added tests for backend, router dom to frontend

2024-12-03 16:09:25 +02:00
parent 8e4317abde
commit cb7b3ad94c
1142 changed files with 3599 additions and 573520 deletions
@@ -0,0 +1,112 @@
+using System.Net;
+using System.Text;
+using MySql.Data.MySqlClient;
+using System.IdentityModel.Tokens.Jwt;
+using Microsoft.IdentityModel.Tokens;
+using Newtonsoft.Json;
+using Newtonsoft.Json.Linq;
+using System.Text.RegularExpressions;
+
+namespace Server
+{
+    public class CreateLog : Route
+    {
+        private static string secretKey = "stronk-key-much-sercret-much-more-stronk-stronk-key-much-sercret-much-more-stronk";
+        private static bool ValidateToken(string token)
+        {
+            try
+            {
+                var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(secretKey));
+                var tokenHandler = new JwtSecurityTokenHandler();
+                var validationParameters = new TokenValidationParameters
+                {
+                    ValidateIssuer = true,
+                    ValidateAudience = true,
+                    ValidateLifetime = true,
+                    ValidIssuer = "TimeLogServer",
+                    ValidAudience = "TimeLogWebsite",
+                    IssuerSigningKey = key
+                };
+
+                var principal = tokenHandler.ValidateToken(token, validationParameters, out SecurityToken validatedToken);
+                return validatedToken != null;
+            }
+            catch
+            {
+                return false;
+            }
+        }
+        public static void HandleRequest(HttpListenerRequest request, HttpListenerResponse response, HttpListenerContext context)
+        {
+            try
+            {
+                // check header
+                var headers = request.Headers;
+                string? token = headers["token"];
+                if (!string.IsNullOrEmpty(token) && !ValidateToken(token))
+                {
+                    throw new Exception("Invalid token");
+                }
+                // prepare SQL query
+                MySqlCommand cmd = new MySqlCommand();
+                // extact data from body
+                string body;
+                using (StreamReader bodyReader = new StreamReader(request.InputStream, request.ContentEncoding))
+                {
+                    body = bodyReader.ReadToEnd();
+                }
+                JObject jsonObject = JObject.Parse(body);
+                string project = jsonObject["project"]?.ToString() ?? "";
+                string time = jsonObject["time"]?.ToString() ?? "";
+                string date = jsonObject["date"]?.ToString() ?? "";
+
+                // validate time
+                if (!int.TryParse(time, out int myInt) || myInt < 0)
+                    throw new Exception("Incorect ammount of hours");
+                //validate date
+                Regex regex = new Regex(@"^\d{4}-\d{2}-\d{2}$");
+                if (string.IsNullOrEmpty(date) || !regex.IsMatch(date))
+                {
+                    throw new Exception("Incorrect date format");
+                }
+                // validate user
+                // extract user from jwt 
+                var handler = new JwtSecurityTokenHandler();
+                var jwtToken = handler.ReadJwtToken(token);
+                string? usernameClaim = jwtToken.Claims.FirstOrDefault(c => c.Type == "user")?.Value ?? "";
+                if (string.IsNullOrEmpty(usernameClaim))
+                {
+                    throw new Exception("wrong user id");
+                }
+
+                //validate project
+                // TODO better project validation
+                if (!string.IsNullOrEmpty(project))
+                {
+                    throw new Exception("wrong project");
+                }
+                using (MySqlConnection conn = new MySqlConnection(connectionString))
+                {
+
+                    conn.Open();
+                    cmd.Connection = conn;
+                    cmd.CommandText = @"INSERT INTO Timelog(user,project,date,time) 
+                                        VALUES(@user,@project,@date,@time);";
+                    cmd.Parameters.AddWithValue("@user", usernameClaim);
+                    cmd.Parameters.AddWithValue("@project", project);
+                    cmd.Parameters.AddWithValue("@time", time);
+                    cmd.Parameters.AddWithValue("@date", date);
+                    // execute query and read results
+                    cmd.ExecuteNonQuery();
+
+                    SendSuccess(response);
+                }
+            }
+            catch (Exception ex)
+            {
+                SendError(response, ex);
+            }
+        }
+    }
+}
+