AdminService.cs

using System.Threading.Tasks;
using Waher.Content;
using Waher.Networking.HTTP;
using Waher.Script;
using Waher.Security;
 
namespace Waher.Service.IoTBroker.Admin.WebService
{
    public class AdminService : HttpSynchronousResource, IHttpPostMethod
    {
        private readonly HttpAuthenticationScheme[] authenticationSchemes;
 
        public AdminService(string ResourceName, params HttpAuthenticationScheme[] AuthenticationSchemes)
            : base(ResourceName)
        {
            this.authenticationSchemes = AuthenticationSchemes;
        }
 
        public override bool HandlesSubPaths => false;
 
        public override bool UserSessions => true;
 
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            IUser User = null;
 
            if (Request.Session is null ||
                !Request.Session.TryGetVariable("User", out Variable v) ||
                ((User = v.ValueObject as IUser) is null) ||
                !User.HasPrivilege("Admin"))
            {
                await Response.SendResponse(ForbiddenException.AccessDenied(this.ResourceName, User?.UserName, "Admin"));
                return;
            }
 
            object Obj;
 
            if (Request.HasData)
            {
                ContentResponse Content = await Request.DecodeDataAsync();
 
                if (Content.HasError)
                {
                    await Response.SendResponse(Content.Error);
                    return;
                }
 
                Obj = Content.Decoded;
            }
            else
                Obj = null;
 
            string s = Obj as string;
            string Tab = Request.Header["X-TAB"];
 
            if (string.IsNullOrEmpty(Tab))
            {
                await Response.SendResponse(new BadRequestException());
                return;
            }
 
            State State = new State(Request.Session, Tab, s, Request.RemoteEndPoint, User);
            State.Start();
        }
 
        public override HttpAuthenticationScheme[] GetAuthenticationSchemes(HttpRequest Request)
        {
            return this.authenticationSchemes;
        }
    }
}