InstallPackage.cs

using System;
using System.Collections.Generic;
using System.IO;
using System.Threading.Tasks;
using Waher.IoTGateway;
using Waher.Networking.HTTP;
using Waher.Persistence;
using Waher.Service.IoTBroker.Provisioning.SoftwareUpdates;
using Waher.Security;
 
namespace Waher.Service.IoTBroker.WebServices
{
    public class InstallPackage : HttpSynchronousResource, IHttpPostMethod
    {
        public InstallPackage()
            : base("/InstallPackage")
        {
        }
 
        public override bool HandlesSubPaths => false;
        public override bool UserSessions => true;
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            Gateway.AssertUserAuthenticated(Request, "Admin.Software.Upload");
 
            if (!Request.HasData || !(await Request.DecodeDataAsync() is Dictionary<string, object> Obj) ||
                !Obj.TryGetValue("package", out object Value) || !(Value is string FileName) ||
                !Obj.TryGetValue("key", out Value) || !(Value is string KeyStr))
            {
                throw new BadRequestException();
            }
 
            if (KeyStr.Length != 76 && KeyStr.Length != 76 + 32)
                throw new BadRequestException("Invalid key");
 
            byte[] PublicKey = Convert.FromBase64String(KeyStr.Substring(0, 76));
            byte[] AesKey = KeyStr.Length == 76 ? null : Hashes.StringToBinary(KeyStr.Substring(76));
 
            string FullFileName = Path.Combine(XmppServerModule.PackagesFolder, FileName);
            if (!File.Exists(FullFileName))
                throw new NotFoundException("Package file not found.");
 
            Package Package = await Provisioning.ProvisioningComponent.GetPackage(FileName);
            if (Package is null)
                throw new NotFoundException("Package not found.");
 
            if (Package.FileName == BrokerPackage.FileName)
                throw new BadRequestException("Reserved package.");
 
            using (FileStream fs = File.OpenRead(FullFileName))
            {
                if (!XmppServerModule.ValidatePackage(fs, PublicKey, Package.Signature))
                    throw new BadRequestException("Invalid public key");
            }
 
            Package.Installed = Package.Published;
            Package.PublicKey = PublicKey;
            Package.AesKey = AesKey;
            Package.ContentOnly = XmppServerModule.IsContentPackage(Package);
 
            await Database.Update(Package);
 
            await XmppServerModule.Instance.UpdateSoftware(Package, true);
        }
    }
}