344 lines
10 KiB
Go
344 lines
10 KiB
Go
package handlers
|
|
|
|
import (
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/ectrc/snow/aid"
|
|
p "github.com/ectrc/snow/person"
|
|
"github.com/gofiber/fiber/v2"
|
|
)
|
|
|
|
var (
|
|
oauthTokenGrantTypes = map[string]func(c *fiber.Ctx, body *FortniteTokenBody) error{
|
|
"client_credentials": PostTokenClientCredentials, // spams the api?? like wtf
|
|
"password": PostTokenPassword,
|
|
"exchange_code": PostTokenExchangeCode,
|
|
}
|
|
)
|
|
|
|
type FortniteTokenBody struct {
|
|
GrantType string `form:"grant_type" binding:"required"`
|
|
ExchangeCode string `form:"exchange_code"`
|
|
Username string `form:"username"`
|
|
Password string `form:"password"`
|
|
TokenType string `form:"token_type"`
|
|
}
|
|
|
|
func PostFortniteToken(c *fiber.Ctx) error {
|
|
var body FortniteTokenBody
|
|
|
|
if err := c.BodyParser(&body); err != nil {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Request Body"))
|
|
}
|
|
|
|
if action, ok := oauthTokenGrantTypes[body.GrantType]; ok {
|
|
return action(c, &body)
|
|
}
|
|
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Grant Type"))
|
|
}
|
|
|
|
func PostTokenClientCredentials(c *fiber.Ctx, body *FortniteTokenBody) error {
|
|
if aid.Config.Fortnite.DisableClientCredentials {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Client Credentials is disabled."))
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON(aid.JSON{
|
|
"access_token": "snow",
|
|
"token_type": "bearer",
|
|
"client_id": aid.Hash([]byte(c.IP())),
|
|
"client_service": "fortnite",
|
|
"internal_client": true,
|
|
"expires_in": 3600,
|
|
"expires_at": time.Now().Add(time.Hour).Format("2006-01-02T15:04:05.999Z"),
|
|
})
|
|
}
|
|
|
|
func PostTokenExchangeCode(c *fiber.Ctx, body *FortniteTokenBody) error {
|
|
if body.ExchangeCode == "" {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Exchange Code is empty"))
|
|
}
|
|
|
|
codeParts := strings.Split(body.ExchangeCode, ".")
|
|
if len(codeParts) != 2 {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Exchange Code"))
|
|
}
|
|
|
|
code, failed := aid.KeyPair.DecryptAndVerifyB64(codeParts[0], codeParts[1])
|
|
if failed {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Exchange Code"))
|
|
}
|
|
|
|
personParts := strings.Split(string(code), "=")
|
|
if len(personParts) != 2 {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Exchange Code"))
|
|
}
|
|
|
|
personId := personParts[0]
|
|
expire, err := time.Parse("2006-01-02T15:04:05.999Z", personParts[1])
|
|
if err != nil {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Exchange Code"))
|
|
}
|
|
|
|
if expire.Add(time.Hour).Before(time.Now()) {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Exchange Code"))
|
|
}
|
|
|
|
person := p.Find(personId)
|
|
if person == nil {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Invalid Exchange Code"))
|
|
}
|
|
|
|
access, err := aid.JWTSign(aid.JSON{
|
|
"snow_id": person.ID, // custom
|
|
"creation_date": time.Now().Format("2006-01-02T15:04:05.999Z"),
|
|
})
|
|
if err != nil {
|
|
return c.Status(fiber.StatusInternalServerError).JSON(aid.ErrorInternalServer)
|
|
}
|
|
|
|
refresh, err := aid.JWTSign(aid.JSON{
|
|
"snow_id": person.ID,
|
|
"creation_date": time.Now().Format("2006-01-02T15:04:05.999Z"),
|
|
})
|
|
if err != nil {
|
|
return c.Status(fiber.StatusInternalServerError).JSON(aid.ErrorInternalServer)
