CreateApiKey.cs

using System;
using System.Collections.Generic;
using System.Text;
using System.Threading.Tasks;
using Waher.Content;
using Waher.Content.Markdown;
using Waher.IoTGateway;
using Waher.Networking.HTTP;
using Waher.Persistence;
using Waher.Persistence.Filters;
using Waher.Security;
using Waher.Service.IoTBroker.DataStorage;
using Waher.Service.IoTBroker.Setup;
 
namespace Waher.Service.IoTBroker.WebServices
{
    public class CreateApiKey : HttpSynchronousResource, IHttpPostMethod
    {
        public CreateApiKey()
            : base("/CreateApiKey")
        {
        }
 
        public override bool HandlesSubPaths => false;
        public override bool UserSessions => true;
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            Gateway.AssertUserAuthenticated(Request, "Admin.Broker.Keys");
 
            if (!Request.HasData)
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            ContentResponse Content = await Request.DecodeDataAsync();
            if (Content.HasError || !(Content.Decoded is Dictionary<string, string> Form))
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            string Owner;
            string EMail;
 
            if (!Form.ContainsKey("Owner") || string.IsNullOrEmpty(Owner = Form["Owner"]))
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            if (!Form.ContainsKey("EMail") || string.IsNullOrEmpty(EMail = Form["EMail"]))
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            if (!Form.ContainsKey("MaxAccounts") || !long.TryParse(Form["MaxAccounts"], out long MaxAccounts) || MaxAccounts < 1)
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            await Create(MaxAccounts, Owner, EMail, Request.RemoteEndPoint);
 
            if (!(Request.Header.Referer is null))
                await Response.SendResponse(new SeeOtherException(Request.Header.Referer.Value));  // PRG pattern.
        }
 
        internal static async Task<ApiKey> Create(long MaxAccounts, string Owner, string EMail, string RemoteEndPoint)
        {
            byte[] Data;
            string Key;
            string Secret;
            bool Found;
 
            do
            {
                Data = Gateway.NextBytes(32);
                Key = Hashes.BinaryToString(Data);
 
                Found = false;
                foreach (ApiKey ApiKey in await Database.Find<ApiKey>(new FilterFieldEqualTo("Key", Key)))
                {
                    Found = true;
                    break;
                }
            }
            while (Found);
 
            Data = Gateway.NextBytes(32);
            Secret = Hashes.BinaryToString(Data);
 
            ApiKey NewKey = new ApiKey()
            {
                Key = Key,
                Secret = Secret,
                Owner = Owner,
                EMail = EMail,
                Created = DateTime.Now,
                MaxAccounts = MaxAccounts
            };
 
            await Database.Insert(NewKey);
 
            if (BrokerNotificationConfiguration.Instance?.ApiKeyCreated ?? false)
            {
                StringBuilder Markdown = new StringBuilder();
                DateTime Now = DateTime.Now;
 
                Markdown.AppendLine("API Key created:");
                Markdown.AppendLine();
                Markdown.AppendLine("| API Key Information ||");
                Markdown.AppendLine("|:-----|:------|");
                Markdown.Append("| Key: | `");
                Markdown.Append(Key);
                Markdown.AppendLine("` |");
                Markdown.Append("| Owner: | `");
                Markdown.Append(Owner);
                Markdown.Append("`");
                Markdown.AppendLine(" |");
                Markdown.Append("| \\#Accounts: | ");
                Markdown.Append(MaxAccounts.ToString());
                Markdown.AppendLine(" |");
                Markdown.Append("| e-Mail: | <");
                Markdown.Append(EMail);
                Markdown.AppendLine("> |");
 
                await XmppServerModule.AppendRemoteEndPointToTable(Markdown, RemoteEndPoint);
 
                Markdown.Append("| Date | ");
                Markdown.Append(MarkdownDocument.Encode(Now.ToShortDateString()));
                Markdown.AppendLine(" |");
                Markdown.Append("| Time | ");
                Markdown.Append(MarkdownDocument.Encode(Now.ToLongTimeString()));
                Markdown.AppendLine(" |");
 
                await Gateway.SendNotification(Markdown.ToString());
            }
 
            return NewKey;
        }
    }
}