Software/Visual_Studio/Web/Tango.MachineService/Controllers/MachineStudioController.cs


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
using Microsoft.IdentityModel.Clients.ActiveDirectory;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Net;
using System.Net.Http;
using System.Security.Authentication;
using System.Web.Http;
using Tango.BL;
using Tango.BL.Builders;
using Tango.BL.Entities;
using Tango.BL.Enumerations;
using Tango.Core.Cryptography;
using Tango.MachineService.Models;
using Tango.MachineStudio.Common.Authentication;
using System.Data.Entity;
using Tango.MachineStudio.Common.Web;
using Tango.Web.Controllers;
using Tango.Web.Helpers;
using Tango.Web.Storage;
using Tango.Web.Security;
using Tango.Web.ActiveDirectory;
using Tango.MachineService.Filters;
using Tango.MachineService.Security;
using Tango.Web.SQLServer;
using Tango.Core;
using Tango.Web.SMO;
using Tango.Core.DB;
using System.Threading.Tasks;

namespace Tango.MachineService.Controllers
{
    public class MachineStudioController : TangoController<MachineStudioController.TokenObject>
    {
        private static List<MachineStudioPendingUpload> _pendingUploads;
        private ActiveDirectoryManager _ad_manager;

        public class TokenObject
        {
            public String UserGuid { get; set; }
        }

        #region Constructors

        /// <summary>
        /// Initializes the <see cref="MachineStudioController"/> class.
        /// </summary>
        static MachineStudioController()
        {
            _pendingUploads = new List<MachineStudioPendingUpload>();
        }

        /// <summary>
        /// Initializes a new instance of the <see cref="MachineStudioController"/> class.
        /// </summary>
        public MachineStudioController() : base()
        {
            _ad_manager = new ActiveDirectoryManager();
        }

        #endregion

        #region Actions

        /// <summary>
        /// Checks for updates.
        /// </summary>
        /// <param name="request">The request.</param>
        /// <returns></returns>
        [HttpPost]
        [JwtTokenFilter]
        public CheckForUpdatesResponse CheckForUpdates(CheckForUpdatesRequest request)
        {
            LogManager.Log("Request received...");

            var userID = RequestToken.Object.UserGuid;

            CheckForUpdatesResponse response = new CheckForUpdatesResponse();

            using (ObservablesContext db = ObservablesContextHelper.CreateContext())
            {
                var versions = db.MachineStudioVersions.ToList();

                MachineStudioVersion latestVersion = null;

                latestVersion = versions.OrderByDescending(x => Version.Parse(x.Version)).FirstOrDefault();

                Version currentVersion = Version.Parse(request.Version);

                String comments = String.Join(Environment.NewLine, versions.OrderBy(x => Version.Parse(x.Version)).Where(x => Version.Parse(x.Version) > currentVersion).Select(x => x.Comments));

                if (latestVersion != null && Version.Parse(latestVersion.Version) != currentVersion)
                {
                    var manager = new BlobStorageManager();
                    var container = manager.GetContainer(MachineServiceConfig.MACHINE_STUDIO_VERSIONS_CONTAINER);
                    var blob = container.GetBlockBlobReference(latestVersion.BlobName);

                    response.BlobAddress = blob.GenerateReadSignature(TimeSpan.FromMinutes(60));

                    if (!String.IsNullOrWhiteSpace(MachineServiceConfig.CDN_ENDPOINT))
                    {
                        response.CdnAddress = MachineServiceConfig.CDN_ENDPOINT + blob.Uri.AbsolutePath;
                    }

                    response.IsUpdateAvailable = true;
                    response.Version = latestVersion.Version;
                    response.Comments = latestVersion.Comments;
                }
            }

            return response;
        }

        /// <summary>
        /// Downloads the latest version.
        /// </summary>
        /// <param name="request">The request.</param>
        /// <returns></returns>
        [HttpPost]
        [JwtTokenFilter]
        public DownloadLatestVersionResponse DownloadLatestVersion(DownloadLatestVersionRequest request)
        {
            LogManager.Log("Request received...");

            DownloadLatestVersionResponse response = new DownloadLatestVersionResponse();

            using (ObservablesContext db = ObservablesContextHelper.CreateContext())
            {
                var versions = db.MachineStudioVersions.ToList();

