Пример #1
0
        /// <summary>
        /// Método utilizado para execução interna através da console de administração
        /// </summary>
        /// <param name="conn">Conexão com banco de dados MS-SQL</param>
        /// <param name="page">Página na qual a requisição foi iniciada</param>
        /// <param name="jRequest">Texto no formato JSON da requisição</param>
        public static String ExecuteLocal(DbBase database, Page page, String jRequest, ExecutionLog logDelegate)
        {
            try
            {
                ExecutionLog eLogs = new ExecutionLog(delegate(Boolean success, Int64 enterpriseIdLog, String method, AccessControl acl, String jRequestLog, String jResponseLog)
                {
                    if (!success)
                    {
                        using (IAMDatabase db = (IAMDatabase)database)
                            db.AddUserLog(LogKey.Debug, null, "API", UserLogLevel.Debug, 0, enterpriseIdLog, 0, 0, 0, 0, 0, "API Call (" + method + "). Result success? " + success, "{\"Request\":" + jRequestLog + ", \"Response\":" + jResponseLog + "}", 0, null);
                    }

                    if (logDelegate != null)
                    {
                        logDelegate(success, enterpriseIdLog, method, acl, jRequestLog, jResponseLog);
                    }
                });


                Int64 enterpriseId = 0;
                if ((page.Session["enterprise_data"]) != null && (page.Session["enterprise_data"] is EnterpriseData))
                {
                    enterpriseId = ((EnterpriseData)page.Session["enterprise_data"]).Id;
                }

                CJSONrpc jsonRpc = new CJSONrpc(database, jRequest, enterpriseId);

                ExternalAccessControl eAuth = GetDelegateInstance(database, page, enterpriseId);

                jsonRpc.ExternalAccessControl += eAuth;
                jsonRpc.ExecutionLog          += eLogs;
                String ret = jsonRpc.Execute();
                jsonRpc.ExternalAccessControl -= eAuth;
                jsonRpc.ExecutionLog          -= eLogs;

                eAuth = null;

                return(ret);
            }
            catch (Exception ex)
            {
                return(null);
            }
            finally
            {
            }
        }
Пример #2
0
        /// <summary>
        /// Método utilizado pela API externa, este método interage diretamente com o page.Request e page.Response
        /// </summary>
        /// <param name="conn">Conexão com banco de dados MS-SQL</param>
        /// <param name="page">Página na qual a requisição foi iniciada</param>
        public static void Execute(DbBase database, Page page, ExecutionLog logDelegate)
        {
            //Checa se o content type está adequado
            Dictionary <String, String> allowed_content = new Dictionary <String, String>();

            allowed_content.Add("application/json-rpc", "json-rpc");
            allowed_content.Add("application/json", "json-rpc");
            allowed_content.Add("application/jsonrequest", "json-rpc");

            //Permite somente o método POST
            if (page.Request.HttpMethod != "POST")
            {
                page.Response.Status     = "412 Precondition Failed";
                page.Response.StatusCode = 412;
                page.Response.End();
                return;
            }

            String contentType = page.Request.ContentType.ToLower().Trim().Split(";".ToCharArray())[0];

            //Permite somente quando o ContentType estiver na listagem definida
            if (!allowed_content.ContainsKey(contentType))
            {
                page.Response.Status     = "412 Precondition Failed";
                page.Response.StatusCode = 412;
                page.Response.End();
                return;
            }

            //Verifica se este IP está bloqueado, se sim rejeita a conexão

            /*if (dsfdsafsd)
             * {
             *  page.Response.Status = "403 Access denied";
             *  page.Response.StatusCode = 403;
             *  page.Response.End();
             *  return;
             * }*/


            if (allowed_content[contentType] == "json-rpc")
            {
                page.Response.ContentType     = "application/json; charset=UTF-8";
                page.Response.ContentEncoding = Encoding.UTF8;

                try
                {
                    using (Stream stm = page.Request.InputStream)
                        using (StreamReader reader = new StreamReader(stm, Encoding.UTF8))
                        {
                            String rData = reader.ReadToEnd();

                            Int64 enterpriseId = 0;
                            if ((page.Session["enterprise_data"]) != null && (page.Session["enterprise_data"] is EnterpriseData))
                            {
                                enterpriseId = ((EnterpriseData)page.Session["enterprise_data"]).Id;
                            }

                            CJSONrpc jsonRpc = new CJSONrpc(database, rData, enterpriseId);

                            ExternalAccessControl eAuth = GetDelegateInstance(database, page, enterpriseId);

                            jsonRpc.ExternalAccessControl += eAuth;
                            if (logDelegate != null)
                            {
                                jsonRpc.ExecutionLog += logDelegate;
                            }
                            String ret = jsonRpc.Execute();
                            jsonRpc.ExternalAccessControl -= eAuth;
                            if (logDelegate != null)
                            {
                                jsonRpc.ExecutionLog -= logDelegate;
                            }

                            Byte[] bRet = Encoding.UTF8.GetBytes(ret);

                            page.Response.Status     = "200 OK";
                            page.Response.StatusCode = 200;
                            page.Response.OutputStream.Write(bRet, 0, bRet.Length);
                            page.Response.OutputStream.Flush();
                        }
                }
                catch (Exception ex)
                {
                    page.Response.Status     = "500 Internal Error";
                    page.Response.StatusCode = 500;
                }
                finally
                {
                }
            }
        }