rebeccanod1/SecondBot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

enforces signed command to talk to the bot over http post

Browse source
This commit is contained in:
Madpeter 2020-05-04 00:06:55 +01:00
parent 6b8348083f
commit 00473b434d
1 changed files with 42 additions and 26 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

68
CLI/HttpServer/http_server.cs
View file

@ -25,7 +25,6 @@ namespace BetterSecondBot.HttpServer
protected HTTPCommandsInterfaceGet get_controler; protected HTTPCommandsInterfaceGet get_controler;
protected HTTPCommandsInterfacePost post_controler; protected HTTPCommandsInterfacePost post_controler;
protected string url = ""; protected string url = "";
protected bool require_signed_commands;
public bool ShutdownHTTP { get; set; } public bool ShutdownHTTP { get; set; }
public bool HTTPCnCmode { get; set; } public bool HTTPCnCmode { get; set; }
@ -68,7 +67,6 @@ namespace BetterSecondBot.HttpServer
protected void start_http_server(JsonConfig setConfig, SecondBot LinkBot) protected void start_http_server(JsonConfig setConfig, SecondBot LinkBot)
{ {
Config = setConfig; Config = setConfig;
require_signed_commands = Config.HttpRequireSigned;
Bot = LinkBot; Bot = LinkBot;
int port = Math.Abs(Config.Httpport); int port = Math.Abs(Config.Httpport);
if (Config.Httpkey.Length < 12) if (Config.Httpkey.Length < 12)
@ -95,7 +93,7 @@ namespace BetterSecondBot.HttpServer
protected async Task HandleIncomingConnections() protected async Task HandleIncomingConnections()
{ {
while(Bot.KillMe == false) while (Bot.KillMe == false)
{ {
HttpListenerContext ctx = await listener.GetContextAsync(); HttpListenerContext ctx = await listener.GetContextAsync();
HttpListenerRequest req = ctx.Request; HttpListenerRequest req = ctx.Request;
@ -118,16 +116,15 @@ namespace BetterSecondBot.HttpServer
} }
else if (req.HttpMethod == "POST") else if (req.HttpMethod == "POST")
{ {
string text; string text;
using (var reader = new StreamReader(req.InputStream,req.ContentEncoding)) using (var reader = new StreamReader(req.InputStream, req.ContentEncoding))
{ {
text = reader.ReadToEnd(); text = reader.ReadToEnd();
} }
//"command = logout & args = &passkey = Kp83VZaEhcy" //"command = logout & args = &passkey = Kp83VZaEhcy"
string[] pairs = text.Split('&', StringSplitOptions.RemoveEmptyEntries); string[] pairs = text.Split('&', StringSplitOptions.RemoveEmptyEntries);
Dictionary<string, string> post_args = new Dictionary<string, string>(); Dictionary<string, string> post_args = new Dictionary<string, string>();
foreach(string B in pairs) foreach (string B in pairs)
{ {
string[] bits = B.Split('=', StringSplitOptions.RemoveEmptyEntries); string[] bits = B.Split('=', StringSplitOptions.RemoveEmptyEntries);
if (bits.Length == 2) if (bits.Length == 2)
@ -135,42 +132,61 @@ namespace BetterSecondBot.HttpServer
post_args.Add(bits[0].Trim(), bits[1].Trim()); post_args.Add(bits[0].Trim(), bits[1].Trim());
} }
} }
bool format_ok = true;
bool accept_request = false;
string why_request_failed = "Bad signing request";
string command = "";
string arg = "";
string signing_code = "";
resp.StatusCode = 200;
if (post_args.ContainsKey("command") == true) if (post_args.ContainsKey("command") == true)
{ {
if (post_args.ContainsKey("passkey") == true) command = post_args["command"];
if (post_args.ContainsKey("args") == true)
{ {
if (Config.Httpkey == post_args["passkey"]) arg = post_args["args"];
}
if (post_args.ContainsKey("code") == true)
{
signing_code = post_args["code"];
if (format_ok == true)
{ {
string command = post_args["command"]; string raw = "" + command + "" + arg + "" + Config.Httpkey + "";
resp.StatusCode = 200; string hashcheck = helpers.GetSHA1(raw);
string arg = ""; if (hashcheck == signing_code)
if (post_args.ContainsKey("args") == true)
{ {
arg = post_args["args"]; accept_request = true;
} }
data = Encoding.UTF8.GetBytes(String.Join("###", post_controler.Call(command, arg)));
}
else
{
data = Encoding.UTF8.GetBytes("totaly fucked");
} }
} }
else else
{ {
data = Encoding.UTF8.GetBytes("post request missing command"); why_request_failed = "Post missing arg value";
format_ok = false;
} }
} }
else else
{ {
data = Encoding.UTF8.GetBytes("post request missing command"); why_request_failed = "Post missing command value";
format_ok = false;
} }
if (accept_request == true)
{
data = Encoding.UTF8.GetBytes(String.Join("###", post_controler.Call(command, arg)));
}
else
{
resp.StatusCode = 417;
data = Encoding.UTF8.GetBytes(why_request_failed);
}
resp.ContentType = "text/html";
resp.ContentEncoding = Encoding.UTF8;
resp.ContentLength64 = data.LongLength;
await resp.OutputStream.WriteAsync(data, 0, data.Length);
resp.Close();
} }
resp.ContentType = "text/html";
resp.ContentEncoding = Encoding.UTF8;
resp.ContentLength64 = data.LongLength;
await resp.OutputStream.WriteAsync(data, 0, data.Length);
resp.Close();
} }
} }
protected void open_http_service() protected void open_http_service()