Пример #1
0
 public void ReportBug(string appid, string ErrorCode, string StackTrace, string Message, string Version)
 {
     using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
     {
         queries.sp_InsertBug(appid == null ? Guid.Empty : Guid.Parse(appid), ErrorCode, Message, StackTrace, Version);
     }
 }
Пример #2
0
        /// <summary>
        /// Record the last sync date and time on the users record in the database.
        /// </summary>
        private bool UpdateLastSync(Common user)
        {
            bool result = false;

            if (user.sp_GetLogin == null)
            {
                return(result);
            }

            lock (Authenticated)
            {
                if (Authenticated.Count > 0 && Authenticated.Contains(user.sp_GetLogin.FirstOrDefault().sessionid))
                {
                    using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                    {
                        queries.sp_UpdateLastSync(user.sp_GetLogin.First().user_id);
                        result = true;
                    }
                }
                else
                {
                    //not authenticated
                    throw new FaultException("UpdateLastSync-1: Session not authenticated.");
                }
            }

            return(result);
        }
Пример #3
0
        /// <summary>
        /// Record the last user web login date and time on the users record in the database.
        /// </summary>
        /// <param name="user"></param>
        public void UpdateLastWebLogin(Common user)
        {
            if (user.sp_GetLogin == null)
            {
                throw new FaultException("UpdateLastWebLogin-1: Session not authenticated.");
            }

            lock (Authenticated)
            {
                if (Authenticated.Count > 0 && Authenticated.Contains(user.sp_GetLogin.FirstOrDefault().sessionid))
                {
                    using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                    {
                        queries.sp_UpdateLastWeblogin(user.sp_GetLogin.First().user_id);
                    }
                }
                else
                {
                    //not authenticated
                    throw new FaultException("UpdateLastWebLogin-2: Session not authenticated.");
                }
            }
        }
Пример #4
0
        /// <summary>
        /// Writes the users records to the glucose records table and attaches them to their userid.
        /// </summary>
        /// <param name="records">Glucose records from the users meter.</param>
        /// <param name="user">User information obtained from validating login with the webservice.</param>
        /// <param name="MeterType">Meter type id that corresponds with the primary key in the MeterTypes database table</param>
        /// <returns>Were the records successfully written to the database.</returns>
        public bool PostGlucoseRecords(Records records, Common user, int MeterType)
        {
            bool result = false;

            if (user.sp_GetLogin == null)
            {
                return(result);
            }

            lock (Authenticated)
            {
                if (Authenticated.Count > 0 && Authenticated.Contains(user.sp_GetLogin.FirstOrDefault().sessionid))
                {
                    UpdateLastSync(user);

                    //authenticated session so allow post
                    Common.sp_GetLoginRow userinfo = null;
                    try
                    {
                        userinfo = user.sp_GetLogin.First();
                    }
                    catch (Exception ex)
                    {
                        if (userinfo == null)
                        {
                            throw new FaultException("PostGlucoseRecords-1: Invalid or blank user information detected.");
                        }
                        else
                        {
                            throw new FaultException("PostGlucoseRecords-1: " + ex.Message);
                        }
                    }

                    try
                    {
                        using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                        {
                            foreach (Records.RecordRow row in records.Record)
                            {
                                //write record to database attaching to user
                                try
                                {
                                    queries.sp_PostGlucoseResult(row.Timestamp, row.Glucose, row.Units, userinfo.user_id, MeterType);
                                }//try
                                catch (Exception ex)
                                {
                                    if (ex.Message.ToLowerInvariant().Contains("violation of unique key constraint"))
                                    {
                                        continue;
                                    }
                                    else
                                    {
                                        throw;
                                    }
                                }
                            }
                        }
                    }
                    catch (Exception ex)
                    {
                        throw new FaultException("PostGlucoseRecords-2: " + ex.Message);
                    }

                    result = true;
                }
                else
                {
                    //not authenticated
                    throw new FaultException("PostGlucoseRecords-3: Session not authenticated.");
                }
            }

            return(result);
        }
Пример #5
0
        /// <summary>
        /// Validates the users login and password sent in, and returns the users information if valid.
        /// </summary>
        /// <param name="Assemblyname">Assembly name of the calling assembly</param>
        /// <param name="Appid">Application id to verify originator.</param>
        /// <param name="Username">Username to validate.</param>
        /// <param name="Password">Password to validate.</param>
        /// <returns>User information</returns>
        public Common ValidateLogin(string Assemblyname, string Appid, string Username, string Password)
        {
            lock (Authenticated)
            {
                Authenticated.Clear();
            }

