definma-ui/src/app/services/login.service.ts

import { Injectable } from '@angular/core';
import {ApiService} from './api.service';
import {ActivatedRouteSnapshot, CanActivate, Router, RouterStateSnapshot} from '@angular/router';
import {LocalStorageService} from 'angular-2-local-storage';
import {Observable} from 'rxjs';

@Injectable({
  providedIn: 'root'
})
export class LoginService implements CanActivate {

  private pathPermissions = [
    {path: 'templates', permission: 'dev'},
    {path: 'changelog', permission: 'dev'},
    {path: 'users', permission: 'admin'}
  ];
  readonly levels = [
    'read',
    'write',
    'dev',
    'admin'
  ];
  isLevel: {[level: string]: boolean} = {};
  userId = '';

  private loggedIn;

  constructor(
    private api: ApiService,
    private storage: LocalStorageService,
    private router: Router
  ) {

  }

  login(username = '', password = '') {
    return new Promise(resolve => {
      if (username !== '' || password !== '') {  // some credentials given
        let credentials: string[];
        const credentialString: string = this.storage.get('basicAuth');
        if (credentialString) {  // found stored credentials
          credentials = atob(credentialString).split(':');
        }
        else {
          credentials = ['', ''];
        }
        if (username !== '' && password !== '') {  // all credentials given
          this.storage.set('basicAuth', btoa(username + ':' + password));
        }
        else if (username !== '') {  // username given
          this.storage.set('basicAuth', btoa(username + ':' + credentials[1]));
        }
        else if (password !== '') {  // password given
          this.storage.set('basicAuth', btoa(credentials[0] + ':' + password));
        }
      }
      this.api.get('/authorized', (data: any, error) => {
        if (!error) {
          if (data.status === 'Authorization successful') {
            this.loggedIn = true;
            this.levels.forEach(level => {
              this.isLevel[level] = this.levels.indexOf(data.level) >= this.levels.indexOf(level);
            });
            this.userId = data.user_id;
            resolve(true);
          } else {
            this.loggedIn = false;
            this.storage.remove('basicAuth');
            resolve(false);
          }
        } else {
          this.loggedIn = false;
          this.storage.remove('basicAuth');
          resolve(false);
        }
      });
    });
  }

  logout() {
    this.storage.remove('basicAuth');
    this.loggedIn = false;
    this.levels.forEach(level => {
      this.isLevel[level] = false;
    });
  }

  canActivate(route: ActivatedRouteSnapshot = null, state: RouterStateSnapshot = null): Observable<boolean> {
    return new Observable<boolean>(observer => {
      new Promise(resolve => {
        if (this.loggedIn === undefined) {
          this.login().then(res => {
            resolve(res);
          });
        }
        else {
          resolve(this.loggedIn);
        }
      }).then(res => {
        const pathPermission = this.pathPermissions.find(e => e.path.indexOf(route.url[0].path) >= 0);
        const ok = res && (!pathPermission || this.isLevel[pathPermission.permission]); // check if level is permitted for path
        observer.next(ok);
        observer.complete();
        if (!ok) {
          this.router.navigate(['/']);
        }
      });
    });
  }

  get isLoggedIn() {
    return this.loggedIn;
  }

  get username() {
    return atob(this.storage.get('basicAuth')).split(':')[0];
  }
}