CreateApiKey.cs

using System;
using System.Collections.Generic;
using System.Security.Cryptography;
using System.Text;
using System.Threading.Tasks;
using Waher.IoTGateway;
using Waher.Content.Markdown;
using Waher.Networking.HTTP;
using Waher.Persistence;
using Waher.Persistence.Filters;
using Waher.Security;
using Waher.Service.IoTBroker.DataStorage;
 
namespace Waher.Service.IoTBroker.WebServices
{
    public class CreateApiKey : HttpSynchronousResource, IHttpPostMethod
    {
        public CreateApiKey()
            : base("/CreateApiKey")
        {
        }
 
        public override bool HandlesSubPaths => false;
        public override bool UserSessions => true;
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            Gateway.AssertUserAuthenticated(Request, "Admin.Broker.Keys");
 
            if (!Request.HasData)
                throw new BadRequestException();
 
            object Obj = await Request.DecodeDataAsync();
            if (!(Obj is Dictionary<string, string> Form))
                throw new BadRequestException();
 
            string Owner;
            string EMail;
 
            if (!Form.ContainsKey("Owner") || string.IsNullOrEmpty(Owner = Form["Owner"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("EMail") || string.IsNullOrEmpty(EMail = Form["EMail"]))
                throw new BadRequestException();
 
            if (!Form.ContainsKey("MaxAccounts") || !long.TryParse(Form["MaxAccounts"], out long MaxAccounts) || MaxAccounts < 1)
                throw new BadRequestException();
 
            await Create(MaxAccounts, Owner, EMail, Request.RemoteEndPoint);
 
            if (!(Request.Header.Referer is null))
                throw new SeeOtherException(Request.Header.Referer.Value);  // PRG pattern.
        }
 
        internal static async Task<ApiKey> Create(long MaxAccounts, string Owner, string EMail, string RemoteEndpoint)
        {
            byte[] Data;
            string Key;
            string Secret;
            bool Found;
 
            do
            {
                Data = Gateway.NextBytes(32);
                Key = Hashes.BinaryToString(Data);
 
                Found = false;
                foreach (ApiKey ApiKey in await Database.Find<ApiKey>(new FilterFieldEqualTo("Key", Key)))
                {
                    Found = true;
                    break;
                }
            }
            while (Found);
 
            Data = Gateway.NextBytes(32);
            Secret = Hashes.BinaryToString(Data);
 
            ApiKey NewKey = new ApiKey()
            {
                Key = Key,
                Secret = Secret,
                Owner = Owner,
                EMail = EMail,
                Created = DateTime.Now,
                MaxAccounts = MaxAccounts
            };
 
            await Database.Insert(NewKey);
 
            StringBuilder Markdown = new StringBuilder();
            DateTime Now = DateTime.Now;
 
            Markdown.AppendLine("API Key created:");
            Markdown.AppendLine();
            Markdown.AppendLine("| API Key Information ||");
            Markdown.AppendLine("|:-----|:------|");
            Markdown.Append("| Key: | `");
            Markdown.Append(Key);
            Markdown.AppendLine("` |");
            Markdown.Append("| Owner: | `");
            Markdown.Append(Owner);
            Markdown.Append("`");
            Markdown.AppendLine(" |");
            Markdown.Append("| \\#Accounts: | ");
            Markdown.Append(MaxAccounts.ToString());
            Markdown.AppendLine(" |");
            Markdown.Append("| e-Mail: | <");
            Markdown.Append(EMail);
            Markdown.AppendLine("> |");
 
            await XmppServerModule.AppendRemoteEndpointToTable(Markdown, RemoteEndpoint);
 
            Markdown.Append("| Date | ");
            Markdown.Append(MarkdownDocument.Encode(Now.ToShortDateString()));
            Markdown.AppendLine(" |");
            Markdown.Append("| Time | ");
            Markdown.Append(MarkdownDocument.Encode(Now.ToLongTimeString()));
            Markdown.AppendLine(" |");
 
            await Gateway.SendNotification(Markdown.ToString());
 
            return NewKey;
        }
    }
}