AdminService.cs

using System.Collections.Generic;
using System.Threading.Tasks;
using Waher.Events;
using Waher.Networking.HTTP;
using Waher.Script;
using Waher.Security;
 
namespace Waher.Service.IoTBroker.Admin.WebService
{
    public class AdminService : HttpSynchronousResource, IHttpPostMethod
    {
        private readonly HttpAuthenticationScheme[] authenticationSchemes;
 
        public AdminService(string ResourceName, params HttpAuthenticationScheme[] AuthenticationSchemes)
            : base(ResourceName)
        {
            this.authenticationSchemes = AuthenticationSchemes;
        }
 
        public override bool HandlesSubPaths => false;
 
        public override bool UserSessions => true;
 
        public bool AllowsPOST => true;
 
        public async Task POST(HttpRequest Request, HttpResponse Response)
        {
            IUser User = null;
 
            if (Request.Session is null ||
                !Request.Session.TryGetVariable("User", out Variable v) ||
                ((User = v.ValueObject as IUser) is null) ||
                !User.HasPrivilege("Admin"))
            {
                throw ForbiddenException.AccessDenied(this.ResourceName, User?.UserName, "Admin");
            }
 
            object Obj = Request.HasData ? await Request.DecodeDataAsync() : null;
            string s = Obj as string;
            string Tab = Request.Header["X-TAB"];
 
            if (string.IsNullOrEmpty(Tab))
                throw new BadRequestException();
 
            State State = new State(Request.Session, Tab, s, Request.RemoteEndPoint, User);
            State.Start();
        }
 
        public override HttpAuthenticationScheme[] GetAuthenticationSchemes(HttpRequest Request)
        {
            return this.authenticationSchemes;
        }
    }
}