X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;f=src%2Fmain%2Fjava%2Fnet%2Fpterodactylus%2Fsone%2Ffcp%2FFcpInterface.java;h=c6957f4a29ee51a393c816ff1ed2c131bc584967;hb=914d5522692e7714ba5bdefb002fedc8e293f5fc;hp=7fb4462347853b2b055fc3b6006da2d6288eb78f;hpb=2d15e85a3ea6c752a792aa918bbb5938760d69ac;p=Sone.git diff --git a/src/main/java/net/pterodactylus/sone/fcp/FcpInterface.java b/src/main/java/net/pterodactylus/sone/fcp/FcpInterface.java index 7fb4462..c6957f4 100644 --- a/src/main/java/net/pterodactylus/sone/fcp/FcpInterface.java +++ b/src/main/java/net/pterodactylus/sone/fcp/FcpInterface.java @@ -19,6 +19,9 @@ package net.pterodactylus.sone.fcp; import static com.google.common.base.Preconditions.checkNotNull; import static java.util.logging.Logger.getLogger; +import static net.pterodactylus.sone.fcp.FcpInterface.FullAccessRequired.NO; +import static net.pterodactylus.sone.fcp.FcpInterface.FullAccessRequired.WRITING; +import static net.pterodactylus.sone.freenet.fcp.Command.AccessType.RESTRICTED_FCP; import java.util.HashMap; import java.util.Map; @@ -27,6 +30,7 @@ import java.util.concurrent.atomic.AtomicReference; import java.util.logging.Level; import java.util.logging.Logger; +import javax.annotation.Nonnull; import javax.inject.Singleton; import net.pterodactylus.sone.core.Core; @@ -85,6 +89,7 @@ public class FcpInterface { /** All available FCP commands. */ private final Map commands; + private final AccessAuthorizer accessAuthorizer; /** * Creates a new FCP interface. @@ -93,8 +98,9 @@ public class FcpInterface { * The core */ @Inject - public FcpInterface(Core core, CommandSupplier commandSupplier) { + public FcpInterface(Core core, CommandSupplier commandSupplier, AccessAuthorizer accessAuthorizer) { commands = commandSupplier.supplyCommands(core); + this.accessAuthorizer = accessAuthorizer; } // @@ -143,21 +149,21 @@ public class FcpInterface { return; } AbstractSoneCommand command = commands.get(parameters.get("Message")); - if ((accessType == FredPluginFCP.ACCESS_FCP_RESTRICTED) && (((fullAccessRequired.get() == FullAccessRequired.WRITING) && command.requiresWriteAccess()) || (fullAccessRequired.get() == FullAccessRequired.ALWAYS))) { - sendErrorReply(pluginReplySender, null, 401, "Not authorized"); - return; - } if (command == null) { sendErrorReply(pluginReplySender, null, 404, "Unrecognized Message: " + parameters.get("Message")); return; } + if (!accessAuthorizer.authorized(AccessType.values()[accessType], fullAccessRequired.get(), command.requiresWriteAccess())) { + sendErrorReply(pluginReplySender, null, 401, "Not authorized"); + return; + } String identifier = parameters.get("Identifier"); if ((identifier == null) || (identifier.length() == 0)) { sendErrorReply(pluginReplySender, null, 400, "Missing Identifier."); return; } try { - Response response = command.execute(parameters, data, AccessType.values()[accessType]); + Response response = command.execute(parameters); sendReply(pluginReplySender, identifier, response); } catch (Exception e1) { logger.log(Level.WARNING, "Could not process FCP command “%s”.", command); @@ -194,13 +200,7 @@ public class FcpInterface { if (identifier != null) { replyParameters.putOverwrite("Identifier", identifier); } - if (response.hasData()) { - pluginReplySender.send(replyParameters, response.getData()); - } else if (response.hasBucket()) { - pluginReplySender.send(replyParameters, response.getBucket()); - } else { - pluginReplySender.send(replyParameters); - } + pluginReplySender.send(replyParameters); } @Subscribe @@ -243,4 +243,13 @@ public class FcpInterface { } + @Singleton + public static class AccessAuthorizer { + + public boolean authorized(@Nonnull AccessType accessType, @Nonnull FullAccessRequired fullAccessRequired, boolean commandRequiresWriteAccess) { + return (accessType != RESTRICTED_FCP) || (fullAccessRequired == NO) || ((fullAccessRequired == WRITING) && !commandRequiresWriteAccess); + } + + } + }