webui: rename auth_store → webui_store
The plugin's SQLite store will own more than accounts (taxonomy, RSS), so give it a general name. Mechanical rename of files + symbols; default DB filename is now webui.db. No behavior change. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
ookami125
parent
ab51774554
commit
1b79fe8079
5 changed files with 85 additions and 84 deletions
|
|
@ -1,6 +1,6 @@
|
|||
#include "naut/naut_plugin.h"
|
||||
#include "naut/http_client.h"
|
||||
#include "auth_store.h"
|
||||
#include "webui_store.h"
|
||||
|
||||
#include <jansson.h>
|
||||
|
||||
|
|
@ -59,7 +59,7 @@ typedef struct {
|
|||
char host_name[64];
|
||||
char auth_user[64]; /* bootstrap admin name (for startup banner) */
|
||||
char auth_password[64]; /* generated bootstrap password (banner only) */
|
||||
auth_store *auth; /* SQLite-backed account store */
|
||||
webui_store *auth; /* SQLite-backed account store */
|
||||
int port;
|
||||
int listener;
|
||||
bool generated_password;
|
||||
|
|
@ -297,7 +297,7 @@ static bool resolve_auth_db_path(char *out, size_t n) {
|
|||
else if (home && *home) snprintf(dir, sizeof dir, "%s/.local/share/naut", home);
|
||||
else return false;
|
||||
if (mkdir_p(dir, 0700) != 0) return false;
|
||||
return (size_t)snprintf(out, n, "%s/webui_accounts.db", dir) < n;
|
||||
return (size_t)snprintf(out, n, "%s/webui.db", dir) < n;
|
||||
}
|
||||
|
||||
/* Open the account store and, on first run (no accounts), bootstrap an admin
|
||||
|
|
@ -308,7 +308,7 @@ static void init_auth(void) {
|
|||
log_msg(0, "webui: cannot resolve account DB path; set NAUT_WEBUI_DB");
|
||||
return;
|
||||
}
|
||||
g_webui.auth = auth_store_open(db_path);
|
||||
g_webui.auth = webui_store_open(db_path);
|
||||
if (!g_webui.auth) {
|
||||
log_msg(0, "webui: failed to open account database");
|
||||
return;
|
||||
|
|
@ -318,7 +318,7 @@ static void init_auth(void) {
|
|||
if (!user || !*user) user = "admin";
|
||||
snprintf(g_webui.auth_user, sizeof g_webui.auth_user, "%s", user);
|
||||
|
||||
if (auth_store_user_count(g_webui.auth) > 0) return; /* already set up */
|
||||
if (webui_store_user_count(g_webui.auth) > 0) return; /* already set up */
|
||||
|
||||
/* No accounts yet — create the initial admin. */
|
||||
const char *password = getenv("NAUT_AUTH_PASSWORD");
|
||||
|
|
@ -332,7 +332,7 @@ static void init_auth(void) {
|
|||
log_msg(0, "webui: no CSPRNG; set NAUT_AUTH_PASSWORD to create the admin");
|
||||
return;
|
||||
}
|
||||
if (!auth_store_create_user(g_webui.auth, user, password, "admin"))
|
||||
if (!webui_store_create_user(g_webui.auth, user, password, "admin"))
|
||||
log_msg(0, "webui: failed to create the initial admin account");
|
||||
}
|
||||
|
||||
|
|
@ -2722,7 +2722,7 @@ static void serve_cached_torrents(int fd) {
|
|||
|
||||
/* ============================ account management ========================== *
|
||||
* Admin-only user CRUD plus a self-service password change. The web layer owns
|
||||
* everything via auth_store; the daemon is not involved. */
|
||||
* everything via webui_store; the daemon is not involved. */
|
||||
|
||||
static bool valid_username(const char *u) {
|
||||
if (!u || !*u || strlen(u) >= 64) return false;
|
||||
|
|
@ -2736,7 +2736,7 @@ static bool valid_username(const char *u) {
|
|||
/* GET /api/users → [{username, role, createdAt}] (admin only). */
|
||||
static void api_users_list(int fd) {
|
||||
json_t *users = json_array();
|
||||
if (g_webui.auth) auth_store_list_users(g_webui.auth, users);
|
||||
if (g_webui.auth) webui_store_list_users(g_webui.auth, users);
|
||||
http_json(fd, 200, users);
|
||||
json_decref(users);
|
||||
}
|
||||
|
|
@ -2754,7 +2754,7 @@ static void api_user_create(int fd, const char *body, size_t len) {
|
|||
return;
|
||||
}
|
||||
bool ok = g_webui.auth &&
|
||||
auth_store_create_user(g_webui.auth, user, pass,
|
||||
webui_store_create_user(g_webui.auth, user, pass,
|
||||
role && *role ? role : "user");
|
||||
json_decref(req);
|
||||
if (!ok) { http_text(fd, 409, "Conflict", "user already exists"); return; }
|
||||
|
|
@ -2773,18 +2773,18 @@ static void api_user_delete(int fd, const char *body, size_t len,
|
|||
char role[16] = {0};
|
||||
/* Look up the target's role to guard the last-admin rule. */
|
||||
json_t *list = json_array();
|
||||
