| | | 1 | | #pragma warning disable RS0030 // Do not use banned APIs |
| | | 2 | | |
| | | 3 | | using System; |
| | | 4 | | using System.Collections.Generic; |
| | | 5 | | using System.Globalization; |
| | | 6 | | using System.Linq; |
| | | 7 | | using System.Text.RegularExpressions; |
| | | 8 | | using System.Threading; |
| | | 9 | | using System.Threading.Tasks; |
| | | 10 | | using AsyncKeyedLock; |
| | | 11 | | using Jellyfin.Data; |
| | | 12 | | using Jellyfin.Data.Enums; |
| | | 13 | | using Jellyfin.Data.Events; |
| | | 14 | | using Jellyfin.Data.Events.Users; |
| | | 15 | | using Jellyfin.Database.Implementations; |
| | | 16 | | using Jellyfin.Database.Implementations.Entities; |
| | | 17 | | using Jellyfin.Database.Implementations.Enums; |
| | | 18 | | using Jellyfin.Extensions; |
| | | 19 | | using MediaBrowser.Common; |
| | | 20 | | using MediaBrowser.Common.Extensions; |
| | | 21 | | using MediaBrowser.Common.Net; |
| | | 22 | | using MediaBrowser.Controller.Authentication; |
| | | 23 | | using MediaBrowser.Controller.Configuration; |
| | | 24 | | using MediaBrowser.Controller.Drawing; |
| | | 25 | | using MediaBrowser.Controller.Events; |
| | | 26 | | using MediaBrowser.Controller.Library; |
| | | 27 | | using MediaBrowser.Controller.Net; |
| | | 28 | | using MediaBrowser.Model.Configuration; |
| | | 29 | | using MediaBrowser.Model.Dto; |
| | | 30 | | using MediaBrowser.Model.Users; |
| | | 31 | | using Microsoft.EntityFrameworkCore; |
| | | 32 | | using Microsoft.Extensions.Logging; |
| | | 33 | | |
| | | 34 | | namespace Jellyfin.Server.Implementations.Users |
| | | 35 | | { |
| | | 36 | | /// <summary> |
| | | 37 | | /// Manages the creation and retrieval of <see cref="User"/> instances. |
| | | 38 | | /// </summary> |
| | | 39 | | public partial class UserManager : IUserManager, IDisposable |
| | | 40 | | { |
| | | 41 | | private readonly IDbContextFactory<JellyfinDbContext> _dbProvider; |
| | | 42 | | private readonly IEventManager _eventManager; |
| | | 43 | | private readonly INetworkManager _networkManager; |
| | | 44 | | private readonly IApplicationHost _appHost; |
| | | 45 | | private readonly IImageProcessor _imageProcessor; |
| | | 46 | | private readonly ILogger<UserManager> _logger; |
| | | 47 | | private readonly IReadOnlyCollection<IPasswordResetProvider> _passwordResetProviders; |
| | | 48 | | private readonly IReadOnlyCollection<IAuthenticationProvider> _authenticationProviders; |
| | | 49 | | private readonly InvalidAuthProvider _invalidAuthProvider; |
| | | 50 | | private readonly DefaultAuthenticationProvider _defaultAuthenticationProvider; |
| | | 51 | | private readonly DefaultPasswordResetProvider _defaultPasswordResetProvider; |
| | | 52 | | private readonly IServerConfigurationManager _serverConfigurationManager; |
| | | 53 | | |
| | 58 | 54 | | private readonly LockHelper _userLock = new(); |
| | | 55 | | |
| | | 56 | | /// <summary> |
| | | 57 | | /// Initializes a new instance of the <see cref="UserManager"/> class. |
| | | 58 | | /// </summary> |
| | | 59 | | /// <param name="dbProvider">The database provider.</param> |
| | | 60 | | /// <param name="eventManager">The event manager.</param> |
| | | 61 | | /// <param name="networkManager">The network manager.</param> |
| | | 62 | | /// <param name="appHost">The application host.</param> |
| | | 63 | | /// <param name="imageProcessor">The image processor.</param> |
| | | 64 | | /// <param name="logger">The logger.</param> |
| | | 65 | | /// <param name="serverConfigurationManager">The system config manager.</param> |
| | | 66 | | /// <param name="passwordResetProviders">The password reset providers.</param> |
| | | 67 | | /// <param name="authenticationProviders">The authentication providers.</param> |
| | | 68 | | public UserManager( |
| | | 69 | | IDbContextFactory<JellyfinDbContext> dbProvider, |
| | | 70 | | IEventManager eventManager, |
| | | 71 | | INetworkManager networkManager, |
| | | 72 | | IApplicationHost appHost, |
| | | 73 | | IImageProcessor imageProcessor, |
| | | 74 | | ILogger<UserManager> logger, |
| | | 75 | | IServerConfigurationManager serverConfigurationManager, |
| | | 76 | | IEnumerable<IPasswordResetProvider> passwordResetProviders, |
| | | 77 | | IEnumerable<IAuthenticationProvider> authenticationProviders) |
| | | 78 | | { |
| | 58 | 79 | | _dbProvider = dbProvider; |
| | 58 | 80 | | _eventManager = eventManager; |
| | 58 | 81 | | _networkManager = networkManager; |
| | 58 | 82 | | _appHost = appHost; |
| | 58 | 83 | | _imageProcessor = imageProcessor; |
| | 58 | 84 | | _logger = logger; |
| | 58 | 85 | | _serverConfigurationManager = serverConfigurationManager; |
| | | 86 | | |
| | 58 | 87 | | _passwordResetProviders = passwordResetProviders.ToList(); |
| | 58 | 88 | | _authenticationProviders = authenticationProviders.ToList(); |
| | | 89 | | |
| | 58 | 90 | | _invalidAuthProvider = _authenticationProviders.OfType<InvalidAuthProvider>().First(); |
| | 58 | 91 | | _defaultAuthenticationProvider = _authenticationProviders.OfType<DefaultAuthenticationProvider>().First(); |
| | 58 | 92 | | _defaultPasswordResetProvider = _passwordResetProviders.OfType<DefaultPasswordResetProvider>().First(); |
| | 58 | 93 | | } |
| | | 94 | | |
| | | 95 | | /// <inheritdoc/> |
| | | 96 | | public event EventHandler<GenericEventArgs<User>>? OnUserUpdated; |
| | | 97 | | |
| | | 98 | | /// <inheritdoc/> |
| | | 99 | | public IEnumerable<User> GetUsers() |
| | | 100 | | { |
| | 31 | 101 | | using var dbContext = _dbProvider.CreateDbContext(); |
| | 31 | 102 | | return UserQuery(dbContext) |
| | 31 | 103 | | .ToArray(); |
| | 31 | 104 | | } |
| | | 105 | | |
| | | 106 | | /// <inheritdoc/> |
| | | 107 | | public IEnumerable<Guid> GetUsersIds() |
| | | 108 | | { |
| | 0 | 109 | | using var dbContext = _dbProvider.CreateDbContext(); |
| | 0 | 110 | | return dbContext.Users |
| | 0 | 111 | | .AsNoTracking() |
| | 0 | 112 | | .Select(user => user.Id) |
| | 0 | 113 | | .ToArray(); |
| | 0 | 114 | | } |
| | | 115 | | |
| | | 116 | | // This is some regex that matches only on unicode "word" characters, as well as -, _ and @ |
| | | 117 | | // In theory this will cut out most if not all 'control' characters which should help minimize any weirdness |
| | | 118 | | // Usernames can contain letters (a-z + whatever else unicode is cool with), numbers (0-9), at-signs (@), dashes |
| | | 119 | | [GeneratedRegex(@"^(?!\s)[\w\ \-'._@+]+(?<!\s)$")] |
| | | 120 | | private static partial Regex ValidUsernameRegex(); |
| | | 121 | | |
| | | 122 | | /// <inheritdoc/> |
| | | 123 | | public User? GetUserById(Guid id) |
| | | 124 | | { |
| | 460 | 125 | | if (id.IsEmpty()) |
| | | 126 | | { |
| | 0 | 127 | | throw new ArgumentException("Guid can't be empty", nameof(id)); |
| | | 128 | | } |
| | | 129 | | |
| | 460 | 130 | | using var dbContext = _dbProvider.CreateDbContext(); |
| | 460 | 131 | | return UserQuery(dbContext) |
| | 460 | 132 | | .FirstOrDefault(user => user.Id == id); |
| | 460 | 133 | | } |
| | | 134 | | |
| | | 135 | | private static IQueryable<User> UserQuery(JellyfinDbContext dbContext) |
| | | 136 | | { |
| | 625 | 137 | | return dbContext.Users |
| | 625 | 138 | | .AsSingleQuery() |
| | 625 | 139 | | .Include(user => user.Permissions) |
| | 625 | 140 | | .Include(user => user.Preferences) |
| | 625 | 141 | | .Include(user => user.AccessSchedules) |
