Compare commits

..

2 Commits

Author SHA1 Message Date
27f811236a bug fixes 2020-12-03 20:27:35 +01:00
ea191fc036 create gitea account 2020-12-03 15:26:41 +01:00

View File

@ -4,7 +4,6 @@ import (
"crypto/rand" "crypto/rand"
"database/sql" "database/sql"
"encoding/json" "encoding/json"
"fmt"
"github.com/bwmarrin/discordgo" "github.com/bwmarrin/discordgo"
"github.com/dlclark/regexp2" "github.com/dlclark/regexp2"
_ "github.com/go-sql-driver/mysql" _ "github.com/go-sql-driver/mysql"
@ -19,6 +18,7 @@ import (
"context" "context"
"time" "time"
"github.com/cornelk/hashmap" "github.com/cornelk/hashmap"
"code.gitea.io/sdk/gitea"
) )
var discord *discordgo.Session var discord *discordgo.Session
var secret secrets_json var secret secrets_json
@ -28,6 +28,8 @@ type account struct {
username string username string
password string password string
discordUsername string discordUsername string
discordTag string
discordId string
} }
type WrongAccount struct { type WrongAccount struct {
User bool User bool
@ -51,13 +53,13 @@ type secrets_json struct {
MysqlIndentify string `json:"mysqlIndentify"` MysqlIndentify string `json:"mysqlIndentify"`
DiscordServerID string `json:"discordServerID"` DiscordServerID string `json:"discordServerID"`
MoodleToken string `json:"moodleToken"` MoodleToken string `json:"moodleToken"`
GiteaToken string `json:"giteaToken"`
} }
func main() { func main() {
var newRbuMember *discordgo.Member var newRbuMember *discordgo.Member
var dmChannel *discordgo.Channel var dmChannel *discordgo.Channel
var err error var err error
var SubmitStruct SubmitStruct
var jsonfile *os.File var jsonfile *os.File
jsonfile, err = os.Open("secrets.json") jsonfile, err = os.Open("secrets.json")
log(err) log(err)
@ -83,6 +85,8 @@ func main() {
"PRIMARY KEY ( username )" + "PRIMARY KEY ( username )" +
");") ");")
log(err) log(err)
giteaClient, err := gitea.NewClient("https://git.redstoneunion.de", gitea.SetToken(secret.GiteaToken))
log(err)
moodle := moodle.NewMoodleApi("https://exam.redstoneunion.de/", secret.MoodleToken) moodle := moodle.NewMoodleApi("https://exam.redstoneunion.de/", secret.MoodleToken)
_ = moodle _ = moodle
tmpl := template.Must(template.ParseFiles("tmpl/register.html")) tmpl := template.Must(template.ParseFiles("tmpl/register.html"))
@ -90,51 +94,65 @@ func main() {
remail := regexp2.MustCompile("^(?=.{0,255}$)(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|\"(?:[\\x01-\\x08\\x0b\\x0c\\x0e-\\x1f\\x21\\x23-\\x5b\\x5d-\\x7f]|\\\\[\\x01-\\x09\\x0b\\x0c\\x0e-\\x7f])*\")@(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|\\[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-]*[a-z0-9]:(?:[\\x01-\\x08\\x0b\\x0c\\x0e-\\x1f\\x21-\\x5a\\x53-\\x7f]|\\\\[\\x01-\\x09\\x0b\\x0c\\x0e-\\x7f])+)\\])$", 0) remail := regexp2.MustCompile("^(?=.{0,255}$)(?:[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*|\"(?:[\\x01-\\x08\\x0b\\x0c\\x0e-\\x1f\\x21\\x23-\\x5b\\x5d-\\x7f]|\\\\[\\x01-\\x09\\x0b\\x0c\\x0e-\\x7f])*\")@(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|\\[(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?|[a-z0-9-]*[a-z0-9]:(?:[\\x01-\\x08\\x0b\\x0c\\x0e-\\x1f\\x21-\\x5a\\x53-\\x7f]|\\\\[\\x01-\\x09\\x0b\\x0c\\x0e-\\x7f])+)\\])$", 0)
rusername := regexp.MustCompile("^([[:lower:]]|\\d|_|-|\\.){1,40}$") rusername := regexp.MustCompile("^([[:lower:]]|\\d|_|-|\\.){1,40}$")
rpassword := regexp2.MustCompile("^(?=.{8,255}$)(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*\\W).*$", 0) rpassword := regexp2.MustCompile("^(?=.{8,255}$)(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])(?=.*\\W).*$", 0)
registerstruct := registertmpl{}
http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) { http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
registerstruct := registertmpl{}
if r.Method == http.MethodPost { if r.Method == http.MethodPost {
newAccount := account{ var newAccount account
email: r.FormValue("email"), var split = strings.Split(r.FormValue("discordUser"), "#")
username: r.FormValue("username"), if len(split) == 2 {
password: r.FormValue("password"), newAccount = account{
discordUsername: r.FormValue("discordUser"), email: r.FormValue("email"),
username: r.FormValue("username"),
password: r.FormValue("password"),
discordUsername: split[0],
discordTag: split[1],
}
} }
registerstruct.WrongAccount.Email, _ = remail.MatchString(newAccount.email) registerstruct.WrongAccount.Email, _ = remail.MatchString(newAccount.email)
registerstruct.WrongAccount.Email = !registerstruct.WrongAccount.Email registerstruct.WrongAccount.Email = !registerstruct.WrongAccount.Email
registerstruct.WrongAccount.User = !rusername.MatchString(newAccount.username) || strings.Contains(newAccount.username, "\"") registerstruct.WrongAccount.User = !rusername.MatchString(newAccount.username) || strings.Contains(newAccount.username, "\"")
registerstruct.WrongAccount.Pass, _ = rpassword.MatchString(newAccount.password) registerstruct.WrongAccount.Pass, _ = rpassword.MatchString(newAccount.password)
registerstruct.WrongAccount.Pass = !registerstruct.WrongAccount.Pass registerstruct.WrongAccount.Pass = !registerstruct.WrongAccount.Pass
newRbuMember, registerstruct.WrongAccount.DiscordUser = getRbuMember(newAccount.discordUsername) newRbuMember, registerstruct.WrongAccount.DiscordUser = getRbuMember(newAccount.discordUsername, newAccount.discordTag)
registerstruct.WrongAccount.DiscordUser = !registerstruct.WrongAccount.DiscordUser registerstruct.WrongAccount.DiscordUser = !registerstruct.WrongAccount.DiscordUser
if registerstruct.WrongAccount.DiscordUser {
goto registerReturn
}
newAccount.discordId = newRbuMember.User.ID
{ {
var username string var username string
registerstruct.AlreadyEsitsInDatabase.Username = db.QueryRow("select username from account where username = ?", newAccount.username).Scan(&username) == nil || UsernameExistsInMem(newAccount.username) // check if username exits registerstruct.AlreadyEsitsInDatabase.Username = db.QueryRow("select username from account where username = ?", newAccount.username).Scan(&username) == nil || UsernameExistsInMem(newAccount.username) // check if username exits
registerstruct.AlreadyEsitsInDatabase.DiscordUsername = db.QueryRow("select username from account where discordUsername = ?", newAccount.discordUsername).Scan(&username) == nil || discordUsernameExistsInMem(newAccount.discordUsername) registerstruct.AlreadyEsitsInDatabase.DiscordUsername = db.QueryRow("select username from account where discordUsername = ?", newAccount.discordUsername).Scan(&username) == nil || discordUsernameExistsInMem(newAccount.discordId)
} }
registerstruct.Success = !registerstruct.WrongAccount.User && !registerstruct.WrongAccount.Pass && !registerstruct.WrongAccount.Email && !registerstruct.WrongAccount.DiscordUser && !registerstruct.AlreadyEsitsInDatabase.DiscordUsername && !registerstruct.AlreadyEsitsInDatabase.Username registerstruct.Success = !registerstruct.WrongAccount.User && !registerstruct.WrongAccount.Pass && !registerstruct.WrongAccount.Email && !registerstruct.WrongAccount.DiscordUser && !registerstruct.AlreadyEsitsInDatabase.DiscordUsername && !registerstruct.AlreadyEsitsInDatabase.Username
if registerstruct.Success { if !registerstruct.Success {
goto registerReturn
}
token, err := GenerateRandomStringURLSafe(64) token, err := GenerateRandomStringURLSafe(64)
log(err) log(err)
dmChannel, err = discord.UserChannelCreate(newRbuMember.User.ID) dmChannel, err = discord.UserChannelCreate(newRbuMember.User.ID)
log(err) log(err)
discord.ChannelMessageSend(dmChannel.ID, "Bitte klicke auf den Link, um die Erstellung des Accounts abzuschließen.\nhttp://localhost:8080/submit?token=" + token) discord.ChannelMessageSend(dmChannel.ID, "Bitte klicke auf den Link, um die Erstellung des Accounts abzuschließen.\nhttp://localhost:8080/submit?token=" + token)
cacheAccounts.Set(token, newAccount) cacheAccounts.Set(token, newAccount)
}
} }
tmpl.Execute(w, registerstruct) registerReturn: err = tmpl.Execute(w, registerstruct)
fmt.Println(registerstruct) log(err)
}) })
http.HandleFunc("/submit", func(w http.ResponseWriter, r *http.Request) { http.HandleFunc("/submit", func(w http.ResponseWriter, r *http.Request) {
var submitStruct SubmitStruct
token := r.FormValue("token") token := r.FormValue("token")
var accInter interface{} var accInter interface{}
accInter, SubmitStruct.Success = cacheAccounts.GetStringKey(token) accInter, submitStruct.Success = cacheAccounts.GetStringKey(token)
var account account = accInter.(account) if !submitStruct.Success {
if SubmitStruct.Success { goto submitReturn
fmt.Println(token); }
{
var account account = accInter.(account)
cacheAccounts.Del(token)
salt := make([]byte, 32) salt := make([]byte, 32)
_, err := rand.Read(salt) _, err := rand.Read(salt)
log(err) log(err)
hash := argon2.IDKey([]byte(account.password), salt[:], 1, 64*1024, 4, 32) hash := argon2.IDKey([]byte(account.password), salt, 1, 64*1024, 4, 32)
// add user to the database // add user to the database
query := "INSERT INTO account(username, email, hash, salt, discordUsername) VALUES (?, ?, ?, ?, ?)" query := "INSERT INTO account(username, email, hash, salt, discordUsername) VALUES (?, ?, ?, ?, ?)"
ctx, cancelfunc := context.WithTimeout(context.Background(), 5*time.Second) ctx, cancelfunc := context.WithTimeout(context.Background(), 5*time.Second)
@ -144,21 +162,30 @@ func main() {
defer stmt.Close() defer stmt.Close()
_, err = stmt.ExecContext(ctx, account.username, account.email, hash, salt, account.discordUsername) _, err = stmt.ExecContext(ctx, account.username, account.email, hash, salt, account.discordUsername)
log(err) log(err)
//_, err = moodle.AddUser(account.username, account.username, account.email, account.username, account.password) //_, err = moodle.AddUser(account.username + "wg", account.username, account.email, account.username, account.password)
log(err)
opt := gitea.CreateUserOption{
Email: account.email,
Username: account.username,
SourceID: 0,
Password: account.password,
SendNotify: false,
}
_, _, err = giteaClient.AdminCreateUser(opt)
log(err) log(err)
cacheAccounts.Del(token)
} }
err = submitTmpl.Execute(w, SubmitStruct)
submitReturn: err = submitTmpl.Execute(w, submitStruct)
log(err) log(err)
}) })
http.ListenAndServe(":8080", nil) http.ListenAndServe(":8080", nil)
} }
func getRbuMember(user string) (*discordgo.Member, bool) { func getRbuMember(user string, tag string) (*discordgo.Member, bool) {
allUsers, err := discord.GuildMembers(secret.DiscordServerID, "0", 1000) allUsers, err := discord.GuildMembers(secret.DiscordServerID, "0", 1000)
log(err) log(err)
for _, element := range allUsers { for _, element := range allUsers {
if element.User.Username==user { if element.User.Username == user && element.User.Discriminator == tag{
return element, true return element, true
} }
} }
@ -182,12 +209,12 @@ func UsernameExistsInMem(username string) bool {
return false return false
} }
func discordUsernameExistsInMem(discordUsername string) bool { func discordUsernameExistsInMem(id string) bool {
for key := range cacheAccounts.Iter() { for key := range cacheAccounts.Iter() {
var accInter interface{} var accInter interface{}
accInter, _ = cacheAccounts.Get(key) accInter, _ = cacheAccounts.Get(key)
var account account = accInter.(account) var account account = accInter.(account)
if account.discordUsername == discordUsername { if account.discordId == id {
return true return true
} }
} }