add static login for robot embedding

skadefro · skadefro · commit b02a9a739c50 · 2019-09-22T19:25:59.000+02:00
diff --git a/OpenFlow/src/LoginProvider.ts b/OpenFlow/src/LoginProvider.ts
@@ -62,6 +62,18 @@ export class LoginProvider {
     private static _providers: any = {};
     private static login_providers: Provider[] = [];
 
+    public static redirect(res: any, originalUrl: string) {
+        res.write('<!DOCTYPE html>');
+        res.write('<body>');
+        res.write('<script>top.location = "' + originalUrl + '";</script>');
+        // res.write('<a href="' + originalUrl + '">click here</a>');
+        res.write('</body>');
+        res.write('</html>');
+        res.end();
+        // res.redirect(originalUrl);
+    }
+
+
     static async validateToken(rawAssertion: string): Promise<User> {
         return new Promise<User>((resolve, reject) => {
             var options = {
@@ -123,16 +135,35 @@ export class LoginProvider {
             // Audit.LoginSuccess(new TokenUser(user), "weblogin", "cookie", "");
         });
 
+        app.use(function (req, res, next) {
+            res.header('Access-Control-Allow-Origin', (req.headers.origin as any));
+            res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
+            res.header('Cache-Control', 'private, no-cache, no-store, must-revalidate');
+            res.header('Expires', '-1');
+            res.header('Pragma', 'no-cache');
+            next();
+        });
+
         app.get("/Signout", (req: any, res: any, next: any): void => {
             req.logout();
             var originalUrl: any = req.cookies.originalUrl;
             if (!Util.IsNullEmpty(originalUrl)) {
-                res.cookie("originalUrl", "", { expires: new Date() });
-                res.redirect(originalUrl);
+                res.cookie("originalUrl", "", { expires: new Date(0) });
+                LoginProvider.redirect(res, originalUrl);
             } else {
                 res.redirect("/");
             }
         });
+        app.get("/PassiveSignout", (req: any, res: any, next: any): void => {
+            req.logout();
+            var originalUrl: any = req.cookies.originalUrl;
+            if (!Util.IsNullEmpty(originalUrl)) {
+                res.cookie("originalUrl", "", { expires: new Date(0) });
+                LoginProvider.redirect(res, originalUrl);
+            } else {
+                res.redirect("/Login");
+            }
+        });
         await LoginProvider.RegisterProviders(app, baseurl);
         app.get("/jwt", (req: any, res: any, next: any): void => {
             res.setHeader("Content-Type", "application/json");
@@ -144,6 +175,16 @@ export class LoginProvider {
             }
             res.end();
         });
+        app.get("/jwtlong", (req: any, res: any, next: any): void => {
+            res.setHeader("Content-Type", "application/json");
+            if (req.user) {
+                var user: TokenUser = new TokenUser(req.user);
+                res.end(JSON.stringify({ jwt: Crypt.createToken(user, "365d"), user: user }));
+            } else {
+                res.end(JSON.stringify({ jwt: "" }));
+            }
+            res.end();
+        });
         app.post("/jwt", async (req: any, res: any, next: any): Promise<void> => {
             try {
                 var rawAssertion = req.body.token;
@@ -256,8 +297,8 @@ export class LoginProvider {
             function (req: any, res: any): void {
                 var originalUrl: any = req.cookies.originalUrl;
                 if (!Util.IsNullEmpty(originalUrl)) {
-                    res.cookie("originalUrl", "", { expires: new Date() });
-                    res.redirect(originalUrl);
+                    res.cookie("originalUrl", "", { expires: new Date(0) });
+                    LoginProvider.redirect(res, originalUrl);
                 } else {
                     res.redirect("/");
                 }
@@ -341,8 +382,8 @@ export class LoginProvider {
             function (req: any, res: any): void {
                 var originalUrl: any = req.cookies.originalUrl;
                 if (!Util.IsNullEmpty(originalUrl)) {
-                    res.cookie("originalUrl", "", { expires: new Date() });
-                    res.redirect(originalUrl);
+                    res.cookie("originalUrl", "", { expires: new Date(0) });
+                    LoginProvider.redirect(res, originalUrl);
                 } else {
                     res.redirect("/");
                 }
@@ -401,15 +442,16 @@ export class LoginProvider {
             }
         });
         passport.use("local", strategy);
+        // http://www.passportjs.org/docs/authenticate/#custom-callback
         app.use("/local",
             bodyParser.urlencoded({ extended: false }),
             //passport.authenticate("local", { failureRedirect: "/login?failed=true", failureFlash: true }),
             passport.authenticate("local", { failureRedirect: "/" }),
             function (req: any, res: any): void {
                 var originalUrl: any = req.cookies.originalUrl;
                 if (!Util.IsNullEmpty(originalUrl)) {
-                    res.cookie("originalUrl", "", { expires: new Date() });
-                    res.redirect(originalUrl);
+                    res.cookie("originalUrl", "", { expires: new Date(0) });
+                    LoginProvider.redirect(res, originalUrl);
                 } else {
                     res.redirect("/");
                 }
diff --git a/OpenFlow/src/public/PassiveLogin.html b/OpenFlow/src/public/PassiveLogin.html
@@ -1,9 +1,20 @@
-<script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.6.9/angular.min.js"></script>
-<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.css"
-  integrity="sha256-piqEf7Ap7CMps8krDQsSOTZgF+MU/0MPyPW2enj5I40=" crossorigin="anonymous" />
+<!DOCTYPE html>
+<html lang="en">
 
