198 lines
11 KiB
JavaScript
198 lines
11 KiB
JavaScript
"use strict";
|
|
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
return new (P || (P = Promise))(function (resolve, reject) {
|
|
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
});
|
|
};
|
|
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
};
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
exports.default = refreshUsersAndGrants;
|
|
const path_1 = __importDefault(require("path"));
|
|
require("dotenv").config({ path: path_1.default.resolve(__dirname, "../../../.env") });
|
|
const generate_password_1 = __importDefault(require("generate-password"));
|
|
const noDatabaseDbHandler_1 = __importDefault(require("../utils/noDatabaseDbHandler"));
|
|
const dbHandler_1 = __importDefault(require("../utils/dbHandler"));
|
|
const handleGrants_1 = __importDefault(require("./handleGrants"));
|
|
const encrypt_1 = __importDefault(require("../../functions/dsql/encrypt"));
|
|
const decrypt_1 = __importDefault(require("../../functions/dsql/decrypt"));
|
|
const defaultMariadbUserHost = process.env.DSQL_DB_HOST || "127.0.0.1";
|
|
/**
|
|
* # Refresh Mariadb User Grants
|
|
*/
|
|
function refreshUsersAndGrants(_a) {
|
|
return __awaiter(this, arguments, void 0, function* ({ userId, mariadbUserHost, mariadbUsername, sqlUserID, }) {
|
|
var _b, _c, _d, _e, _f;
|
|
const mariadbUsers = (yield (0, dbHandler_1.default)({
|
|
query: `SELECT * FROM mariadb_users`,
|
|
}));
|
|
if (!(mariadbUsers === null || mariadbUsers === void 0 ? void 0 : mariadbUsers[0])) {
|
|
return;
|
|
}
|
|
const isRootUser = userId
|
|
? userId == Number(process.env.DSQL_SU_USER_ID)
|
|
: false;
|
|
for (let i = 0; i < mariadbUsers.length; i++) {
|
|
const mariadbUser = mariadbUsers[i];
|
|
if (!mariadbUser)
|
|
continue;
|
|
if (userId && mariadbUser.user_id != userId)
|
|
continue;
|
|
try {
|
|
const { mariadb_user, mariadb_host, mariadb_pass, user_id } = mariadbUser;
|
|
const existingUser = yield (0, noDatabaseDbHandler_1.default)(`SELECT * FROM mysql.user WHERE User = '${mariadb_user}' AND Host = '${mariadb_host}'`);
|
|
const existingMariaDBUserArray = userId && sqlUserID
|
|
? yield (0, dbHandler_1.default)({
|
|
query: `SELECT * FROM mariadb_users WHERE id = ? AND user_id = ?`,
|
|
values: [sqlUserID, userId],
|
|
})
|
|
: null;
|
|
const activeMariadbUserObject = Array.isArray(existingMariaDBUserArray)
|
|
? existingMariaDBUserArray === null || existingMariaDBUserArray === void 0 ? void 0 : existingMariaDBUserArray[0]
|
|
: undefined;
|
|
const isPrimary = activeMariadbUserObject
|
|
? ((_b = String(activeMariadbUserObject.primary)) === null || _b === void 0 ? void 0 : _b.match(/1/))
|
|
? true
|
|
: false
|
|
: false;
|
|
const isUserExisting = Boolean((_c = existingUser === null || existingUser === void 0 ? void 0 : existingUser[0]) === null || _c === void 0 ? void 0 : _c.User);
|
|
const isThisPrimaryHost = Boolean(mariadbUserHost == defaultMariadbUserHost);
|
|
const dslUsername = isRootUser
|
|
? mariadbUsername
|
|
: `dsql_user_${user_id}`;
|
|
const dsqlPassword = (activeMariadbUserObject === null || activeMariadbUserObject === void 0 ? void 0 : activeMariadbUserObject.password)
|
|
? activeMariadbUserObject.password
|
|
: isUserExisting
|
|
? mariadb_pass
|
|
: generate_password_1.default.generate({
|
|
length: 16,
|
|
numbers: true,
|
|
symbols: true,
|
|
uppercase: true,
|
|
exclude: "*#.'`\"",
|
|
});
|
|
const encryptedPassword = (activeMariadbUserObject === null || activeMariadbUserObject === void 0 ? void 0 : activeMariadbUserObject.password)
|
|
? activeMariadbUserObject.password
|
|
: isUserExisting
|
|
? mariadb_pass
|
|
: (0, encrypt_1.default)({
|
|
data: dsqlPassword,
|
|
encryptionKey: process.env.DSQL_ENCRYPTION_PASSWORD,
|
|
encryptionSalt: process.env.DSQL_ENCRYPTION_SALT,
|
|
});
|
|
if (!isUserExisting &&
|
|
!sqlUserID &&
|
|
!isPrimary &&
|
|
!mariadbUserHost &&
|
|
!mariadbUsername) {
|
|
const createNewUser = yield (0, noDatabaseDbHandler_1.default)(`CREATE USER IF NOT EXISTS '${dslUsername}'@'${defaultMariadbUserHost}' IDENTIFIED BY '${dsqlPassword}'`);
|
|
console.log("createNewUser", createNewUser);
|
|
