FormsCookieName].Value).Name;
// }
// }
HttpContext.Current.User = new TeknikPrincipal(username);
}
// HttpContext.Current.User = new TeknikPrincipal(username);
//}
protected void Application_Error(object sender, EventArgs e)
{

113
Teknik/Modules/UserCheckModule.cs Normal file
View File

@ -0,0 +1,113 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.Mvc;
using System.Web.Security;
using Teknik.Areas.Error.Controllers;
using Teknik.Areas.Users.Utility;
using Teknik.Models;
using Teknik.Security;
using Teknik.Utilities;
namespace Teknik.Modules
{
public class UserCheckModule : IHttpModule
{
public void Dispose()
{
}
public void Init(HttpApplication context)
{
context.PostAuthenticateRequest += OnPostAuthenticateRequestHandlerExecute;
}
private void OnPostAuthenticateRequestHandlerExecute(object sender, EventArgs e)
{
HttpContext context = HttpContext.Current;
string username = string.Empty;
bool hasAuthToken = false;
if (context.Request != null)
{
if (context.Request.Headers.HasKeys())
{
string auth = context.Request.Headers["Authorization"];
if (!string.IsNullOrEmpty(auth))
{
string[] parts = auth.Split(new char[] { ' ' }, StringSplitOptions.RemoveEmptyEntries);
string type = string.Empty;
string value = string.Empty;
if (parts.Length > 0)
{
type = parts[0].ToLower();
}
if (parts.Length > 1)
{
value = parts[1];
}
using (TeknikEntities entities = new TeknikEntities())
{
// Get the user information based on the auth type
switch (type)
{
case "basic":
KeyValuePair<string, string> authCreds = StringHelper.ParseBasicAuthHeader(value);
bool tokenValid = UserHelper.UserTokenCorrect(entities, authCreds.Key, authCreds.Value);
if (tokenValid)
{
// it's valid, so let's update it's Last Used date
UserHelper.UpdateTokenLastUsed(entities, authCreds.Key, authCreds.Value, DateTime.Now);
// Set the username
username = authCreds.Key;
}
break;
default:
break;
}
}
}
}
}
// Check if they have a Forms Auth cookie
if (FormsAuthentication.CookiesSupported == true && !hasAuthToken)
{
if (context.Request.Cookies[FormsAuthentication.FormsCookieName] != null)
{
//let us take out the username now
username = FormsAuthentication.Decrypt(context.Request.Cookies[FormsAuthentication.FormsCookieName].Value).Name;
}
}
context.User = new TeknikPrincipal(username);
// Check to see if we need to logout this user
if (context.User != null && context.User.Identity.IsAuthenticated)
{
TeknikPrincipal user = (context.User as TeknikPrincipal);
// Is the user banned?
if (user?.Info.AccountStatus == AccountStatus.Banned)
{
// Get cookie
HttpCookie authCookie = UserHelper.CreateAuthCookie(user.Identity.Name, false, context.Request.Url.Host.GetDomain(), context.Request.IsLocal);
// Signout
FormsAuthentication.SignOut();
context.Session?.Abandon();
// Destroy Cookies
authCookie.Expires = DateTime.Now.AddYears(-1);
context.Response.Cookies.Add(authCookie);
// Reset the context user
context.User = new TeknikPrincipal(string.Empty);
}
}
}
}
}

19
Teknik/Security/TeknikPrincipal.cs
View File

@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Security.Principal;
@ -6,6 +6,7 @@ using System.Web;
using Teknik.Areas.Users.Models;
using Teknik.Areas.Users.Utility;
using Teknik.Models;
using Teknik.Utilities;
namespace Teknik.Security
{
@ -41,21 +42,7 @@ namespace Teknik.Security
public bool IsInRole(string role)
{
if (Info != null)
{
// Grab all their roles
foreach (Group grp in Info.Groups)
{
foreach (Role curRole in grp.Roles)
{
if (curRole.Name == role)
{
return true;
}
}
}
}
return false;
return UserHelper.UserHasRoles(Info, role);
}
}
}

