theta42/sso-manager-node
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated frontend

Browse Source
This commit is contained in:
William Mantly
2026-07-01 11:10:09 -04:00
parent ee21bdbf22
commit 5644bfa5ec
8104 changed files with 14976 additions and 386337 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nodejs/routes/user.js
+208 -36
View File
@@ -1,8 +1,11 @@
'use strict';
const router = require('express').Router();
const {User} = require('../models/user');
const {User} = require('../models/user');
const {Group} = require('../models/group_ldap');
const permission = require('../utils/permission');
const {UserVerification} = require('../models/verification');
const {InviteToken} = require('../models/token');
router.get('/', async function(req, res, next){
try{
@@ -18,10 +21,15 @@ router.get('/', async function(req, res, next){
router.post('/', async function(req, res, next){
try{
await permission.byGroup(req.user, ['app_sso_admin'])
req.body.created_by = req.user.uid
return res.json({results: await User.add(req.body)});
const user = await User.add(req.body);
const verif = await UserVerification.getOrCreate(user.uid);
const updates = { password_must_change: true };
if (req.body.tosAgree) updates.tos_accepted = true, updates.tos_accepted_at = Date.now();
await verif.update(updates);
return res.json({results: user});
}catch(error){
next(error);
}
@@ -44,12 +52,84 @@ router.delete('/:uid', async function(req, res, next){
}
});
router.get('/me', async function(req, res, next){
try{
return res.json(await User.get({uid: req.user.uid}));
}catch(error){
next(error);
}
});
router.post('/accept-tos', async function(req, res, next){
try{
const verif = await UserVerification.getOrCreate(req.user.uid);
await verif.markTosAccepted();
User.clearCache();
return res.json({ success: true });
}catch(error){
next(error);
}
});
router.put('/password', async function(req, res, next){
try{
const result = await req.user.setPassword(req.body);
const verif = await UserVerification.getOrCreate(req.user.uid);
await verif.update({ password_must_change: false });
User.clearCache();
return res.json({results: result});
}catch(error){
next(error);
}
});
router.put('/:uid/password', async function(req, res, next){
try{
let user;
if(req.params.uid.toLowerCase() === req.user.uid.toLowerCase()){
user = req.user;
}else{
user = await User.get(req.params.uid);
await permission.byGroup(req.user, ['app_sso_admin'])
}
const result = await user.setPassword(req.body);
if(req.params.uid.toLowerCase() !== req.user.uid.toLowerCase()){
const verif = await UserVerification.getOrCreate(user.uid);
await verif.update({ password_must_change: true });
}
return res.json({
results: result,
message: `User ${user.uid} password changed.`
});
}catch(error){
next(error);
}
});
router.put('/:uid/active', async function(req, res, next){
try{
await permission.byGroup(req.user, ['app_sso_admin']);
const user = await User.get(req.params.uid);
const active = req.body.active !== false && req.body.active !== 'false';
await user.setActive(active);
return res.json({
uid: req.params.uid,
active,
message: `User ${req.params.uid} ${active ? 'activated' : 'deactivated'}`
});
}catch(error){
next(error);
}
});
router.put('/:uid', async function(req, res, next){
try{
let user;
if(req.params.uid.toLowerCase() === req.user.uid.toLowerCase()){
user = req.user;
user = req.user;
}else{
user = await User.get(req.params.uid);
await permission.byGroup(req.user, ['app_sso_admin'])
@@ -65,48 +145,82 @@ router.put('/:uid', async function(req, res, next){
}
});
router.get('/me', async function(req, res, next){
router.post('/invite', async function(req, res, next){
try{
return res.json(await User.get({uid: req.user.uid}));
}catch(error){
next(error);
}
});
router.put('/password', async function(req, res, next){
try{
return res.json({results: await req.user.setPassword(req.body)})
}catch(error){
next(error);
}
});
router.put('/:uid/password', async function(req, res, next){
try{
let user;
if(req.params.uid.toLowerCase() === req.user.uid.toLowerCase()){
user = req.user;
}else{
user = await User.get(req.params.uid);
await permission.byGroup(req.user, ['app_sso_admin'])
}
await permission.byGroup(req.user, ['app_sso_admin', 'app_sso_invite']);
const { mail, groups = [] } = req.body;
const token = await req.user.invite({
mail,
groups,
url: `${req.protocol}://${req.hostname}`,
});
return res.json({
results: await user.setPassword(req.body),
message: `User ${user.uid} password changed.`
token: token.token,
link: `${req.protocol}://${req.hostname}/login/invite/${token.token}`,
mail_sent: !!mail,
