mirror of
https://github.com/LemmyNet/lemmy.git
synced 2024-05-19 18:28:05 +00:00
* Move admin flag from person to local_user (fixes #3060) The person table is for federated data, but admin flag can only apply to local users. Thats why it really belongs in the local_user table. This will also prevent the federation code from accidentally overwriting the admin flag * fmt * try to fix api tests * lint * fix person view * ci * ci --------- Co-authored-by: Dessalines <dessalines@users.noreply.github.com>
83 lines
2.3 KiB
Rust
83 lines
2.3 KiB
Rust
use crate::Perform;
|
|
use actix_web::web::Data;
|
|
use bcrypt::verify;
|
|
use lemmy_api_common::{
|
|
context::LemmyContext,
|
|
person::{Login, LoginResponse},
|
|
utils::{check_registration_application, check_user_valid},
|
|
};
|
|
use lemmy_db_views::structs::{LocalUserView, SiteView};
|
|
use lemmy_utils::{
|
|
claims::Claims,
|
|
error::{LemmyError, LemmyErrorExt, LemmyErrorType},
|
|
utils::validation::check_totp_2fa_valid,
|
|
};
|
|
|
|
#[async_trait::async_trait(?Send)]
|
|
impl Perform for Login {
|
|
type Response = LoginResponse;
|
|
|
|
#[tracing::instrument(skip(context))]
|
|
async fn perform(&self, context: &Data<LemmyContext>) -> Result<LoginResponse, LemmyError> {
|
|
let data: &Login = self;
|
|
|
|
let site_view = SiteView::read_local(&mut context.pool()).await?;
|
|
|
|
// Fetch that username / email
|
|
let username_or_email = data.username_or_email.clone();
|
|
let local_user_view =
|
|
LocalUserView::find_by_email_or_name(&mut context.pool(), &username_or_email)
|
|
.await
|
|
.with_lemmy_type(LemmyErrorType::IncorrectLogin)?;
|
|
|
|
// Verify the password
|
|
let valid: bool = verify(
|
|
&data.password,
|
|
&local_user_view.local_user.password_encrypted,
|
|
)
|
|
.unwrap_or(false);
|
|
if !valid {
|
|
return Err(LemmyErrorType::IncorrectLogin)?;
|
|
}
|
|
check_user_valid(
|
|
local_user_view.person.banned,
|
|
local_user_view.person.ban_expires,
|
|
local_user_view.person.deleted,
|
|
)?;
|
|
|
|
// Check if the user's email is verified if email verification is turned on
|
|
// However, skip checking verification if the user is an admin
|
|
if !local_user_view.local_user.admin
|
|
&& site_view.local_site.require_email_verification
|
|
&& !local_user_view.local_user.email_verified
|
|
{
|
|
return Err(LemmyErrorType::EmailNotVerified)?;
|
|
}
|
|
|
|
check_registration_application(&local_user_view, &site_view.local_site, &mut context.pool())
|
|
.await?;
|
|
|
|
// Check the totp
|
|
check_totp_2fa_valid(
|
|
&local_user_view.local_user.totp_2fa_secret,
|
|
&data.totp_2fa_token,
|
|
&site_view.site.name,
|
|
&local_user_view.person.name,
|
|
)?;
|
|
|
|
// Return the jwt
|
|
Ok(LoginResponse {
|
|
jwt: Some(
|
|
Claims::jwt(
|
|
local_user_view.local_user.id.0,
|
|
&context.secret().jwt_secret,
|
|
&context.settings().hostname,
|
|
)?
|
|
.into(),
|
|
),
|
|
verify_email_sent: false,
|
|
registration_created: false,
|
|
})
|
|
}
|
|
}
|