if (g_webui.auth) auth_store_list_users(g_webui.auth, list);
|
||||
if (g_webui.auth) webui_store_list_users(g_webui.auth, list);
|
||||
size_t i; json_t *u;
|
||||
json_array_foreach(list, i, u)
|
||||
if (strcasecmp(json_string_or(u, "username", ""), user) == 0)
|
||||
snprintf(role, sizeof role, "%s", json_string_or(u, "role", ""));
|
||||
json_decref(list);
|
||||
if (strcmp(role, "admin") == 0 && auth_store_admin_count(g_webui.auth) <= 1) {
|
||||
if (strcmp(role, "admin") == 0 && webui_store_admin_count(g_webui.auth) <= 1) {
|
||||
json_decref(req);
|
||||
http_text(fd, 409, "Conflict", "cannot delete the last admin");
|
||||
return;
|
||||
}
|
||||
bool ok = g_webui.auth && auth_store_delete_user(g_webui.auth, user);
|
||||
bool ok = g_webui.auth && webui_store_delete_user(g_webui.auth, user);
|
||||
json_decref(req);
|
||||
if (!ok) { http_text(fd, 404, "Not Found", "no such user"); return; }
|
||||
drop_user_sessions(user);
|
||||
|
|
@ -2804,7 +2804,7 @@ static void api_user_set_password(int fd, const char *body, size_t len) {
|
|||
}
|
||||
char user[64];
|
||||
snprintf(user, sizeof user, "%s", uname);
|
||||
bool ok = g_webui.auth && auth_store_set_password(g_webui.auth, user, pass);
|
||||
bool ok = g_webui.auth && webui_store_set_password(g_webui.auth, user, pass);
|
||||
json_decref(req);
|
||||
if (!ok) { http_text(fd, 404, "Not Found", "no such user"); return; }
|
||||
drop_user_sessions(user); /* force re-login with the new password */
|
||||
|
|
@ -2823,11 +2823,11 @@ static void api_user_set_role(int fd, const char *body, size_t len) {
|
|||
http_text(fd, 400, "Bad Request", "username and role (admin|user) required");
|
||||
return;
|
||||
}
|
||||
if (strcmp(role, "user") == 0 && auth_store_admin_count(g_webui.auth) <= 1) {
|
||||
if (strcmp(role, "user") == 0 && webui_store_admin_count(g_webui.auth) <= 1) {
|
||||
/* Only block if the target is currently the sole admin. */
|
||||
char cur[16] = {0};
|
||||
json_t *list = json_array();
|
||||
if (g_webui.auth) auth_store_list_users(g_webui.auth, list);
|
||||
if (g_webui.auth) webui_store_list_users(g_webui.auth, list);
|
||||
size_t i; json_t *u;
|
||||
json_array_foreach(list, i, u)
|
||||
if (strcasecmp(json_string_or(u, "username", ""), user) == 0)
|
||||
|
|
@ -2839,7 +2839,7 @@ static void api_user_set_role(int fd, const char *body, size_t len) {
|
|||
return;
|
||||
}
|
||||
}
|
||||
bool ok = g_webui.auth && auth_store_set_role(g_webui.auth, user, role);
|
||||
bool ok = g_webui.auth && webui_store_set_role(g_webui.auth, user, role);
|
||||
json_decref(req);
|
||||
if (!ok) { http_text(fd, 404, "Not Found", "no such user"); return; }
|
||||
api_users_list(fd);
|
||||
|
|
@ -2857,12 +2857,12 @@ static void api_account_password(int fd, const char *body, size_t len,
|
|||
return;
|
||||
}
|
||||
char role[16] = {0};
|
||||
if (!g_webui.auth || !auth_store_verify(g_webui.auth, actor, oldp, role, sizeof role)) {
|
||||
if (!g_webui.auth || !webui_store_verify(g_webui.auth, actor, oldp, role, sizeof role)) {
|
||||
json_decref(req);
|
||||
http_text(fd, 403, "Forbidden", "current password is incorrect");
|
||||
return;
|
||||
}
|
||||
bool ok = auth_store_set_password(g_webui.auth, actor, newp);
|
||||
bool ok = webui_store_set_password(g_webui.auth, actor, newp);
|
||||
json_decref(req);
|
||||
if (!ok) { http_text(fd, 500, "Internal Server Error", "could not update password"); return; }
|
||||
json_t *reply = json_pack("{s:b}", "ok", 1);
|
||||
|
|
@ -2896,7 +2896,7 @@ static void handle_api(int fd, const char *method, char *path,
|
|||
json_string_value(json_object_get(req, "password"));
|
||||
char role[16] = {0};
|
||||
bool ok = g_webui.auth && user && password &&
|
||||
auth_store_verify(g_webui.auth, user, password, role, sizeof role);
|
||||
webui_store_verify(g_webui.auth, user, password, role, sizeof role);
|
||||
if (!ok) {
|
||||
json_t *json = json_pack("{s:b,s:s}", "ok", 0,
|
||||
"error", "invalid credentials");
|
||||
|
|
@ -3373,7 +3373,7 @@ naut_err naut_plugin_shutdown(void) {
|
|||
pthread_cond_destroy(&g_webui.conn_cond);
|
||||
pthread_mutex_destroy(&g_webui.conn_lock);
|
||||
pthread_mutex_destroy(&g_webui.auth_lock);
|
||||
auth_store_close(g_webui.auth);
|
||||
webui_store_close(g_webui.auth);
|
||||
g_webui.auth = NULL;
|
||||
return NAUT_OK;
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue