gsender

/*
 * Copyright (C) 2021 Sienci Labs Inc.
 *
 * This file is part of gSender.
 *
 * gSender is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, under version 3 of the License.
 *
 * gSender is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with gSender.  If not, see <https://www.gnu.org/licenses/>.
 *
 * Contact for information regarding this program and its license
 * can be sent through gSender@sienci.com or mailed to the main office
 * of Sienci Labs Inc. in Waterloo, Ontario, Canada.
 *
 */

import ensureArray from "ensure-array";
import _ from "lodash";
import rangeCheck from "range_check";
//import settings from './config/settings';
import config from "./services/configstore";

const whitelist = [
	// IPv4 reserved space
	"127.0.0.0/8", // Used for loopback addresses to the local host
	"10.0.0.0/8", // Used for local communications within a private network
	"172.16.0.0/12", // Used for local communications within a private network
	"192.168.0.0/16", // Used for local communications within a private network
	"169.254.0.0/16", // Link-local address

	// IPv4 mapped IPv6 address
	"::ffff:10.0.0.0/8",
	"::ffff:127.0.0.0/8",
	"::ffff:172.16.0.0/12",
	"::ffff:192.168.0.0/16",

	// IPv6 reserved space
	"::1/128", // loopback address to the local host
	"fc00::/7", // Unique local address
	"fe80::/10", // Link-local address
];

export const authorizeIPAddress = (ipaddr) =>
	new Promise((resolve, reject) => {
		let pass = true; // TODO: Fix whitelist
		pass = pass || whitelist.some((test) => rangeCheck.inRange(ipaddr, test));

		if (pass) {
			resolve();
		} else {
			reject(new Error(`Unauthorized IP address: ipaddr=${ipaddr}`));
		}
	});

export const validateUser = (user) =>
	new Promise((resolve, reject) => {
		const { id = null, name = null } = { ...user };

		const users = ensureArray(config.get("users"))
			.filter((user) => _.isPlainObject(user))
			.map((user) => ({
				...user,
				// Defaults to true if not explicitly initialized
				enabled: user.enabled !== false,
			}));
		const enabledUsers = users.filter((user) => user.enabled);

		if (
			enabledUsers.length === 0 ||
			_.find(enabledUsers, { id: id, name: name })
		) {
			resolve();
		} else {
			reject(new Error(`Unauthorized user: user.id=${id}, user.name=${name}`));
		}
	});