Plugins: add guard for check enable plugin-system from config
This commit is contained in:
parent
1192e149ad
commit
a996f2ca9c
@ -1,5 +1,6 @@
|
|||||||
{
|
{
|
||||||
"$schema": "https://json.schemastore.org/nest-cli",
|
"$schema": "https://json.schemastore.org/nest-cli",
|
||||||
"collection": "@nestjs/schematics",
|
"collection": "@nestjs/schematics",
|
||||||
"sourceRoot": "src"
|
"sourceRoot": "src",
|
||||||
|
"entryFile": "common/ASC.WebPlugins/src/main"
|
||||||
}
|
}
|
||||||
|
39
common/ASC.WebPlugins/src/guards/plugin.guard.ts
Normal file
39
common/ASC.WebPlugins/src/guards/plugin.guard.ts
Normal file
@ -0,0 +1,39 @@
|
|||||||
|
import { Injectable, CanActivate, ExecutionContext } from "@nestjs/common";
|
||||||
|
import { Observable } from "rxjs";
|
||||||
|
|
||||||
|
import * as config from "../../../../config/appsettings.json";
|
||||||
|
|
||||||
|
@Injectable()
|
||||||
|
export class PluginGuard implements CanActivate {
|
||||||
|
canActivate(
|
||||||
|
context: ExecutionContext
|
||||||
|
): boolean | Promise<boolean> | Observable<boolean> {
|
||||||
|
console.log(config);
|
||||||
|
|
||||||
|
return config?.plugins?.enabled === "true";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
@Injectable()
|
||||||
|
export class PluginUploadGuard implements CanActivate {
|
||||||
|
canActivate(
|
||||||
|
context: ExecutionContext
|
||||||
|
): boolean | Promise<boolean> | Observable<boolean> {
|
||||||
|
return (
|
||||||
|
config?.plugins?.enabled === "true" &&
|
||||||
|
config?.plugins?.allow.includes("upload")
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
@Injectable()
|
||||||
|
export class PluginDeleteGuard implements CanActivate {
|
||||||
|
canActivate(
|
||||||
|
context: ExecutionContext
|
||||||
|
): boolean | Promise<boolean> | Observable<boolean> {
|
||||||
|
return (
|
||||||
|
config?.plugins?.enabled === "true" &&
|
||||||
|
config?.plugins?.allow.includes("delete")
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
@ -8,6 +8,7 @@ import {
|
|||||||
UseInterceptors,
|
UseInterceptors,
|
||||||
Put,
|
Put,
|
||||||
Delete,
|
Delete,
|
||||||
|
UseGuards,
|
||||||
} from "@nestjs/common";
|
} from "@nestjs/common";
|
||||||
|
|
||||||
import { AnyFilesInterceptor } from "@nestjs/platform-express";
|
import { AnyFilesInterceptor } from "@nestjs/platform-express";
|
||||||
@ -16,9 +17,16 @@ import { storage } from "src/utils";
|
|||||||
|
|
||||||
import { Plugin } from "src/entities/plugin.entity";
|
import { Plugin } from "src/entities/plugin.entity";
|
||||||
|
|
||||||
|
import {
|
||||||
|
PluginGuard,
|
||||||
|
PluginUploadGuard,
|
||||||
|
PluginDeleteGuard,
|
||||||
|
} from "src/guards/plugin.guard";
|
||||||
|
|
||||||
import { PluginsService } from "./plugins.service";
|
import { PluginsService } from "./plugins.service";
|
||||||
|
|
||||||
@Controller("/api/2.0/plugins")
|
@Controller("/api/2.0/plugins")
|
||||||
|
@UseGuards(PluginGuard)
|
||||||
export class PluginsController {
|
export class PluginsController {
|
||||||
constructor(private pluginsService: PluginsService) {}
|
constructor(private pluginsService: PluginsService) {}
|
||||||
|
|
||||||
@ -34,6 +42,7 @@ export class PluginsController {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Post("upload")
|
@Post("upload")
|
||||||
|
@UseGuards(PluginUploadGuard)
|
||||||
@UseInterceptors(
|
@UseInterceptors(
|
||||||
AnyFilesInterceptor({
|
AnyFilesInterceptor({
|
||||||
storage: storage,
|
storage: storage,
|
||||||
@ -44,6 +53,7 @@ export class PluginsController {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Delete("delete/:id")
|
@Delete("delete/:id")
|
||||||
|
@UseGuards(PluginDeleteGuard)
|
||||||
delete(@Param("id") id: number) {
|
delete(@Param("id") id: number) {
|
||||||
this.pluginsService.delete(id);
|
this.pluginsService.delete(id);
|
||||||
}
|
}
|
||||||
|
@ -16,6 +16,7 @@
|
|||||||
"noImplicitAny": false,
|
"noImplicitAny": false,
|
||||||
"strictBindCallApply": false,
|
"strictBindCallApply": false,
|
||||||
"forceConsistentCasingInFileNames": false,
|
"forceConsistentCasingInFileNames": false,
|
||||||
"noFallthroughCasesInSwitch": false
|
"noFallthroughCasesInSwitch": false,
|
||||||
|
"resolveJsonModule": true
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user