                MachineStudioVersion latestVersion = versions.OrderByDescending(x => Version.Parse(x.Version)).FirstOrDefault();

                if (latestVersion != null)
                {
                    var manager = new BlobStorageManager();
                    var container = manager.GetContainer(MachineServiceConfig.MACHINE_STUDIO_VERSIONS_CONTAINER);
                    var blob = container.GetBlockBlobReference(latestVersion.BlobName);

                    if (!String.IsNullOrWhiteSpace(MachineServiceConfig.CDN_ENDPOINT))
                    {
                        response.CdnAddress = MachineServiceConfig.CDN_ENDPOINT + blob.Uri.AbsolutePath;
                    }

                    response.BlobAddress = blob.GenerateReadSignature(TimeSpan.FromMinutes(60));
                    response.Version = latestVersion.Version;
                }
            }

            return response;
        }

        /// <summary>
        /// Uploads a version.
        /// </summary>
        /// <param name="request">The request.</param>
        /// <returns></returns>
        /// <exception cref="System.ArgumentException">New version must be greater than latest version.</exception>
        /// <exception cref="AuthenticationException">Invalid user credentials.</exception>
        [HttpPost]
        [JwtTokenFilter]
        public UploadVersionResponse UploadVersion(UploadVersionRequest request)
        {
            UploadVersionResponse response = new UploadVersionResponse();

            using (ObservablesContext db = ObservablesContextHelper.CreateContext())
            {
                String userID = RequestToken.Object.UserGuid;

                var user = new UserBuilder(db).Set(userID).WithRolesAndPermissions().Build();

                if (user != null && user.HasPermission(Permissions.PublishMachineStudioVersions))
                {
                    var latestVersion = db.MachineStudioVersions.ToList().OrderByDescending(x => Version.Parse(x.Version)).FirstOrDefault();
                    Version local_version = Version.Parse(request.Version);

                    if (latestVersion == null || local_version > Version.Parse(latestVersion.Version))
                    {
                        String newVersionFileName = "Machine Studio v" + local_version.ToString() + ".zip";

                        var manager = new BlobStorageManager();
                        var container = manager.GetContainer(MachineServiceConfig.MACHINE_STUDIO_VERSIONS_CONTAINER);
                        var blob = container.CreateEmptyBlob(newVersionFileName);

                        response.Token = Guid.NewGuid().ToString();
                        response.BlobAddress = blob.GenerateWriteSignature(TimeSpan.FromMinutes(30));

                        MachineStudioPendingUpload pending_upload = new MachineStudioPendingUpload()
                        {
                            UserGuid = user.Guid,
                            Comments = request.Comments,
                            Token = response.Token,
                            Version = request.Version,
                            BlobName = blob.Name,
                        };

                        if (request.WithInstaller)
                        {
                            String installerVersionFileName = "Machine Studio v" + local_version.ToString() + ".exe";
                            var installerBlob = container.CreateEmptyBlob(installerVersionFileName);
                            response.InstallerBlobAddress = installerBlob.GenerateWriteSignature(TimeSpan.FromMinutes(30));
                            pending_upload.InstallerBlobName = installerBlob.Name;
                        }

                        _pendingUploads.Add(pending_upload);
                    }
                    else
                    {
                        throw new ArgumentException("New version must be greater than latest version.");
                    }
                }
                else
                {
                    throw new AuthenticationException("Invalid user credentials.");
                }
            }

            return response;
        }

        /// <summary>
        /// Notifies about a version upload completion.
        /// </summary>
        /// <param name="request">The request.</param>
        /// <returns></returns>
        /// <exception cref="System.ArgumentException">Invalid Token.</exception>
        [HttpPost]
        [JwtTokenFilter]
        public UploadCompletedResponse NotifyVersionUploadCompleted(UploadCompletedRequest request)
        {
            MachineStudioPendingUpload upload = _pendingUploads.FirstOrDefault(x => x.Token == request.Token);

            if (upload != null)
            {
                _pendingUploads.RemoveAll(x => x.Token == upload.Token);

                using (ObservablesContext db = ObservablesContextHelper.CreateContext())
                {
                    db.MachineStudioVersions.Add(new MachineStudioVersion()
                    {
                        Comments = upload.Comments,
                        BlobName = upload.BlobName,
                        InstallerBlobName = upload.InstallerBlobName,
                        UserGuid = upload.UserGuid,
                        Version = upload.Version,
                    });

                    db.SaveChanges();
                }

                return new UploadCompletedResponse();
            }
            else
            {
                throw new ArgumentException("Invalid Token.");
            }
        }

