RequestApiKey.cs

using System;
using System.Collections.Generic;
using System.Text;
using System.Threading.Tasks;
using Waher.Content.Markdown;
using Waher.Networking.HTTP;
using Waher.Persistence;
using Waher.Security.LoginMonitor;
 
namespace Waher.Service.IoTBroker.WebServices
{
    public class RequestApiKey : HttpSynchronousResource, IHttpPostMethod
    {
        public RequestApiKey()
            : base("/RequestApiKey")
        {
        }
 
        public override bool HandlesSubPaths => false;
        public override bool UserSessions => true;
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            if (!Request.HasData)
                throw new BadRequestException();
 
            object Obj = await Request.DecodeDataAsync();
            if (!(Obj is Dictionary<string, string> Form))
                throw new BadRequestException();
 
            string Name;
            CaseInsensitiveString EMail;
            string LinkedIn;
            string Organization;
            string Product;
            string Number;
            string Where;
            string TimeLimit;
            string RecaptchaResponse;
 
            if (!Form.ContainsKey("Name") || string.IsNullOrEmpty(Name = Form["Name"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("EMail") || CaseInsensitiveString.IsNullOrEmpty(EMail = Form["EMail"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("LinkedIn") || string.IsNullOrEmpty(LinkedIn = Form["LinkedIn"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("Organization") || string.IsNullOrEmpty(Organization = Form["Organization"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("Product") || string.IsNullOrEmpty(Product = Form["Product"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("Number") || string.IsNullOrEmpty(Number = Form["Number"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("Where") || string.IsNullOrEmpty(Where = Form["Where"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("TimeLimit") || string.IsNullOrEmpty(TimeLimit = Form["TimeLimit"]))
                TimeLimit = string.Empty;
 
            if (!Form.ContainsKey("g-recaptcha-response") || string.IsNullOrEmpty(RecaptchaResponse = Form["g-recaptcha-response"]))
                throw new BadRequestException();
 
            if (await Feedback.SiteVerify(RecaptchaResponse, Request.RemoteEndPoint))
            {
                KeyValuePair<string, object>[] Tags = await LoginAuditor.Annotate(Request.RemoteEndPoint,
                    new KeyValuePair<string, object>("Name", Name),
                    new KeyValuePair<string, object>("EMail", EMail.Value),
                    new KeyValuePair<string, object>("LinkedIn", LinkedIn),
                    new KeyValuePair<string, object>("Organization", Organization),
                    new KeyValuePair<string, object>("Product", Product),
                    new KeyValuePair<string, object>("Number", Number),
                    new KeyValuePair<string, object>("Where", Where),
                    new KeyValuePair<string, object>("TimeLimit", TimeLimit),
                    new KeyValuePair<string, object>("RemoteEndPoint", Request.RemoteEndPoint));
 
                Dictionary<string, object> Feedback = new Dictionary<string, object>();
                foreach (KeyValuePair<string, object> P in Tags)
                    Feedback.Add(P.Key, P.Value);
 
                Request.Session["Feedback"] = Feedback;
 
                StringBuilder Markdown = new StringBuilder();
                DateTime Now = DateTime.Now;
 
                Markdown.AppendLine("API key requested.");
                Markdown.AppendLine();
 
                Markdown.AppendLine("| API Key request ||");
                Markdown.AppendLine("|:------|:-------|");
 
                Markdown.Append("| Name: | ");
                Markdown.Append(MarkdownDocument.Encode(Name));
                Markdown.AppendLine(" |");
 
                Markdown.Append("| e-Mail: | <a href=\"mailto:");
                Markdown.Append(EMail.Replace("\"", "&quot;"));
                Markdown.Append("\" target=\"_blank\">");
                Markdown.Append(MarkdownDocument.Encode(EMail));
                Markdown.AppendLine("</a> |");
 
                Markdown.Append("| LinkedIn: | <a href=\"");
                Markdown.Append(LinkedIn.Replace("\"", "&quot;"));
                Markdown.Append("\" target=\"_blank\">");
                Markdown.Append(MarkdownDocument.Encode(LinkedIn));
                Markdown.AppendLine("</a> |");
 
                Markdown.Append("| Organization: | ");
                Markdown.Append(MarkdownDocument.Encode(Organization));
                Markdown.AppendLine(" |");
 
                Markdown.Append("| Product: | ");
                Markdown.Append(MarkdownDocument.Encode(Product));
                Markdown.AppendLine(" |");
 
                Markdown.Append("| Number: | ");
                Markdown.Append(MarkdownDocument.Encode(Number));
                Markdown.AppendLine(" |");
 
                Markdown.Append("| Where: | ");
                Markdown.Append(MarkdownDocument.Encode(Where));
                Markdown.AppendLine(" |");
 
                Markdown.Append("| Time Limit: | ");
                Markdown.Append(MarkdownDocument.Encode(TimeLimit));
                Markdown.AppendLine(" |");
 
                await XmppServerModule.AppendRemoteEndpointToTable(Markdown, Request.RemoteEndPoint);
 
                Markdown.Append("| Date | ");
                Markdown.Append(MarkdownDocument.Encode(Now.ToShortDateString()));
                Markdown.AppendLine(" |");
                Markdown.Append("| Time | ");
                Markdown.Append(MarkdownDocument.Encode(Now.ToLongTimeString()));
                Markdown.AppendLine(" |");
 
                await LoginAuditor.AppendWhoIsInfo(Markdown, Request.RemoteEndPoint);
 
                await IoTGateway.Gateway.SendNotification(Markdown.ToString());
 
                throw new SeeOtherException("/ApiKeyRequested.md");  // PRG pattern.
            }
            else
                throw new ForbiddenException("Request not verified. Bot?");
        }
    }
}