authentification groundworks

cmd/internal/db/connection.go

@@ -2,6 +2,7 @@ package db
 
 import (
 	"database/sql"
+	"flag"
 
 	_ "github.com/mattn/go-sqlite3"
 	"github.com/siestaw/laterna/server/cmd/internal/logger"
@@ -18,10 +19,18 @@ func ConnectDB() {
 	}
 	logger.DBLogger.Printf("Successfully connected to the database!")
 	InitDB()
+
+	resetAdmin := flag.Bool("resetAdminToken", false, "recreate the admin token")
+	flag.Parse()
+
+	if *resetAdmin {
+		ResetAdmin()
+	}
 }
 
 func InitDB() {
-	_, err := DB.Exec(`
+	// Legacy purposes, DELETE
+	_, err := DB.Exec(` 
 		CREATE TABLE IF NOT EXISTS lamp_state (
 		id TEXT PRIMARY KEY,
 		color TEXT NOT NULL,
@@ -32,4 +41,24 @@ func InitDB() {
 	if err != nil {
 		logger.DBLogger.Fatalf("An error occured while initializing the database: %v", err)
 	}
+
+	_, err = DB.Exec(`
+	CREATE TABLE IF NOT EXISTS controllers (
+		id INTEGER PRIMARY KEY,
+		token_hash TEXT NOT NULL,
+		color TEXT,
+		updated_at DATETIME
+	);`)
+	if err != nil {
+		logger.DBLogger.Fatalf("An error occured while initializing the database: %v", err)
+	}
+
+	_, err = DB.Exec(`
+	CREATE TABLE IF NOT EXISTS permissions (
+		controller_id INTEGER,
+		target_id INTEGER
+	);`)
+	if err != nil {
+		logger.DBLogger.Fatalf("An error occured while initializing the database: %v", err)
+	}
 }

cmd/internal/db/queries.go

@@ -8,6 +8,59 @@ import (
 	"github.com/siestaw/laterna/server/cmd/utils"
 )
 
+func CreateController(target int) (string, int, error) {
+	token, _ := utils.GenerateToken()
+	hash, _ := utils.HashToken(token)
+
+	var maxID int
+	stmt := DB.QueryRow("SELECT COALESCE(MAX(id), 0) FROM controllers")
+	stmt.Scan(&maxID)
+	id := maxID + 1
+
+	_, err := DB.Exec("INSERT INTO controllers VALUES (?, ?, '#FFFFFF', CURRENT_TIMESTAMP)", id, hash)
+	if err != nil {
+		logger.DBLogger.Printf("Failed to create a new controller: %v", err)
+		return "", id, err
+	}
+
+	_, err = DB.Exec("INSERT INTO permissions VALUES (?, ?) ", id, target)
+	if err != nil {
+		logger.DBLogger.Printf("Failed to set permissions for %d: %v", id, err)
+		return token, id, err
+	}
+	return token, id, nil
+}
+
+func CreateAdmin() string {
+	token, _ := utils.GenerateToken()
+	hash, _ := utils.HashToken(token)
+
+	_, err := DB.Exec("INSERT INTO controllers (id, token_hash) VALUES (0, ?)", hash)
+	if err != nil {
+		logger.DBLogger.Fatalf("Error creating admin user: %s", err)
+	}
+
+	return token
+}
+
+func ResetAdmin() {
+	_, err := DB.Exec("DELETE FROM controllers WHERE id = 0")
+	if err != nil {
+		logger.DBLogger.Printf("An error occured while resetting the admin account: %s", err)
+	}
+}
+
+func ControllerExists(id int) bool {
+	row := DB.QueryRow("SELECT COUNT(1) FROM controllers WHERE id = ?", id)
+
+	var count int
+	err := row.Scan(&count)
+	if err != nil {
+		logger.DBLogger.Printf("ControllerExists: %v", err)
+	}
+	return count > 0
+}
+
 func ViewColor(id int) (*models.LampState, error) {
 	row := DB.QueryRow("SELECT * FROM lamp_state WHERE id = ?", id)
 

cmd/internal/http/server.go

@@ -15,10 +15,19 @@ import (
 
 func StartHTTPServer() {
 	router := http.NewServeMux()
-
 	router.HandleFunc("GET /api/v1/id/{ID}", getCurrent)
 	router.HandleFunc("PUT /api/v1/id/{ID}", setCurrent)
 
+	if !db.ControllerExists(0) {
+		adminToken := db.CreateAdmin()
+		fmt.Println("IMPORTANT")
+		fmt.Println("- - - - - - - - - - - - - - - - - - ")
+		fmt.Println("ADMIN TOKEN:")
+		fmt.Printf("%s\n", adminToken)
+		fmt.Println("REGENERATE THE TOKEN BY RUNNING WITH -resetAdminToken")
+		fmt.Println("- - - - - - - - - - - - - - - - - - ")
+	}
+
 	port := config.AppConfig.HTTP.Port
 	logger.HTTPLogger.Printf("HTTP Server running on :%v", port)
 	http.ListenAndServe(fmt.Sprintf(":%d", port), router)