| | | 1 | | using Anichron.API.Security; |
| | | 2 | | using Anichron.Core.Data; |
| | | 3 | | using Anichron.Core.Data.Repository; |
| | | 4 | | using Anichron.Core.Domain; |
| | | 5 | | |
| | | 6 | | namespace Anichron.API.Services; |
| | | 7 | | |
| | | 8 | | public interface IBootstrapResetService |
| | | 9 | | { |
| | | 10 | | Task ResetIfRequestedAsync(CancellationToken ct); |
| | | 11 | | } |
| | | 12 | | |
| | 7 | 13 | | public sealed partial class BootstrapResetService( |
| | 7 | 14 | | IUserRepository users, |
| | 7 | 15 | | IUnitOfWork unitOfWork, |
| | 7 | 16 | | IPasswordHasher passwordHasher, |
| | 7 | 17 | | IConfiguration configuration, |
| | 7 | 18 | | ILogger<BootstrapResetService> logger) : IBootstrapResetService |
| | | 19 | | { |
| | | 20 | | public async Task ResetIfRequestedAsync(CancellationToken ct) |
| | 7 | 21 | | { |
| | 7 | 22 | | var resetPassword = configuration["ADMIN_RESET_PASSWORD"]; |
| | 7 | 23 | | if (string.IsNullOrEmpty(resetPassword)) |
| | 1 | 24 | | return; |
| | | 25 | | |
| | 6 | 26 | | var targetUsername = configuration["ADMIN_RESET_USERNAME"]?.Trim().ToLowerInvariant(); |
| | | 27 | | User? admin; |
| | | 28 | | |
| | 6 | 29 | | if (!string.IsNullOrEmpty(targetUsername)) |
| | 3 | 30 | | { |
| | 3 | 31 | | admin = await users.FindAdminByUsernameAsync(targetUsername, ct); |
| | 3 | 32 | | if (admin is null) |
| | 1 | 33 | | { |
| | 1 | 34 | | Log.AdminNotFoundByUsername(logger, targetUsername); |
| | 1 | 35 | | return; |
| | | 36 | | } |
| | 2 | 37 | | } |
| | | 38 | | else |
| | 3 | 39 | | { |
| | 3 | 40 | | var admins = await users.FindAdminsAsync(take: 2, ct); |
| | 3 | 41 | | switch (admins.Count) |
| | | 42 | | { |
| | | 43 | | case 0: |
| | 1 | 44 | | Log.NoAdminFound(logger); |
| | 1 | 45 | | return; |
| | | 46 | | case > 1: |
| | 1 | 47 | | Log.MultipleAdminsFound(logger); |
| | 1 | 48 | | return; |
| | | 49 | | default: |
| | 1 | 50 | | admin = admins[0]; |
| | 1 | 51 | | break; |
| | | 52 | | } |
| | 1 | 53 | | } |
| | | 54 | | |
| | 3 | 55 | | admin.PasswordHash = passwordHasher.Hash(resetPassword); |
| | 3 | 56 | | admin.MustChangePassword = true; |
| | 3 | 57 | | await unitOfWork.SaveChangesAsync(ct); |
| | 3 | 58 | | Log.AdminPasswordReset(logger, admin.Username); |
| | 7 | 59 | | } |
| | | 60 | | |
| | | 61 | | private static partial class Log |
| | | 62 | | { |
| | | 63 | | [LoggerMessage(Level = LogLevel.Error, Message = "ADMIN_RESET_PASSWORD is set but no admin with username '{Usern |
| | | 64 | | public static partial void AdminNotFoundByUsername(ILogger logger, string username); |
| | | 65 | | |
| | | 66 | | [LoggerMessage(Level = LogLevel.Warning, Message = "ADMIN_RESET_PASSWORD is set but no admin user was found.")] |
| | | 67 | | public static partial void NoAdminFound(ILogger logger); |
| | | 68 | | |
| | | 69 | | [LoggerMessage(Level = LogLevel.Error, Message = "ADMIN_RESET_PASSWORD is set but multiple admins exist. Set ADM |
| | | 70 | | public static partial void MultipleAdminsFound(ILogger logger); |
| | | 71 | | |
| | | 72 | | [LoggerMessage(Level = LogLevel.Warning, Message = "Admin password has been reset for '{Username}'. Remove ADMIN |
| | | 73 | | public static partial void AdminPasswordReset(ILogger logger, string username); |
| | | 74 | | } |
| | | 75 | | } |