import { HttpClient } from '@angular/common/http'; import { Injectable, OnDestroy } from '@angular/core'; import { of, ReplaySubject, Subject } from 'rxjs'; import { filter, map, switchMap, takeUntil } from 'rxjs/operators'; import { environment } from 'src/environments/environment'; import { Preferences } from '../_models/preferences/preferences'; import { User } from '../_models/user'; import { Router } from '@angular/router'; import { EVENTS, MessageHubService } from './message-hub.service'; import { ThemeService } from './theme.service'; import { InviteUserResponse } from '../_models/auth/invite-user-response'; import { UserUpdateEvent } from '../_models/events/user-update-event'; import { UpdateEmailResponse } from '../_models/auth/update-email-response'; import { AgeRating } from '../_models/metadata/age-rating'; import { AgeRestriction } from '../_models/metadata/age-restriction'; import { TextResonse } from '../_types/text-response'; export enum Role { Admin = 'Admin', ChangePassword = 'Change Password', Bookmark = 'Bookmark', Download = 'Download', ChangeRestriction = 'Change Restriction' } @Injectable({ providedIn: 'root' }) export class AccountService implements OnDestroy { baseUrl = environment.apiUrl; userKey = 'kavita-user'; public lastLoginKey = 'kavita-lastlogin'; currentUser: User | undefined; // Stores values, when someone subscribes gives (1) of last values seen. private currentUserSource = new ReplaySubject(1); currentUser$ = this.currentUserSource.asObservable(); /** * SetTimeout handler for keeping track of refresh token call */ private refreshTokenTimeout: ReturnType | undefined; private readonly onDestroy = new Subject(); constructor(private httpClient: HttpClient, private router: Router, private messageHub: MessageHubService, private themeService: ThemeService) { messageHub.messages$.pipe(filter(evt => evt.event === EVENTS.UserUpdate), map(evt => evt.payload as UserUpdateEvent), filter(userUpdateEvent => userUpdateEvent.userName === this.currentUser?.username), switchMap(() => this.refreshToken())) .subscribe(() => {}); } ngOnDestroy(): void { this.onDestroy.next(); this.onDestroy.complete(); } hasAdminRole(user: User) { return user && user.roles.includes(Role.Admin); } hasChangePasswordRole(user: User) { return user && user.roles.includes(Role.ChangePassword); } hasChangeAgeRestrictionRole(user: User) { return user && user.roles.includes(Role.ChangeRestriction); } hasDownloadRole(user: User) { return user && user.roles.includes(Role.Download); } hasBookmarkRole(user: User) { return user && user.roles.includes(Role.Bookmark); } getRoles() { return this.httpClient.get(this.baseUrl + 'account/roles'); } login(model: {username: string, password: string}) { return this.httpClient.post(this.baseUrl + 'account/login', model).pipe( map((response: User) => { const user = response; if (user) { this.setCurrentUser(user); this.messageHub.createHubConnection(user, this.hasAdminRole(user)); } }), takeUntil(this.onDestroy) ); } setCurrentUser(user?: User) { if (user) { user.roles = []; const roles = this.getDecodedToken(user.token).role; Array.isArray(roles) ? user.roles = roles : user.roles.push(roles); localStorage.setItem(this.userKey, JSON.stringify(user)); localStorage.setItem(this.lastLoginKey, user.username); if (user.preferences && user.preferences.theme) { this.themeService.setTheme(user.preferences.theme.name); } else { this.themeService.setTheme(this.themeService.defaultTheme); } } else { this.themeService.setTheme(this.themeService.defaultTheme); } this.currentUser = user; this.currentUserSource.next(user); this.stopRefreshTokenTimer(); if (this.currentUser !== undefined) { this.startRefreshTokenTimer(); } } logout() { localStorage.removeItem(this.userKey); this.currentUserSource.next(undefined); this.currentUser = undefined; this.stopRefreshTokenTimer(); // Upon logout, perform redirection this.router.navigateByUrl('/login'); this.messageHub.stopHubConnection(); } /** * Registers the first admin on the account. Only used for that. All other registrations must occur through invite * @param model * @returns */ register(model: {username: string, password: string, email: string}) { return this.httpClient.post(this.baseUrl + 'account/register', model).pipe( map((user: User) => { return user; }), takeUntil(this.onDestroy) ); } isEmailConfirmed() { return this.httpClient.get(this.baseUrl + 'account/email-confirmed'); } migrateUser(model: {email: string, username: string, password: string, sendEmail: boolean}) { return this.httpClient.post(this.baseUrl + 'account/migrate-email', model, TextResonse); } confirmMigrationEmail(model: {email: string, token: string}) { return this.httpClient.post(this.baseUrl + 'account/confirm-migration-email', model); } resendConfirmationEmail(userId: number) { return this.httpClient.post(this.baseUrl + 'account/resend-confirmation-email?userId=' + userId, {}, TextResonse); } inviteUser(model: {email: string, roles: Array, libraries: Array, ageRestriction: AgeRestriction}) { return this.httpClient.post(this.baseUrl + 'account/invite', model); } confirmEmail(model: {email: string, username: string, password: string, token: string}) { return this.httpClient.post(this.baseUrl + 'account/confirm-email', model); } confirmEmailUpdate(model: {email: string, token: string}) { return this.httpClient.post(this.baseUrl + 'account/confirm-email-update', model); } /** * Given a user id, returns a full url for setting up the user account * @param userId * @returns */ getInviteUrl(userId: number, withBaseUrl: boolean = true) { return this.httpClient.get(this.baseUrl + 'account/invite-url?userId=' + userId + '&withBaseUrl=' + withBaseUrl, TextResonse); } getDecodedToken(token: string) { return JSON.parse(atob(token.split('.')[1])); } requestResetPasswordEmail(email: string) { return this.httpClient.post(this.baseUrl + 'account/forgot-password?email=' + encodeURIComponent(email), {}, TextResonse); } confirmResetPasswordEmail(model: {email: string, token: string, password: string}) { return this.httpClient.post(this.baseUrl + 'account/confirm-password-reset', model, TextResonse); } resetPassword(username: string, password: string, oldPassword: string) { return this.httpClient.post(this.baseUrl + 'account/reset-password', {username, password, oldPassword}, TextResonse); } update(model: {email: string, roles: Array, libraries: Array, userId: number, ageRestriction: AgeRestriction}) { return this.httpClient.post(this.baseUrl + 'account/update', model); } updateEmail(email: string, password: string) { return this.httpClient.post(this.baseUrl + 'account/update/email', {email, password}); } updateAgeRestriction(ageRating: AgeRating, includeUnknowns: boolean) { return this.httpClient.post(this.baseUrl + 'account/update/age-restriction', {ageRating, includeUnknowns}); } /** * This will get latest preferences for a user and cache them into user store * @returns */ getPreferences() { return this.httpClient.get(this.baseUrl + 'users/get-preferences').pipe(map(pref => { if (this.currentUser !== undefined || this.currentUser != null) { this.currentUser.preferences = pref; this.setCurrentUser(this.currentUser); } return pref; }), takeUntil(this.onDestroy)); } updatePreferences(userPreferences: Preferences) { return this.httpClient.post(this.baseUrl + 'users/update-preferences', userPreferences).pipe(map(settings => { if (this.currentUser !== undefined || this.currentUser != null) { this.currentUser.preferences = settings; this.setCurrentUser(this.currentUser); } return settings; }), takeUntil(this.onDestroy)); } getUserFromLocalStorage(): User | undefined { const userString = localStorage.getItem(this.userKey); if (userString) { return JSON.parse(userString) }; return undefined; } resetApiKey() { return this.httpClient.post(this.baseUrl + 'account/reset-api-key', {}, TextResonse).pipe(map(key => { const user = this.getUserFromLocalStorage(); if (user) { user.apiKey = key; localStorage.setItem(this.userKey, JSON.stringify(user)); this.currentUserSource.next(user); this.currentUser = user; } return key; })); } private refreshToken() { if (this.currentUser === null || this.currentUser === undefined) return of(); return this.httpClient.post<{token: string, refreshToken: string}>(this.baseUrl + 'account/refresh-token', {token: this.currentUser.token, refreshToken: this.currentUser.refreshToken}).pipe(map(user => { if (this.currentUser) { this.currentUser.token = user.token; this.currentUser.refreshToken = user.refreshToken; } this.setCurrentUser(this.currentUser); return user; })); } /** * Every 10 mins refresh the token */ private startRefreshTokenTimer() { if (this.currentUser === null || this.currentUser === undefined) { this.stopRefreshTokenTimer(); return; } this.stopRefreshTokenTimer(); this.refreshTokenTimeout = setInterval(() => this.refreshToken().subscribe(() => {}), (60 * 10_000)); } private stopRefreshTokenTimer() { if (this.refreshTokenTimeout !== undefined) { clearInterval(this.refreshTokenTimeout); } } }