14
Teknik/Teknik.csproj
View File

@ -26,6 +26,7 @@
<TargetFrameworkProfile />
<NuGetPackageImportStamp>
</NuGetPackageImportStamp>
<Use64BitIISExpress />
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<DebugSymbols>true</DebugSymbols>
@ -219,10 +220,10 @@
<Compile Include="Areas\Admin\AdminAreaRegistration.cs" />
<Compile Include="Areas\Admin\Controllers\AdminController.cs" />
<Compile Include="Areas\Admin\ViewModels\DashboardViewModel.cs" />
<Compile Include="Areas\Admin\ViewModels\SearchResultViewModel.cs" />
<Compile Include="Areas\Admin\ViewModels\UserResultViewModel.cs" />
<Compile Include="Areas\Admin\ViewModels\UploadResultViewModel.cs" />
<Compile Include="Areas\Admin\ViewModels\UploadSearchViewModel.cs" />
<Compile Include="Areas\Admin\ViewModels\SearchViewModel.cs" />
<Compile Include="Areas\Admin\ViewModels\UserSearchViewModel.cs" />
<Compile Include="Areas\Admin\ViewModels\UserInfoViewModel.cs" />
<Compile Include="Areas\API\APIAreaRegistration.cs" />
<Compile Include="Areas\API\Controllers\APIController.cs" />
@ -309,6 +310,7 @@
<Compile Include="Areas\Vault\ViewModels\VaultItemViewModel.cs" />
<Compile Include="Attributes\TeknikAuthorizeAttribute.cs" />
<Compile Include="Hubs\IRCClientHub.cs" />
<Compile Include="Modules\UserCheckModule.cs" />
<Compile Include="Security\ITeknikPrincipal.cs" />
<Compile Include="Security\TeknikPrincipal.cs" />
<Compile Include="Filters\CORSActionFilter.cs" />
@ -389,7 +391,7 @@
<CopyToOutputDirectory>Always</CopyToOutputDirectory>
</Content>
<Content Include="Areas\Admin\Scripts\UploadSearch.js" />
<Content Include="Areas\Admin\Scripts\Search.js" />
<Content Include="Areas\Admin\Scripts\UserSearch.js" />
<Content Include="Areas\Admin\Scripts\UserInfo.js" />
<Content Include="Areas\Blog\Content\Blog.css" />
<Content Include="Areas\Blog\Scripts\Blog.js" />
@ -628,10 +630,10 @@
<Content Include="Areas\Help\Views\Help\Markdown.cshtml" />
<Content Include="Areas\Help\Views\Help\Tools.cshtml" />
<Content Include="Areas\Admin\Views\web.config" />
<Content Include="Areas\Admin\Views\Admin\Search.cshtml" />
<Content Include="Areas\Admin\Views\Admin\UserSearch.cshtml" />
<Content Include="Areas\Admin\Views\Admin\Dashboard.cshtml" />
<Content Include="Areas\Admin\Views\Admin\SearchResult.cshtml" />
<Content Include="Areas\Admin\Views\Admin\SearchResults.cshtml" />
<Content Include="Areas\Admin\Views\Admin\UserResult.cshtml" />
<Content Include="Areas\Admin\Views\Admin\UserResults.cshtml" />
<Content Include="Areas\Admin\Views\_ViewStart.cshtml" />
<Content Include="App_Data\MachineKey.config" />
<Content Include="Areas\Admin\Views\Admin\UserInfo.cshtml" />

3
Teknik/Web.config
View File

@ -1,4 +1,4 @@
<?xml version="1.0" encoding="utf-8"?>
<?xml version="1.0" encoding="utf-8"?>
<!--
For more information on how to configure your ASP.NET application, please visit
http://go.microsoft.com/fwlink/?LinkId=301880
@ -55,6 +55,7 @@
<remove name="FormsAuthentication" />
<add name="FormsAuthentication" type="System.Web.Security.FormsAuthenticationModule" />
<add name="PerfModule" type="Teknik.Modules.PerformanceMonitorModule, Teknik" />
<add name="UserCheckModule" type="Teknik.Modules.UserCheckModule, Teknik" />
<remove name="UrlRoutingModule-4.0" />
<add name="UrlRoutingModule-4.0" type="System.Web.Routing.UrlRoutingModule" preCondition="" />
</modules>

8
Utilities/Utilities/AccountStatus.cs Normal file
View File

@ -0,0 +1,8 @@
namespace Teknik.Utilities
{
public enum AccountStatus
{
Active = 0,
Banned = 1
}
}

10
Utilities/Utilities/AccountType.cs
View File

@ -1,14 +1,8 @@
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
namespace Teknik.Utilities
{
public enum AccountType
{
Basic,
Premium
Basic = 0,
Premium = 1
}
}

1
Utilities/Utilities/Utilities.csproj
View File

@ -104,6 +104,7 @@
</Reference>
</ItemGroup>
<ItemGroup>
<Compile Include="AccountStatus.cs" />
<Compile Include="AccountType.cs" />
<Compile Include="Cryptography\AES.cs" />
<Compile Include="Cryptography\Aes128CFB.cs" />