        /// <summary>
        /// Gets the latest version.
        /// </summary>
        /// <param name="request">The request.</param>
        /// <returns></returns>
        [HttpPost]
        public LatestVersionResponse GetLatestVersion(LatestVersionRequest request)
        {
            using (ObservablesContext db = ObservablesContextHelper.CreateContext())
            {
                var version = db.MachineStudioVersions.ToList().OrderByDescending(x => Version.Parse(x.Version)).FirstOrDefault();
                return new LatestVersionResponse() { Version = version != null ? version.Version : "0.0.0.0" };
            }
        }

        /// <summary>
        /// Login to the service.
        /// </summary>
        /// <param name="request">The request.</param>
        /// <returns></returns>
        /// <exception cref="AuthenticationException"></exception>
        [HttpPost]
        public LoginResponse Login(LoginRequest request)
        {
            AuthenticationResult authResult = null;
            User user = null;
            DataSource dataSource = null;
            IHashGenerator hash = new BasicHashGenerator();

            Version client_version;

            if (!Version.TryParse(request.Version, out client_version))
            {
                client_version = new Version("1.0.0.0");
            }

            bool versionChangeRequired = false;
            String requiredVersion = null;
            bool isPasswordOK = false;

            try
            {
                authResult = _ad_manager.ValidateUserCredentials(request.Email, request.Password);
                isPasswordOK = true;
            }
            catch { }

            //Login via Active Directory
            if (request.Method == LoginMethod.ActiveDirectory)
            {
                try
                {
                    authResult = _ad_manager.ValidateUserCredentials(request.Email, request.Password);
                }
                catch (Exception ex)
                {
                    throw new AuthenticationException(ex.FlattenMessage());
                }

                if (!_ad_manager.CanUserAccessCurrentEnvironment(request.Email))
                {
                    throw new AuthenticationException($"You do not have permissions to access the {MachineServiceConfig.DEPLOYMENT_SLOT.ToDescription()} environment.");
                }

                using (ObservablesContext db = ObservablesContextHelper.CreateContext())
                {
                    db.Roles.ToList();
                    db.Permissions.ToList();
                    db.UsersRoles.ToList();
                    db.RolesPermissions.ToList();

                    user = new UserBuilder(db).Set(x => x.Email.ToLower() == request.Email.ToLower()).WithRolesAndPermissions().WithDeleted().Build();

                    if (user == null)
                    {
                        user = new User();
                        user.Email = request.Email;
                        user.Password = hash.Encrypt(request.Password);
                        user.Organization = db.Organizations.Include(x => x.Address).Single(x => x.Name == "Twine");
                        user.Address = user.Organization.Address.Clone();
                        user.Contact = new Contact()
                        {
                            FirstName = authResult.UserInfo.GivenName,
                            LastName = authResult.UserInfo.FamilyName,
                            FullName = authResult.UserInfo.GivenName + " " + authResult.UserInfo.FamilyName,
                            Email = request.Email,
                        };

                        db.UsersRoles.Add(new UsersRole()
                        {
                            User = user,
                            Role = db.Roles.Single(x => (Roles)x.Code == Roles.User),
                        });

                        db.UsersRoles.Add(new UsersRole()
                        {
                            User = user,
                            Role = db.Roles.Single(x => (Roles)x.Code == Roles.MachineStudioUser),
                        });

                        user.Password = hash.Encrypt(request.Password);

                        db.Users.Add(user);
                    }
                    else
                    {
                        if (user.Deleted)
                        {
                            throw new AuthenticationException("Your account has been disabled. Please contact your administrator.");
                        }
                    }

                    user.LastLogin = DateTime.UtcNow;

                    db.SaveChanges();
                }

                dataSource = new DataSource()
                {
                    Address = MachineServiceConfig.DB_ADDRESS,
                    Catalog = MachineServiceConfig.DB_CATALOG,
                    Type = Core.DataSourceType.Azure,
                    IntegratedSecurity = false,
                    UserName = request.Email,
                    Password = request.Password,
                };
            }
            //Login via Database standard user
            else
            {
                var password = hash.Encrypt(request.Password);

                using (var db = ObservablesContextHelper.CreateContext())
                {
                    user = new UserBuilder(db).Set(x => x.Email.ToLower() == request.Email.ToLower() && (isPasswordOK || x.Password == password)).WithRolesAndPermissions().WithDeleted().Build();

                    if (user == null)
                    {
                        throw new AuthenticationException("Invalid email or password.");
                    }

                    if (user.Deleted)
                    {
                        throw new AuthenticationException("Your account has been disabled. Please contact your administrator.");
                    }

                    user.LastLogin = DateTime.UtcNow;
                    db.SaveChanges();
                }

