From a09126220d70471677a9bc008bed26a1f7b5b49c Mon Sep 17 00:00:00 2001
From: biondizzle <32694450+biondizzle@users.noreply.github.com>
Date: Thu, 5 Jun 2025 09:56:25 -0400
Subject: [PATCH] Add session-based login for console
---
.env | 4 +++
config/routes/console_api.yaml | 11 +++++++
src/Controller/ConsoleApiController.php | 35 +++++++++++++++++++++++
src/Controller/ConsoleController.php | 38 ++++++++++++++++++++++++-
templates/console/login.html.twig | 34 ++++++++++++++++++++++
5 files changed, 121 insertions(+), 1 deletion(-)
create mode 100644 templates/console/login.html.twig
diff --git a/.env b/.env
index 7c1114e..a5eb496 100644
--- a/.env
+++ b/.env
@@ -29,3 +29,7 @@ APP_SECRET=6aa2ea989e29de27bc42a77db9849b87
# DATABASE_URL="postgresql://app:!ChangeMe!@127.0.0.1:5432/app?serverVersion=16&charset=utf8"
DATABASE_URL="mysql://vultradmin:AVNS_jn444_0nHCHAvnZkTFN@vultr-prod-a6de266e-e9c6-477c-abf3-7ec2e7a7bfc8-vultr-prod-3195.vultrdb.com:18140/defaultdb?serverVersion=8.0.32&charset=utf8mb4"
###< doctrine/doctrine-bundle ###
+
+# Console login credentials
+CONSOLE_USER=admin
+CONSOLE_PASS=changeMe
diff --git a/config/routes/console_api.yaml b/config/routes/console_api.yaml
index 3176048..dc8f7da 100644
--- a/config/routes/console_api.yaml
+++ b/config/routes/console_api.yaml
@@ -55,6 +55,17 @@ console_api_stats:
controller: App\Controller\ConsoleApiController::stats
methods: [GET]
+# Console Authentication Routes
+console_login:
+ path: /console/login
+ controller: App\Controller\ConsoleController::login
+ methods: [GET, POST]
+
+console_logout:
+ path: /console/logout
+ controller: App\Controller\ConsoleController::logout
+ methods: [GET]
+
# Console Frontend Route
console_frontend:
path: /console/{route}
diff --git a/src/Controller/ConsoleApiController.php b/src/Controller/ConsoleApiController.php
index ea8814e..c4ae4ee 100644
--- a/src/Controller/ConsoleApiController.php
+++ b/src/Controller/ConsoleApiController.php
@@ -19,9 +19,20 @@ class ConsoleApiController extends AbstractController
private EntityManagerInterface $entityManager
) {}
+ private function checkAuth(Request $request): ?JsonResponse
+ {
+ if (!$request->getSession()->get('console_logged_in')) {
+ return new JsonResponse(['error' => 'Unauthorized'], Response::HTTP_UNAUTHORIZED);
+ }
+ return null;
+ }
+
// Credentials Management
public function credentials(Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
if ($request->getMethod() === 'GET') {
$credentials = $this->entityManager->getRepository(S3Credential::class)->findAll();
@@ -63,6 +74,9 @@ class ConsoleApiController extends AbstractController
public function credentialDetail(int $id, Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
$credential = $this->entityManager->getRepository(S3Credential::class)->find($id);
if (!$credential) {
@@ -115,6 +129,9 @@ class ConsoleApiController extends AbstractController
// Buckets Management
public function buckets(Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
if ($request->getMethod() === 'GET') {
$buckets = $this->entityManager->getRepository(S3Bucket::class)->findAll();
@@ -177,6 +194,9 @@ class ConsoleApiController extends AbstractController
public function bucketDetail(string $name, Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
$bucket = $this->s3Service->findBucketByName($name);
if (!$bucket) {
@@ -224,6 +244,9 @@ class ConsoleApiController extends AbstractController
// Objects Management
public function objects(string $bucketName, Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
$bucket = $this->s3Service->findBucketByName($bucketName);
if (!$bucket) {
@@ -270,6 +293,9 @@ class ConsoleApiController extends AbstractController
public function objectDetail(string $bucketName, string $objectKey, Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
$bucket = $this->s3Service->findBucketByName($bucketName);
if (!$bucket) {
@@ -309,6 +335,9 @@ class ConsoleApiController extends AbstractController
// Multipart Uploads
public function multipartUploads(string $bucketName, Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
$bucket = $this->s3Service->findBucketByName($bucketName);
if (!$bucket) {
@@ -339,6 +368,9 @@ class ConsoleApiController extends AbstractController
// Presigned URLs
public function presignedUrls(Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
if ($request->getMethod() === 'GET') {
$urls = $this->entityManager->getRepository(\App\Entity\S3PresignedUrl::class)
->createQueryBuilder('p')
@@ -392,6 +424,9 @@ class ConsoleApiController extends AbstractController
// Statistics
public function stats(Request $request): JsonResponse
{
+ if ($resp = $this->checkAuth($request)) {
+ return $resp;
+ }
$credentialCount = $this->entityManager->getRepository(S3Credential::class)->count([]);
$bucketCount = $this->entityManager->getRepository(S3Bucket::class)->count([]);
$objectCount = $this->entityManager->getRepository(S3Object::class)->count([]);
diff --git a/src/Controller/ConsoleController.php b/src/Controller/ConsoleController.php
index 4fe17ac..585b158 100644
--- a/src/Controller/ConsoleController.php
+++ b/src/Controller/ConsoleController.php
@@ -4,11 +4,47 @@ namespace App\Controller;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\RedirectResponse;
class ConsoleController extends AbstractController
{
- public function index(string $route = ''): Response
+ public function index(Request $request, string $route = ''): Response
{
+ if (!$request->getSession()->get('console_logged_in')) {
+ return new RedirectResponse('/console/login');
+ }
+
return $this->render('console/index.html.twig');
}
+
+ public function login(Request $request): Response
+ {
+ if ($request->getSession()->get('console_logged_in')) {
+ return new RedirectResponse('/console');
+ }
+
+ $error = null;
+ if ($request->isMethod('POST')) {
+ $user = $request->request->get('username');
+ $pass = $request->request->get('password');
+ $envUser = $_ENV['CONSOLE_USER'] ?? 'admin';
+ $envPass = $_ENV['CONSOLE_PASS'] ?? 'password';
+
+ if ($user === $envUser && $pass === $envPass) {
+ $request->getSession()->set('console_logged_in', true);
+ return new RedirectResponse('/console');
+ }
+
+ $error = 'Invalid credentials';
+ }
+
+ return $this->render('console/login.html.twig', ['error' => $error]);
+ }
+
+ public function logout(Request $request): Response
+ {
+ $request->getSession()->remove('console_logged_in');
+ return new RedirectResponse('/console/login');
+ }
}
\ No newline at end of file
diff --git a/templates/console/login.html.twig b/templates/console/login.html.twig
new file mode 100644
index 0000000..798298c
--- /dev/null
+++ b/templates/console/login.html.twig
@@ -0,0 +1,34 @@
+
+
+
+
+
+ vStash Console Login
+
+
+
+
+
Console Login
+ {% if error %}
{{ error }}
{% endif %}
+
+