InstallPackage.cs

using System;
using System.Collections.Generic;
using System.IO;
using System.Threading.Tasks;
using Waher.Content;
using Waher.IoTGateway;
using Waher.Networking.HTTP;
using Waher.Persistence;
using Waher.Security;
using Waher.Service.IoTBroker.Provisioning.SoftwareUpdates;
 
namespace Waher.Service.IoTBroker.WebServices
{
    public class InstallPackage : HttpSynchronousResource, IHttpPostMethod
    {
        public InstallPackage()
            : base("/InstallPackage")
        {
        }
 
        public override bool HandlesSubPaths => false;
        public override bool UserSessions => true;
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            Gateway.AssertUserAuthenticated(Request, "Admin.Software.Upload");
 
            if (!Request.HasData)
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            ContentResponse Content = await Request.DecodeDataAsync();
            if (Content.HasError || !(Content.Decoded is Dictionary<string, object> Obj) ||
                !Obj.TryGetValue("package", out object Value) || !(Value is string FileName) ||
                !Obj.TryGetValue("key", out Value) || !(Value is string KeyStr))
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            if (KeyStr.Length != 76 && KeyStr.Length != 76 + 32)
            {
                await Response.SendResponse(new BadRequestException("Invalid key"));
                return;
            }
 
            byte[] PublicKey = Convert.FromBase64String(KeyStr[..76]);
            byte[] AesKey = KeyStr.Length == 76 ? null : Hashes.StringToBinary(KeyStr[76..]);
 
            string FullFileName = Path.Combine(XmppServerModule.PackagesFolder, FileName);
            if (!File.Exists(FullFileName))
            {
                await Response.SendResponse(new NotFoundException("Package file not found."));
                return;
            }
 
            Package Package = await Provisioning.ProvisioningComponent.GetPackage(FileName);
            if (Package is null)
            {
                await Response.SendResponse(new NotFoundException("Package not found."));
                return;
            }
 
            if (Package.FileName == BrokerPackage.FileName)
            {
                await Response.SendResponse(new BadRequestException("Reserved package."));
                return;
            }
 
            using (FileStream fs = File.OpenRead(FullFileName))
            {
                if (!XmppServerModule.ValidatePackage(fs, PublicKey, Package.Signature))
                {
                    await Response.SendResponse(new BadRequestException("Invalid public key"));
                    return;
                }
            }
 
            Package.Installed = Package.Published;
            Package.PublicKey = PublicKey;
            Package.AesKey = AesKey;
            Package.ContentOnly = XmppServerModule.IsContentPackage(Package);
 
            await Database.Update(Package);
 
            await XmppServerModule.Instance.UpdateSoftware(Package, true);
        }
    }
}