mirror/fosrl.pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2025-08-31 06:59:33 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

verify email workflow working

Browse source
This commit is contained in:
Milo Schwartz 2024-10-04 23:14:40 -04:00
parent f007e8e87f
commit a8f2ccb94b
23 changed files with 16363 additions and 15802 deletions
Download patch file Download diff file Expand all files Collapse all files

90
server/routers/external.ts
View file

@ -6,8 +6,18 @@ import * as target from "./target";
import * as user from "./user";
import * as auth from "./auth";
import HttpCode from "@server/types/HttpCode";
import { verifySessionMiddleware } from "@server/middlewares";
import { verifyOrgAccess, getUserOrgs, verifySiteAccess, verifyResourceAccess, verifyTargetAccess } from "./auth";
import {
rateLimitMiddleware,
verifySessionMiddleware,
verifySessionUserMiddleware,
} from "@server/middlewares";
import {
verifyOrgAccess,
getUserOrgs,
verifySiteAccess,
verifyResourceAccess,
verifyTargetAccess,
} from "./auth";
// Root routes
export const unauthenticated = Router();
@ -18,7 +28,17 @@ unauthenticated.get("/", (_, res) => {
// Authenticated Root routes
export const authenticated = Router();
authenticated.use(verifySessionMiddleware);
authenticated.use(verifySessionUserMiddleware);
unauthenticated.use(
rateLimitMiddleware({
windowMin: 60,
max: 5,
type: "IP_AND_PATH",
skipCondition: (req) => {
return !["/auth/request-email-code"].includes(req.path);
},
}),
);
authenticated.put("/org", getUserOrgs, org.createOrg);
authenticated.get("/orgs", getUserOrgs, org.listOrgs); // TODO we need to check the orgs here
@ -32,18 +52,54 @@ authenticated.get("/site/:siteId", verifySiteAccess, site.getSite);
authenticated.post("/site/:siteId", verifySiteAccess, site.updateSite);
authenticated.delete("/site/:siteId", verifySiteAccess, site.deleteSite);
authenticated.put("/org/:orgId/site/:siteId/resource", verifyOrgAccess, resource.createResource);
authenticated.put(
"/org/:orgId/site/:siteId/resource",
verifyOrgAccess,
resource.createResource,
);
authenticated.get("/site/:siteId/resources", resource.listResources);
authenticated.get("/org/:orgId/resources", verifyOrgAccess, resource.listResources);
authenticated.get("/resource/:resourceId", verifyResourceAccess, resource.getResource);
authenticated.post("/resource/:resourceId", verifyResourceAccess, resource.updateResource);
authenticated.delete("/resource/:resourceId", verifyResourceAccess, resource.deleteResource);
authenticated.get(
"/org/:orgId/resources",
verifyOrgAccess,
resource.listResources,
);
authenticated.get(
"/resource/:resourceId",
verifyResourceAccess,
resource.getResource,
);
authenticated.post(
"/resource/:resourceId",
verifyResourceAccess,
resource.updateResource,
);
authenticated.delete(
"/resource/:resourceId",
verifyResourceAccess,
resource.deleteResource,
);
authenticated.put("/resource/:resourceId/target", verifyResourceAccess, target.createTarget);
authenticated.get("/resource/:resourceId/targets", verifyResourceAccess, target.listTargets);
authenticated.put(
"/resource/:resourceId/target",
verifyResourceAccess,
target.createTarget,
);
authenticated.get(
"/resource/:resourceId/targets",
verifyResourceAccess,
target.listTargets,
);
authenticated.get("/target/:targetId", verifyTargetAccess, target.getTarget);
authenticated.post("/target/:targetId", verifyTargetAccess, target.updateTarget);
authenticated.delete("/target/:targetId", verifyTargetAccess, target.deleteTarget);
authenticated.post(
"/target/:targetId",
verifyTargetAccess,
target.updateTarget,
);
authenticated.delete(
"/target/:targetId",
verifyTargetAccess,
target.deleteTarget,
);
authenticated.get("/users", user.listUsers);
// authenticated.get("/org/:orgId/users", user.???); // TODO: Implement this
@ -57,3 +113,13 @@ unauthenticated.post("/auth/logout", auth.logout);
authenticated.post("/auth/verify-totp", auth.verifyTotp);
authenticated.post("/auth/request-totp-secret", auth.requestTotpSecret);
authenticated.post("/auth/disable-2fa", auth.disable2fa);
unauthenticated.post(
"/auth/verify-email",
verifySessionMiddleware,
auth.verifyEmail,
);
unauthenticated.post(
"/auth/request-email-code",
verifySessionMiddleware,
auth.requestEmailVerificationCode,
);