| | 625 | 142 | | .Include(user => user.ProfileImage) |
| | 625 | 143 | | .AsNoTracking(); |
| | | 144 | | } |
| | | 145 | | |
| | | 146 | | /// <inheritdoc/> |
| | | 147 | | public User? GetFirstUser() |
| | | 148 | | { |
| | 23 | 149 | | using var dbContext = _dbProvider.CreateDbContext(); |
| | 23 | 150 | | return UserQuery(dbContext).FirstOrDefault(); |
| | 23 | 151 | | } |
| | | 152 | | |
| | | 153 | | /// <inheritdoc/> |
| | | 154 | | public User? GetUserByName(string name) |
| | | 155 | | { |
| | 50 | 156 | | if (string.IsNullOrWhiteSpace(name)) |
| | | 157 | | { |
| | 0 | 158 | | throw new ArgumentException("Invalid username", nameof(name)); |
| | | 159 | | } |
| | | 160 | | |
| | 50 | 161 | | using var dbContext = _dbProvider.CreateDbContext(); |
| | | 162 | | #pragma warning disable CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | 50 | 163 | | return UserQuery(dbContext) |
| | 50 | 164 | | .FirstOrDefault(u => u.NormalizedUsername == name.ToUpperInvariant()); |
| | | 165 | | #pragma warning restore CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | 50 | 166 | | } |
| | | 167 | | |
| | | 168 | | /// <inheritdoc/> |
| | | 169 | | public async Task RenameUser(Guid userId, string oldName, string newName) |
| | | 170 | | { |
| | 12 | 171 | | ThrowIfInvalidUsername(newName); |
| | | 172 | | |
| | 12 | 173 | | if (oldName.Equals(newName, StringComparison.Ordinal)) |
| | | 174 | | { |
| | 0 | 175 | | throw new ArgumentException("The new and old names must be different."); |
| | | 176 | | } |
| | | 177 | | |
| | 12 | 178 | | User user = null!; // user is never actually null where its used afterwards so we can just ignore. |
| | 12 | 179 | | using (await _userLock.LockAsync(userId).ConfigureAwait(false)) |
| | | 180 | | { |
| | 12 | 181 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 12 | 182 | | await using (dbContext.ConfigureAwait(false)) |
| | | 183 | | { |
| | | 184 | | #pragma warning disable CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | 12 | 185 | | if (await dbContext.Users |
| | 12 | 186 | | .AnyAsync(u => u.NormalizedUsername == newName.ToUpperInvariant() && u.Id != userId) |
| | 12 | 187 | | .ConfigureAwait(false)) |
| | | 188 | | { |
| | 4 | 189 | | throw new ArgumentException(string.Format( |
| | 4 | 190 | | CultureInfo.InvariantCulture, |
| | 4 | 191 | | "A user with the name '{0}' already exists.", |
| | 4 | 192 | | newName)); |
| | | 193 | | } |
| | | 194 | | #pragma warning restore CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | | 195 | | |
| | 8 | 196 | | user = await UserQuery(dbContext) |
| | 8 | 197 | | .AsTracking() |
| | 8 | 198 | | .FirstOrDefaultAsync(u => u.Id == userId) |
| | 8 | 199 | | .ConfigureAwait(false) |
| | 8 | 200 | | ?? throw new ResourceNotFoundException(nameof(userId)); |
| | 8 | 201 | | user.Username = newName; |
| | 8 | 202 | | user.NormalizedUsername = newName.ToUpperInvariant(); |
| | 8 | 203 | | await UpdateUserInternalAsync(dbContext, user).ConfigureAwait(false); |
| | | 204 | | } |
| | 8 | 205 | | } |
| | | 206 | | |
| | 8 | 207 | | var eventArgs = new UserUpdatedEventArgs(user); |
| | 8 | 208 | | await _eventManager.PublishAsync(eventArgs).ConfigureAwait(false); |
| | 8 | 209 | | OnUserUpdated?.Invoke(this, eventArgs); |
| | 8 | 210 | | } |
| | | 211 | | |
| | | 212 | | /// <inheritdoc/> |
| | | 213 | | public async Task UpdateUserAsync(User user) |
| | | 214 | | { |
| | 13 | 215 | | using (await _userLock.LockAsync(user.Id).ConfigureAwait(false)) |
| | | 216 | | { |
| | 13 | 217 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 13 | 218 | | await using (dbContext.ConfigureAwait(false)) |
| | | 219 | | { |
| | | 220 | | // TODO: this is a bit of a hack. Because the user entity can be created in another context, it is m |
| | 13 | 221 | | var dbUser = await UserQuery(dbContext) |
| | 13 | 222 | | .AsTracking() |
| | 13 | 223 | | .FirstOrDefaultAsync(u => u.Id == user.Id) |
| | 13 | 224 | | .ConfigureAwait(false) |
| | 13 | 225 | | ?? throw new ResourceNotFoundException(nameof(user.Id)); |
| | | 226 | | |
| | 13 | 227 | | dbContext.Entry(dbUser).CurrentValues.SetValues(user); |
| | 13 | 228 | | SyncPermissions(dbUser, user.Permissions); |
| | 13 | 229 | | SyncPreferences(dbUser, user.Preferences); |
| | | 230 | | |
| | 13 | 231 | | dbUser.AccessSchedules.Clear(); |
| | 26 | 232 | | foreach (var accessSchedule in user.AccessSchedules) |
| | | 233 | | { |
| | 0 | 234 | | dbUser.AccessSchedules.Add(new AccessSchedule(accessSchedule.DayOfWeek, accessSchedule.StartHour |
| | | 235 | | } |
| | | 236 | | |
| | 13 | 237 | | if (user.ProfileImage is null) |
| | | 238 | | { |
| | 12 | 239 | | if (dbUser.ProfileImage is not null) |
| | | 240 | | { |
| | 0 | 241 | | dbContext.Remove(dbUser.ProfileImage); |
| | 0 | 242 | | dbUser.ProfileImage = null; |
| | | 243 | | } |
| | | 244 | | } |
| | 1 | 245 | | else if (dbUser.ProfileImage is null) |
| | | 246 | | { |
| | 1 | 247 | | dbUser.ProfileImage = new Jellyfin.Database.Implementations.Entities.ImageInfo(user.ProfileImage |
| | 1 | 248 | | { |
| | 1 | 249 | | LastModified = user.ProfileImage.LastModified |
| | 1 | 250 | | }; |
| | | 251 | | } |
| | | 252 | | else |
| | | 253 | | { |
| | 0 | 254 | | dbUser.ProfileImage.Path = user.ProfileImage.Path; |
| | 0 | 255 | | dbUser.ProfileImage.LastModified = user.ProfileImage.LastModified; |
| | | 256 | | } |
| | | 257 | | |
| | 13 | 258 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 259 | | } |
| | 13 | 260 | | } |
| | 13 | 261 | | } |
| | | 262 | | |
| | | 263 | | private static void SyncPermissions(User dbUser, ICollection<Permission> source) |
| | | 264 | | { |
| | 13 | 265 | | var incoming = new Dictionary<PermissionKind, bool>(); |
| | 648 | 266 | | foreach (var permission in source) |
| | | 267 | | { |
| | 311 | 268 | | incoming[permission.Kind] = permission.Value; |
| | | 269 | | } |
| | | 270 | | |
| | 650 | 271 | | foreach (var existing in dbUser.Permissions) |
| | | 272 | | { |
| | 312 | 273 | | if (incoming.Remove(existing.Kind, out var value)) |
| | | 274 | | { |
| | | 275 | | // EF only marks the row modified if the value actually differs, so an update that |
| | | 276 | | // touches nothing but the user row - a session activity stamp - writes no children. |
| | 311 | 277 | | existing.Value = value; |
| | | 278 | | } |
| | | 279 | | else |
| | | 280 | | { |
| | 1 | 281 | | dbUser.Permissions.Remove(existing); |
| | | 282 | | } |
| | | 283 | | } |
| | | 284 | | |
| | 26 | 285 | | foreach (var (kind, value) in incoming) |
| | | 286 | | { |
| | 0 | 287 | | dbUser.Permissions.Add(new Permission(kind, value)); |
| | | 288 | | } |
| | 13 | 289 | | } |
| | | 290 | | |
| | | 291 | | private static void SyncPreferences(User dbUser, ICollection<Preference> source) |
| | | 292 | | { |
| | 13 | 293 | | var incoming = new Dictionary<PreferenceKind, string>(); |
| | 364 | 294 | | foreach (var preference in source) |
| | | 295 | | { |
| | 169 | 296 | | incoming[preference.Kind] = preference.Value; |
| | | 297 | | } |
| | | 298 | | |
| | 364 | 299 | | foreach (var existing in dbUser.Preferences) |
| | | 300 | | { |
| | 169 | 301 | | if (incoming.Remove(existing.Kind, out var value)) |
| | | 302 | | { |
| | 169 | 303 | | existing.Value = value; |
| | | 304 | | } |
| | | 305 | | else |
| | | 306 | | { |
| | 0 | 307 | | dbUser.Preferences.Remove(existing); |
| | | 308 | | } |
