6294334de6
Add endpoints to satellite admin for account management api key creation and revocation. Change-Id: I2390f379f12b0958e68ddd63439d75dae129be19
112 lines
2.4 KiB
Go
112 lines
2.4 KiB
Go
// Copyright (C) 2020 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package admin
|
|
|
|
import (
|
|
"database/sql"
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/gorilla/mux"
|
|
)
|
|
|
|
func (server *Server) addAccountManagementAPIKey(w http.ResponseWriter, r *http.Request) {
|
|
ctx := r.Context()
|
|
|
|
vars := mux.Vars(r)
|
|
userEmail, ok := vars["useremail"]
|
|
if !ok {
|
|
sendJSONError(w, "user-email missing",
|
|
"", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
user, err := server.db.Console().Users().GetByEmail(ctx, userEmail)
|
|
if errors.Is(err, sql.ErrNoRows) {
|
|
sendJSONError(w, fmt.Sprintf("user with email %q does not exist", userEmail),
|
|
"", http.StatusNotFound)
|
|
return
|
|
}
|
|
if err != nil {
|
|
sendJSONError(w, "failed to get user",
|
|
err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
body, err := ioutil.ReadAll(r.Body)
|
|
if err != nil {
|
|
sendJSONError(w, "failed to read body",
|
|
err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
var input struct {
|
|
Expiration string `json:"expiration"`
|
|
}
|
|
|
|
err = json.Unmarshal(body, &input)
|
|
if err != nil {
|
|
sendJSONError(w, "failed to unmarshal request",
|
|
err.Error(), http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
var expiration time.Duration
|
|
if input.Expiration != "" {
|
|
expiration, err = time.ParseDuration(input.Expiration)
|
|
if err != nil {
|
|
sendJSONError(w, "failed to parse expiration. Use format: 00h00m00s",
|
|
err.Error(), http.StatusBadRequest)
|
|
return
|
|
}
|
|
}
|
|
|
|
apiKey, expiresAt, err := server.accountManagementAPIKeys.Create(ctx, user.ID, expiration)
|
|
if err != nil {
|
|
sendJSONError(w, "api key creation failed",
|
|
err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
var output struct {
|
|
APIKey string `json:"apikey"`
|
|
ExpiresAt time.Time `json:"expiresAt"`
|
|
}
|
|
|
|
output.APIKey = apiKey
|
|
output.ExpiresAt = expiresAt
|
|
|
|
data, err := json.Marshal(output)
|
|
if err != nil {
|
|
sendJSONError(w, "json encoding failed",
|
|
err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
sendJSONData(w, http.StatusOK, data)
|
|
}
|
|
|
|
func (server *Server) revokeAccountManagementAPIKey(w http.ResponseWriter, r *http.Request) {
|
|
ctx := r.Context()
|
|
|
|
vars := mux.Vars(r)
|
|
apiKey, ok := vars["apikey"]
|
|
if !ok {
|
|
sendJSONError(w, "api key missing",
|
|
"", http.StatusBadRequest)
|
|
return
|
|
}
|
|
|
|
err := server.accountManagementAPIKeys.Revoke(ctx, apiKey)
|
|
if err != nil {
|
|
sendJSONError(w, "failed to revoke api key",
|
|
err.Error(), http.StatusNotFound)
|
|
return
|
|
}
|
|
}
|