admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2020-05-22 17:48:00 +00:00
parent 104b386b78
commit a26d849dd6
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
server/AyaNova/Controllers/BackupController.cs
View File

@@ -25,8 +25,7 @@ namespace AyaNova.Api.Controllers
[ApiController] [ApiController]
[ApiVersion("8.0")] [ApiVersion("8.0")]
[Route("api/v{version:apiVersion}/backup")] [Route("api/v{version:apiVersion}/backup")]
[Produces("application/json")] [Produces("application/json")]
[Authorize]
public class BackupController : ControllerBase public class BackupController : ControllerBase
{ {
private readonly AyContext ct; private readonly AyContext ct;
@@ -80,6 +79,7 @@ namespace AyaNova.Api.Controllers
/// </summary> /// </summary>
/// <returns></returns> /// <returns></returns>
[HttpGet("status")] [HttpGet("status")]
[Authorize]
public ActionResult BackupStatus() public ActionResult BackupStatus()
{ {
//Need size and more info //Need size and more info
@@ -119,7 +119,8 @@ namespace AyaNova.Api.Controllers
await Task.Delay(nFailedAuthDelay);//DOS protection await Task.Delay(nFailedAuthDelay);//DOS protection
return StatusCode(401, new ApiErrorResponse(ApiErrorCode.AUTHENTICATION_FAILED)); return StatusCode(401, new ApiErrorResponse(ApiErrorCode.AUTHENTICATION_FAILED));
} }
if (!Authorized.HasAnyRole(HttpContext.Items, AuthorizationRoles.OpsAdminFull | AuthorizationRoles.OpsAdminLimited))
if (!Authorized.HasAnyRole(DownloadUser.Roles, AuthorizationRoles.OpsAdminFull | AuthorizationRoles.OpsAdminLimited))
{ {
await Task.Delay(nFailedAuthDelay);//DOS protection await Task.Delay(nFailedAuthDelay);//DOS protection
return StatusCode(403, new ApiNotAuthorizedResponse()); return StatusCode(403, new ApiNotAuthorizedResponse());
@@ -133,10 +134,13 @@ namespace AyaNova.Api.Controllers
string mimetype = fileName.EndsWith("zip") ? "application/zip" : "application/octet-stream"; string mimetype = fileName.EndsWith("zip") ? "application/zip" : "application/octet-stream";
var utilityFilePath = FileUtil.GetFullPathForUtilityFile(fileName); var utilityFilePath = FileUtil.GetFullPathForUtilityFile(fileName);
await EventLogProcessor.LogEventToDatabaseAsync(new Event(DownloadUser.Id, 0, AyaType.NoType, AyaEvent.UtilityFileDownload, fileName), ct); await EventLogProcessor.LogEventToDatabaseAsync(new Event(DownloadUser.Id, 0, AyaType.NoType, AyaEvent.UtilityFileDownload, fileName), ct);
return PhysicalFile(utilityFilePath, mimetype); return PhysicalFile(utilityFilePath, mimetype, fileName);
} }
//DANGER: MUST ADD AUTHORIZE ATTRIBUTE TO ANY NEW ROUTES
//[Authorize]
}//eoc }//eoc
}//eons }//eons