| | | 309 | | } |
| | | 310 | | |
| | 26 | 311 | | foreach (var (kind, value) in incoming) |
| | | 312 | | { |
| | 0 | 313 | | dbUser.Preferences.Add(new Preference(kind, value)); |
| | | 314 | | } |
| | 13 | 315 | | } |
| | | 316 | | |
| | | 317 | | internal async Task<User> CreateUserInternalAsync(string name, JellyfinDbContext dbContext) |
| | | 318 | | { |
| | | 319 | | // TODO: Remove after user item data is migrated. |
| | 58 | 320 | | var max = await dbContext.Users.AsQueryable().AnyAsync().ConfigureAwait(false) |
| | 58 | 321 | | ? await dbContext.Users.AsQueryable().Select(u => u.InternalId).MaxAsync().ConfigureAwait(false) |
| | 58 | 322 | | : 0; |
| | | 323 | | |
| | 58 | 324 | | var user = new User( |
| | 58 | 325 | | name, |
| | 58 | 326 | | _defaultAuthenticationProvider.GetType().FullName!, |
| | 58 | 327 | | _defaultPasswordResetProvider.GetType().FullName!) |
| | 58 | 328 | | { |
| | 58 | 329 | | InternalId = max + 1 |
| | 58 | 330 | | }; |
| | | 331 | | |
| | 58 | 332 | | user.AddDefaultPermissions(); |
| | 58 | 333 | | user.AddDefaultPreferences(); |
| | | 334 | | |
| | 58 | 335 | | return user; |
| | 58 | 336 | | } |
| | | 337 | | |
| | | 338 | | /// <inheritdoc/> |
| | | 339 | | public async Task<User> CreateUserAsync(string name) |
| | | 340 | | { |
| | 44 | 341 | | ThrowIfInvalidUsername(name); |
| | | 342 | | |
| | | 343 | | User newUser; |
| | 43 | 344 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 43 | 345 | | await using (dbContext.ConfigureAwait(false)) |
| | | 346 | | { |
| | | 347 | | #pragma warning disable CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | 43 | 348 | | if (await dbContext.Users |
| | 43 | 349 | | .AnyAsync(u => u.NormalizedUsername == name.ToUpperInvariant()) |
| | 43 | 350 | | .ConfigureAwait(false)) |
| | | 351 | | { |
| | 4 | 352 | | throw new ArgumentException(string.Format( |
| | 4 | 353 | | CultureInfo.InvariantCulture, |
| | 4 | 354 | | "A user with the name '{0}' already exists.", |
| | 4 | 355 | | name)); |
| | | 356 | | } |
| | | 357 | | #pragma warning restore CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | | 358 | | |
| | 39 | 359 | | newUser = await CreateUserInternalAsync(name, dbContext).ConfigureAwait(false); |
| | | 360 | | |
| | 39 | 361 | | dbContext.Users.Add(newUser); |
| | 39 | 362 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 363 | | } |
| | | 364 | | |
| | 39 | 365 | | await _eventManager.PublishAsync(new UserCreatedEventArgs(newUser)).ConfigureAwait(false); |
| | | 366 | | |
| | 39 | 367 | | return newUser; |
| | 39 | 368 | | } |
| | | 369 | | |
| | | 370 | | /// <inheritdoc/> |
| | | 371 | | public async Task DeleteUserAsync(Guid userId) |
| | | 372 | | { |
| | | 373 | | User? user; |
| | 0 | 374 | | using (await _userLock.LockAsync(userId).ConfigureAwait(false)) |
| | | 375 | | { |
| | 0 | 376 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 0 | 377 | | await using (dbContext.ConfigureAwait(false)) |
| | | 378 | | { |
| | 0 | 379 | | user = await dbContext.Users |
| | 0 | 380 | | .Include(u => u.Permissions) |
| | 0 | 381 | | .FirstOrDefaultAsync(u => u.Id.Equals(userId)) |
| | 0 | 382 | | .ConfigureAwait(false); |
| | 0 | 383 | | if (user is null) |
| | | 384 | | { |
| | 0 | 385 | | throw new ResourceNotFoundException(nameof(userId)); |
| | | 386 | | } |
| | | 387 | | |
| | 0 | 388 | | var userCount = await dbContext.Users.CountAsync().ConfigureAwait(false); |
| | 0 | 389 | | if (userCount == 1) |
| | | 390 | | { |
| | 0 | 391 | | throw new InvalidOperationException(string.Format( |
| | 0 | 392 | | CultureInfo.InvariantCulture, |
| | 0 | 393 | | "The user '{0}' cannot be deleted because there must be at least one user in the system.", |
| | 0 | 394 | | user.Username)); |
| | | 395 | | } |
| | | 396 | | |
| | 0 | 397 | | if (user.HasPermission(PermissionKind.IsAdministrator) |
| | 0 | 398 | | && await dbContext.Users |
| | 0 | 399 | | .CountAsync(i => i.Permissions.Any(p => p.Kind == PermissionKind.IsAdministrator && p.Value) |
| | 0 | 400 | | .ConfigureAwait(false) == 1) |
| | | 401 | | { |
| | 0 | 402 | | throw new ArgumentException( |
| | 0 | 403 | | string.Format( |
| | 0 | 404 | | CultureInfo.InvariantCulture, |
| | 0 | 405 | | "The user '{0}' cannot be deleted because there must be at least one admin user in the s |
| | 0 | 406 | | user.Username), |
| | 0 | 407 | | nameof(userId)); |
| | | 408 | | } |
| | | 409 | | |
| | 0 | 410 | | dbContext.Users.Remove(user); |
| | 0 | 411 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 412 | | } |
| | 0 | 413 | | } |
| | | 414 | | |
| | 0 | 415 | | await _eventManager.PublishAsync(new UserDeletedEventArgs(user)).ConfigureAwait(false); |
| | 0 | 416 | | } |
| | | 417 | | |
| | | 418 | | /// <inheritdoc/> |
| | | 419 | | public Task ResetPassword(Guid userId) |
| | | 420 | | { |
| | 0 | 421 | | return ChangePassword(userId, string.Empty); |
| | | 422 | | } |
| | | 423 | | |
| | | 424 | | /// <inheritdoc/> |
| | | 425 | | public async Task ChangePassword(Guid userId, string newPassword) |
| | | 426 | | { |
| | 5 | 427 | | User dbUser = null!; |
| | 5 | 428 | | using (await _userLock.LockAsync(userId).ConfigureAwait(false)) |
| | | 429 | | { |
| | 5 | 430 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 5 | 431 | | await using (dbContext.ConfigureAwait(false)) |
| | | 432 | | { |
| | 5 | 433 | | dbUser = await UserQuery(dbContext) |
| | 5 | 434 | | .AsTracking() |
| | 5 | 435 | | .FirstOrDefaultAsync(u => u.Id == userId) |
| | 5 | 436 | | .ConfigureAwait(false) |
| | 5 | 437 | | ?? throw new ResourceNotFoundException(nameof(userId)); |
| | 5 | 438 | | if (dbUser.HasPermission(PermissionKind.IsAdministrator) && string.IsNullOrWhiteSpace(newPassword)) |
| | | 439 | | { |
| | 0 | 440 | | throw new ArgumentException("Admin user passwords must not be empty", nameof(newPassword)); |
| | | 441 | | } |
| | | 442 | | |
| | 5 | 443 | | await GetAuthenticationProvider(dbUser).ChangePassword(dbUser, newPassword).ConfigureAwait(false); |
| | 5 | 444 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 445 | | } |
| | 5 | 446 | | } |
| | | 447 | | |
| | 5 | 448 | | await _eventManager.PublishAsync(new UserPasswordChangedEventArgs(dbUser)).ConfigureAwait(false); |
| | 5 | 449 | | } |
| | | 450 | | |
| | | 451 | | /// <inheritdoc/> |
| | | 452 | | public UserDto GetUserDto(User user, string? remoteEndPoint = null) |
| | | 453 | | { |
| | 41 | 454 | | var castReceiverApplications = _serverConfigurationManager.Configuration.CastReceiverApplications; |
| | 41 | 455 | | return new UserDto |
| | 41 | 456 | | { |
| | 41 | 457 | | Name = user.Username, |
| | 41 | 458 | | Id = user.Id, |
| | 41 | 459 | | ServerId = _appHost.SystemId, |
| | 41 | 460 | | EnableAutoLogin = user.EnableAutoLogin, |
| | 41 | 461 | | LastLoginDate = user.LastLoginDate, |
| | 41 | 462 | | LastActivityDate = user.LastActivityDate, |
| | 41 | 463 | | PrimaryImageTag = user.ProfileImage is not null ? _imageProcessor.GetImageCacheTag(user) : null, |
| | 41 | 464 | | Configuration = new UserConfiguration |
| | 41 | 465 | | { |
| | 41 | 466 | | SubtitleMode = user.SubtitleMode, |
| | 41 | 467 | | HidePlayedInLatest = user.HidePlayedInLatest, |
| | 41 | 468 | | EnableLocalPassword = user.EnableLocalPassword, |
| | 41 | 469 | | PlayDefaultAudioTrack = user.PlayDefaultAudioTrack, |
| | 41 | 470 | | DisplayCollectionsView = user.DisplayCollectionsView, |