                SQLServerManager sqlServer = new SQLServerManager();
                var accessToken = sqlServer.GetAccessToken();

                dataSource = new DataSource()
                {
                    Address = MachineServiceConfig.DB_ADDRESS,
                    Catalog = MachineServiceConfig.DB_CATALOG,
                    Type = Core.DataSourceType.AccessToken,
                    IntegratedSecurity = false,
                    AccessToken = accessToken.AccessToken,
                    AccessTokenExpiration = accessToken.ExpiresOn.UtcDateTime
                };
            }

            //Enforce Machine Studio Version ?
            if (MachineServiceConfig.ENFORCE_MACHINE_STUDIO_VERSION)
            {
                using (var db = ObservablesContextHelper.CreateContext())
                {
                    var latest_version = db.MachineStudioVersions.ToList().OrderByDescending(x => Version.Parse(x.Version)).FirstOrDefault();

                    if (latest_version != null && Version.Parse(latest_version.Version) != client_version)
                    {
                        versionChangeRequired = true;
                        requiredVersion = latest_version.Version;
                    }
                }
            }

            //Return data source
            return new LoginResponse()
            {
                DataSource = dataSource,
                AccessToken = WebToken<TokenObject>.CreateNew(MachineServiceConfig.JWT_TOKEN_SECRET, new TokenObject()
                {
                    UserGuid = user.Guid,
                }, DateTime.UtcNow.AddDays(1)).AccessToken,
                VersionChangeRequired = versionChangeRequired,
                RequiredVersion = requiredVersion,
                PasswordChangeRequired = request.Method == LoginMethod.StandardUser && user.PasswordChangeRequired
            };
        }

        [JwtTokenFilter]
        public RefreshTokenResponse RefreshToken(RefreshTokenRequest request)
        {
            SQLServerManager sqlServer = new SQLServerManager();
            var accessToken = sqlServer.GetAccessToken();

            //TokenManager tokenManager = new TokenManager();
            //tokenManager.UpdateToken(request.AccessToken, accessToken.AccessToken, accessToken.ExpiresOn.UtcDateTime);

            return new RefreshTokenResponse()
            {
                AccessToken = accessToken.AccessToken,
                Expiration = accessToken.ExpiresOn.UtcDateTime,
            };
        }

        [HttpPost]
        [JwtTokenFilter]
        public DownloadLatestPPCVersionResponse DownloadLatestPPCVersion(DownloadLatestPPCVersionRequest request)
        {
            DownloadLatestPPCVersionResponse response = new DownloadLatestPPCVersionResponse();

            using (ObservablesContext db = ObservablesContextHelper.CreateContext())
            {
                var machine = db.Machines.SingleOrDefault(x => x.SerialNumber == request.SerialNumber);

                if (machine == null)
                {
                    throw new AuthenticationException("The specified serial number could not be found.");
                }

                var machine_version = db.MachineVersions.SingleOrDefault(x => x.Guid == machine.MachineVersionGuid);

                var latest_machine_version = db.TangoVersions.Where(x => x.MachineVersionGuid == machine_version.Guid).ToList().OrderByDescending(x => Version.Parse(x.Version)).FirstOrDefault();

                response.Version = latest_machine_version.Version;

                var manager = new BlobStorageManager();
                var container = manager.GetContainer(MachineServiceConfig.TANGO_VERSIONS_CONTAINER);
                var blob = container.GetBlockBlobReference(latest_machine_version.BlobName);

                response.BlobAddress = blob.GenerateReadSignature(TimeSpan.FromMinutes(60));

                if (!String.IsNullOrWhiteSpace(MachineServiceConfig.CDN_ENDPOINT))
                {
                    response.CdnAddress = MachineServiceConfig.CDN_ENDPOINT + blob.Uri.AbsolutePath;
                }

                DbCredentials credentials = new DbCredentials();

                using (SmoManager smo = new SmoManager())
                {
                    credentials = smo.CreateRandomLoginAndUser();

                    Task.Delay(TimeSpan.FromMinutes(PPCController.SQL_TEMP_CREDENTIALS_EXP_MINUTS)).ContinueWith((x) =>
                    {
                        using (SmoManager m = new SmoManager())
                        {
                            m.DeleteLoginAndUser(credentials.UserName);
                        }
                    });
                }

                response.DataSource = new DataSource()
                {
                    Address = MachineServiceConfig.DB_ADDRESS,
                    Catalog = MachineServiceConfig.DB_CATALOG,
                    UserName = credentials.UserName,
                    Password = credentials.Password,
                    IntegratedSecurity = false,
                    Type = DataSourceType.SQLServer,
                };
            }

            return response;
        }

        #endregion
    }
}