            using (CommonTableAdapters.sp_GetApplicationByTokenTableAdapter tokenAdapter = new CommonTableAdapters.sp_GetApplicationByTokenTableAdapter())
                using (Common.sp_GetApplicationByTokenDataTable dtApps = new Common.sp_GetApplicationByTokenDataTable())
                {
                    tokenAdapter.Fill(dtApps, new Guid(StringCipher.Decrypt(Appid)), StringCipher.Decrypt(Assemblyname));

                    if (dtApps != null && dtApps.Rows.Count <= 0)
                    {
                        //Could not find matching GUID for application in the apps table.
                        //This could possibly be an intruder posing as an app.
                        throw new FaultException("Application token validation failed.");
                    }
                }

            using (CommonTableAdapters.sp_GetLoginTableAdapter ta = new CommonTableAdapters.sp_GetLoginTableAdapter())
                using (Common d = new Common())
                {
                    try
                    {
                        //check the login against plain text in the database but the password is encrypted in the database so only decrypt one layer
                        //username is encrypted on the outer layer using the rotating key, and the inner with the fixed key.
                        //password is encrypted on the outer layer using the rotating key.  The inner layer is never unencrypted.
                        ta.Fill(d.sp_GetLogin, StringCipher.Decrypt(StringCipher.Decrypt(Username), true), StringCipher.Decrypt(Password));

                        if (d.sp_GetLogin != null && d.sp_GetLogin.Count == 1)
                        {
                            //login accepted start session
                            Guid newSessionId = Guid.NewGuid();

                            lock (Authenticated)
                            {
                                Authenticated.Add(newSessionId);
                            }

                            //update user entry with the latest session id
                            using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                            {
                                queries.sp_UpdateUserSession(d.sp_GetLogin.First().user_id, newSessionId);
                            }

                            d.sp_GetLogin.First().sessionid = newSessionId;

                            return(d);
                        }
                        else
                        {
                            //no user by that name exists
                            throw new FaultException("Login failed.");
                        }
                    }
                    catch (Exception ex)
                    {
                        if (ex is FaultException)
                        {
                            throw;
                        }
                        else
                        {
                            throw new FaultException("Unexpected error: " + ex.Message);
                        }
                    }
                }
        }
Пример #6
0
        /// <summary>
        /// Writes the users records to the glucose records table and attaches them to their userid.
        /// </summary>
        /// <param name="records">Glucose records from the users meter.</param>
        /// <param name="user">User information obtained from validating login with the webservice.</param>
        /// <param name="MeterType">Meter type id that corresponds with the primary key in the MeterTypes database table</param>
        /// <returns>Were the records successfully written to the database.</returns>
        public bool PostGlucoseRecords(Records records, Common user, int MeterType)
        {
            bool result = false;

            if (user.sp_GetLogin == null)
            {
                return result;
            }

            lock (Authenticated)
            {
                if (Authenticated.Count > 0 && Authenticated.Contains(user.sp_GetLogin.FirstOrDefault().sessionid))
                {
                    UpdateLastSync(user);

                    //authenticated session so allow post
                    Common.sp_GetLoginRow userinfo = null;
                    try
                    {
                        userinfo = user.sp_GetLogin.First();
                    }
                    catch(Exception ex)
                    {
                        if (userinfo == null)
                        {
                            throw new FaultException("PostGlucoseRecords-1: Invalid or blank user information detected.");
                        }
                        else
                        {
                            throw new FaultException("PostGlucoseRecords-1: " + ex.Message);
                        }
                    }
                    
                    try
                    {
                        using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                        {
                            foreach (Records.RecordRow row in records.Record)
                            {
                                //write record to database attaching to user
                                try
                                {
                                    queries.sp_PostGlucoseResult(row.Timestamp, row.Glucose, row.Units, userinfo.user_id, MeterType);
                                }//try
                                catch (Exception ex)
                                {
                                    if (ex.Message.ToLowerInvariant().Contains("violation of unique key constraint"))
                                        continue;
                                    else
                                        throw;
                                }
                            }
                        }
                    }
                    catch(Exception ex)
                    {
                        throw new FaultException("PostGlucoseRecords-2: " + ex.Message);
                    }

                    result = true;
                }
                else
                {
                    //not authenticated
                    throw new FaultException("PostGlucoseRecords-3: Session not authenticated.");
                }
            }