| | 41 | 471 | | DisplayMissingEpisodes = user.DisplayMissingEpisodes, |
| | 41 | 472 | | AudioLanguagePreference = user.AudioLanguagePreference, |
| | 41 | 473 | | RememberAudioSelections = user.RememberAudioSelections, |
| | 41 | 474 | | EnableNextEpisodeAutoPlay = user.EnableNextEpisodeAutoPlay, |
| | 41 | 475 | | RememberSubtitleSelections = user.RememberSubtitleSelections, |
| | 41 | 476 | | SubtitleLanguagePreference = user.SubtitleLanguagePreference ?? string.Empty, |
| | 41 | 477 | | OrderedViews = user.GetPreferenceValues<Guid>(PreferenceKind.OrderedViews), |
| | 41 | 478 | | GroupedFolders = user.GetPreferenceValues<Guid>(PreferenceKind.GroupedFolders), |
| | 41 | 479 | | MyMediaExcludes = user.GetPreferenceValues<Guid>(PreferenceKind.MyMediaExcludes), |
| | 41 | 480 | | LatestItemsExcludes = user.GetPreferenceValues<Guid>(PreferenceKind.LatestItemExcludes), |
| | 41 | 481 | | CastReceiverId = string.IsNullOrEmpty(user.CastReceiverId) |
| | 41 | 482 | | ? castReceiverApplications.FirstOrDefault()?.Id |
| | 41 | 483 | | : castReceiverApplications.FirstOrDefault(c => string.Equals(c.Id, user.CastReceiverId, StringCo |
| | 41 | 484 | | ?? castReceiverApplications.FirstOrDefault()?.Id |
| | 41 | 485 | | }, |
| | 41 | 486 | | Policy = new UserPolicy |
| | 41 | 487 | | { |
| | 41 | 488 | | MaxParentalRating = user.MaxParentalRatingScore, |
| | 41 | 489 | | MaxParentalSubRating = user.MaxParentalRatingSubScore, |
| | 41 | 490 | | EnableUserPreferenceAccess = user.EnableUserPreferenceAccess, |
| | 41 | 491 | | RemoteClientBitrateLimit = user.RemoteClientBitrateLimit ?? 0, |
| | 41 | 492 | | AuthenticationProviderId = user.AuthenticationProviderId, |
| | 41 | 493 | | PasswordResetProviderId = user.PasswordResetProviderId, |
| | 41 | 494 | | InvalidLoginAttemptCount = user.InvalidLoginAttemptCount, |
| | 41 | 495 | | LoginAttemptsBeforeLockout = user.LoginAttemptsBeforeLockout ?? -1, |
| | 41 | 496 | | MaxActiveSessions = user.MaxActiveSessions, |
| | 41 | 497 | | IsAdministrator = user.HasPermission(PermissionKind.IsAdministrator), |
| | 41 | 498 | | IsHidden = user.HasPermission(PermissionKind.IsHidden), |
| | 41 | 499 | | IsDisabled = user.HasPermission(PermissionKind.IsDisabled), |
| | 41 | 500 | | EnableSharedDeviceControl = user.HasPermission(PermissionKind.EnableSharedDeviceControl), |
| | 41 | 501 | | EnableRemoteAccess = user.HasPermission(PermissionKind.EnableRemoteAccess), |
| | 41 | 502 | | EnableLiveTvManagement = user.HasPermission(PermissionKind.EnableLiveTvManagement), |
| | 41 | 503 | | EnableLiveTvAccess = user.HasPermission(PermissionKind.EnableLiveTvAccess), |
| | 41 | 504 | | EnableMediaPlayback = user.HasPermission(PermissionKind.EnableMediaPlayback), |
| | 41 | 505 | | EnableAudioPlaybackTranscoding = user.HasPermission(PermissionKind.EnableAudioPlaybackTranscoding), |
| | 41 | 506 | | EnableVideoPlaybackTranscoding = user.HasPermission(PermissionKind.EnableVideoPlaybackTranscoding), |
| | 41 | 507 | | EnableContentDeletion = user.HasPermission(PermissionKind.EnableContentDeletion), |
| | 41 | 508 | | EnableContentDownloading = user.HasPermission(PermissionKind.EnableContentDownloading), |
| | 41 | 509 | | EnableSyncTranscoding = user.HasPermission(PermissionKind.EnableSyncTranscoding), |
| | 41 | 510 | | EnableMediaConversion = user.HasPermission(PermissionKind.EnableMediaConversion), |
| | 41 | 511 | | EnableAllChannels = user.HasPermission(PermissionKind.EnableAllChannels), |
| | 41 | 512 | | EnableAllDevices = user.HasPermission(PermissionKind.EnableAllDevices), |
| | 41 | 513 | | EnableAllFolders = user.HasPermission(PermissionKind.EnableAllFolders), |
| | 41 | 514 | | EnableRemoteControlOfOtherUsers = user.HasPermission(PermissionKind.EnableRemoteControlOfOtherUsers) |
| | 41 | 515 | | EnablePlaybackRemuxing = user.HasPermission(PermissionKind.EnablePlaybackRemuxing), |
| | 41 | 516 | | ForceRemoteSourceTranscoding = user.HasPermission(PermissionKind.ForceRemoteSourceTranscoding), |
| | 41 | 517 | | EnablePublicSharing = user.HasPermission(PermissionKind.EnablePublicSharing), |
| | 41 | 518 | | EnableCollectionManagement = user.HasPermission(PermissionKind.EnableCollectionManagement), |
| | 41 | 519 | | EnableSubtitleManagement = user.HasPermission(PermissionKind.EnableSubtitleManagement), |
| | 41 | 520 | | AccessSchedules = user.AccessSchedules.ToArray(), |
| | 41 | 521 | | BlockedTags = user.GetPreference(PreferenceKind.BlockedTags), |
| | 41 | 522 | | AllowedTags = user.GetPreference(PreferenceKind.AllowedTags), |
| | 41 | 523 | | EnabledChannels = user.GetPreferenceValues<Guid>(PreferenceKind.EnabledChannels), |
| | 41 | 524 | | EnabledDevices = user.GetPreference(PreferenceKind.EnabledDevices), |
| | 41 | 525 | | EnabledFolders = user.GetPreferenceValues<Guid>(PreferenceKind.EnabledFolders), |
| | 41 | 526 | | EnableContentDeletionFromFolders = user.GetPreference(PreferenceKind.EnableContentDeletionFromFolder |
| | 41 | 527 | | SyncPlayAccess = user.SyncPlayAccess, |
| | 41 | 528 | | BlockedChannels = user.GetPreferenceValues<Guid>(PreferenceKind.BlockedChannels), |
| | 41 | 529 | | BlockedMediaFolders = user.GetPreferenceValues<Guid>(PreferenceKind.BlockedMediaFolders), |
| | 41 | 530 | | BlockUnratedItems = user.GetPreferenceValues<UnratedItem>(PreferenceKind.BlockUnratedItems) |
| | 41 | 531 | | } |
| | 41 | 532 | | }; |
| | | 533 | | } |
| | | 534 | | |
| | | 535 | | /// <inheritdoc/> |
| | | 536 | | public async Task<User?> AuthenticateUser( |
| | | 537 | | string username, |
| | | 538 | | string password, |
| | | 539 | | string remoteEndPoint, |
| | | 540 | | bool isUserSession) |
| | | 541 | | { |
| | 16 | 542 | | if (string.IsNullOrWhiteSpace(username)) |
| | | 543 | | { |
| | 0 | 544 | | _logger.LogInformation("Authentication request without username has been denied (IP: {IP}).", remoteEndP |
| | 0 | 545 | | throw new ArgumentNullException(nameof(username)); |
| | | 546 | | } |
| | | 547 | | |
| | | 548 | | bool success; |
| | 16 | 549 | | var user = GetUserByName(username); |
| | 16 | 550 | | using (await _userLock.LockAsync(user?.Id ?? Guid.Empty).ConfigureAwait(false)) |
| | | 551 | | { |
| | 16 | 552 | | using var dbContext = _dbProvider.CreateDbContext(); |
| | | 553 | | |
| | | 554 | | // Reload the user now that we hold the lock so the RowVersion is current. |
| | | 555 | | // GetUserByName uses AsNoTracking and the snapshot may be stale if another |
| | | 556 | | // write (e.g. a concurrent login) incremented RowVersion after our initial load. |
| | 16 | 557 | | if (user is not null) |
| | | 558 | | { |
| | 16 | 559 | | user = await UserQuery(dbContext).FirstOrDefaultAsync(e => e.Id == user.Id).ConfigureAwait(false) ?? |
| | | 560 | | } |
| | | 561 | | |
| | 16 | 562 | | var authResult = await AuthenticateLocalUser(username, password, user) |
| | 16 | 563 | | .ConfigureAwait(false); |
| | 16 | 564 | | var authenticationProvider = authResult.AuthenticationProvider; |
| | 16 | 565 | | success = authResult.Success; |
| | | 566 | | |
| | 16 | 567 | | if (success && user is not null) |
| | | 568 | | { |
| | | 569 | | // refresh the user if the auth provider might have updated it in the auth method. |
| | | 570 | | // this is a hack, this needs removal once the LDAP plugin uses the correct interface to get the use |
| | 16 | 571 | | user = await UserQuery(dbContext).FirstOrDefaultAsync(e => e.Id == user.Id).ConfigureAwait(false); |
