316 lines
12 KiB
C#
316 lines
12 KiB
C#
// (c) Copyright Ascensio System SIA 2010-2022
|
|
//
|
|
// This program is a free software product.
|
|
// You can redistribute it and/or modify it under the terms
|
|
// of the GNU Affero General Public License (AGPL) version 3 as published by the Free Software
|
|
// Foundation. In accordance with Section 7(a) of the GNU AGPL its Section 15 shall be amended
|
|
// to the effect that Ascensio System SIA expressly excludes the warranty of non-infringement of
|
|
// any third-party rights.
|
|
//
|
|
// This program is distributed WITHOUT ANY WARRANTY, without even the implied warranty
|
|
// of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. For details, see
|
|
// the GNU AGPL at: http://www.gnu.org/licenses/agpl-3.0.html
|
|
//
|
|
// You can contact Ascensio System SIA at Lubanas st. 125a-25, Riga, Latvia, EU, LV-1021.
|
|
//
|
|
// The interactive user interfaces in modified source and object code versions of the Program must
|
|
// display Appropriate Legal Notices, as required under Section 5 of the GNU AGPL version 3.
|
|
//
|
|
// Pursuant to Section 7(b) of the License you must retain the original Product logo when
|
|
// distributing the program. Pursuant to Section 7(e) we decline to grant you any rights under
|
|
// trademark law for use of our trademarks.
|
|
//
|
|
// All the Product's GUI elements, including illustrations and icon sets, as well as technical writing
|
|
// content are licensed under the terms of the Creative Commons Attribution-ShareAlike 4.0
|
|
// International. See the License terms at http://creativecommons.org/licenses/by-sa/4.0/legalcode
|
|
|
|
namespace ASC.ApiSystem.Controllers;
|
|
|
|
[Scope]
|
|
public class CommonMethods
|
|
{
|
|
private readonly IHttpContextAccessor _httpContextAccessor;
|
|
private readonly IConfiguration _configuration;
|
|
private readonly ILogger<CommonMethods> _log;
|
|
private readonly CoreSettings _coreSettings;
|
|
private readonly CommonLinkUtility _commonLinkUtility;
|
|
private readonly EmailValidationKeyProvider _emailValidationKeyProvider;
|
|
private readonly TimeZoneConverter _timeZoneConverter;
|
|
private readonly CommonConstants _commonConstants;
|
|
private readonly HostedSolution _hostedSolution;
|
|
private readonly IMemoryCache _memoryCache;
|
|
private readonly CoreBaseSettings _coreBaseSettings;
|
|
private readonly TenantManager _tenantManager;
|
|
private readonly IHttpClientFactory _clientFactory;
|
|
|
|
public CommonMethods(
|
|
IHttpContextAccessor httpContextAccessor,
|
|
IConfiguration configuration,
|
|
ILogger<CommonMethods> log,
|
|
CoreSettings coreSettings,
|
|
CommonLinkUtility commonLinkUtility,
|
|
EmailValidationKeyProvider emailValidationKeyProvider,
|
|
TimeZoneConverter timeZoneConverter, CommonConstants commonConstants,
|
|
IMemoryCache memoryCache,
|
|
HostedSolution hostedSolution,
|
|
CoreBaseSettings coreBaseSettings,
|
|
TenantManager tenantManager,
|
|
IHttpClientFactory clientFactory)
|
|
{
|
|
_httpContextAccessor = httpContextAccessor;
|
|
_configuration = configuration;
|
|
_log = log;
|
|
_coreSettings = coreSettings;
|
|
_commonLinkUtility = commonLinkUtility;
|
|
_emailValidationKeyProvider = emailValidationKeyProvider;
|
|
_timeZoneConverter = timeZoneConverter;
|
|
_commonConstants = commonConstants;
|
|
_memoryCache = memoryCache;
|
|
_coreBaseSettings = coreBaseSettings;
|
|
_tenantManager = tenantManager;
|
|
_clientFactory = clientFactory;
|
|
_hostedSolution = hostedSolution;
|
|
_hostedSolution.Init(CommonConstants.BaseDbConnKeyString);
|
|
}
