Umbraco-CMS/components/umbraco.webservices/BaseWebService.cs

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Web.Services;
using System.Web.Services.Protocols;
using umbraco.BusinessLogic;
using System.IO;

namespace umbraco.webservices
{
    /// <summary>
    /// The base-class all webservices should inherit from
    /// </summary>
    /// <remarks>
    /// This class contains all basic methods for authenticating requests. Do not implement these functions yourself.
    /// </remarks>
    public abstract class BaseWebService : System.Web.Services.WebService
    {
        public abstract Services Service
        {
            get;
        }

        /// <summary>
        /// Enum of services available
        /// </summary>
        public enum Services
        {
            DocumentService, 
            FileService,
            StylesheetService,
            MemberService,
            MaintenanceService,
            TemplateService,
            MediaService
        };

        
        /// <summary>
        /// Gets the umbraco-user from username and password
        /// </summary>
        public umbraco.BusinessLogic.User GetUser(string username, string password)
        {
           
            User u = new User(username);
            if(!HttpContext.Current.Request.Url.Scheme.Equals("https"))
                BusinessLogic.Log.Add(BusinessLogic.LogTypes.Debug, u, -1, "Webservices login attempted without https");

            try
            {
                if (Membership.Providers[UmbracoSettings.DefaultBackofficeProvider].ValidateUser(username, password))
                {
                    BusinessLogic.Log.Add(BusinessLogic.LogTypes.Login, u, -1,"Webservices");
                    return u;
                }
            }
            catch
            {
                
            }
            return null;
        }




        /// <summary>
        /// Standart user-validation. All services must perform this
        /// </summary>
        public void Authenticate(string username, string password)
        {
            if (!WebservicesEnabled()) throw new Exception("Webservices not enabled");
            if (!UserAuthenticates(username, password)) throw new Exception("The user does not authenticate");
            if (!UserHasAccess(username)) throw new Exception("The user (" + username + ") does not have access to this service");
        }  

        [WebMethod]
        public bool WebservicesEnabled()
        {
            return umbraco.UmbracoSettings.Webservices.Enabled;
        }

        [WebMethod]
        public bool UserAuthenticates(string username, string password)
        {
            if (!WebservicesEnabled()) throw new Exception("Webservices not enabled");
            return GetUser(username, password) != null;
        }

        /// <summary>
        /// Checks if a user has access to a specific webservice
        /// </summary>
        [WebMethod]
        public bool UserHasAccess(string username)
        {
            switch (Service)
            {
                case Services.DocumentService:
                    return -1 < Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.documentServiceUsers, username);
                case Services.FileService:
                    return -1 < Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.fileServiceUsers, username);
                case Services.StylesheetService:
                    return -1 < Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.stylesheetServiceUsers, username);
                case Services.MemberService:
                    return -1 < Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.memberServiceUsers, username);
                case Services.MaintenanceService:
                    return -1 < Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.maintenanceServiceUsers, username);
                case Services.TemplateService:
                    return -1 < Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.templateServiceUsers, username);
                case Services.MediaService:
                    return -1 < Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.mediaServiceUsers, username);
                default:
                    return false;
            }
        }



        public class FileIO
        {
            /// <summary>
            /// Validates a filename. Must be used when user inputs a filename
            /// </summary>
            public static bool ValidFileName(string fileName)
            {
                // Check if a "levelup" string is included, so they dont move out of the folder 
                // Dont know if its necesary?
                if (fileName.IndexOf("..") > -1)
                    return false;
                return true;
            }

            /// <summary>
            /// Checks if user has access to a specific folder
            /// </summary>
            public static bool FolderAccess(String folderName)
            {
                // Check if the folder is in "fileServiceFolders" 
                if (Array.IndexOf<string>(umbraco.UmbracoSettings.Webservices.fileServiceFolders, folderName) > -1)
                {
                    return true;
                }
                else
                {
                    return false;
                }
            }

            /// <summary>
            /// Gets the webservers path for a file
            /// </summary>
            public static string GetFilePath(string folderName, string fileName)
            {
                string FullPath = GetFolderPath(folderName) + fileName;
                return FullPath;
            }

            /// <summary>
            /// Gets the webservers path for a folder 
            /// </summary>
            public static string GetFolderPath(string folderName)
            {
                if (string.IsNullOrEmpty(folderName))
                {
                    return AppRoot;
                }
                else
                {
                    return AppRoot + folderName + @"\";
                }
            }

            /// <summary>
            /// Gets the webservers path for the application
            /// </summary>
            public static string AppRoot
            {
                get
                {
                    return System.Web.Hosting.HostingEnvironment.ApplicationPhysicalPath;
                }
            }

        }

    }

}