| | | 572 | | } |
| | | 573 | | |
| | 16 | 574 | | if (user is null) |
| | | 575 | | { |
| | 0 | 576 | | string updatedUsername = authResult.Username; |
| | | 577 | | |
| | 0 | 578 | | if (success |
| | 0 | 579 | | && authenticationProvider is not null |
| | 0 | 580 | | && authenticationProvider is not DefaultAuthenticationProvider) |
| | | 581 | | { |
| | | 582 | | // Trust the username returned by the authentication provider |
| | 0 | 583 | | username = updatedUsername; |
| | | 584 | | |
| | | 585 | | // Search the database for the user again |
| | | 586 | | // the authentication provider might have created it |
| | | 587 | | #pragma warning disable CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | 0 | 588 | | user = await UserQuery(dbContext) |
| | 0 | 589 | | .FirstOrDefaultAsync(e => e.NormalizedUsername == username.ToUpperInvariant()).ConfigureAwai |
| | | 590 | | |
| | 0 | 591 | | if (authenticationProvider is IHasNewUserPolicy hasNewUserPolicy && user is not null) |
| | | 592 | | { |
| | 0 | 593 | | await UpdatePolicyAsync(user.Id, hasNewUserPolicy.GetNewUserPolicy()).ConfigureAwait(false); |
| | 0 | 594 | | user = await UserQuery(dbContext) |
| | 0 | 595 | | .FirstOrDefaultAsync(e => e.NormalizedUsername == username.ToUpperInvariant()).Configure |
| | | 596 | | #pragma warning restore CA1862 // Use the 'StringComparison' method overloads to perform case-insensitive string compari |
| | | 597 | | } |
| | | 598 | | } |
| | | 599 | | } |
| | | 600 | | |
| | 16 | 601 | | if (success && user is not null && authenticationProvider is not null) |
| | | 602 | | { |
| | 16 | 603 | | var providerId = authenticationProvider.GetType().FullName; |
| | | 604 | | |
| | 16 | 605 | | if (providerId is not null && !string.Equals(providerId, user.AuthenticationProviderId, StringCompar |
| | | 606 | | { |
| | 0 | 607 | | await dbContext.Users |
| | 0 | 608 | | .Where(e => e.Id == user.Id) |
| | 0 | 609 | | .ExecuteUpdateAsync(e => e.SetProperty(f => f.AuthenticationProviderId, providerId)) |
| | 0 | 610 | | .ConfigureAwait(false); |
| | | 611 | | } |
| | | 612 | | } |
| | | 613 | | |
| | 16 | 614 | | if (user is null) |
| | | 615 | | { |
| | 0 | 616 | | _logger.LogInformation( |
| | 0 | 617 | | "Authentication request for {UserName} has been denied (IP: {IP}).", |
| | 0 | 618 | | username, |
| | 0 | 619 | | remoteEndPoint); |
| | 0 | 620 | | throw new AuthenticationException("Invalid username or password entered."); |
| | | 621 | | } |
| | | 622 | | |
| | 16 | 623 | | if (user.HasPermission(PermissionKind.IsDisabled)) |
| | | 624 | | { |
| | 0 | 625 | | _logger.LogInformation( |
| | 0 | 626 | | "Authentication request for {UserName} has been denied because this account is currently disable |
| | 0 | 627 | | username, |
| | 0 | 628 | | remoteEndPoint); |
| | 0 | 629 | | throw new SecurityException( |
| | 0 | 630 | | $"The {user.Username} account is currently disabled. Please consult with your administrator."); |
| | | 631 | | } |
| | | 632 | | |
| | 16 | 633 | | if (!user.HasPermission(PermissionKind.EnableRemoteAccess) && |
| | 16 | 634 | | !_networkManager.IsInLocalNetwork(remoteEndPoint)) |
| | | 635 | | { |
| | 0 | 636 | | _logger.LogInformation( |
| | 0 | 637 | | "Authentication request for {UserName} forbidden: remote access disabled and user not in local n |
| | 0 | 638 | | username, |
| | 0 | 639 | | remoteEndPoint); |
| | 0 | 640 | | throw new SecurityException("Forbidden."); |
| | | 641 | | } |
| | | 642 | | |
| | 16 | 643 | | if (!user.IsParentalScheduleAllowed()) |
| | | 644 | | { |
| | 0 | 645 | | _logger.LogInformation( |
| | 0 | 646 | | "Authentication request for {UserName} is not allowed at this time due parental restrictions (IP |
| | 0 | 647 | | username, |
| | 0 | 648 | | remoteEndPoint); |
| | 0 | 649 | | throw new SecurityException("User is not allowed access at this time."); |
| | | 650 | | } |
| | | 651 | | |
| | | 652 | | // Update LastActivityDate and LastLoginDate, then save |
| | 16 | 653 | | if (success) |
| | | 654 | | { |
| | 16 | 655 | | if (isUserSession) |
| | | 656 | | { |
| | 16 | 657 | | var date = DateTime.UtcNow; |
| | 16 | 658 | | await dbContext.Users |
| | 16 | 659 | | .Where(e => e.Id == user.Id) |
| | 16 | 660 | | .ExecuteUpdateAsync(e => e |
| | 16 | 661 | | .SetProperty(f => f.LastActivityDate, date) |
| | 16 | 662 | | .SetProperty(f => f.LastLoginDate, date)) |
| | 16 | 663 | | .ConfigureAwait(false); |
| | | 664 | | |
| | | 665 | | // ExecuteUpdateAsync bypasses the change tracker, so keep the |
| | | 666 | | // returned entity in sync. Otherwise SessionManager.LogSessionActivity |
| | | 667 | | // saves this (stale) entity in full and reverts LastLoginDate. |
| | 16 | 668 | | user.LastActivityDate = date; |
| | 16 | 669 | | user.LastLoginDate = date; |
| | 16 | 670 | | } |
| | | 671 | | |
| | 16 | 672 | | await dbContext.Users |
| | 16 | 673 | | .Where(e => e.Id == user.Id) |
| | 16 | 674 | | .ExecuteUpdateAsync(e => e.SetProperty(f => f.InvalidLoginAttemptCount, 0)) |
| | 16 | 675 | | .ConfigureAwait(false); |
| | 16 | 676 | | _logger.LogInformation("Authentication request for {UserName} has succeeded.", user.Username); |
| | | 677 | | } |
| | | 678 | | else |
| | | 679 | | { |
| | 0 | 680 | | user.InvalidLoginAttemptCount++; |
| | 0 | 681 | | int? maxInvalidLogins = user.LoginAttemptsBeforeLockout; |
| | 0 | 682 | | if (maxInvalidLogins.HasValue && user.InvalidLoginAttemptCount >= maxInvalidLogins) |
| | | 683 | | { |
| | 0 | 684 | | user.SetPermission(PermissionKind.IsDisabled, true); |
| | 0 | 685 | | dbContext.Update(user); |
| | 0 | 686 | | await dbContext.SaveChangesAsync() |
| | 0 | 687 | | .ConfigureAwait(false); |
| | 0 | 688 | | await _eventManager.PublishAsync(new UserLockedOutEventArgs(user)).ConfigureAwait(false); |
| | 0 | 689 | | _logger.LogWarning( |
| | 0 | 690 | | "Disabling user {Username} due to {Attempts} unsuccessful login attempts.", |
| | 0 | 691 | | user.Username, |
| | 0 | 692 | | user.InvalidLoginAttemptCount); |
| | | 693 | | } |
| | | 694 | | |
| | 0 | 695 | | await dbContext.Users |
| | 0 | 696 | | .Where(e => e.Id == user.Id) |
| | 0 | 697 | | .ExecuteUpdateAsync(e => e.SetProperty(f => f.InvalidLoginAttemptCount, f => f.InvalidLoginAttem |
| | 0 | 698 | | .ConfigureAwait(false); |
| | | 699 | | |
| | 0 | 700 | | _logger.LogInformation( |
| | 0 | 701 | | "Authentication request for {UserName} has been denied (IP: {IP}).", |
| | 0 | 702 | | user.Username, |
| | 0 | 703 | | remoteEndPoint); |
| | | 704 | | } |
| | 16 | 705 | | } |
| | | 706 | | |
| | 16 | 707 | | return success ? user : null; |
| | 16 | 708 | | } |
| | | 709 | | |
| | | 710 | | /// <inheritdoc/> |
| | | 711 | | public async Task<ForgotPasswordResult> StartForgotPasswordProcess(string enteredUsername, bool isInNetwork) |
| | | 712 | | { |
| | 0 | 713 | | var user = string.IsNullOrWhiteSpace(enteredUsername) ? null : GetUserByName(enteredUsername); |
| | 0 | 714 | | var passwordResetProvider = GetPasswordResetProvider(user); |
| | | 715 | | |
| | 0 | 716 | | var result = await passwordResetProvider |
| | 0 | 717 | | .StartForgotPasswordProcess(user, enteredUsername, isInNetwork) |
| | 0 | 718 | | .ConfigureAwait(false); |
| | | 719 | | |
| | 0 | 720 | | if (user is not null && isInNetwork) |
| | | 721 | | { |
| | 0 | 722 | | await UpdateUserAsync(user).ConfigureAwait(false); |