-<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"
-  integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
+<head>
+  <meta charset="utf-8">
+  <meta http-equiv="X-UA-Compatible" content="IE=edge">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.6.9/angular.min.js"></script>
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.css"
+    integrity="sha256-piqEf7Ap7CMps8krDQsSOTZgF+MU/0MPyPW2enj5I40=" crossorigin="anonymous" />
+
+  <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css"
+    integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">
+
+  <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
+  <script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script>
+</head>
 
 <script>
   function getJSON(url, callback) {
@@ -13,7 +24,11 @@
     xhr.onload = function () {
       var status = xhr.status;
       if (status === 200) {
-        callback(null, xhr.response);
+        var data = xhr.response;
+        if (typeof data === "string" || data instanceof String) {
+          data = JSON.parse(data);
+        }
+        callback(null, data);
       } else {
         callback(status, xhr.response);
       }
@@ -28,6 +43,7 @@
     this.localenabled = false;
     this.domain = window.location.hostname;
     this.process = function (error, data) {
+      console.log(data);
       this.providers = data;
       for (var i = this.providers.length - 1; i >= 0; i--) {
         if (this.providers[i].provider == "local") {
@@ -41,10 +57,11 @@
       console.log(data);
       if (data.user) {
         this.user = data.user;
+      } else {
+        getJSON("/loginproviders", this.process.bind(this));
       }
       if (!$scope.$$phase) { $scope.$apply(); }
     };
-    getJSON("/loginproviders", this.process.bind(this));
 
     getJSON("/jwt", this.jwt.bind(this));
 
@@ -81,7 +98,7 @@ <h5 class="card-title text-center"><span translate lib="web">signin</span> {{ctr
                 translate lib="web">signin</button>
               <hr class="my-4" ng-show="ctrl.localenabled">
 
-              <a ng-href="/{{model.id}}" ng-repeat="model in ctrl.providers"
+              <a ng-href="/{{model.id}}" ng-repeat="model in ctrl.providers track by $index"
                 class="btn btn-lg btn-block text-uppercase">
                 <i class="fab {{model.logo}} mr-2"></i><span translate lib="web">{{model.name}}</span>
               </a>
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-0.0.345
+0.0.346