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON(aid.JSON{
|
|
"access_token": "eg1~" + access,
|
|
"account_id": person.ID,
|
|
"client_id": c.IP(),
|
|
"client_service": "fortnite",
|
|
"app": "fortnite",
|
|
"device_id": "default",
|
|
"display_name": person.DisplayName,
|
|
"expires_at": time.Now().Add(time.Hour * 24).Format("2006-01-02T15:04:05.999Z"),
|
|
"expires_in": 86400,
|
|
"internal_client": true,
|
|
"refresh_expires": 86400,
|
|
"refresh_expires_at": time.Now().Add(time.Hour * 24).Format("2006-01-02T15:04:05.999Z"),
|
|
"refresh_token": "eg1~" + refresh,
|
|
"token_type": "bearer",
|
|
"product_id": "prod-fn",
|
|
"sandbox_id": "fn",
|
|
})
|
|
}
|
|
|
|
func PostTokenPassword(c *fiber.Ctx, body *FortniteTokenBody) error {
|
|
if aid.Config.Fortnite.Password {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Username and password authentication is disabled for security reasons. Please use an exchange code given by the discord bot."))
|
|
}
|
|
|
|
if body.Username == "" || body.Password == "" {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("Username/Password is empty"))
|
|
}
|
|
|
|
person := p.FindByDisplay(strings.Split(body.Username, "@")[0])
|
|
if person == nil {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("No Account Found"))
|
|
}
|
|
|
|
access, err := aid.JWTSign(aid.JSON{
|
|
"snow_id": person.ID, // custom
|
|
"creation_date": time.Now().Format("2006-01-02T15:04:05.999Z"),
|
|
})
|
|
if err != nil {
|
|
return c.Status(fiber.StatusInternalServerError).JSON(aid.ErrorInternalServer)
|
|
}
|
|
|
|
refresh, err := aid.JWTSign(aid.JSON{
|
|
"snow_id": person.ID,
|
|
"creation_date": time.Now().Format("2006-01-02T15:04:05.999Z"),
|
|
})
|
|
if err != nil {
|
|
return c.Status(fiber.StatusInternalServerError).JSON(aid.ErrorInternalServer)
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON(aid.JSON{
|
|
"access_token": "eg1~" + access,
|
|
"account_id": person.ID,
|
|
"client_id": c.IP(),
|
|
"client_service": "fortnite",
|
|
"app": "fortnite",
|
|
"device_id": "default",
|
|
"display_name": person.DisplayName,
|
|
"expires_at": time.Now().Add(time.Hour * 24).Format("2006-01-02T15:04:05.999Z"),
|
|
"expires_in": 86400,
|
|
"internal_client": true,
|
|
"refresh_expires": 86400,
|
|
"refresh_expires_at": time.Now().Add(time.Hour * 24).Format("2006-01-02T15:04:05.999Z"),
|
|
"refresh_token": "eg1~" + refresh,
|
|
"token_type": "bearer",
|
|
"product_id": "prod-fn",
|
|
"sandbox_id": "fn",
|
|
})
|
|
}
|
|
|
|
func GetTokenVerify(c *fiber.Ctx) error {
|
|
auth := c.Get("Authorization")
|
|
if auth == "" {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Authorization Header is empty"))
|
|
}
|
|
real := strings.ReplaceAll(auth, "bearer eg1~", "")
|
|
|
|
claims, err := aid.JWTVerify(real)
|
|
if err != nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
if claims["snow_id"] == nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
snowId, ok := claims["snow_id"].(string)
|
|
if !ok {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
person := p.Find(snowId)
|
|
if person == nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON(aid.JSON{
|
|
"app": "fortnite",
|
|
"token": real,
|
|
"token_type": "bearer",
|
|
"expires_at": time.Now().Add(time.Hour * 24).Format("2006-01-02T15:04:05.999Z"),
|
|
"expires_in": 86400,
|
|
"client_id": c.IP(),
|
|
"session_id": "0",
|
|
"device_id": "default",
