1
0
mirror of https://github.com/mattermost/focalboard.git synced 2024-12-24 13:43:12 +02:00
focalboard/server/app/auth.go

203 lines
5.4 KiB
Go
Raw Normal View History

2020-11-06 17:46:35 +02:00
package app
import (
"github.com/google/uuid"
2021-01-27 00:13:46 +02:00
"github.com/mattermost/focalboard/server/model"
"github.com/mattermost/focalboard/server/services/auth"
2021-03-26 20:01:54 +02:00
"github.com/mattermost/focalboard/server/services/store"
2020-11-06 17:46:35 +02:00
"github.com/mattermost/mattermost-server/v6/shared/mlog"
2020-11-06 17:46:35 +02:00
"github.com/pkg/errors"
)
const (
DaysPerMonth = 30
DaysPerWeek = 7
HoursPerDay = 24
MinutesPerHour = 60
SecondsPerMinute = 60
)
// GetSession Get a user active session and refresh the session if is needed.
2020-12-02 22:12:14 +02:00
func (a *App) GetSession(token string) (*model.Session, error) {
2021-02-02 22:11:21 +02:00
return a.auth.GetSession(token)
2020-12-02 22:12:14 +02:00
}
// IsValidReadToken validates the read token for a block.
2021-03-26 20:01:54 +02:00
func (a *App) IsValidReadToken(c store.Container, blockID string, readToken string) (bool, error) {
return a.auth.IsValidReadToken(c, blockID, readToken)
2021-02-03 04:15:03 +02:00
}
// GetRegisteredUserCount returns the number of registered users.
2021-01-27 19:22:33 +02:00
func (a *App) GetRegisteredUserCount() (int, error) {
return a.store.GetRegisteredUserCount()
2021-01-14 02:56:01 +02:00
}
// GetDailyActiveUsers returns the number of daily active users.
2021-01-27 20:01:24 +02:00
func (a *App) GetDailyActiveUsers() (int, error) {
secondsAgo := int64(SecondsPerMinute * MinutesPerHour * HoursPerDay)
2021-01-27 20:01:24 +02:00
return a.store.GetActiveUserCount(secondsAgo)
}
// GetWeeklyActiveUsers returns the number of weekly active users.
2021-01-27 20:01:24 +02:00
func (a *App) GetWeeklyActiveUsers() (int, error) {
secondsAgo := int64(SecondsPerMinute * MinutesPerHour * HoursPerDay * DaysPerWeek)
2021-01-27 20:01:24 +02:00
return a.store.GetActiveUserCount(secondsAgo)
}
// GetMonthlyActiveUsers returns the number of monthly active users.
2021-01-27 20:01:24 +02:00
func (a *App) GetMonthlyActiveUsers() (int, error) {
secondsAgo := int64(SecondsPerMinute * MinutesPerHour * HoursPerDay * DaysPerMonth)
2021-01-27 20:01:24 +02:00
return a.store.GetActiveUserCount(secondsAgo)
}
// GetUser gets an existing active user by id.
func (a *App) GetUser(id string) (*model.User, error) {
if len(id) < 1 {
return nil, errors.New("no user ID")
}
user, err := a.store.GetUserByID(id)
2020-12-07 21:40:16 +02:00
if err != nil {
2021-01-20 19:47:08 +02:00
return nil, errors.Wrap(err, "unable to find user")
2020-12-07 21:40:16 +02:00
}
return user, nil
}
// Login create a new user session if the authentication data is valid.