|
|
|
|
public object ToTenantWrapper(Tenant t)
|
|
{
|
|
return new
|
|
{
|
|
created = t.CreationDateTime,
|
|
domain = t.GetTenantDomain(_coreSettings),
|
|
hostedRegion = t.HostedRegion,
|
|
industry = t.Industry,
|
|
language = t.Language,
|
|
name = t.Name == "" ? Resource.PortalName : t.Name,
|
|
ownerId = t.OwnerId,
|
|
paymentId = t.PaymentId,
|
|
portalName = t.Alias,
|
|
status = t.Status.ToString(),
|
|
tenantId = t.Id,
|
|
timeZoneName = _timeZoneConverter.GetTimeZone(t.TimeZone).DisplayName,
|
|
};
|
|
}
|
|
|
|
public string CreateReference(int tenantId,string requestUriScheme, string tenantDomain, string email, bool first = false, string module = "", bool sms = false)
|
|
{
|
|
var url = _commonLinkUtility.GetConfirmationUrlRelative(tenantId, email, ConfirmType.Auth, (first ? "true" : "") + module + (sms ? "true" : ""));
|
|
return $"{requestUriScheme}{Uri.SchemeDelimiter}{tenantDomain}/{url}{(first ? "&first=true" : "")}{(string.IsNullOrEmpty(module) ? "" : "&module=" + module)}{(sms ? "&sms=true" : "")}";
|
|
}
|
|
|
|
public bool SendCongratulations(string requestUriScheme, Tenant tenant, bool skipWelcome, out string url)
|
|
{
|
|
var validationKey = _emailValidationKeyProvider.GetEmailKey(tenant.Id, tenant.OwnerId.ToString() + ConfirmType.Auth);
|
|
|
|
url = string.Format("{0}{1}{2}{3}{4}?userid={5}&key={6}",
|
|
requestUriScheme,
|
|
Uri.SchemeDelimiter,
|
|
tenant.GetTenantDomain(_coreSettings),
|
|
_commonConstants.WebApiBaseUrl,
|
|
"portal/sendcongratulations",
|
|
tenant.OwnerId,
|
|
validationKey);
|
|
|
|
if (skipWelcome)
|
|
{
|
|
_log.LogDebug("congratulations skiped");
|
|
return false;
|
|
}
|
|
|
|
var request = new HttpRequestMessage
|
|
{
|
|
Method = HttpMethod.Post,
|
|
RequestUri = new Uri(url)
|
|
};
|
|
request.Headers.Accept.Add(MediaTypeWithQualityHeaderValue.Parse("application/x-www-form-urlencoded"));
|
|
|
|
try
|
|
{
|
|
var httpClient = _clientFactory.CreateClient();
|
|
using var response = httpClient.Send(request);
|
|
using var stream = response.Content.ReadAsStream();
|
|
using var reader = new StreamReader(stream, Encoding.UTF8);
|
|
|
|
var result = reader.ReadToEnd();
|
|
|
|
_log.LogDebug("congratulations result = {0}", result);
|
|
|
|
var resObj = JObject.Parse(result);
|
|
|
|
if (resObj["errors"] != null && resObj["errors"].HasValues)
|
|
{
|
|
throw new Exception(result);
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
_log.LogError(ex, "SendCongratulations error");
|
|
return false;
|
|
}
|
|
|
|
url = null;
|
|
return true;
|
|
}
|
|
|
|
public bool GetTenant(IModel model, out Tenant tenant)
|
|
{
|
|
if (_coreBaseSettings.Standalone && model != null && !string.IsNullOrWhiteSpace((model.PortalName ?? "")))
|
|
{
|
|
tenant = _tenantManager.GetTenant((model.PortalName ?? "").Trim());
|
|
return true;
|
|
}
|
|
|
|
if (model != null && model.TenantId.HasValue)
|
|
{
|
|
tenant = _hostedSolution.GetTenant(model.TenantId.Value);
|
|
return true;
|
|
}
|
|
|
|
if (model != null && !string.IsNullOrWhiteSpace((model.PortalName ?? "")))
|
|
{
|
|
tenant = _hostedSolution.GetTenant((model.PortalName ?? "").Trim());
|
|
return true;
|
|
}
|
|
|
|
tenant = null;
|
|
return false;
|
|
}
|
|
|
|
public bool IsTestEmail(string email)
|
|
{
|
|
//the point is not needed in gmail.com
|
|
email = Regex.Replace(email ?? "", "\\.*(?=\\S*(@gmail.com$))", "").ToLower();
|
|
if (string.IsNullOrEmpty(email) || string.IsNullOrEmpty(_commonConstants.AutotestSecretEmails))
|
|
{
|
|
return false;
|
|
}
|
|
|
|
