D. Berge
48e1369088
Fix host based authentication
2025-07-25 14:03:43 +02:00
D. Berge
3ea82cb660
Fix reading of credentials for issuing JWT
2025-07-24 23:03:05 +02:00
D. Berge
84c1385f88
Refactor class User (clean up)
2025-07-24 23:02:30 +02:00
D. Berge
386fd59900
Update API to handle permissions checks on most endpoints
2025-07-24 19:24:40 +02:00
D. Berge
e47020a21e
Add /user endpoints to API
2025-07-24 19:23:43 +02:00
D. Berge
b8f58ac67c
Add FIXME
2025-07-24 19:20:58 +02:00
D. Berge
b3e27ed1b9
Refactor auth.authentify.
...
We now get the user's details directly from the JWT token.
2025-07-24 19:15:36 +02:00
D. Berge
f5441d186f
Refactor auth.access middleware.
...
It users @dougal/user and @dougal/organisations classes.
2025-07-24 19:14:19 +02:00
D. Berge
d58bc4d62e
Remove unused code
2025-07-24 19:13:17 +02:00
D. Berge
01d1691def
Fix login endpoint (checkValidCredentials is now async)
2025-07-24 19:09:39 +02:00
D. Berge
bc444fc066
Add dependency to project organisations cache
2025-07-24 18:48:22 +02:00
D. Berge
989ec84852
Refactor JWT credentials check to use class User
2025-07-24 18:36:34 +02:00
D. Berge
065f6617af
Add class ServerUser derived from User.
...
Used on the backend. Adds methods to hash and check passwords and
to read from and save user data to the database.
2025-07-24 18:31:51 +02:00
D. Berge
825530c1fe
Use @dougal/user, @dougal/organisations modules in backend
2025-07-24 18:27:59 +02:00
D. Berge
2657c42dcc
Fix export statement
2025-07-13 11:13:31 +02:00
D. Berge
63e6af545a
Fix typo
2025-07-13 11:13:09 +02:00
D. Berge
d6fb7404b1
Adapt version.get middleware to new permissions approach
2025-07-13 00:07:52 +02:00
D. Berge
8188766a81
Refactor access to info table.
...
To adapt to new permissions system.
2025-07-13 00:07:05 +02:00
D. Berge
b7ae657137
Add auth.operations middleware.
...
Adds an array of allowed operations on given context to the request
under `req.user.operations`.
2025-07-13 00:02:48 +02:00
D. Berge
1295ec2ee3
Add function to return allowed operations in a given context
2025-07-13 00:01:15 +02:00
D. Berge
7c6d3fe5ee
Check permissions against vessel if not on a project endpoint
2025-07-12 16:49:10 +02:00
D. Berge
15570e0f3d
orgAccess(user, null, op) returns vessel access permissions.
...
If instead of a project ID, orgAccess receives `null`, it will
check permissions against the installation's own vessel rather
than against a specific project.
2025-07-12 16:47:39 +02:00
D. Berge
d551e67042
Add vesselOrganisations() function
2025-07-12 16:47:10 +02:00
D. Berge
6b216f7406
Add library function to retrieve vessel information.
...
In the `keystore` table, we now store information for our own
vessel (usually, where the Dougal server is installed). This
is an access function to retrieve that information.
The info stored for the vessel looks like this:
```yaml
type: vessel
key: ego
data:
imo: 9631890
mmsi: 257419000
name: Havila Charisma
contacts:
-
name: HC OM
phone: tel:+47123456789
email: hc.om@magseisfairfield.com
organisations:
Havila Charisma:
read: true
write: true
edit: true
```
2025-07-12 16:42:28 +02:00
D. Berge
a7e02c526b
Add function argument defaults.
...
This will cause the function to return a safe (false) value
rather than erroring.
2025-07-12 16:40:18 +02:00
D. Berge
55855d66e9
Remove dead code
2025-07-12 12:14:12 +02:00
D. Berge
10580ea3ec
Create server-side organisations module
2025-07-12 11:31:38 +02:00
D. Berge
25f83d1eb3
Share access() function between front and back end.
...
This is so that any changes to the code are reflected on both sides.
2025-07-12 11:31:38 +02:00
D. Berge
b035d3481c
Ensure users have at least read access to most endpoints
2025-07-11 22:49:28 +02:00
D. Berge
ca4a14ffd9
Use new orgs based method for authorisation
2025-07-11 22:48:44 +02:00
D. Berge
d77f7f66db
Refresh organisations cache on project update
2025-07-11 22:48:06 +02:00
D. Berge
6b6f545b9f
Filter list of projects to only those readable by user
2025-07-11 22:47:32 +02:00
D. Berge
8c875ea2f9
Return organisations as part of the projects listing
2025-07-11 22:46:47 +02:00
D. Berge
addbe2d572
Refactor user authentication code to use database
2025-07-11 22:46:47 +02:00
D. Berge
85f092b9e1
Upgrade minimum required database version
2025-07-11 22:46:47 +02:00
D. Berge
0b7e9e1d01
Add functions to check operation access via organisations
2025-07-11 22:46:47 +02:00
D. Berge
712b20c596
Add API endpoint to retrieve line name properties.
...
This will be needed by the configuration GUI.
2025-07-09 16:38:41 +02:00
D. Berge
8bbe3aee70
Make planned line names configurable.
...
Line names are made up based on:
* Certain properties defined by the system
* Values assigned to those properties either by the system
or by the user (line number, sequence, attempt, etc.)
* A line format specification configured by the user for each
project (`online.line.lineNameBuilder.fields`)
Closes #129 .
2025-07-09 16:30:26 +02:00
D. Berge
9ef551db76
Fix logical→physical path conversion for absolute paths
2025-06-26 23:57:19 +02:00
D. Berge
e398f2d3cd
Stop attempt at sending a spurious 404.
...
This was resulting in a bunch of "headers already sent" messages.
2024-05-09 14:18:56 +02:00
D. Berge
d154e75797
Add more info to diagnostics endpoint
2024-05-09 14:02:18 +02:00
D. Berge
af0df23cc4
Add diagnostics API endpoint.
...
Only available with write access and above.
Reports used and available filesystem sizes and database space
usage.
2024-05-08 16:27:32 +02:00
D. Berge
4368cb8571
Update minimum required database schema to 0.5.0
2024-05-04 17:30:34 +02:00
D. Berge
efe64f0a8c
Implement PUT method for project configuration endpoint.
...
In short:
POST creates a new project
PUT overwrites a project configuration with a new one
PATCH merges the request body with the existing configuration
2024-05-01 10:40:04 +02:00
D. Berge
313e9687bd
Bring all the lib/utils from the frontend to the backend.
...
The idea being that eventually we will symlink the lib/utils
directory so that the same routines are available on both the
frontend and the backend.
2024-05-01 10:40:04 +02:00
D. Berge
a9270157ea
Process JWT messages over WebSockets
2024-05-01 10:06:35 +02:00
D. Berge
d2f94dbb88
Refactor JWT token verification
2024-05-01 10:05:48 +02:00
D. Berge
1056122fff
Fix missing parenthesis
2024-04-28 18:37:30 +02:00
D. Berge
9bd0aca18f
Add debugging statements to ETag middleware
2023-11-04 10:45:50 +01:00
D. Berge
60932300c1
Ensure that project is defined.
...
Which would not be in the case of the `project` event unless we
look at the `new` and `old` properties.
2023-11-04 10:45:50 +01:00
