private async Task <bool> OnAuthRequest(HttpListenerRequestEventArgs context)
{
var request = context.Request;
var response = context.Response;
try
{
var extPort = SettingsManager.Get("webServerModule", "webExternalPort");
var port = SettingsManager.Get("webServerModule", "webListenPort");
if (request.HttpMethod == HttpMethod.Get.ToString())
{
if (request.Url.LocalPath == "/callback.php" || request.Url.LocalPath == $"{extPort}/callback.php" || request.Url.LocalPath == $"{port}/callback.php")
{
var clientID = SettingsManager.Get("auth", "ccpAppClientId");
var secret = SettingsManager.Get("auth", "ccpAppSecret");
var prms = request.Url.Query.TrimStart('?').Split('&');
var code = prms[0].Split('=')[1];
var state = prms.Length > 1 ? prms[1].Split('=')[1] : null;
if (state != "12")
{
return(false);
}
//state = 12 && have code
var result = await WebAuthModule.GetCHaracterIdFromCode(code, clientID, secret);
if (result == null)
{
//TODO invalid auth
await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(true);
}
await SQLHelper.SQLiteDataInsertOrUpdateTokens("", result[0], result[1]);
response.Headers.ContentEncoding.Add("utf-8");
response.Headers.ContentType.Add("text/html;charset=utf-8");
await response.WriteContentAsync(File.ReadAllText(SettingsManager.FileTemplateMailAuthSuccess)
.Replace("{header}", "authTemplateHeader")
.Replace("{body}", LM.Get("mailAuthSuccessHeader"))
.Replace("{body2}", LM.Get("mailAuthSuccessBody"))
);
return(true);
}
}
}
catch (Exception ex)
{
await LogHelper.LogEx(ex.Message, ex, Category);
}
return(false);
}
private async Task <bool> OnDisplayTimers(HttpListenerRequestEventArgs context)
{
var request = context.Request;
var response = context.Response;
try
{
var extPort = SettingsManager.Get("webServerModule", "webExternalPort");
var port = SettingsManager.Get("webServerModule", "webListenPort");
if (request.HttpMethod == HttpMethod.Get.ToString())
{
if (request.Url.LocalPath == "/callback.php" || request.Url.LocalPath == $"{extPort}/callback.php" || request.Url.LocalPath == $"{port}/callback.php")
{
var clientID = SettingsManager.Get("auth", "ccpAppClientId");
var secret = SettingsManager.Get("auth", "ccpAppSecret");
var prms = request.Url.Query.TrimStart('?').Split('&');
var code = prms[0].Split('=')[1];
var state = prms.Length > 1 ? prms[1].Split('=')[1] : null;
if (state != "11")
{
return(false);
}
//state = 11 && have code
var result = await WebAuthModule.GetCHaracterIdFromCode(code, clientID, secret);
if (result == null)
{
//TODO invalid auth
await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(true);
}
var characterId = Convert.ToInt32(result[0]);
await SQLHelper.SQLiteDataInsertOrUpdate("timersAuth", new Dictionary <string, object> {
{ "id", result[0] }, { "time", DateTime.Now }
});
//redirect to timers
var iid = Convert.ToBase64String(Encoding.UTF8.GetBytes(characterId.ToString()));
iid = HttpUtility.UrlEncode(iid);
var url = $"{WebServerModule.GetTimersURL()}?data=0&id={iid}&state=11";
await response.RedirectAsync(new Uri(url));
return(true);
}
if (request.Url.LocalPath == "/timers.php" || request.Url.LocalPath == $"{extPort}/timers.php" || request.Url.LocalPath == $"{port}/timers.php")
{
if (string.IsNullOrWhiteSpace(request.Url.Query))
{
//redirect to auth
await response.RedirectAsync(new Uri(WebServerModule.GetTimersAuthURL()));
return(true);
}
var prms = request.Url.Query.TrimStart('?').Split('&');
if (prms.Length != 3)
{
await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(true);
}
var data = prms[0].Split('=')[1];
var inputId = prms[1].Split('=')[1];
var state = prms[2].Split('=')[1];
if (state != "11")
{
await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(true);
}
var characterId = Convert.ToInt32(Encoding.UTF8.GetString(Convert.FromBase64String(HttpUtility.UrlDecode(inputId))));
var rChar = await APIHelper.ESIAPI.GetCharacterData(Reason, characterId, true);
if (rChar == null)
{
await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(true);
}
//have charId - had to check it
//check in db
var timeout = SettingsManager.GetInt("timersModule", "authTimeoutInMinutes");
if (timeout != 0)
{
var result = await SQLHelper.SQLiteDataQuery <string>("timersAuth", "time", "id", characterId.ToString());
if (result == null || (DateTime.Now - DateTime.Parse(result)).TotalMinutes > timeout)
{
//redirect to auth
await response.RedirectAsync(new Uri(WebServerModule.GetTimersAuthURL()));
return(true);
}
}
if (!CheckAccess(characterId, rChar, out var isEditor))
{
return(true);
}
if (isEditor && data.StartsWith("delete"))
{
data = data.Substring(6, data.Length - 6);
await SQLHelper.SQLiteDataDelete("timers", "id", data);
}
await WriteCorrectResponce(response, isEditor, characterId);
return(true);
}
}
else if (request.HttpMethod == HttpMethod.Post.ToString())
{
var prms = request.Url.Query.TrimStart('?').Split('&');
if (prms.Length != 3)
{
//await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(false);
}
var inputId = prms[1].Split('=')[1];
var state = prms[2].Split('=')[1];
if (state != "11")
{
// await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(false);
}
var characterId = Convert.ToInt32(Encoding.UTF8.GetString(Convert.FromBase64String(HttpUtility.UrlDecode(inputId))));
var rChar = await APIHelper.ESIAPI.GetCharacterData(Reason, characterId, true);
if (rChar == null)
{
await response.RedirectAsync(new Uri(WebServerModule.GetWebSiteUrl()));
return(true);
}
if (!CheckAccess(characterId, rChar, out var isEditor))
{
return(true);
}
var data = await request.ReadContentAsStringAsync();
if (isEditor && data != null)
{
if (data.StartsWith("delete"))
{
data = data.Substring(6, data.Length - 6);
await SQLHelper.SQLiteDataDelete("timers", "id", data);
}
else
{
TimerItem entry = null;
try
{
entry = JsonConvert.DeserializeObject <TimerItem>(data);
}
catch
{
//ignore
}
if (entry == null)
{
await response.WriteContentAsync(LM.Get("invalidInputData"));
return(true);
}
if (entry.GetDateTime() == null)
{
await response.WriteContentAsync(LM.Get("invalidTimeFormat"));
return(true);
}
//save
entry.timerChar = rChar.name;
await SQLHelper.SQLiteDataInsertOrUpdate("timers", entry.GetDictionary());
}
return(true);
}
}
}
catch (Exception ex)
{
await LogHelper.LogEx(ex.Message, ex, Category);
}
return(false);
}
