#[macro_use] extern crate rocket; use std::collections::HashSet; use rocket::{http::Status, serde::json::Json, State}; use rocket_cors::CorsOptions; use serde::{Deserialize, Serialize}; mod uid; use tokio::sync::Mutex; use uid::UID; mod db; use db::{DB, User, Config, Token, Color}; #[get("/")] async fn index() -> &'static str { "This is a POKO server" } #[derive(Serialize)] struct AuthUserOut { name: String, id: UID, tokovec: Vec, } impl Into for User { fn into(self) -> AuthUserOut { AuthUserOut { name: self.get_name(), id: self.get_id(), tokovec: self.get_tokovec() } } } #[derive(Serialize)] struct UserOut { name: String, id: UID, } impl Into for User { fn into(self) -> UserOut { UserOut { name: self.get_name(), id: self.get_id() } } } #[post("/get", data="", format="json")] async fn get_user_authenticated(data: Json, db: &State>) -> (Status, Result, Json>) { let db = db.lock().await; match db.get_user_authenticated(data.id, &data.session).await { Ok(n) => (Status::Ok, Ok(Json(n.clone().into()))), Err(n) => (Status::NotFound, Err(n.into())) } } #[get("/")] async fn get_user(user: UID, db: &State>) -> (Status, Result, Json>) { let db = db.lock().await; match db.get_user(user) { Ok(n) => (Status::Ok, Ok(Json(n.clone().into()))), Err(n) => (Status::NotFound, Err(n.into())) } } #[get("/by_name/")] async fn get_users_by_name(user: &str, db: &State>) -> (Status, Result>, Json>) { let db = db.lock().await; match db.get_user_by_name(user).await { Ok(n) => (Status::Ok, Ok(Json(n.into_iter().map(|v| v.into()).collect()))), Err(n) => (Status::NotFound, Err(n.into())) } } #[get("/list")] async fn get_all_users(db: &State>) -> (Status, Result>, Json>) { let db = db.lock().await; match db.get_all_users().await { Ok(n) => (Status::Ok, Ok(Json(n.into_iter().map(|v| v.into()).collect()))), //Nothing found Err(n) => (Status::NotFound, Err(n.into())), } } fn default_id() -> UID { uid::EMPTY_UID } #[derive(Deserialize)] struct UserForm { name: String, password: String, #[serde(default = "default_id")] id: UID, } #[post("/register", data="", format="json")] async fn new_user(data: Json, db: &State>) -> (Status, Result, Json>) { let mut db = db.lock().await; let id; let name = data.name.to_string(); let name = name.trim(); if name.is_empty() { return (Status::BadRequest, Err("Invalid Username".to_string().into())) } if data.id == uid::EMPTY_UID { match db.uid_generator.new_uid() { // Gotten a new UID to make a new user with Ok(n) => id = Some(n), // Did not get a new UID Err(n) => return (Status::InternalServerError, Err(n.clone().into())), }; } else { if db.uid_generator.is_taken(data.id) { // UID is taken return (Status::BadRequest, Err("UID is taken".to_string().into())); } else { // UID is not taken match db.uid_generator.add_uid(data.id) { // Could not add UID for some reason Err(n) => return (Status::InternalServerError, Err(n.into())), // Made Ok(n) => id = Some(n), }; } } match id { None => return (Status::InternalServerError, Err("".to_string().into())), Some(n) => { match db.new_user(name.into(), data.password.clone(), n).await { // User has been created Ok(u) => return (Status::Created, Ok(Json(u.into()))), // Could not create user Err(n) => return (Status::InternalServerError, Err(n.into())), } } } } #[derive(Deserialize)] struct LoginForm { id: UID, password: String, clientid: String, } #[post("/login", data="", format="json", rank=2)] async fn login(data: Json, db: &State>) -> (Status, Json) { let mut db = db.lock().await; match db.login(data.id, &data.password, &data.clientid).await { Ok(n) => (Status::Ok, n.into()), Err(n) => (Status::Unauthorized, n.into()), } } #[derive(Deserialize)] struct LogoutForm { id: UID, session: String, } #[post("/logout", data="", format="json")] async fn logout(data: Json, db: &State>) -> (Status, Result<(), Json>) { let mut db = db.lock().await; match db.logout(data.id, &data.session).await { Ok(_) => (Status::Ok, Ok(())), Err(n) => (Status::Unauthorized, Err(n.into())), } } #[post("/logout/all", data="", format="json")] async fn logout_all(data: Json, db: &State>) -> (Status, Result, Json>) { let mut db = db.lock().await; match db.logout_all(data.id, &data.session).await { Ok(n) => (Status::Ok, Ok(n.into())), Err(n) => (Status::Unauthorized, Err(n.into())), } } #[post("/sessions", data="", format="json")] async fn get_sessions(data: Json, db: &State>) -> (Status, Result>, Json>) { let db = db.lock().await; match db.get_sessions(data.id, &data.session).await { Ok(n) => (Status::Ok, Ok(n.into())), Err(n) => (Status::Unauthorized, Err(n.into())), } } #[post("/delete", data="", format="json")] async fn delete(data: Json, db: &State>) -> (Status, Result, Json>) { let mut db = db.lock().await; match db.delete_user(data.id, &data.session).await { Ok(n) => (Status::Ok, Ok(n.into())), Err(n) => (Status::Unauthorized, Err(n.into())), } } #[derive(Deserialize)] struct UpdateForm { id: UID, session: String, name: String, old_password: String, new_password: String, } #[post("/update/info", data="", format="json")] async fn update_user(data: Json, db: &State>) -> (Status, Result<(), Json>) { let mut db = db.lock().await; match db.update_user(data.id, &data.session, data.name.clone(), data.old_password.clone(), data.new_password.clone()).await { Ok(_) => (Status::Ok, Ok(())), Err(n) => (Status::InternalServerError, Err(n.into())) } } #[derive(Deserialize, Debug)] struct TransferForm { id: UID, session: String, to: UID, color: Color, amount: usize, } #[post("/out", data="", format="json")] async fn transfer_out(data: Json, db: &State>) -> (Status, Result<(), Json>) { let mut db = db.lock().await; match db.transfer(data.id, data.to, &data.session, data.color, data.amount).await { Ok(n) => (Status::Ok, Ok(n.into())), Err(n) => (Status::InternalServerError, Err(n.into())) } } #[launch] fn rocket() -> _ { let cors = CorsOptions{ allowed_origins: rocket_cors::AllOrSome::All, allowed_methods: HashSet::from([rocket_cors::Method::from(rocket::http::Method::Post), rocket_cors::Method::from(rocket::http::Method::Get)]), allow_credentials: false, allowed_headers: rocket_cors::AllOrSome::All, expose_headers: HashSet::new(), max_age: None, send_wildcard: false, fairing_route_base: "/cors".to_string(), fairing_route_rank: 0, }; let cors = cors.to_cors().unwrap(); rocket::build().manage(Mutex::new(DB::load(Config::new()))) .mount("/", routes![index]) .mount("/user", routes![login, get_users_by_name, get_user_authenticated, get_user, new_user, get_all_users, logout, logout_all, get_sessions, delete, update_user]) .mount("/transfer", routes![transfer_out]) .attach(cors) }