forked from ProjectSegfault/publapi
75 lines
2.6 KiB
Go
75 lines
2.6 KiB
Go
package pages
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"github.com/gofiber/fiber/v2"
|
|
"os"
|
|
|
|
"github.com/containrrr/shoutrrr"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
)
|
|
|
|
// SignupPage is the signup page handler
|
|
func SignupPage(c *fiber.Ctx) error {
|
|
|
|
username := c.FormValue("username")
|
|
email := c.FormValue("email")
|
|
ssh := c.FormValue("ssh")
|
|
if username == "" || email == "" || ssh == "" {
|
|
log.Error("username, email and ssh must be filled", username, email, ssh)
|
|
return c.SendStatus(fiber.StatusBadRequest)
|
|
}
|
|
sshke, err := base64.StdEncoding.DecodeString(ssh)
|
|
sshkey := string(sshke)
|
|
if err != nil {
|
|
log.Error("unable to decode base64 ssh key")
|
|
return c.SendStatus(fiber.StatusBadRequest)
|
|
}
|
|
|
|
// create user file
|
|
f, err := os.Create("/var/publapi/users/" + username + ".sh")
|
|
if err != nil {
|
|
log.Error("Error creating user file", err)
|
|
return c.SendStatus(fiber.StatusInternalServerError)
|
|
}
|
|
defer f.Close()
|
|
bashscript := "#!/bin/bash \n" +
|
|
"# Path: /var/publapi/users/" + username + ".sh\n" +
|
|
"# This file is generated by publapi. Do not edit this file.\n" +
|
|
"echo \"email of " + username + " is " + email + "\"\n" +
|
|
"pass=\"$(tr -dc A-Za-z0-9 </dev/urandom | head -c 64)\"\n" +
|
|
"useradd -Um -s /bin/bash " + username + "\n" +
|
|
"printf \"%s\\n%s\" \"${pass}\" \"${pass}\" | passwd " + username + "\n" +
|
|
"mkdir /home/" + username + "/.ssh\n" +
|
|
"echo '" + sshkey + "' > /home/" + username + "/.ssh/authorized_keys\n" +
|
|
"chmod 700 /home/" + username + "/.ssh\n" +
|
|
"chmod 600 /home/" + username + "/.ssh/authorized_keys\n" +
|
|
"chown -R " + username + ":" + username + " /home/" + username + "/.ssh\n" +
|
|
"echo \"${pass}\" > /home/" + username + "/pass\n" +
|
|
"chmod 600 /home/" + username + "/pass\n" +
|
|
"chown " + username + ":" + username + " /home/" + username + "/pass\n" +
|
|
"echo \"" + username + "'s account has been created!\""
|
|
|
|
// write to file
|
|
_, err = f.WriteString(bashscript)
|
|
if err != nil {
|
|
log.Error("Error writing to user file", err)
|
|
return c.SendStatus(fiber.StatusInternalServerError)
|
|
}
|
|
|
|
log.Info("Registration request for " + username + " has been submitted by the frontend and has been written to /var/publapi/users/" + username + ".sh")
|
|
// send notification to admins
|
|
err = shoutrrr.Send(os.Getenv("PUBLAPI_SHOUTRRRURL"), "New user signup! Please review /var/publapi/users/"+username+".sh to approve or deny the user.")
|
|
if err != nil {
|
|
log.Error("Error sending notification to admins", err)
|
|
return c.SendStatus(fiber.StatusInternalServerError)
|
|
}
|
|
return c.JSON(fiber.Map{
|
|
"username": username,
|
|
"message": "User created! Please allow us 24 hours or more to review your account.",
|
|
"status": c.Response().StatusCode(),
|
|
})
|
|
|
|
}
|