mirror of https://github.com/requarks/wiki
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
268 lines
7.8 KiB
268 lines
7.8 KiB
const _ = require('lodash')
|
|
const graphHelper = require('../../helpers/graph')
|
|
|
|
module.exports = {
|
|
Query: {
|
|
/**
|
|
* List of API Keys
|
|
*/
|
|
async apiKeys (obj, args, context) {
|
|
const keys = await WIKI.db.apiKeys.query().orderBy(['isRevoked', 'name'])
|
|
return keys.map(k => ({
|
|
id: k.id,
|
|
name: k.name,
|
|
keyShort: '...' + k.key.substring(k.key.length - 20),
|
|
isRevoked: k.isRevoked,
|
|
expiration: k.expiration,
|
|
createdAt: k.createdAt,
|
|
updatedAt: k.updatedAt
|
|
}))
|
|
},
|
|
/**
|
|
* Current API State
|
|
*/
|
|
apiState () {
|
|
return WIKI.config.api.isEnabled
|
|
},
|
|
/**
|
|
* Fetch authentication strategies
|
|
*/
|
|
async authStrategies () {
|
|
return WIKI.data.authentication.map(stg => ({
|
|
...stg,
|
|
isAvailable: stg.isAvailable === true
|
|
}))
|
|
},
|
|
/**
|
|
* Fetch active authentication strategies
|
|
*/
|
|
async authActiveStrategies (obj, args, context) {
|
|
return WIKI.db.authentication.getStrategies({ enabledOnly: args.enabledOnly })
|
|
},
|
|
/**
|
|
* Fetch site authentication strategies
|
|
*/
|
|
async authSiteStrategies (obj, args, context, info) {
|
|
const site = await WIKI.db.sites.query().findById(args.siteId)
|
|
const activeStrategies = await WIKI.db.authentication.getStrategies({ enabledOnly: true })
|
|
return activeStrategies.map(str => {
|
|
const siteAuth = _.find(site.config.authStrategies, ['id', str.id]) || {}
|
|
return {
|
|
id: str.id,
|
|
activeStrategy: str,
|
|
order: siteAuth.order ?? 0,
|
|
isVisible: siteAuth.isVisible ?? false
|
|
}
|
|
})
|
|
}
|
|
},
|
|
Mutation: {
|
|
/**
|
|
* Create New API Key
|
|
*/
|
|
async createApiKey (obj, args, context) {
|
|
try {
|
|
const key = await WIKI.db.apiKeys.createNewKey(args)
|
|
await WIKI.auth.reloadApiKeys()
|
|
WIKI.events.outbound.emit('reloadApiKeys')
|
|
return {
|
|
key,
|
|
operation: graphHelper.generateSuccess('API Key created successfully')
|
|
}
|
|
} catch (err) {
|
|
WIKI.logger.warn(err)
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Perform Login
|
|
*/
|
|
async login (obj, args, context) {
|
|
try {
|
|
const authResult = await WIKI.db.users.login(args, context)
|
|
return {
|
|
...authResult,
|
|
operation: graphHelper.generateSuccess('Login success')
|
|
}
|
|
} catch (err) {
|
|
// LDAP Debug Flag
|
|
if (args.strategy === 'ldap' && WIKI.config.flags.ldapdebug) {
|
|
WIKI.logger.warn('LDAP LOGIN ERROR (c1): ', err)
|
|
}
|
|
console.error(err)
|
|
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Perform 2FA Login
|
|
*/
|
|
async loginTFA (obj, args, context) {
|
|
try {
|
|
const authResult = await WIKI.db.users.loginTFA(args, context)
|
|
return {
|
|
...authResult,
|
|
responseResult: graphHelper.generateSuccess('TFA success')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Perform Password Change
|
|
*/
|
|
async changePassword (obj, args, context) {
|
|
try {
|
|
const authResult = await WIKI.db.users.loginChangePassword(args, context)
|
|
return {
|
|
...authResult,
|
|
responseResult: graphHelper.generateSuccess('Password changed successfully')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Perform Forget Password
|
|
*/
|
|
async forgotPassword (obj, args, context) {
|
|
try {
|
|
await WIKI.db.users.loginForgotPassword(args, context)
|
|
return {
|
|
responseResult: graphHelper.generateSuccess('Password reset request processed.')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Register a new account
