9314705def
* initial (very incomplete) work on PC Services Admin (eg csops) * primitive account listing * add ban/unban/delete functionality * fix wtv-tricks theme * fix wtv-tricks theme (cSetup) * better tricks code * fix session_data.getTicketData() * speedtest and other tricks stuff * better protection against direct access to finished url * dependancies update (run `npm update`) * Bump path-to-regexp and express in /zefie_wtvp_minisrv (#29) Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 0.1.12 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `path-to-regexp` from 0.1.10 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12) Updates `express` from 4.21.1 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](https://github.com/expressjs/express/compare/4.21.1...4.21.2) --- updated-dependencies: - dependency-name: path-to-regexp dependency-type: indirect - dependency-name: express dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix up path functions * force version 1.2.1 of newsie due to breaking change * remove debug log print for usenet * fix account directory was broken due to previous changes * fix wtv-home:/home was hiding options bar * bump to 0.9.54 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
182 lines
8.8 KiB
JavaScript
182 lines
8.8 KiB
JavaScript
var minisrv_service_file = true;
|
|
|
|
WTVPCAdmin = require(classPath + "/WTVPCAdmin.js")
|
|
var wtva = new WTVPCAdmin(minisrv_config, socket, service_name);
|
|
var auth = wtva.isAuthorized();
|
|
if (auth === true) {
|
|
var password = null;
|
|
if (request_headers.authorization) {
|
|
var authheader = request_headers.authorization.split(' ');
|
|
console.log(request_headers)
|
|
|
|
if (authheader[0] == "Basic") {
|
|
password = Buffer.from(authheader[1], 'base64').toString();
|
|
password = password.split(':')[1];
|
|
}
|
|
}
|
|
if (wtva.checkPassword(password)) {
|
|
headers = `200 OK
|
|
Content-Type: text/html`
|
|
|
|
htmlhead = `<html>
|
|
<head>
|
|
<title>zefie minisrv v${minisrv_config.version} account administration</title>
|
|
</head>
|
|
<body bgcolor="#000000" text="#449944" link="gold" alink="gold" vlink="gold">
|
|
<p>
|
|
Welcome to the zefie minisrv v${minisrv_config.version} Account Administration
|
|
</p>
|
|
`;
|
|
data = htmlhead;
|
|
if (!request_headers.query.cmd) {
|
|
data += `Please select an option to get started:
|
|
<hr>
|
|
<a href="?cmd=list">List all SSIDs and their Primary User</a><br>
|
|
</p>
|
|
</body>
|
|
</html >`;
|
|
}
|
|
else if (request_headers.query.cmd == "list") {
|
|
data += `<hr>`;
|
|
if (request_headers.query.msg) {
|
|
data += decodeURI(request_headers.query.msg) + "<hr>";
|
|
}
|
|
data += `<table border=1>`;
|
|
accounts = wtva.listRegisteredSSIDs();
|
|
Object.keys(accounts).forEach(function (k) {
|
|
data += `<tr><td><a href="?cmd=ssid&ssid=${accounts[k][0]}">${accounts[k][0]}</a></td><td>${(accounts[k][1]['username'] === undefined) ? "Unregistered SSID" : accounts[k][1]['username'] }</td></tr>`;
|
|
});
|
|
data += `</table>`;
|
|
|
|
} else if (request_headers.query.cmd == "ssid") {
|
|
var ssid = request_headers.query.ssid;
|
|
if (!ssid) {
|
|
redirectmsg = `An SSID is required for the ${request_headers.query.cmd} command.`;
|
|
} else {
|
|
data += "<hr>";
|
|
if (request_headers.query.msg) {
|
|
data += decodeURI(request_headers.query.msg) + "<hr>";
|
|
}
|
|
data += `<script>
|
|
function validateSelection(cmd, ssid, friendlymsg) {
|
|
conf = confirm("Are you sure you wish to "+friendlymsg+"?\\n\\n"+ssid);
|
|
if (conf) {
|
|
location.href = "/admin/?cmd="+cmd+"&ssid="+ssid;
|
|
}
|
|
}
|
|
</script>
|
|
`
|
|
data += `<p>Management for SSID: ${ssid}</p>`;
|
|
data += `<form action="/admin/" method="GET">`
|
|
data += `<input type="button" value="Delete Account" onclick="validateSelection('delete', '${ssid}', 'delete all accounts associated with this SSID')">`
|
|
if (wtva.isBanned(ssid)) {
|
|
data += `<input type="button" value="Ban Account" onclick="validateSelection('ban', '${ssid}', 'ban this SSID')" disabled=disabled>`
|
|
data += `<input type="button" value="Unban Account" onclick="validateSelection('unban', '${ssid}', 'unban this SSID')">`
|
|
} else {
|
|
data += `<input type="button" value="Ban Account" onclick="validateSelection('ban', '${ssid}', 'ban this SSID')">`
|
|
data += `<input type="button" value="Unban Account" onclick="validateSelection('unban', '${ssid}', 'unban this SSID')" disabled=disabled>`
|
|
}
|
|
data += "<p><table border=1>";
|
|
user_info = wtva.getAccountInfoBySSID(ssid.toLowerCase());
|
|
if (user_info.account_users) {
|
|
if (user_info.account_users['subscriber']) {
|
|
data += `<tr><td>Primary User:</td><td>${user_info.account_users['subscriber'].subscriber_username}</td></tr>`;
|
|
if (Object.keys(user_info.account_users).length > 1) {
|
|
data += `<tr><td style="vertical-align: top">Additional Users:</td><td>`;
|
|
Object.keys(user_info.account_users).forEach(function (k) {
|
|
if (k == "subscriber") return;
|
|
data += user_info.account_users[k].subscriber_username + "<br>";
|
|
})
|
|
data += `</td></tr>`
|
|
}
|
|
data += "</table></p>";
|
|
} else {
|
|
data += "The user aborted registration, so this account has no users."
