GitHub/trunk-server
1
0
Fork 0
mirror of https://github.com/openmhz/trunk-server.git synced 2026-11-09 15:27:30 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #155 from tadscottsmith/authorization-function

Browse Source 
Add system authorization check function.
This commit is contained in:
Luke Berndt
2023-11-15 21:45:42 -05:00
committed by GitHub
parent 97d4a04d66 05d9c6f83e
commit 2f66fd9517
2 changed files with 35 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
backend/controllers/systems.js
View File

@@ -144,3 +144,37 @@ exports.get_systems = async function (req, res) {
}));
}
exports.authorize_system = async function (req, res) {
var shortName = req.params.shortName.toLowerCase();
var apiKey = req.body.api_key;
let item = null;
try {
item = await System.findOne({ 'shortName': shortName }, ["key"]);
} catch (err) {
console.warn("[" + req.params.shortName + "] Error /:shortName/authorize - Error: " + err);
res.status(500);
res.send("Invalid System Name\n");
return;
}
if (!item) {
console.info("[" + req.params.shortName + "] Error /:shortName/authorize ShortName does not exist");
res.status(500);
res.send("Invalid System Name\n");
return;
}
if (apiKey != item.key) {
console.warn("[" + req.params.shortName + "] Error /:shortName/authorize API Key Mismatch - Provided key: " + apiKey);
res.status(403);
res.send("Invalid API Key\n");
return;
} else {
// System shortName exists and the API Key is valid.
res.status(200).end();
}
}

1
backend/index.js
View File

@@ -118,6 +118,7 @@ app.post('/:shortName/upload', upload.single('call'), uploads.upload, async func
/*------ SYSTEMS ----------*/
app.get('/systems', addSystemClients, systems.get_systems);
app.post('/:shortName/contact', systems.contact_system);
app.post('/:shortName/authorize', systems.authorize_system);
/*------ TALKGROUPS ----------*/
app.get('/:shortName/talkgroups', talkgroups.get_talkgroups);