|
|
*/
|
|
async register (obj, args, context) {
|
|
try {
|
|
await WIKI.db.users.register({ ...args, verify: true }, context)
|
|
return {
|
|
responseResult: graphHelper.generateSuccess('Registration success')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Set API state
|
|
*/
|
|
async setApiState (obj, args, context) {
|
|
try {
|
|
WIKI.config.api.isEnabled = args.enabled
|
|
await WIKI.configSvc.saveToDb(['api'])
|
|
return {
|
|
operation: graphHelper.generateSuccess('API State changed successfully')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Revoke an API key
|
|
*/
|
|
async revokeApiKey (obj, args, context) {
|
|
try {
|
|
await WIKI.db.apiKeys.query().findById(args.id).patch({
|
|
isRevoked: true
|
|
})
|
|
await WIKI.auth.reloadApiKeys()
|
|
WIKI.events.outbound.emit('reloadApiKeys')
|
|
return {
|
|
operation: graphHelper.generateSuccess('API Key revoked successfully')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Update Authentication Strategies
|
|
*/
|
|
async updateAuthStrategies (obj, args, context) {
|
|
try {
|
|
const previousStrategies = await WIKI.db.authentication.getStrategies()
|
|
for (const str of args.strategies) {
|
|
const newStr = {
|
|
displayName: str.displayName,
|
|
order: str.order,
|
|
isEnabled: str.isEnabled,
|
|
config: _.reduce(str.config, (result, value, key) => {
|
|
_.set(result, `${value.key}`, _.get(JSON.parse(value.value), 'v', null))
|
|
return result
|
|
}, {}),
|
|
selfRegistration: str.selfRegistration,
|
|
domainWhitelist: { v: str.domainWhitelist },
|
|
autoEnrollGroups: { v: str.autoEnrollGroups }
|
|
}
|
|
|
|
if (_.some(previousStrategies, ['key', str.key])) {
|
|
await WIKI.db.authentication.query().patch({
|
|
key: str.key,
|
|
strategyKey: str.strategyKey,
|
|
...newStr
|
|
}).where('key', str.key)
|
|
} else {
|
|
await WIKI.db.authentication.query().insert({
|
|
key: str.key,
|
|
strategyKey: str.strategyKey,
|
|
...newStr
|
|
})
|
|
}
|
|
}
|
|
|
|
for (const str of _.differenceBy(previousStrategies, args.strategies, 'key')) {
|
|
const hasUsers = await WIKI.db.users.query().count('* as total').where({ providerKey: str.key }).first()
|
|
if (_.toSafeInteger(hasUsers.total) > 0) {
|
|
throw new Error(`Cannot delete ${str.displayName} as 1 or more users are still using it.`)
|
|
} else {
|
|
await WIKI.db.authentication.query().delete().where('key', str.key)
|
|
}
|
|
}
|
|
|
|
await WIKI.auth.activateStrategies()
|
|
WIKI.events.outbound.emit('reloadAuthStrategies')
|
|
return {
|
|
responseResult: graphHelper.generateSuccess('Strategies updated successfully')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Generate New Authentication Public / Private Key Certificates
|
|
*/
|
|
async regenerateCertificates (obj, args, context) {
|
|
try {
|
|
await WIKI.auth.regenerateCertificates()
|
|
return {
|
|
responseResult: graphHelper.generateSuccess('Certificates have been regenerated successfully.')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
},
|
|
/**
|
|
* Reset Guest User
|
|
*/
|
|
async resetGuestUser (obj, args, context) {
|
|
try {
|
|
await WIKI.auth.resetGuestUser()
|
|
return {
|
|
responseResult: graphHelper.generateSuccess('Guest user has been reset successfully.')
|
|
}
|
|
} catch (err) {
|
|
return graphHelper.generateError(err)
|
|
}
|
|
}
|
|
},
|
|
AuthenticationActiveStrategy: {
|
|
strategy (obj, args, context) {
|
|
return _.find(WIKI.data.authentication, ['key', obj.module])
|
|
}
|
|
}
|
|
}
|