@cryptotaxi247 / netdata
Code Commits Issues Pulls Sessions CI/CD
master
master
c 193 lines 6.06 KB
Raw
1 // SPDX-License-Identifier: GPL-3.0-or-later
2
3 #include "libnetdata/libnetdata.h"
4
5 static struct {
6 HTTP_USER_ROLE role;
7 const char *name;
8 } user_roles[] = {
9 { .role = HTTP_USER_ROLE_NONE, .name = "none" },
10 { .role = HTTP_USER_ROLE_ADMIN, .name = "admin" },
11 { .role = HTTP_USER_ROLE_MANAGER, .name = "manager" },
12 { .role = HTTP_USER_ROLE_TROUBLESHOOTER, .name = "troubleshooter" },
13 { .role = HTTP_USER_ROLE_OBSERVER, .name = "observer" },
14 { .role = HTTP_USER_ROLE_MEMBER, .name = "member" },
15 { .role = HTTP_USER_ROLE_BILLING, .name = "billing" },
16 { .role = HTTP_USER_ROLE_ANY, .name = "any" },
17
18 { .role = HTTP_USER_ROLE_MEMBER, .name = "members" },
19 { .role = HTTP_USER_ROLE_ADMIN, .name = "admins" },
20 { .role = HTTP_USER_ROLE_ANY, .name = "all" },
21
22 // terminator
23 { .role = 0, .name = NULL },
24 };
25
26 HTTP_USER_ROLE http_user_role2id(const char *role) {
27 if(!role || !*role)
28 return HTTP_USER_ROLE_MEMBER;
29
30 for(size_t i = 0; user_roles[i].name ;i++) {
31 if(strcmp(user_roles[i].name, role) == 0)
32 return user_roles[i].role;
33 }
34
35 nd_log(NDLS_DAEMON, NDLP_WARNING, "HTTP user role '%s' is not valid", role);
36 return HTTP_USER_ROLE_NONE;
37 }
38
39 const char *http_id2user_role(HTTP_USER_ROLE role) {
40 for(size_t i = 0; user_roles[i].name ;i++) {
41 if(role == user_roles[i].role)
42 return user_roles[i].name;
43 }
44
45 nd_log(NDLS_DAEMON, NDLP_WARNING, "HTTP user role %d is not valid", role);
46 return "none";
47 }
48
49 // --------------------------------------------------------------------------------------------------------------------
50
51 static struct {
52 const char *name;
53 uint32_t hash;
54 HTTP_ACCESS value;
55 } http_accesses[] = {
56 {"none" , 0 , HTTP_ACCESS_NONE}
57 , {"signed-in" , 0 , HTTP_ACCESS_SIGNED_ID}
58 , {"same-space" , 0 , HTTP_ACCESS_SAME_SPACE}
59 , {"commercial" , 0 , HTTP_ACCESS_COMMERCIAL_SPACE}
60 , {"anonymous-data" , 0 , HTTP_ACCESS_ANONYMOUS_DATA}
61 , {"sensitive-data" , 0 , HTTP_ACCESS_SENSITIVE_DATA}
62 , {"view-config" , 0 , HTTP_ACCESS_VIEW_AGENT_CONFIG}
63 , {"edit-config" , 0 , HTTP_ACCESS_EDIT_AGENT_CONFIG}
64 , {"view-notifications-config" , 0 , HTTP_ACCESS_VIEW_NOTIFICATIONS_CONFIG}
65 , {"edit-notifications-config" , 0 , HTTP_ACCESS_EDIT_NOTIFICATIONS_CONFIG}
66 , {"view-alerts-silencing" , 0 , HTTP_ACCESS_VIEW_ALERTS_SILENCING}
67 , {"edit-alerts-silencing" , 0 , HTTP_ACCESS_EDIT_ALERTS_SILENCING}
68
69 , {NULL , 0 , 0}
70 };
71
72 inline HTTP_ACCESS http_access2id_one(const char *str) {
73 HTTP_ACCESS ret = 0;
74
75 if(!str || !*str) return ret;
76
77 uint32_t hash = simple_hash(str);
78 int i;
79 for(i = 0; http_accesses[i].name ; i++) {
80 if(unlikely(!http_accesses[i].hash))
81 http_accesses[i].hash = simple_hash(http_accesses[i].name);
82
83 if (unlikely(hash == http_accesses[i].hash && !strcmp(str, http_accesses[i].name))) {