|
|
}
|
|
} else {
|
|
data += "The SSID does not exist in the SessionStore."
|
|
}
|
|
}
|
|
} else if (request_headers.query.cmd == "delete") {
|
|
redirectmsg = "";
|
|
var ssid = request_headers.query.ssid;
|
|
if (ssid) {
|
|
var userAccount = wtva.getAccountBySSID(ssid);
|
|
userAccount.unregisterBox();
|
|
redirectmsg = `All data for SSID ${ssid} has been deleted. Please note that this does not include Usenet posts made by this account.`;
|
|
} else {
|
|
redirectmsg = `An SSID is required for the ${request_headers.query.cmd} command.`;
|
|
}
|
|
headers = "302 OK\nLocation: /admin/?cmd=list&msg=" + encodeURI(redirectmsg);
|
|
} else if (request_headers.query.cmd == "ban") {
|
|
redirectmsg = "";
|
|
var ssid = request_headers.query.ssid;
|
|
if (ssid) {
|
|
var fake_config = wtvshared.getUserConfig();
|
|
if (!fake_config.config) fake_config.config = {};
|
|
if (!fake_config.config.ssid_block_list) fake_config.config.ssid_block_list = [];
|
|
var entry_exists = false;
|
|
Object.keys(fake_config.config.ssid_block_list).forEach(function (k) {
|
|
if (fake_config.config.ssid_block_list[k] == ssid) {
|
|
redirectmsg = "The SSID was already banned.";
|
|
}
|
|
});
|
|
if (!entry_exists) {
|
|
fake_config.config.ssid_block_list.push(ssid);
|
|
wtvshared.writeToUserConfig(fake_config);
|
|
reloadConfig();
|
|
redirectmsg = "The SSID is now banned.";
|
|
}
|
|
} else {
|
|
redirectmsg = `An SSID is required for the ${request_headers.query.cmd} command.`;
|
|
}
|
|
headers = "302 OK\nLocation: /admin/?cmd=ssid&ssid=" + encodeURI(ssid) + "&msg=" + encodeURI(redirectmsg);
|
|
} else if (request_headers.query.cmd == "unban") {
|
|
redirectmsg = "The SSID was not banned, so it could not be unbanned.";
|
|
var ssid = request_headers.query.ssid;
|
|
if (ssid) {
|
|
var config_changed = false;
|
|
var fake_config = wtvshared.getUserConfig();
|
|
if (!fake_config.config) fake_config.config = {};
|
|
if (!fake_config.config.ssid_block_list) fake_config.config.ssid_block_list = [];
|
|
if (typeof request_headers.query.ssid === 'string') {
|
|
Object.keys(fake_config.config.ssid_block_list).forEach(function (k) {
|
|
if (fake_config.config.ssid_block_list[k] == request_headers.query.ssid) {
|
|
fake_config.config.ssid_block_list.splice(k, 1);
|
|
config_changed = true
|
|
}
|
|
});
|
|
} else {
|
|
Object.keys(fake_config.config.ssid_block_list).forEach(function (k) {
|
|
Object.keys(request_headers.query.ssid).forEach(function (j) {
|
|
if (fake_config.config.ssid_block_list[k] == request_headers.query.ssid[j]) {
|
|
fake_config.config.ssid_block_list.splice(k, 1);
|
|
config_changed = true
|
|
}
|
|
});
|
|
});
|
|
}
|
|
if (config_changed) {
|
|
wtvshared.writeToUserConfig(fake_config);
|
|
minisrv_config = reloadConfig();
|
|
redirectmsg = "The SSID is now unbanned.";
|
|
}
|
|
else {
|
|
redirectmsg = `An SSID is required for the ${request_headers.query.cmd} command.`;
|
|
}
|
|
}
|
|
headers = "302 OK\nLocation: /admin/?cmd=ssid&ssid=" + encodeURI(ssid) + "&msg=" + encodeURI(redirectmsg);
|
|
}
|
|
|
|
} else {
|
|
var errpage = wtvshared.doErrorPage(401, "Please enter the administration password, you can leave the username blank.");
|
|
headers = errpage[0];
|
|
headers += "\nWWW-Authenticate: Basic";
|
|
data = errpage[1];
|
|
}
|
|
} else {
|
|
var errpage = wtvshared.doErrorPage(403, auth);
|
|
headers = errpage[0];
|
|
data = errpage[1];
|
|
}
|