| | | 723 | | } |
| | | 724 | | |
| | 0 | 725 | | return result; |
| | 0 | 726 | | } |
| | | 727 | | |
| | | 728 | | /// <inheritdoc/> |
| | | 729 | | public async Task<PinRedeemResult> RedeemPasswordResetPin(string pin) |
| | | 730 | | { |
| | 0 | 731 | | foreach (var provider in _passwordResetProviders) |
| | | 732 | | { |
| | 0 | 733 | | var result = await provider.RedeemPasswordResetPin(pin).ConfigureAwait(false); |
| | | 734 | | |
| | 0 | 735 | | if (result.Success) |
| | | 736 | | { |
| | 0 | 737 | | return result; |
| | | 738 | | } |
| | | 739 | | } |
| | | 740 | | |
| | 0 | 741 | | return new PinRedeemResult(); |
| | 0 | 742 | | } |
| | | 743 | | |
| | | 744 | | /// <inheritdoc /> |
| | | 745 | | public async Task InitializeAsync() |
| | | 746 | | { |
| | | 747 | | // TODO: Refactor the startup wizard so that it doesn't require a user to already exist. |
| | 20 | 748 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 20 | 749 | | await using (dbContext.ConfigureAwait(false)) |
| | | 750 | | { |
| | 20 | 751 | | if (await dbContext.Users.AnyAsync().ConfigureAwait(false)) |
| | | 752 | | { |
| | | 753 | | return; |
| | | 754 | | } |
| | | 755 | | |
| | 19 | 756 | | var defaultName = Environment.UserName; |
| | 19 | 757 | | if (string.IsNullOrWhiteSpace(defaultName) || !ValidUsernameRegex().IsMatch(defaultName)) |
| | | 758 | | { |
| | 0 | 759 | | defaultName = "MyJellyfinUser"; |
| | | 760 | | } |
| | | 761 | | |
| | 19 | 762 | | _logger.LogWarning("No users, creating one with username {UserName}", defaultName); |
| | | 763 | | |
| | 19 | 764 | | var newUser = await CreateUserInternalAsync(defaultName, dbContext).ConfigureAwait(false); |
| | 19 | 765 | | newUser.SetPermission(PermissionKind.IsAdministrator, true); |
| | 19 | 766 | | newUser.SetPermission(PermissionKind.EnableContentDeletion, true); |
| | 19 | 767 | | newUser.SetPermission(PermissionKind.EnableRemoteControlOfOtherUsers, true); |
| | | 768 | | |
| | 19 | 769 | | dbContext.Users.Add(newUser); |
| | 19 | 770 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 771 | | } |
| | 20 | 772 | | } |
| | | 773 | | |
| | | 774 | | /// <inheritdoc/> |
| | | 775 | | public NameIdPair[] GetAuthenticationProviders() |
| | | 776 | | { |
| | 0 | 777 | | return _authenticationProviders |
| | 0 | 778 | | .Where(provider => provider.IsEnabled) |
| | 0 | 779 | | .OrderBy(i => i is DefaultAuthenticationProvider ? 0 : 1) |
| | 0 | 780 | | .ThenBy(i => i.Name) |
| | 0 | 781 | | .Select(i => new NameIdPair |
| | 0 | 782 | | { |
| | 0 | 783 | | Name = i.Name, |
| | 0 | 784 | | Id = i.GetType().FullName |
| | 0 | 785 | | }) |
| | 0 | 786 | | .ToArray(); |
| | | 787 | | } |
| | | 788 | | |
| | | 789 | | /// <inheritdoc/> |
| | | 790 | | public NameIdPair[] GetPasswordResetProviders() |
| | | 791 | | { |
| | 0 | 792 | | return _passwordResetProviders |
| | 0 | 793 | | .Where(provider => provider.IsEnabled) |
| | 0 | 794 | | .OrderBy(i => i is DefaultPasswordResetProvider ? 0 : 1) |
| | 0 | 795 | | .ThenBy(i => i.Name) |
| | 0 | 796 | | .Select(i => new NameIdPair |
| | 0 | 797 | | { |
| | 0 | 798 | | Name = i.Name, |
| | 0 | 799 | | Id = i.GetType().FullName |
| | 0 | 800 | | }) |
| | 0 | 801 | | .ToArray(); |
| | | 802 | | } |
| | | 803 | | |
| | | 804 | | /// <inheritdoc/> |
| | | 805 | | public async Task UpdateConfigurationAsync(Guid userId, UserConfiguration config) |
| | | 806 | | { |
| | 1 | 807 | | using (await _userLock.LockAsync(userId).ConfigureAwait(false)) |
| | | 808 | | { |
| | 1 | 809 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 1 | 810 | | await using (dbContext.ConfigureAwait(false)) |
| | | 811 | | { |
| | 1 | 812 | | var user = UserQuery(dbContext) |
| | 1 | 813 | | .AsTracking() |
| | 1 | 814 | | .FirstOrDefault(u => u.Id.Equals(userId)) |
| | 1 | 815 | | ?? throw new ArgumentException("No user exists with given Id!"); |
| | | 816 | | |
| | 1 | 817 | | user.SubtitleMode = config.SubtitleMode; |
| | 1 | 818 | | user.HidePlayedInLatest = config.HidePlayedInLatest; |
| | 1 | 819 | | user.EnableLocalPassword = config.EnableLocalPassword; |
| | 1 | 820 | | user.PlayDefaultAudioTrack = config.PlayDefaultAudioTrack; |
| | 1 | 821 | | user.DisplayCollectionsView = config.DisplayCollectionsView; |
| | 1 | 822 | | user.DisplayMissingEpisodes = config.DisplayMissingEpisodes; |
| | 1 | 823 | | user.AudioLanguagePreference = config.AudioLanguagePreference; |
| | 1 | 824 | | user.RememberAudioSelections = config.RememberAudioSelections; |
| | 1 | 825 | | user.EnableNextEpisodeAutoPlay = config.EnableNextEpisodeAutoPlay; |
| | 1 | 826 | | user.RememberSubtitleSelections = config.RememberSubtitleSelections; |
| | 1 | 827 | | user.SubtitleLanguagePreference = config.SubtitleLanguagePreference; |
| | | 828 | | |
| | | 829 | | // Only set cast receiver id if it is passed in and it exists in the server config. |
| | 1 | 830 | | if (!string.IsNullOrEmpty(config.CastReceiverId) |
| | 1 | 831 | | && _serverConfigurationManager.Configuration.CastReceiverApplications.Any(c => string.Equals(c.I |
| | | 832 | | { |
| | 1 | 833 | | user.CastReceiverId = config.CastReceiverId; |
| | | 834 | | } |
| | | 835 | | |
| | 1 | 836 | | user.SetPreference(PreferenceKind.OrderedViews, config.OrderedViews); |
| | 1 | 837 | | user.SetPreference(PreferenceKind.GroupedFolders, config.GroupedFolders); |
| | 1 | 838 | | user.SetPreference(PreferenceKind.MyMediaExcludes, config.MyMediaExcludes); |
| | 1 | 839 | | user.SetPreference(PreferenceKind.LatestItemExcludes, config.LatestItemsExcludes); |
| | | 840 | | |
| | 1 | 841 | | dbContext.Update(user); |
| | 1 | 842 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 843 | | } |
| | 1 | 844 | | } |
| | 1 | 845 | | } |
| | | 846 | | |
| | | 847 | | /// <inheritdoc/> |
| | | 848 | | public async Task UpdatePolicyAsync(Guid userId, UserPolicy policy) |
| | | 849 | | { |
| | | 850 | | User user; |
| | 1 | 851 | | using (await _userLock.LockAsync(userId).ConfigureAwait(false)) |
| | | 852 | | { |
| | 1 | 853 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 1 | 854 | | await using (dbContext.ConfigureAwait(false)) |
| | | 855 | | { |
| | 1 | 856 | | user = await UserQuery(dbContext) |
| | 1 | 857 | | .AsTracking() |
| | 1 | 858 | | .FirstOrDefaultAsync(u => u.Id.Equals(userId)) |
| | 1 | 859 | | .ConfigureAwait(false) |
| | 1 | 860 | | ?? throw new ArgumentException("No user exists with given Id!"); |
| | | 861 | | |
| | | 862 | | // The default number of login attempts is 3, but for some god forsaken reason it's sent to the serv |
| | 1 | 863 | | int? maxLoginAttempts = policy.LoginAttemptsBeforeLockout switch |
| | 1 | 864 | | { |
| | 1 | 865 | | -1 => null, |
| | 0 | 866 | | 0 => 3, |
| | 0 | 867 | | _ => policy.LoginAttemptsBeforeLockout |
| | 1 | 868 | | }; |
| | | 869 | | |
| | 1 | 870 | | user.MaxParentalRatingScore = policy.MaxParentalRating; |
| | 1 | 871 | | user.MaxParentalRatingSubScore = policy.MaxParentalSubRating; |
| | 1 | 872 | | user.EnableUserPreferenceAccess = policy.EnableUserPreferenceAccess; |
| | 1 | 873 | | user.RemoteClientBitrateLimit = policy.RemoteClientBitrateLimit; |
| | 1 | 874 | | user.AuthenticationProviderId = policy.AuthenticationProviderId; |
| | 1 | 875 | | user.PasswordResetProviderId = policy.PasswordResetProviderId; |
| | 1 | 876 | | user.InvalidLoginAttemptCount = policy.InvalidLoginAttemptCount; |
