forked from SteamWar/SteamWar
Refactor token generation and remove unused endpoints.
This commit is contained in:
@@ -19,7 +19,7 @@
|
||||
|
||||
package de.steamwar.routes
|
||||
|
||||
import de.steamwar.routes.v2.configureNewAuth
|
||||
import de.steamwar.routes.v2.*
|
||||
import io.ktor.server.application.*
|
||||
import io.ktor.server.auth.*
|
||||
import io.ktor.server.routing.*
|
||||
@@ -35,9 +35,7 @@ fun Application.configureRoutes() {
|
||||
configurePage()
|
||||
configureSchematic()
|
||||
configureAuthRoutes()
|
||||
route("/v2") {
|
||||
configureNewAuth()
|
||||
}
|
||||
configureNewAuth()
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -21,7 +21,6 @@ package de.steamwar.routes
|
||||
|
||||
import de.steamwar.plugins.SWAuthPrincipal
|
||||
import de.steamwar.plugins.SWPermissionCheck
|
||||
import de.steamwar.plugins.getUser
|
||||
import de.steamwar.sql.*
|
||||
import io.ktor.http.*
|
||||
import io.ktor.server.application.*
|
||||
|
||||
@@ -61,32 +61,6 @@ fun SteamwarUser.createAccessAndRefreshToken(keepLoggedIn: Boolean = false): Aut
|
||||
|
||||
fun Route.configureNewAuth() {
|
||||
route("/auth") {
|
||||
route("/enroll") {
|
||||
post("/{userId}") {
|
||||
if (call.request.headers.contains("X-Forwarded-For") || call.request.header("Host") != "localhost:1337") {
|
||||
SWException.log("Request to /auth/register from", "Invalid IP")
|
||||
call.respond(HttpStatusCode.Forbidden, ResponseError("Invalid IP", "F_U"))
|
||||
return@post
|
||||
}
|
||||
|
||||
val userId = call.parameters["userId"]?.toInt()
|
||||
if (userId == null) {
|
||||
call.respond(HttpStatusCode.BadRequest, ResponseError("Missing or invalid userId"))
|
||||
return@post
|
||||
}
|
||||
|
||||
val user = SteamwarUser.get(userId)
|
||||
if (user == null) {
|
||||
call.respond(HttpStatusCode.BadRequest, ResponseError("Invalid userId"))
|
||||
return@post
|
||||
}
|
||||
|
||||
val token = Token.createToken("PT-${user.userName}", user)
|
||||
|
||||
call.respond(HttpStatusCode.OK, ResponseToken(token, TokenType.RESET_PASSWORD.lifetime))
|
||||
}
|
||||
}
|
||||
|
||||
post("/register") {
|
||||
val requester = call.request.header("X-Forwarded-For") ?: call.request.origin.remoteAddress
|
||||
|
||||
|
||||
Reference in New Issue
Block a user