wip protected room

This commit is contained in:
simplonco
2023-01-14 00:26:25 +01:00
parent feb00afced
commit ee98fdabc1
8 changed files with 109 additions and 16 deletions

View File

@@ -111,7 +111,8 @@ export class ChatController {
if (test_regex.test(room.name) === false)
{
let forbidden_chars = room.name.replace(new RegExp(regex_base, "g"), "");
throw new HttpException(`Your room name can not contains these characters : ${forbidden_chars}`, HttpStatus.UNPROCESSABLE_ENTITY);
console.log(`throw error: Your room name can not contains these characters : ${forbidden_chars}`);
throw new HttpException( `Your room name can not contains these characters : ${forbidden_chars}`, HttpStatus.UNPROCESSABLE_ENTITY);
}
if (!room.password || room.password.length === 0)
@@ -119,7 +120,6 @@ export class ChatController {
else
room.protection = true;
room.users = [req.user.username];
room.owner = req.user.username;
await this.chatService.addUserToNewRoom(req.user.username, room);
const ret_room = this.format_room(room);
@@ -151,17 +151,17 @@ export class ChatController {
if (room_db.type === 'direct')
{
console.log("throw error: cannot join a direct messages room");
throw new HttpException(`cannot join a direct messages room`, HttpStatus.CONFLICT);
throw new HttpException( `cannot join a direct messages room`, HttpStatus.CONFLICT);
}
if (room_db.type === 'private')
{
console.log("throw error: cannot join a private room");
throw new HttpException(`cannot join a private room`, HttpStatus.CONFLICT);
throw new HttpException( `cannot join a private room`, HttpStatus.CONFLICT);
}
if (room_db.users.includes(req.user.username))
{
console.log("throw error: your have already joined this room");
throw new HttpException(`your have already joined this room`, HttpStatus.CONFLICT);
throw new HttpException( `your have already joined this room`, HttpStatus.CONFLICT);
}
room = await this.chatService.addUserToRoom(req.user.username, room.name);
}
@@ -182,6 +182,19 @@ export class ChatController {
{
console.log("- in changeRoom controller");
let fields = ["protection", "allowed_users"];
const room_db = await this.chatService.getRoomByName(room.name, fields);
if (room_db.protection === true)
{
if (!room.password)
{
console.log("throw error: code: 'PASSWORD_MISSING', message: 'this room is protected, you need to provide a password'");
throw new HttpException({ code: 'PASSWORD_MISSING', message: `this room is protected, you need to provide a password` }, HttpStatus.BAD_REQUEST);
}
if (!room_db.allowed_users.contains(req.user.username))
await this.chatService.setPasswordValidation(req.user.username, room);
}
await this.chatService.setCurrentRoom(req.user.username, room.name);
let socket: socketDto = this.chatGateway.sockets.get(req.user.username);
await this.chatService.socketChangeRoom(socket, room.name);

View File

@@ -199,6 +199,24 @@ export class ChatService {
return `room "${room_name}" is now current room`;
}
async setPasswordValidation(username: string, room: roomDto): Promise<void>
{
console.log("-- in setPasswordValidation service");
const room_db = await this.getRoomByName(room.name);
const is_match = await bcrypt.compare(room.password, room_db.hash);
if (!is_match)
{
console.log(`throw error: code: 'BAD_PASSWORD', message: 'bad password'`);
throw new HttpException({ code: 'BAD_PASSWORD', message: `bad password` }, HttpStatus.UNAUTHORIZED);
}
room_db.allowed_users.push(username);
await this.chatroomRepository.save(room_db);
console.log("-- out setPasswordValidation service");
}
/* ADDERS *************************************************
*/
@@ -211,12 +229,17 @@ export class ChatService {
if (find_room)
{
console.log("throw error: This room name already exist");
throw new HttpException(`This room name already exist`, HttpStatus.CONFLICT);
throw new HttpException( `This room name already exist`, HttpStatus.CONFLICT);
}
let hash;
if (room.protection)
{
if (room.type === 'direct')
{
console.log("throw error: code: 'DIRECT_PASSWORD_FORBIDDEN', message: 'you cannot set a password in a direct message room'");
throw new HttpException({ code: 'DIRECT_PASSWORD_FORBIDDEN', message: `you cannot set a password in a direct message room`}, HttpStatus.CONFLICT);
}
const saltOrRounds = 10;
const password = room.password;
hash = await bcrypt.hash(password, saltOrRounds);
@@ -226,11 +249,16 @@ export class ChatService {
let newChatroom = new Chatroom();
newChatroom.name = room.name;
newChatroom.type = room.type;
newChatroom.owner = room.owner;
newChatroom.owner = username;
newChatroom.users = room.users;
newChatroom.allowed_users = [];
if (room.protection)
{
newChatroom.hash = hash;
newChatroom.messages = [
newChatroom.allowed_users.push(username);
}
newChatroom.messages =
[
{ name: "SERVER", message: `creation of room ${room.name}` },
{ name: "SERVER", message: `${room.users[0]} joined the room` },
];
@@ -284,8 +312,8 @@ export class ChatService {
}
if (room.type === "direct")
{
console.log("throw error: you cannot leave a direct messages conversation");
throw new HttpException(`you cannot leave a direct messages conversation`, HttpStatus.CONFLICT);
console.log("throw error: code: 'LEAVING_DIRECT_FORBIDDEN', message: 'you cannot leave a direct messages conversation'");
throw new HttpException({ code: `LEAVING_DIRECT_FORBIDDEN`, message: `you cannot leave a direct messages conversation`, status: HttpStatus.CONFLICT }, HttpStatus.CONFLICT);
}
// delete user from room

View File

@@ -37,6 +37,11 @@ export class roomDto
@IsOptional()
users?: string[]; // usernames
@IsArray()
@IsString({ each: true })
@IsOptional()
allowed_users: string[]; // usernames
@IsArray()
//@IsInstance(messagesDto, { each: true })
//@IsObject({ each: true })

View File

@@ -36,8 +36,12 @@ export class Chatroom
@Column("simple-array")
@IsArray()
@IsString({ each: true })
@IsOptional()
users?: string[]; // usernames
users: string[]; // usernames
@Column("simple-array")
@IsArray()
@IsString({ each: true })
allowed_users: string[]; // usernames
@Column("json")
messages: messagesDto[];