AuthenticationContext.cs

Go to the documentation of this file.

using System;
using System.Linq;
 
using Tgstation.Server.Api.Rights;
using Tgstation.Server.Host.Models;
 
namespace Tgstation.Server.Host.Security
{
    sealed class AuthenticationContext : IAuthenticationContext, IDisposable
    {
        public bool Valid { get; private set; }
 
        public User User => user ?? throw new InvalidOperationException("AuthenticationContext is invalid!");
 
        public PermissionSet PermissionSet => permissionSet ?? throw new InvalidOperationException("AuthenticationContext is invalid!");
 
        public InstancePermissionSet? InstancePermissionSet { get; private set; }
 
        public ISystemIdentity? SystemIdentity { get; private set; }
 
        User? user;
 
        PermissionSet? permissionSet;
 
        public AuthenticationContext()
        {
        }
 
        public void Dispose() => SystemIdentity?.Dispose();
 
        public void Initialize(ISystemIdentity? systemIdentity, User user, InstancePermissionSet? instanceUser)
        {
            this.user = user ?? throw new ArgumentNullException(nameof(user));
            if (systemIdentity == null && User.SystemIdentifier != null)
                throw new ArgumentNullException(nameof(systemIdentity));
            permissionSet = user.PermissionSet
                ?? user.Group!.PermissionSet
                ?? throw new ArgumentException("No PermissionSet provider", nameof(user));
            InstancePermissionSet = instanceUser;
            SystemIdentity = systemIdentity;
 
            Valid = true;
        }
 
        public ulong GetRight(RightsType rightsType)
        {
            var isInstance = RightsHelper.IsInstanceRight(rightsType);
 
            if (User == null)
                throw new InvalidOperationException("Authentication context has no user!");
 
            if (isInstance && InstancePermissionSet == null)
                return 0;
            var rightsEnum = RightsHelper.RightToType(rightsType);
 
            // use the api versions because they're the ones that contain the actual properties
            var typeToCheck = isInstance ? typeof(InstancePermissionSet) : typeof(PermissionSet);
 
            var nullableType = typeof(Nullable<>);
            var nullableRightsType = nullableType.MakeGenericType(rightsEnum);
 
            var prop = typeToCheck.GetProperties().Where(x => x.PropertyType == nullableRightsType && x.CanRead).First();
 
            var right = prop.GetMethod!.Invoke(
                isInstance
                    ? InstancePermissionSet
                    : PermissionSet,
                Array.Empty<object>())
                ?? throw new InvalidOperationException("A user right was null!");
 
            return (ulong)right;
        }
    }
}