| | 1 | 877 | | user.LoginAttemptsBeforeLockout = maxLoginAttempts; |
| | 1 | 878 | | user.MaxActiveSessions = policy.MaxActiveSessions; |
| | 1 | 879 | | user.SyncPlayAccess = policy.SyncPlayAccess; |
| | 1 | 880 | | user.SetPermission(PermissionKind.IsAdministrator, policy.IsAdministrator); |
| | 1 | 881 | | user.SetPermission(PermissionKind.IsHidden, policy.IsHidden); |
| | 1 | 882 | | user.SetPermission(PermissionKind.IsDisabled, policy.IsDisabled); |
| | 1 | 883 | | user.SetPermission(PermissionKind.EnableSharedDeviceControl, policy.EnableSharedDeviceControl); |
| | 1 | 884 | | user.SetPermission(PermissionKind.EnableRemoteAccess, policy.EnableRemoteAccess); |
| | 1 | 885 | | user.SetPermission(PermissionKind.EnableLiveTvManagement, policy.EnableLiveTvManagement); |
| | 1 | 886 | | user.SetPermission(PermissionKind.EnableLiveTvAccess, policy.EnableLiveTvAccess); |
| | 1 | 887 | | user.SetPermission(PermissionKind.EnableMediaPlayback, policy.EnableMediaPlayback); |
| | 1 | 888 | | user.SetPermission(PermissionKind.EnableAudioPlaybackTranscoding, policy.EnableAudioPlaybackTranscod |
| | 1 | 889 | | user.SetPermission(PermissionKind.EnableVideoPlaybackTranscoding, policy.EnableVideoPlaybackTranscod |
| | 1 | 890 | | user.SetPermission(PermissionKind.EnableContentDeletion, policy.EnableContentDeletion); |
| | 1 | 891 | | user.SetPermission(PermissionKind.EnableContentDownloading, policy.EnableContentDownloading); |
| | 1 | 892 | | user.SetPermission(PermissionKind.EnableSyncTranscoding, policy.EnableSyncTranscoding); |
| | 1 | 893 | | user.SetPermission(PermissionKind.EnableMediaConversion, policy.EnableMediaConversion); |
| | 1 | 894 | | user.SetPermission(PermissionKind.EnableAllChannels, policy.EnableAllChannels); |
| | 1 | 895 | | user.SetPermission(PermissionKind.EnableAllDevices, policy.EnableAllDevices); |
| | 1 | 896 | | user.SetPermission(PermissionKind.EnableAllFolders, policy.EnableAllFolders); |
| | 1 | 897 | | user.SetPermission(PermissionKind.EnableRemoteControlOfOtherUsers, policy.EnableRemoteControlOfOther |
| | 1 | 898 | | user.SetPermission(PermissionKind.EnablePlaybackRemuxing, policy.EnablePlaybackRemuxing); |
| | 1 | 899 | | user.SetPermission(PermissionKind.EnableCollectionManagement, policy.EnableCollectionManagement); |
| | 1 | 900 | | user.SetPermission(PermissionKind.EnableSubtitleManagement, policy.EnableSubtitleManagement); |
| | 1 | 901 | | user.SetPermission(PermissionKind.EnableLyricManagement, policy.EnableLyricManagement); |
| | 1 | 902 | | user.SetPermission(PermissionKind.ForceRemoteSourceTranscoding, policy.ForceRemoteSourceTranscoding) |
| | 1 | 903 | | user.SetPermission(PermissionKind.EnablePublicSharing, policy.EnablePublicSharing); |
| | | 904 | | |
| | 1 | 905 | | user.AccessSchedules.Clear(); |
| | 2 | 906 | | foreach (var policyAccessSchedule in policy.AccessSchedules) |
| | | 907 | | { |
| | 0 | 908 | | user.AccessSchedules.Add(policyAccessSchedule); |
| | | 909 | | } |
| | | 910 | | |
| | | 911 | | // TODO: fix this at some point |
| | 1 | 912 | | user.SetPreference(PreferenceKind.BlockUnratedItems, policy.BlockUnratedItems ?? Array.Empty<Unrated |
| | 1 | 913 | | user.SetPreference(PreferenceKind.BlockedTags, policy.BlockedTags); |
| | 1 | 914 | | user.SetPreference(PreferenceKind.AllowedTags, policy.AllowedTags); |
| | 1 | 915 | | user.SetPreference(PreferenceKind.EnabledChannels, policy.EnabledChannels); |
| | 1 | 916 | | user.SetPreference(PreferenceKind.EnabledDevices, policy.EnabledDevices); |
| | 1 | 917 | | user.SetPreference(PreferenceKind.EnabledFolders, policy.EnabledFolders); |
| | 1 | 918 | | user.SetPreference(PreferenceKind.EnableContentDeletionFromFolders, policy.EnableContentDeletionFrom |
| | | 919 | | |
| | 1 | 920 | | dbContext.Update(user); |
| | 1 | 921 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 922 | | } |
| | 1 | 923 | | } |
| | | 924 | | |
| | 1 | 925 | | var eventArgs = new UserUpdatedEventArgs(user); |
| | 1 | 926 | | await _eventManager.PublishAsync(eventArgs).ConfigureAwait(false); |
| | 1 | 927 | | OnUserUpdated?.Invoke(this, eventArgs); |
| | 1 | 928 | | } |
| | | 929 | | |
| | | 930 | | /// <inheritdoc/> |
| | | 931 | | public async Task ClearProfileImageAsync(User user) |
| | | 932 | | { |
| | 2 | 933 | | if (user.ProfileImage is null) |
| | | 934 | | { |
| | 1 | 935 | | return; |
| | | 936 | | } |
| | | 937 | | |
| | 1 | 938 | | using (await _userLock.LockAsync(user.Id).ConfigureAwait(false)) |
| | | 939 | | { |
| | 1 | 940 | | var dbContext = await _dbProvider.CreateDbContextAsync().ConfigureAwait(false); |
| | 1 | 941 | | await using (dbContext.ConfigureAwait(false)) |
| | | 942 | | { |
| | | 943 | | // Remove the tracked profile image loaded from the database instead of the |
| | | 944 | | // detached instance on the passed in user. That instance can carry a stale, |
| | | 945 | | // never-persisted (temporary) key, which makes EF Core throw when it is marked |
| | | 946 | | // for deletion, leaving the profile image impossible to clear or replace. |
| | 1 | 947 | | var dbUser = await UserQuery(dbContext) |
| | 1 | 948 | | .AsTracking() |
| | 1 | 949 | | .FirstOrDefaultAsync(u => u.Id == user.Id) |
| | 1 | 950 | | .ConfigureAwait(false); |
| | 1 | 951 | | if (dbUser?.ProfileImage is not null) |
| | | 952 | | { |
| | 1 | 953 | | dbContext.Remove(dbUser.ProfileImage); |
| | 1 | 954 | | dbUser.ProfileImage = null; |
| | 1 | 955 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | | 956 | | } |
| | | 957 | | } |
| | | 958 | | |
| | 1 | 959 | | user.ProfileImage = null; |
| | 1 | 960 | | } |
| | 2 | 961 | | } |
| | | 962 | | |
| | | 963 | | internal static void ThrowIfInvalidUsername(string name) |
| | | 964 | | { |
| | 71 | 965 | | if (!string.IsNullOrWhiteSpace(name) && ValidUsernameRegex().IsMatch(name) && !string.Equals(name, ".", Stri |
| | | 966 | | { |
| | 61 | 967 | | return; |
| | | 968 | | } |
| | | 969 | | |
| | 10 | 970 | | throw new ArgumentException("Usernames can contain unicode symbols, numbers (0-9), dashes (-), underscores ( |
| | | 971 | | } |
| | | 972 | | |
| | | 973 | | private IAuthenticationProvider GetAuthenticationProvider(User user) |
| | | 974 | | { |
| | 5 | 975 | | return GetAuthenticationProviders(user)[0]; |
| | | 976 | | } |
| | | 977 | | |
| | | 978 | | private IPasswordResetProvider GetPasswordResetProvider(User? user) |
| | | 979 | | { |
| | 0 | 980 | | if (user is null) |
| | | 981 | | { |
| | 0 | 982 | | return _defaultPasswordResetProvider; |
| | | 983 | | } |
| | | 984 | | |
| | 0 | 985 | | return GetPasswordResetProviders(user)[0]; |
| | | 986 | | } |
| | | 987 | | |
| | | 988 | | private List<IAuthenticationProvider> GetAuthenticationProviders(User? user) |
| | | 989 | | { |
| | 21 | 990 | | var authenticationProviderId = user?.AuthenticationProviderId; |
| | | 991 | | |
| | 21 | 992 | | var providers = _authenticationProviders.Where(i => i.IsEnabled).ToList(); |
| | | 993 | | |
| | 21 | 994 | | if (!string.IsNullOrEmpty(authenticationProviderId)) |
| | | 995 | | { |
| | 21 | 996 | | providers = providers.Where(i => string.Equals(authenticationProviderId, i.GetType().FullName, StringCom |
| | | 997 | | } |
| | | 998 | | |
| | 21 | 999 | | if (providers.Count == 0) |
| | | 1000 | | { |
| | | 1001 | | // Assign the user to the InvalidAuthProvider since no configured auth provider was valid/found |
| | 0 | 1002 | | _logger.LogWarning( |
| | 0 | 1003 | | "User {Username} was found with invalid/missing Authentication Provider {AuthenticationProviderId}. |
| | 0 | 1004 | | user?.Username, |
| | 0 | 1005 | | user?.AuthenticationProviderId); |
| | 0 | 1006 | | providers = new List<IAuthenticationProvider> |
| | 0 | 1007 | | { |
| | 0 | 1008 | | _invalidAuthProvider |
| | 0 | 1009 | | }; |
| | | 1010 | | } |
| | | 1011 | | |
| | 21 | 1012 | | return providers; |
| | | 1013 | | } |
| | | 1014 | | |
| | | 1015 | | private IPasswordResetProvider[] GetPasswordResetProviders(User user) |
| | | 1016 | | { |
| | 0 | 1017 | | var passwordResetProviderId = user.PasswordResetProviderId; |
| | 0 | 1018 | | var providers = _passwordResetProviders.Where(i => i.IsEnabled).ToArray(); |
| | | 1019 | | |
| | 0 | 1020 | | if (!string.IsNullOrEmpty(passwordResetProviderId)) |
| | | 1021 | | { |
| | 0 | 1022 | | providers = providers.Where(i => |
| | 0 | 1023 | | string.Equals(passwordResetProviderId, i.GetType().FullName, StringComparison.OrdinalIgnoreCase) |
| | 0 | 1024 | | .ToArray(); |
| | | 1025 | | } |
| | | 1026 | | |
| | 0 | 1027 | | if (providers.Length == 0) |
| | | 1028 | | { |
| | 0 | 1029 | | providers = new IPasswordResetProvider[] |
| | 0 | 1030 | | { |
| | 0 | 1031 | | _defaultPasswordResetProvider |
| | 0 | 1032 | | }; |
| | | 1033 | | } |
| | | 1034 | | |
| | 0 | 1035 | | return providers; |
| | | 1036 | | } |
| | | 1037 | | |
| | | 1038 | | private async Task<(IAuthenticationProvider? AuthenticationProvider, string Username, bool Success)> Authenticat |
| | | 1039 | | string username, |
| | | 1040 | | string password, |
| | | 1041 | | User? user) |
| | | 1042 | | { |
| | 16 | 1043 | | bool success = false; |
| | 16 | 1044 | | IAuthenticationProvider? authenticationProvider = null; |
| | | 1045 | | |
| | 48 | 1046 | | foreach (var provider in GetAuthenticationProviders(user)) |
| | | 1047 | | { |
| | 16 | 1048 | | var providerAuthResult = |
| | 16 | 1049 | | await AuthenticateWithProvider(provider, username, password, user).ConfigureAwait(false); |
| | 16 | 1050 | | var updatedUsername = providerAuthResult.Username; |
| | 16 | 1051 | | success = providerAuthResult.Success; |
| | | 1052 | | |
| | 16 | 1053 | | if (success) |
| | | 1054 | | { |
| | 16 | 1055 | | authenticationProvider = provider; |
| | 16 | 1056 | | username = updatedUsername; |
| | 16 | 1057 | | break; |
| | | 1058 | | } |
| | 0 | 1059 | | } |
| | | 1060 | | |
| | 16 | 1061 | | return (authenticationProvider, username, success); |
| | 16 | 1062 | | } |
| | | 1063 | | |
| | | 1064 | | private async Task<(string Username, bool Success)> AuthenticateWithProvider( |
| | | 1065 | | IAuthenticationProvider provider, |
| | | 1066 | | string username, |
| | | 1067 | | string password, |
| | | 1068 | | User? resolvedUser) |
| | | 1069 | | { |
| | | 1070 | | try |
| | | 1071 | | { |
| | 16 | 1072 | | var authenticationResult = provider is IRequiresResolvedUser requiresResolvedUser |
| | 16 | 1073 | | ? await requiresResolvedUser.Authenticate(username, password, resolvedUser).ConfigureAwait(false) |
| | 16 | 1074 | | : await provider.Authenticate(username, password).ConfigureAwait(false); |
| | | 1075 | | |
| | 16 | 1076 | | if (authenticationResult.Username != username) |
| | | 1077 | | { |
| | 0 | 1078 | | _logger.LogDebug("Authentication provider provided updated username {1}", authenticationResult.Usern |
| | 0 | 1079 | | username = authenticationResult.Username; |
| | | 1080 | | } |
| | | 1081 | | |
| | 16 | 1082 | | return (username, true); |
| | | 1083 | | } |
| | 0 | 1084 | | catch (AuthenticationException ex) |
| | | 1085 | | { |
| | 0 | 1086 | | _logger.LogDebug(ex, "Error authenticating with provider {Provider}", provider.Name); |
| | | 1087 | | |
| | 0 | 1088 | | return (username, false); |
| | | 1089 | | } |
| | 16 | 1090 | | } |
| | | 1091 | | |
| | | 1092 | | private async Task UpdateUserInternalAsync(JellyfinDbContext dbContext, User user) |
| | | 1093 | | { |
| | 8 | 1094 | | dbContext.Users.Attach(user); |
| | 8 | 1095 | | dbContext.Entry(user).State = EntityState.Modified; |
| | 8 | 1096 | | await dbContext.SaveChangesAsync().ConfigureAwait(false); |
| | 8 | 1097 | | } |
| | | 1098 | | |
| | | 1099 | | /// <inheritdoc/> |
| | | 1100 | | public void Dispose() |
| | | 1101 | | { |
| | 58 | 1102 | | Dispose(true); |
| | 58 | 1103 | | GC.SuppressFinalize(this); |
| | 58 | 1104 | | } |
| | | 1105 | | |
| | | 1106 | | /// <summary> |
| | | 1107 | | /// Disposes all members of this class. |
| | | 1108 | | /// </summary> |
| | | 1109 | | /// <param name="disposing">Defines if the class has been cleaned up by a dispose or finalizer.</param> |
| | | 1110 | | protected virtual void Dispose(bool disposing) |
| | | 1111 | | { |
| | 58 | 1112 | | if (disposing) |
| | | 1113 | | { |
| | 58 | 1114 | | _userLock.Dispose(); |
| | | 1115 | | } |
| | 58 | 1116 | | } |
| | | 1117 | | |
| | | 1118 | | internal sealed class LockHelper : IDisposable |
| | | 1119 | | { |
| | 62 | 1120 | | private readonly AsyncKeyedLocker<Guid> _userLock = new(); |
| | | 1121 | | |
| | | 1122 | | private bool _disposed; |
| | | 1123 | | |
| | 2 | 1124 | | public static AsyncLocal<int> IsNestedLock { get; set; } = new(); |
| | | 1125 | | |
| | | 1126 | | public bool ShouldLock() |
| | | 1127 | | { |
| | 5 | 1128 | | return IsNestedLock.Value == 0; |
| | | 1129 | | } |
| | | 1130 | | |
| | | 1131 | | public ValueTask<IDisposable> LockAsync(Guid key) |
| | | 1132 | | { |
| | 54 | 1133 | | ThrowIfDisposed(); |
| | 53 | 1134 | | var isNested = LockHelper.IsNestedLock.Value != 0; |
| | 53 | 1135 | | LockHelper.IsNestedLock.Value = LockHelper.IsNestedLock.Value + 1; |
| | 53 | 1136 | | if (isNested) |
| | | 1137 | | { |
| | 1 | 1138 | | return new ValueTask<IDisposable>(new LockHandle { Parent = null }); |
| | | 1139 | | } |
| | | 1140 | | |
| | 52 | 1141 | | return AcquireLockAsync(key); |
| | | 1142 | | } |
| | | 1143 | | |
| | | 1144 | | private async ValueTask<IDisposable> AcquireLockAsync(Guid key) |
| | | 1145 | | { |
| | 52 | 1146 | | var lockHandle = await _userLock.LockAsync(key, true).ConfigureAwait(false); |
| | 52 | 1147 | | return new LockHandle { Parent = lockHandle }; |
| | 52 | 1148 | | } |
| | | 1149 | | |
| | | 1150 | | public void Dispose() |
| | | 1151 | | { |
| | 65 | 1152 | | if (_disposed) |
| | | 1153 | | { |
| | 3 | 1154 | | return; |
| | | 1155 | | } |
| | | 1156 | | |
| | 62 | 1157 | | _disposed = true; |
| | 62 | 1158 | | _userLock.Dispose(); |
| | 62 | 1159 | | } |
| | | 1160 | | |
| | | 1161 | | private void ThrowIfDisposed() |
| | | 1162 | | { |
| | 54 | 1163 | | ObjectDisposedException.ThrowIf(_disposed, this); |
| | 53 | 1164 | | } |
| | | 1165 | | |
| | | 1166 | | private sealed class LockHandle : IDisposable |
| | | 1167 | | { |
| | | 1168 | | public required IDisposable? Parent { get; init; } |
| | | 1169 | | |
| | | 1170 | | public void Dispose() |
| | | 1171 | | { |
| | 53 | 1172 | | Parent?.Dispose(); |
| | 53 | 1173 | | LockHelper.IsNestedLock.Value = LockHelper.IsNestedLock.Value - 1; |
| | | 1174 | | |
| | 53 | 1175 | | if (LockHelper.IsNestedLock.Value < 0) |
| | | 1176 | | { |
| | 0 | 1177 | | throw new InvalidOperationException("Mismatched locking detected. Threads internal NestedLock is |
| | | 1178 | | } |
| | 53 | 1179 | | } |
| | | 1180 | | } |
| | | 1181 | | } |
| | | 1182 | | } |
| | | 1183 | | } |