|
|
"internal_client": true,
|
|
"client_service": "fortnite",
|
|
"in_app_id": person.ID,
|
|
"account_id": person.ID,
|
|
"displayName": person.DisplayName,
|
|
"product_id": "prod-fn",
|
|
"sandbox_id": "fn",
|
|
})
|
|
}
|
|
|
|
func DeleteToken(c *fiber.Ctx) error {
|
|
return c.Status(fiber.StatusOK).JSON(aid.JSON{})
|
|
}
|
|
|
|
func MiddlewareFortnite(c *fiber.Ctx) error {
|
|
auth := c.Get("Authorization")
|
|
if auth == "" {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Authorization Header is empty"))
|
|
}
|
|
real := strings.ReplaceAll(auth, "bearer eg1~", "")
|
|
|
|
claims, err := aid.JWTVerify(real)
|
|
if err != nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
if claims["snow_id"] == nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
snowId, ok := claims["snow_id"].(string)
|
|
if !ok {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
person := p.Find(snowId)
|
|
if person == nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
c.Locals("person", person)
|
|
return c.Next()
|
|
}
|
|
|
|
func MiddlewareWeb(c *fiber.Ctx) error {
|
|
auth := c.Get("Authorization")
|
|
if auth == "" {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Authorization Header is empty"))
|
|
}
|
|
|
|
claims, err := aid.JWTVerify(auth)
|
|
if err != nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
if claims["snow_id"] == nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
if claims["frontend"] == nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Claims"))
|
|
}
|
|
|
|
snowId, ok := claims["snow_id"].(string)
|
|
if !ok {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
person := p.Find(snowId)
|
|
if person == nil {
|
|
return c.Status(fiber.StatusForbidden).JSON(aid.ErrorBadRequest("Invalid Access Token"))
|
|
}
|
|
|
|
c.Locals("person", person)
|
|
return c.Next()
|
|
}
|
|
|
|
func GetPublicAccount(c *fiber.Ctx) error {
|
|
person := p.Find(c.Params("accountId"))
|
|
if person == nil {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("No Account Found"))
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON(aid.JSON{
|
|
"id": person.ID,
|
|
"displayName": person.DisplayName,
|
|
"externalAuths": []aid.JSON{},
|
|
})
|
|
}
|
|
|
|
func GetPublicAccounts(c *fiber.Ctx) error {
|
|
response := []aid.JSON{}
|
|
|
|
accountIds := c.Request().URI().QueryArgs().PeekMulti("accountId")
|
|
for _, accountIdSlice := range accountIds {
|
|
person := p.Find(string(accountIdSlice))
|
|
if person == nil {
|
|
continue
|
|
}
|
|
|
|
response = append(response, aid.JSON{
|
|
"id": person.ID,
|
|
"displayName": person.DisplayName,
|
|
"externalAuths": []aid.JSON{},
|
|
})
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON(response)
|
|
}
|
|
|
|
func GetPublicAccountExternalAuths(c *fiber.Ctx) error {
|
|
person := p.Find(c.Params("accountId"))
|
|
if person == nil {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("No Account Found"))
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON([]aid.JSON{})
|
|
}
|
|
|
|
func GetPublicAccountByDisplayName(c *fiber.Ctx) error {
|
|
person := p.FindByDisplay(c.Params("displayName"))
|
|
if person == nil {
|
|
return c.Status(fiber.StatusBadRequest).JSON(aid.ErrorBadRequest("No Account Found"))
|
|
}
|
|
|
|
return c.Status(fiber.StatusOK).JSON(aid.JSON{
|
|
"id": person.ID,
|
|
"displayName": person.DisplayName,
|
|
"externalAuths": []aid.JSON{},
|
|
})
|
|
} |