});
}catch(error){
next(error);
}
});
router.post('/invite', async function(req, res, next){
router.get('/invite', async function(req, res, next){
try{
let token = await req.user.invite();
await permission.byGroup(req.user, ['app_sso_admin', 'app_sso_invite']);
const isAdmin = await permission.byGroup(req.user, ['app_sso_admin']).then(() => true).catch(() => false);
const all = await InviteToken.listDetail();
const visible = isAdmin ? all : all.filter(t => t.created_by === req.user.uid);
const results = visible.map(t => ({ token: t.token, ...t }));
return res.json({ results });
}catch(error){
next(error);
}
});
return res.json({token: token.token});
router.put('/invite/:token', async function(req, res, next){
try{
await permission.byGroup(req.user, ['app_sso_admin', 'app_sso_invite']);
const token = await InviteToken.get(req.params.token);
const isAdmin = await permission.byGroup(req.user, ['app_sso_admin']).then(() => true).catch(() => false);
if (!isAdmin && token.created_by !== req.user.uid) {
const err = new Error('Insufficient Permission'); err.status = 401; throw err;
}
if (!token.is_valid) {
const err = new Error('Token is no longer valid'); err.status = 400; throw err;
}
const update = {};
if (req.body.groups !== undefined) {
update.groups = JSON.stringify([].concat(req.body.groups || []));
}
if (req.body.mail !== undefined && req.body.mail !== token.mail) {
if (req.body.mail) {
await User.verifyEmail({ token: token.token, mail: req.body.mail, url: `${req.protocol}://${req.hostname}` });
const refreshed = await InviteToken.get(token.token);
update.mail = refreshed.mail;
update.mail_token = refreshed.mail_token;
} else {
update.mail = '__NONE__';
update.mail_token = '__NONE__';
}
}
if (Object.keys(update).length) await token.update(update);
const updated = await InviteToken.get(req.params.token);
return res.json({ results: { token: updated.token, ...updated } });
}catch(error){
next(error);
}
});
router.delete('/invite/:token', async function(req, res, next){
try{
await permission.byGroup(req.user, ['app_sso_admin', 'app_sso_invite']);
const token = await InviteToken.get(req.params.token);
const isAdmin = await permission.byGroup(req.user, ['app_sso_admin']).then(() => true).catch(() => false);
if (!isAdmin && token.created_by !== req.user.uid) {
const err = new Error('Insufficient Permission'); err.status = 401; throw err;
}
await token.update({ is_valid: false });
return res.json({ results: true });
}catch(error){
next(error);
}
@@ -129,6 +243,64 @@ router.post('/key', async function(req, res, next){
});
router.get('/:uid/verification', async function(req, res, next){
try{
await permission.byGroup(req.user, ['app_sso_admin']);
const verif = await UserVerification.getOrCreate(req.params.uid);
return res.json({
uid: req.params.uid,
emailVerified: verif.email_verified,
emailVerifiedAt: verif.email_verified_at || null,
phoneVerified: verif.phone_verified,
phoneVerifiedAt: verif.phone_verified_at || null,
tosAccepted: verif.tos_accepted,
tosAcceptedAt: verif.tos_accepted_at || null,
});
}catch(error){
next(error);
}
});
router.get('/stats', async function(req, res, next){
try{
await permission.byGroup(req.user, ['app_sso_admin']);
const [users, groups] = await Promise.all([User.listDetail(), Group.list()]);
const active = users.filter(u => !u.pwdAccountLockedTime);
const inactive = users.filter(u => u.pwdAccountLockedTime);
const recent = [...users]
.sort((a, b) => (b.createTimestamp || '').localeCompare(a.createTimestamp || ''))
.slice(0, 10)
.map(u => ({ uid: u.uid, givenName: u.givenName, sn: u.sn, mail: u.mail, createTimestamp: u.createTimestamp }));
return res.json({
totalUsers: users.length,
activeUsers: active.length,
inactiveUsers: inactive.length,
totalGroups: groups.length,
recentSignups: recent,
inactiveList: inactive.map(u => ({ uid: u.uid, givenName: u.givenName, sn: u.sn, mail: u.mail })),
});
}catch(error){
next(error);
}
});
router.get('/export', async function(req, res, next){
try{
await permission.byGroup(req.user, ['app_sso_admin']);
const users = await User.listDetail();
const headers = ['uid', 'givenName', 'sn', 'mail', 'mobile', 'uidNumber', 'isActive', 'createTimestamp'];
const rows = users.map(u => headers.map(h => {
const v = u[h] || '';
return `"${String(v).replace(/"/g, '""')}"`;
}).join(','));
res.setHeader('Content-Type', 'text/csv');
res.setHeader('Content-Disposition', 'attachment; filename="users.csv"');
return res.send([headers.join(','), ...rows].join('\n'));
}catch(error){
next(error);
}
});
router.get('/:uid', async function(req, res, next){
try{
return res.json({