RemoteQuickLogin.cs

using System;
using System.Collections.Generic;
using System.Threading.Tasks;
using System.Xml;
using Waher.Content;
using Waher.IoTGateway;
using Waher.IoTGateway.Setup;
using Waher.Networking.HTTP;
using Waher.Networking.XMPP.Contracts;
using Waher.Persistence;
using Waher.Runtime.IO;
using Waher.Script;
using Waher.Script.Abstraction.Elements;
using Waher.Service.IoTBroker.Legal.MFA;
 
namespace Waher.Service.IoTBroker.WebServices.Agent.Account
{
    public class RemoteQuickLogin : AgentPostResource
    {
        public RemoteQuickLogin()
            : base("Account/RemoteQuickLogin",
                new KeyValuePair<Type, Expression>(typeof(Dictionary<string, object>), new Expression(jsonPattern)),
                new KeyValuePair<Type, Expression>(typeof(XmlDocument), new Expression(xmlPattern)))
        {
        }
 
        private static readonly string jsonPattern = Resources.LoadResourceAsText(typeof(Login).Namespace + ".JSON.RemoteQuickLogin.req");
        private static readonly string xmlPattern = Resources.LoadResourceAsText(typeof(Login).Namespace + ".XML.RemoteQuickLogin.req");
 
        public override HttpAuthenticationScheme[] GetAuthenticationSchemes(HttpRequest Request)
        {
            base.GetAuthenticationSchemes(Request);     // Initialize factory property.
            return null;
        }
 
        public override bool UserSessions => true;
 
        public override async Task POST(HttpRequest Request, HttpResponse Response, Dictionary<string, IElement> Parameters)
        {
            await this.CheckBlocks(Request);
 
            string LegalId = (string)Parameters["PLegalId"].AssociatedObjectValue;
            string Purpose = (string)Parameters["PPurpose"].AssociatedObjectValue;
            string TabID = (string)Parameters["PTabId"].AssociatedObjectValue;
 
            if (string.IsNullOrEmpty(Purpose.Trim()))
                throw new BadRequestException("Invalid purpose.");
 
            if (Request.Session is null)
                throw new ForbiddenException(Request, "No session established.");
 
            if (Request.Session.TryGetVariable(IoTBroker.Legal.MFA.QuickLogin.UserVariableName, out Variable v) &&
                v.ValueObject is QuickLoginUser QuickLoginUser &&
                !string.IsNullOrEmpty(QuickLoginUser.LegalId.Id))
            {
                if (QuickLoginUser.LegalId.Id == LegalId)
                {
                    await Response.Return(new NamedDictionary<string, object>("RemoteQuickLoginResponse", AgentNamespace)
                    {
                        { "loggedIn", true },
                        { "petitionSent", false }
                    });
                    return;
                }
                else
                {
                    Request.Session.Remove(IoTBroker.Legal.MFA.QuickLogin.UserVariableName); // Logging out old user
                    Request.Session.Remove(IoTGateway.WebResources.Login.UserVariableName); // Logging out old associated admin user, if any
                    Request.Session.Remove(IoTGateway.WebResources.Login.AutoLoginVariableName); // Logging out old associated admin user, if any
                }
            }
 
            string HttpSessionID = GetSessionId(Request, Request.Response);
            if (string.IsNullOrEmpty(HttpSessionID))
                throw new BadRequestException("No session cookie available in the request.");
 
            Gateway.HttpServer?.GetSession(HttpSessionID, true);    // Make sure session variables are created.
 
            if (LegalIdentityConfiguration.HasApprovedLegalIdentities)
            {
                LegalIdentity LatestApprovedIdentity = LegalIdentityConfiguration.LatestApprovedLegalIdentity;
                CaseInsensitiveString Domain = LatestApprovedIdentity[PersonalInformation.DomainTag];
                if (!Gateway.IsDomain(Domain, true))
                    throw new InvalidOperationException("Domain in latest legal identity of gateway does not match the gateway domain.");
 
                string ServiceId = IoTBroker.Legal.MFA.QuickLogin.GetServiceID(HttpSessionID, null);
 
                await IoTBroker.Legal.MFA.QuickLogin.StartQuickLogin(Request, ServiceId, LegalId, 
                    Purpose, null, null, TabID);
 
                await Response.Return(new NamedDictionary<string, object>("RemoteQuickLoginResponse", AgentNamespace)
                {
                    { "loggedIn", false },
                    { "petitionSent", true }
                });
            }
            else
            {
                await Response.Return(new NamedDictionary<string, object>("RemoteQuickLoginResponse", AgentNamespace)
                {
                    { "loggedIn", false },
                    { "petitionSent", false }
                });
            }
        }
    }
}