            return result;
        }
Пример #7
0
        /// <summary>
        /// Validates the users login and password sent in, and returns the users information if valid.
        /// </summary>
        /// <param name="Assemblyname">Assembly name of the calling assembly</param>
        /// <param name="Appid">Application id to verify originator.</param>
        /// <param name="Username">Username to validate.</param>
        /// <param name="Password">Password to validate.</param>
        /// <returns>User information</returns>
        public Common ValidateLogin(string Assemblyname, string Appid, string Username, string Password)
        {
            lock (Authenticated)
            {
                Authenticated.Clear();
            }

            using (CommonTableAdapters.sp_GetApplicationByTokenTableAdapter tokenAdapter = new CommonTableAdapters.sp_GetApplicationByTokenTableAdapter())
            using (Common.sp_GetApplicationByTokenDataTable dtApps = new Common.sp_GetApplicationByTokenDataTable())
            {
                tokenAdapter.Fill(dtApps, new Guid(StringCipher.Decrypt(Appid)), StringCipher.Decrypt(Assemblyname));

                if (dtApps != null && dtApps.Rows.Count <= 0)
                {
                    //Could not find matching GUID for application in the apps table.  
                    //This could possibly be an intruder posing as an app.
                    throw new FaultException("Application token validation failed.");
                }
            }

            using (CommonTableAdapters.sp_GetLoginTableAdapter ta = new CommonTableAdapters.sp_GetLoginTableAdapter())
            using (Common d = new Common())
            {
                try
                {
                    //check the login against plain text in the database but the password is encrypted in the database so only decrypt one layer
                    //username is encrypted on the outer layer using the rotating key, and the inner with the fixed key.
                    //password is encrypted on the outer layer using the rotating key.  The inner layer is never unencrypted.
                    ta.Fill(d.sp_GetLogin, StringCipher.Decrypt(StringCipher.Decrypt(Username), true), StringCipher.Decrypt(Password));
                    
                    if (d.sp_GetLogin != null && d.sp_GetLogin.Count == 1)
                    {
                        //login accepted start session
                        Guid newSessionId = Guid.NewGuid();
                        
                        lock (Authenticated)
                        {
                            Authenticated.Add(newSessionId);
                        }
                        
                        //update user entry with the latest session id
                        using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                        {
                            queries.sp_UpdateUserSession(d.sp_GetLogin.First().user_id, newSessionId);
                        }

                        d.sp_GetLogin.First().sessionid = newSessionId;

                        return d;
                    }
                    else
                    {
                        //no user by that name exists
                        throw new FaultException("Login failed.");
                    }
                }
                catch (Exception ex)
                {
                    if (ex is FaultException)
                        throw;
                    else
                        throw new FaultException("Unexpected error: " + ex.Message);
                }
            }
        }
Пример #8
0
        /// <summary>
        /// Record the last sync date and time on the users record in the database.
        /// </summary>
        private bool UpdateLastSync(Common user)
        {
            bool result = false;

            if (user.sp_GetLogin == null)
            {
                return result;
            }

            lock (Authenticated)
            {
                if (Authenticated.Count > 0 && Authenticated.Contains(user.sp_GetLogin.FirstOrDefault().sessionid))
                {
                    using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                    {
                        queries.sp_UpdateLastSync(user.sp_GetLogin.First().user_id);
                        result = true;
                    }
                }
                else
                {
                    //not authenticated
                    throw new FaultException("UpdateLastSync-1: Session not authenticated.");
                }
            }

            return result;
        }
Пример #9
0
 public void ReportBug(string appid, string ErrorCode, string StackTrace, string Message, string Version)
 {
     using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
     {
         queries.sp_InsertBug(appid == null ? Guid.Empty : Guid.Parse(appid), ErrorCode, Message, StackTrace, Version);
     }
 }
Пример #10
0
        /// <summary>
        /// Record the last user web login date and time on the users record in the database.
        /// </summary>
        /// <param name="user"></param>
        public void UpdateLastWebLogin(Common user)
        {
            if (user.sp_GetLogin == null)
            {
                throw new FaultException("UpdateLastWebLogin-1: Session not authenticated.");
            }

            lock (Authenticated)
            {
                if (Authenticated.Count > 0 && Authenticated.Contains(user.sp_GetLogin.FirstOrDefault().sessionid))
                {
                    using (CommonTableAdapters.QueriesTableAdapter queries = new CommonTableAdapters.QueriesTableAdapter())
                    {
                        queries.sp_UpdateLastWeblogin(user.sp_GetLogin.First().user_id);
                    }
                }
                else
                {
                    //not authenticated
                    throw new FaultException("UpdateLastWebLogin-2: Session not authenticated.");
                }
            }
        }