var regex = new Regex(_commonConstants.AutotestSecretEmails, RegexOptions.IgnoreCase | RegexOptions.Singleline | RegexOptions.Compiled);
|
|
return regex.IsMatch(email);
|
|
}
|
|
|
|
public bool CheckMuchRegistration(TenantModel model, string clientIP, Stopwatch sw)
|
|
{
|
|
if (IsTestEmail(model.Email))
|
|
{
|
|
return false;
|
|
}
|
|
|
|
_log.LogDebug("clientIP = {0}", clientIP);
|
|
|
|
var cacheKey = "ip_" + clientIP;
|
|
|
|
if (_memoryCache.TryGetValue(cacheKey, out int ipAttemptsCount))
|
|
{
|
|
_memoryCache.Remove(cacheKey);
|
|
}
|
|
|
|
ipAttemptsCount++;
|
|
|
|
_memoryCache.Set(
|
|
// String that represents the name of the cache item,
|
|
// could be any string
|
|
cacheKey,
|
|
// Something to store in the cache
|
|
ipAttemptsCount,
|
|
new MemoryCacheEntryOptions
|
|
{
|
|
// Will not use absolute cache expiration
|
|
AbsoluteExpiration = DateTime.MaxValue,
|
|
// Cache will expire after one hour
|
|
// You can change this time interval according
|
|
// to your requriements
|
|
SlidingExpiration = _commonConstants.MaxAttemptsTimeInterval,
|
|
// Cache will not be removed before expired
|
|
Priority = CacheItemPriority.NeverRemove
|
|
});
|
|
|
|
if (ipAttemptsCount <= _commonConstants.MaxAttemptsCount)
|
|
{
|
|
return false;
|
|
}
|
|
|
|
_log.LogDebug("PortalName = {0}; Too much reqests from ip: {1}", model.PortalName, clientIP);
|
|
sw.Stop();
|
|
|
|
return true;
|
|
}
|
|
|
|
public string GetClientIp()
|
|
{
|
|
return _httpContextAccessor.HttpContext.Connection.RemoteIpAddress.ToString();
|
|
|
|
//TODO: check old version
|
|
|
|
//if (request.Properties.ContainsKey("MS_HttpContext"))
|
|
//{
|
|
// return ((HttpContextWrapper)request.Properties["MS_HttpContext"]).Request.UserHostAddress;
|
|
//}
|
|
|
|
//if (request.Properties.ContainsKey(RemoteEndpointMessageProperty.Name))
|
|
//{
|
|
// var prop = (RemoteEndpointMessageProperty)request.Properties[RemoteEndpointMessageProperty.Name];
|
|
// return prop.Address;
|
|
//}
|
|
|
|
//return null;
|
|
}
|
|
|
|
public bool ValidateRecaptcha(string response, RecaptchaType recaptchaType, string ip)
|
|
{
|
|
try
|
|
{
|
|
string privateKey;
|
|
switch (recaptchaType)
|
|
{
|
|
case RecaptchaType.AndroidV2:
|
|
privateKey = _configuration["recaptcha:private-key:android"];
|
|
break;
|
|
case RecaptchaType.iOSV2:
|
|
privateKey = _configuration["recaptcha:private-key:ios"];
|
|
break;
|
|
default:
|
|
privateKey = _configuration["recaptcha:private-key:default"];
|
|
break;
|
|
}
|
|
|
|
var data = $"secret={privateKey}&remoteip={ip}&response={response}";
|
|
var url = _configuration["recaptcha:verify-url"] ?? "https://www.recaptcha.net/recaptcha/api/siteverify";
|
|
|
|
var request = new HttpRequestMessage
|
|
{
|
|
RequestUri = new Uri(url),
|
|
Method = HttpMethod.Post,
|
|
Content = new StringContent(data, Encoding.UTF8, "application/x-www-form-urlencoded")
|
|
};
|
|
|
|
var httpClient = _clientFactory.CreateClient();
|
|
using var httpClientResponse = httpClient.Send(request);
|
|
using var stream = httpClientResponse.Content.ReadAsStream();
|
|
using var reader = new StreamReader(stream);
|
|
|
|
var resp = reader.ReadToEnd();
|
|
var resObj = JObject.Parse(resp);
|
|
|
|
if (resObj["success"] != null && resObj.Value<bool>("success"))
|
|
{
|
|
return true;
|
|
}
|
|
else
|
|
{
|
|
_log.LogDebug("Recaptcha error: {0}", resp);
|
|
}
|
|
|
|
if (resObj["error-codes"] != null && resObj["error-codes"].HasValues)
|
|
{
|
|
_log.LogDebug("Recaptcha api returns errors: {0}", resp);
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
_log.LogError(ex, "ValidateRecaptcha");
|
|
}
|
|
return false;
|
|
}
|
|
}
|