84 ret |= http_accesses[i].value;
85 break;
86 }
87 }
88
89 return ret;
90 }
91
92 inline HTTP_ACCESS http_access2id(char *str) {
93 HTTP_ACCESS ret = 0;
94 char *tok;
95
96 while(str && *str && (tok = strsep_skip_consecutive_separators(&str, ", |"))) {
97 if(!*tok) continue;
98 ret |= http_access2id_one(tok);
99 }
100
101 return ret;
102 }
103
104 void http_access2buffer_json_array(BUFFER *wb, const char *key, HTTP_ACCESS access) {
105 buffer_json_member_add_array(wb, key);
106
107 HTTP_ACCESS used = 0; // to prevent adding duplicates
108 for(int i = 0; http_accesses[i].name ; i++) {
109 if (unlikely((http_accesses[i].value & access) && !(http_accesses[i].value & used))) {
110 const char *name = http_accesses[i].name;
111 used |= http_accesses[i].value;
112
113 buffer_json_add_array_item_string(wb, name);
114 }
115 }
116
117 buffer_json_array_close(wb);
118 }
119
120 void http_access2txt(char *buf, size_t size, const char *separator, HTTP_ACCESS access) {
121 char *write = buf;
122 char *end = &buf[size - 1];
123
124 HTTP_ACCESS used = 0; // to prevent adding duplicates
125 int added = 0;
126 for(int i = 0; http_accesses[i].name ; i++) {
127 if (unlikely((http_accesses[i].value & access) && !(http_accesses[i].value & used))) {
128 const char *name = http_accesses[i].name;
129 used |= http_accesses[i].value;
130
131 if(added && write < end) {
132 const char *s = separator;
133 while(*s && write < end)
134 *write++ = *s++;
135 }
136
137 while(*name && write < end)
138 *write++ = *name++;
139
140 added++;
141 }
142 }
143 *write = *end = '\0';
144 }
145
146 HTTP_ACCESS http_access_from_hex_mapping_old_roles(const char *str) {
147 if(!str || !*str)
148 return HTTP_ACCESS_NONE;
149
150 if(strcmp(str, "any") == 0 || strcmp(str, "all") == 0)
151 return HTTP_ACCESS_MAP_OLD_ANY;
152
153 if(strcmp(str, "member") == 0 || strcmp(str, "members") == 0)
154 return HTTP_ACCESS_MAP_OLD_MEMBER;
155
156 else if(strcmp(str, "admin") == 0 || strcmp(str, "admins") == 0)
157 return HTTP_ACCESS_MAP_OLD_ADMIN;
158
159 return (HTTP_ACCESS)strtoull(str, NULL, 16) & HTTP_ACCESS_ALL;
160 }
161
162 HTTP_ACCESS http_access_from_hex(const char *str) {
163 if(!str || !*str)
164 return HTTP_ACCESS_NONE;
165
166 return (HTTP_ACCESS)strtoull(str, NULL, 16) & HTTP_ACCESS_ALL;
167 }
168
169 HTTP_ACCESS http_access_from_hex_str(const char *str) {
170 if (!str || !*str)
171 return HTTP_ACCESS_NONE;
172
173 return (HTTP_ACCESS)strtoull(str, NULL, 16) & HTTP_ACCESS_ALL;
174 }
175
176 HTTP_ACCESS http_access_from_source(const char *str) {
177 if(!str || !*str)
178 return HTTP_ACCESS_NONE;
179
180 HTTP_ACCESS access = HTTP_ACCESS_NONE;
181
182 const char *permissions = strstr(str, "permissions=");
183 if(permissions)
184 access = http_access_from_hex_str(permissions + 12);
185
186 return access;
187 }
188
189 bool log_cb_http_access_to_hex(BUFFER *wb, void *data) {
190 HTTP_ACCESS access = *((HTTP_ACCESS *)data);
191 buffer_sprintf(wb, HTTP_ACCESS_FORMAT, (HTTP_ACCESS_FORMAT_CAST)access);
192 return true;
193 }