2021-03-21 10:28:26 +02:00
func (a *App) Login(username, email, password, mfaToken string) (string, error) {
2020-11-06 17:46:35 +02:00
var user *model.User
if username != "" {
var err error
user, err = a.store.GetUserByUsername(username)
if err != nil {
a.metrics.IncrementLoginFailCount(1)
2020-11-06 17:46:35 +02:00
return "", errors.Wrap(err, "invalid username or password")
}
}
if user == nil && email != "" {
var err error
user, err = a.store.GetUserByEmail(email)
if err != nil {
a.metrics.IncrementLoginFailCount(1)
2020-11-06 17:46:35 +02:00
return "", errors.Wrap(err, "invalid username or password")
}
}
if user == nil {
a.metrics.IncrementLoginFailCount(1)
2020-11-06 17:46:35 +02:00
return "", errors.New("invalid username or password")
}
if !auth.ComparePassword(user.Password, password) {
a.metrics.IncrementLoginFailCount(1)
a.logger.Debug("Invalid password for user", mlog.String("userID", user.ID))
2020-11-06 17:46:35 +02:00
return "", errors.New("invalid username or password")
}
2021-03-26 20:01:54 +02:00
authService := user.AuthService
if authService == "" {
authService = "native"
}
2020-12-02 22:12:14 +02:00
session := model.Session{
2021-03-26 20:01:54 +02:00
ID: uuid.New().String(),
Token: uuid.New().String(),
UserID: user.ID,
AuthService: authService,
Props: map[string]interface{}{},
2020-12-02 22:12:14 +02:00
}
err := a.store.CreateSession(&session)
if err != nil {
return "", errors.Wrap(err, "unable to create session")
}
a.metrics.IncrementLoginCount(1)
2020-11-06 17:46:35 +02:00
// TODO: MFA verification
2020-12-02 22:12:14 +02:00
return session.Token, nil
2020-11-06 17:46:35 +02:00
}
// RegisterUser creates a new user if the provided data is valid.
2021-03-21 10:28:26 +02:00
func (a *App) RegisterUser(username, email, password string) error {
2020-11-06 17:46:35 +02:00
var user *model.User
if username != "" {
var err error
user, err = a.store.GetUserByUsername(username)
if err == nil && user != nil {
return errors.New("The username already exists")
2020-11-06 17:46:35 +02:00
}
}
if user == nil && email != "" {
var err error
user, err = a.store.GetUserByEmail(email)
if err == nil && user != nil {
return errors.New("The email already exists")
2020-11-06 17:46:35 +02:00
}
}
// TODO: Move this into the config
passwordSettings := auth.PasswordSettings{
MinimumLength: 6,
}
err := auth.IsPasswordValid(password, passwordSettings)
if err != nil {
return errors.Wrap(err, "Invalid password")
}
err = a.store.CreateUser(&model.User{
ID: uuid.New().String(),
Username: username,
Email: email,
Password: auth.HashPassword(password),
MfaSecret: "",
2021-03-26 20:01:54 +02:00
AuthService: a.config.AuthMode,
2020-11-06 17:46:35 +02:00
AuthData: "",
Props: map[string]interface{}{},
})
if err != nil {
return errors.Wrap(err, "Unable to create the new user")
}
return nil
}
2021-03-21 10:28:26 +02:00
func (a *App) UpdateUserPassword(username, password string) error {
err := a.store.UpdateUserPassword(username, auth.HashPassword(password))
if err != nil {
return err
}
return nil
}
2021-01-22 21:28:45 +02:00
2021-03-21 10:28:26 +02:00
func (a *App) ChangePassword(userID, oldPassword, newPassword string) error {
2021-01-21 20:16:40 +02:00
var user *model.User
if userID != "" {
var err error
user, err = a.store.GetUserByID(userID)
2021-01-21 20:16:40 +02:00
if err != nil {
return errors.Wrap(err, "invalid username or password")
}
}
if user == nil {
return errors.New("invalid username or password")
}
if !auth.ComparePassword(user.Password, oldPassword) {
a.logger.Debug("Invalid password for user", mlog.String("userID", user.ID))
2021-01-21 20:16:40 +02:00
return errors.New("invalid username or password")
}
err := a.store.UpdateUserPasswordByID(userID, auth.HashPassword(newPassword))
if err != nil {
return errors.Wrap(err, "unable to update password")
}
return nil
}