Added DB Document for perms, and auth middleware

src/routers/adminPanelRouter.js

@@ -19,11 +19,15 @@ const { Router } = require('express');
 
 
 //local imports
+const permissionSchema = require("../schemas/permissionSchema");
 const adminPanelController = require("../controllers/adminPanelController");
 
 //globals
 const router = Router();
 
+//Use authentication middleware
+router.use(permissionSchema.reqPermCheck("adminPanel"))
+
 //routing functions
 router.get('/', adminPanelController.get);
 

src/routers/api/channelRouter.js

@@ -18,6 +18,7 @@ along with this program.  If not, see <https://www.gnu.org/licenses/>.*/
 const { Router } = require('express');
 
 //local imports
+const permissionSchema = require("../../schemas/permissionSchema");
 const {channelValidator} = require("../../utils/validators");
 const registerController = require("../../controllers/api/channel/registerController");
 const listController = require("../../controllers/api/channel/listController");
@@ -27,6 +28,11 @@ const deleteController = require("../../controllers/api/channel/deleteController
 //globals
 const router = Router();
 
+//user authentication middleware
+router.use("/register",permissionSchema.reqPermCheck("registerChannel"));
+router.use("/delete",permissionSchema.reqPermCheck("deleteChannel"));
+router.use("/settings",permissionSchema.reqPermCheck("manageChannel"));
+
 //routing functions
 router.post('/register', channelValidator.name(), channelValidator.description(), channelValidator.thumbnail(), registerController.post);
 router.get('/list', listController.get);

src/routers/channelRouter.js

@@ -19,12 +19,16 @@ const { Router } = require('express');
 
 
 //local imports
+const permissionSchema = require("../schemas/permissionSchema");
 const channelController = require("../controllers/channelController");
 const channelSettingsController = require("../controllers/channelSettingsController");
 
 //globals
 const router = Router();
 
+//User authentication middleware
+router.use("/*/settings",permissionSchema.reqPermCheck("manageChannel"));
+
 //routing functions
 router.get('/*/settings', channelSettingsController.get);
 router.get('/*/', channelController.get);

src/routers/newChannelRouter.js

@@ -19,11 +19,15 @@ const { Router } = require('express');
 
 
 //local imports
+const permissionSchema = require("../schemas/permissionSchema");
 const newChannelController = require("../controllers/newChannelController");
 
 //globals
 const router = Router();
 
+//user authentication middleware
+router.use("/",permissionSchema.reqPermCheck("registerChannel"));
+
 //routing functions
 router.get('/', newChannelController.get);
 

src/schemas/permissionSchema.js

@@ -0,0 +1,108 @@
+/*Canopy - The next generation of stoner streaming software
+Copyright (C) 2024  Rainbownapkin and the TTN Community
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as
+published by the Free Software Foundation, either version 3 of the
+License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see <https://www.gnu.org/licenses/>.*/
+
+//NPM Imports
+const {mongoose} = require('mongoose');
+
+const rankEnum = ["anon","user", "gold", "bot", "mod", "admin"];
+
+const permissionSchema = new mongoose.Schema({
+    adminPanel: {
+        type: mongoose.SchemaTypes.String,
+        enum: rankEnum,
+        default: "admin",
+        required: true
+    },
+    registerChannel: {
+        type: mongoose.SchemaTypes.String,
+        enum: rankEnum,
+        default: "admin",
+        required: true
+    },
+    manageChannel: {
+        type: mongoose.SchemaTypes.String,
+        enum: rankEnum,
+        default: "admin",
+        required: true
+    },
+    deleteChannel: {
+        type: mongoose.SchemaTypes.String,
+        enum: rankEnum,
+        default: "admin",
+        required: true
+    },
+});
+
+//Statics
+permissionSchema.statics.rankEnum = rankEnum;
+
+permissionSchema.statics.getPerms = async function(){
+    //Not sure why 'this' didn't work from here when calling this, I'm assuming it's because I'm doing it from middleware
+    //which is probably binding shit to this function, either way this works :P
+
+    //Get the first document we find
+    var perms = await module.exports.findOne({});
+    
+    if(perms){
+        //If we found something then the permissions document exist and this is it,
+        //So long as no one else has fucked with the database it should be the only one. (is this forshadowing for a future bug?)
+        return perms;
+    }else{
+        //Otherwise this is the first launch of the install, say hello
+        console.log("First launch detected! Initializing permissions document in Database!");
+
+        //create and save the permissions document
+        perms = await module.exports.create({});
+        await perms.save();
+
+        //live up to the name of the function
+        return perms;
+    }
+}
+
+permissionSchema.statics.rankToNum = function(rank){
+    return rankEnum.indexOf(rank);
+}
+
+permissionSchema.statics.permCheck = async function(user, perm){
+    const perms = await this.getPerms();
+
+    if(perms[perm] != null){
+        requiredRank = this.rankToNum(perms[perm])
+        userRank = user ? this.rankToNum(user.rank) : 0;
+        return (userRank >= requiredRank);
+    }else{
+        throw new Error(`Permission check '${perm}' not found!`);
+    }
+}
+
+permissionSchema.statics.reqPermCheck = function(perm){
+    return async (req, res, next)=>{
+        if(req.session.user){
+            if(await permissionSchema.statics.permCheck(req.session.user, perm)){
+                next();
+            }else{
+                res.status(401);
+                res.send({error:`You do not have a high enough rank to access this resource.`});
+            }
+        }else{
+            res.status(401);
+            res.send({error:`You must login to access this resource.`});
+        }
+    }
+}
+
+module.exports = mongoose.model("permissions", permissionSchema);

src/schemas/userSchema.js

@@ -20,6 +20,7 @@ const {mongoose} = require('mongoose');
 //local imports
 const server = require('../server.js');
 const statSchema = require('./statSchema.js');
+const permissionSchema = require('./permissionSchema.js');
 const hashUtil = require('../utils/hashUtils');
 
 
@@ -47,7 +48,7 @@ const userSchema = new mongoose.Schema({
     rank: {
         type: mongoose.SchemaTypes.String,
         required: true,
-        enum: ["user", "gold", "bot", "mod", "admin"],
+        enum: permissionSchema.rankEnum,
         default: "user"
     },
     tokes: {