Added DB Document for perms, and auth middleware
This commit is contained in:
parent
d0184c5b6b
commit
cde60bb78d
6 changed files with 128 additions and 1 deletions
108
src/schemas/permissionSchema.js
Normal file
108
src/schemas/permissionSchema.js
Normal file
|
|
@ -0,0 +1,108 @@
|
|||
/*Canopy - The next generation of stoner streaming software
|
||||
Copyright (C) 2024 Rainbownapkin and the TTN Community
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU Affero General Public License as
|
||||
published by the Free Software Foundation, either version 3 of the
|
||||
License, or (at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU Affero General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU Affero General Public License
|
||||
along with this program. If not, see <https://www.gnu.org/licenses/>.*/
|
||||
|
||||
//NPM Imports
|
||||
const {mongoose} = require('mongoose');
|
||||
|
||||
const rankEnum = ["anon","user", "gold", "bot", "mod", "admin"];
|
||||
|
||||
const permissionSchema = new mongoose.Schema({
|
||||
adminPanel: {
|
||||
type: mongoose.SchemaTypes.String,
|
||||
enum: rankEnum,
|
||||
default: "admin",
|
||||
required: true
|
||||
},
|
||||
registerChannel: {
|
||||
type: mongoose.SchemaTypes.String,
|
||||
enum: rankEnum,
|
||||
default: "admin",
|
||||
required: true
|
||||
},
|
||||
manageChannel: {
|
||||
type: mongoose.SchemaTypes.String,
|
||||
enum: rankEnum,
|
||||
default: "admin",
|
||||
required: true
|
||||
},
|
||||
deleteChannel: {
|
||||
type: mongoose.SchemaTypes.String,
|
||||
enum: rankEnum,
|
||||
default: "admin",
|
||||
required: true
|
||||
},
|
||||
});
|
||||
|
||||
//Statics
|
||||
permissionSchema.statics.rankEnum = rankEnum;
|
||||
|
||||
permissionSchema.statics.getPerms = async function(){
|
||||
//Not sure why 'this' didn't work from here when calling this, I'm assuming it's because I'm doing it from middleware
|
||||
//which is probably binding shit to this function, either way this works :P
|
||||
|
||||
//Get the first document we find
|
||||
var perms = await module.exports.findOne({});
|
||||
|
||||
if(perms){
|
||||
//If we found something then the permissions document exist and this is it,
|
||||
//So long as no one else has fucked with the database it should be the only one. (is this forshadowing for a future bug?)
|
||||
return perms;
|
||||
}else{
|
||||
//Otherwise this is the first launch of the install, say hello
|
||||
console.log("First launch detected! Initializing permissions document in Database!");
|
||||
|
||||
//create and save the permissions document
|
||||
perms = await module.exports.create({});
|
||||
await perms.save();
|
||||
|
||||
//live up to the name of the function
|
||||
return perms;
|
||||
}
|
||||
}
|
||||
|
||||
permissionSchema.statics.rankToNum = function(rank){
|
||||
return rankEnum.indexOf(rank);
|
||||
}
|
||||
|
||||
permissionSchema.statics.permCheck = async function(user, perm){
|
||||
const perms = await this.getPerms();
|
||||
|
||||
if(perms[perm] != null){
|
||||
requiredRank = this.rankToNum(perms[perm])
|
||||
userRank = user ? this.rankToNum(user.rank) : 0;
|
||||
return (userRank >= requiredRank);
|
||||
}else{
|
||||
throw new Error(`Permission check '${perm}' not found!`);
|
||||
}
|
||||
}
|
||||
|
||||
permissionSchema.statics.reqPermCheck = function(perm){
|
||||
return async (req, res, next)=>{
|
||||
if(req.session.user){
|
||||
if(await permissionSchema.statics.permCheck(req.session.user, perm)){
|
||||
next();
|
||||
}else{
|
||||
res.status(401);
|
||||
res.send({error:`You do not have a high enough rank to access this resource.`});
|
||||
}
|
||||
}else{
|
||||
res.status(401);
|
||||
res.send({error:`You must login to access this resource.`});
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = mongoose.model("permissions", permissionSchema);
|
||||
|
|
@ -20,6 +20,7 @@ const {mongoose} = require('mongoose');
|
|||
//local imports
|
||||
const server = require('../server.js');
|
||||
const statSchema = require('./statSchema.js');
|
||||
const permissionSchema = require('./permissionSchema.js');
|
||||
const hashUtil = require('../utils/hashUtils');
|
||||
|
||||
|
||||
|
|
@ -47,7 +48,7 @@ const userSchema = new mongoose.Schema({
|
|||
rank: {
|
||||
type: mongoose.SchemaTypes.String,
|
||||
required: true,
|
||||
enum: ["user", "gold", "bot", "mod", "admin"],
|
||||
enum: permissionSchema.rankEnum,
|
||||
default: "user"
|
||||
},
|
||||
tokes: {
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue