72 lines
2.2 KiB
PHP
72 lines
2.2 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace Pterodactyl\Http\Requests\Api\Client\Account;
|
||
|
|
|
||
|
|
use Exception;
|
||
|
|
use phpseclib3\Crypt\DSA;
|
||
|
|
use phpseclib3\Crypt\RSA;
|
||
|
|
use Pterodactyl\Models\UserSSHKey;
|
||
|
|
use Illuminate\Validation\Validator;
|
||
|
|
use phpseclib3\Crypt\PublicKeyLoader;
|
||
|
|
use phpseclib3\Crypt\Common\PublicKey;
|
||
|
|
use phpseclib3\Exception\NoKeyLoadedException;
|
||
|
|
use Pterodactyl\Http\Requests\Api\Client\ClientApiRequest;
|
||
|
|
|
||
|
|
class StoreSSHKeyRequest extends ClientApiRequest
|
||
|
|
{
|
||
|
|
protected ?PublicKey $key;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Returns the rules for this request.
|
||
|
|
*/
|
||
|
|
public function rules(): array
|
||
|
|
{
|
||
|
|
return [
|
||
|
|
'name' => UserSSHKey::getRulesForField('name'),
|
||
|
|
'public_key' => UserSSHKey::getRulesForField('public_key'),
|
||
|
|
];
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Check to see if this SSH key has already been added to the user's account
|
||
|
|
* and if so return an error.
|
||
|
|
*/
|
||
|
|
public function withValidator(Validator $validator): void
|
||
|
|
{
|
||
|
|
$validator->after(function () {
|
||
|
|
try {
|
||
|
|
$this->key = PublicKeyLoader::loadPublicKey($this->input('public_key'));
|
||
|
|
} catch (NoKeyLoadedException $exception) {
|
||
|
|
$this->validator->errors()->add('public_key', 'The public key provided is not valid.');
|
||
|
|
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($this->key instanceof DSA) {
|
||
|
|
$this->validator->errors()->add('public_key', 'DSA public keys are not supported.');
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($this->key instanceof RSA && $this->key->getLength() < 2048) {
|
||
|
|
$this->validator->errors()->add('public_key', 'RSA keys must be at 2048 bytes.');
|
||
|
|
}
|
||
|
|
|
||
|
|
$fingerprint = $this->key->getFingerprint('sha256');
|
||
|
|
if ($this->user()->sshKeys()->where('fingerprint', $fingerprint)->exists()) {
|
||
|
|
$this->validator->errors()->add('public_key', 'The public key provided already exists on your account.');
|
||
|
|
}
|
||
|
|
});
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Returns the SHA256 fingerprint of the key provided.
|
||
|
|
*/
|
||
|
|
public function getKeyFingerprint(): string
|
||
|
|
{
|
||
|
|
if (!$this->key) {
|
||
|
|
throw new Exception('The public key was not properly loaded for this request.');
|
||
|
|
}
|
||
|
|
|
||
|
|
return $this->key->getFingerprint('sha256');
|
||
|
|
}
|
||
|
|
}
|