console.log(`User ${mariadbUser.id}: ${mariadbUser.first_name} ${mariadbUser.last_name} SQL credentials successfully updated.`);
|
|
const updateUser = yield (0, dbHandler_1.default)({
|
|
query: `UPDATE users SET mariadb_user = ?, mariadb_host = ?, mariadb_pass = ? WHERE id = ?`,
|
|
values: [
|
|
dslUsername,
|
|
defaultMariadbUserHost,
|
|
encryptedPassword,
|
|
mariadbUser.id,
|
|
],
|
|
});
|
|
}
|
|
else if (!isUserExisting && mariadbUserHost) {
|
|
const createNewUser = yield (0, noDatabaseDbHandler_1.default)(`CREATE USER IF NOT EXISTS '${dslUsername}'@'${mariadbUserHost}' IDENTIFIED BY '${dsqlPassword}'`);
|
|
}
|
|
if (isPrimary) {
|
|
const finalHost = mariadbUserHost
|
|
? mariadbUserHost
|
|
: mariadb_host;
|
|
const updateUser = yield (0, dbHandler_1.default)({
|
|
query: `UPDATE users SET mariadb_user = ?, mariadb_host = ?, mariadb_pass = ? WHERE id = ?`,
|
|
values: [
|
|
dslUsername,
|
|
finalHost,
|
|
encryptedPassword,
|
|
mariadbUser.id,
|
|
],
|
|
});
|
|
}
|
|
//////////////////////////////////////////////
|
|
//////////////////////////////////////////////
|
|
//////////////////////////////////////////////
|
|
/**
|
|
* @description Handle mariadb_users table
|
|
*/
|
|
const existingMariadbPrimaryUser = yield (0, dbHandler_1.default)({
|
|
query: `SELECT * FROM mariadb_users WHERE user_id = ? AND \`primary\` = 1`,
|
|
values: [user_id],
|
|
});
|
|
const isPrimaryUserExisting = Boolean(Array.isArray(existingMariadbPrimaryUser) &&
|
|
((_d = existingMariadbPrimaryUser === null || existingMariadbPrimaryUser === void 0 ? void 0 : existingMariadbPrimaryUser[0]) === null || _d === void 0 ? void 0 : _d.user_id));
|
|
const primaryUserGrants = [
|
|
{
|
|
database: "*",
|
|
table: "*",
|
|
privileges: ["ALL"],
|
|
},
|
|
];
|
|
if (!isPrimaryUserExisting) {
|
|
const insertPrimaryMariadbUser = yield (0, dbHandler_1.default)({
|
|
query: `INSERT INTO mariadb_users (user_id, username, password, \`primary\`, grants) VALUES (?, ?, ?, ?, ?)`,
|
|
values: [
|
|
user_id,
|
|
dslUsername,
|
|
encryptedPassword,
|
|
"1",
|
|
JSON.stringify(primaryUserGrants),
|
|
],
|
|
});
|
|
}
|
|
//////////////////////////////////////////////
|
|
const existingExtraMariadbUsers = yield (0, dbHandler_1.default)({
|
|
query: `SELECT * FROM mariadb_users WHERE user_id = ? AND \`primary\` != '1'`,
|
|
values: [user_id],
|
|
});
|
|
if (Array.isArray(existingExtraMariadbUsers)) {
|
|
for (let i = 0; i < existingExtraMariadbUsers.length; i++) {
|
|
const _mariadbUser = existingExtraMariadbUsers[i];
|
|
if (_mariadbUser &&
|
|
_mariadbUser.username != mariadbUsername)
|
|
continue;
|
|
if (mariadbUserHost && _mariadbUser.host != mariadbUserHost)
|
|
continue;
|
|
const decrptedPassword = (0, decrypt_1.default)({
|
|
encryptedString: _mariadbUser.password || "",
|
|
encryptionKey: process.env.DSQL_ENCRYPTION_PASSWORD,
|
|
encryptionSalt: process.env.DSQL_ENCRYPTION_SALT,
|
|
});
|
|
const existingExtraMariadbUser = yield (0, noDatabaseDbHandler_1.default)(`SELECT * FROM mysql.user WHERE User='${_mariadbUser.username}' AND Host='${_mariadbUser.host}'`);
|
|
const isExtraMariadbUserExisting = Boolean((_e = existingExtraMariadbUser === null || existingExtraMariadbUser === void 0 ? void 0 : existingExtraMariadbUser[0]) === null || _e === void 0 ? void 0 : _e.User);
|
|
if (!isExtraMariadbUserExisting) {
|
|
yield (0, noDatabaseDbHandler_1.default)(`CREATE USER IF NOT EXISTS '${_mariadbUser.username}'@'${_mariadbUser.host}' IDENTIFIED BY '${decrptedPassword}'`);
|
|
}
|
|
const isGrantHandled = yield (0, handleGrants_1.default)({
|
|
username: _mariadbUser.username,
|
|
host: _mariadbUser.host,
|
|
grants: _mariadbUser.grants &&
|
|
typeof _mariadbUser.grants == "string"
|
|
? JSON.parse(_mariadbUser.grants)
|
|
: [],
|
|
userId: String(userId),
|
|
});
|
|
if (!isGrantHandled) {
|
|
console.log(`Error in handling grants for user ${_mariadbUser.username}@${_mariadbUser.host}`);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
catch (error) {
|
|
(_f = global.ERROR_CALLBACK) === null || _f === void 0 ? void 0 : _f.call(global, `Error Refreshing MariaDB Users and Grants`, error);
|
|
}
|
|
}
|
|
});
|
|
}
|