mirror of
https://github.com/Telecominfraproject/wlan-cloud-ucentralsec.git
synced 2025-10-30 18:27:49 +00:00
279 lines
8.3 KiB
Bash
Executable File
279 lines
8.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
#
|
|
# License type: BSD 3-Clause License
|
|
# License copy: https://github.com/Telecominfraproject/wlan-cloud-UCENTRALSEC/blob/master/LICENSE
|
|
#
|
|
# Created by Stephane Bourque on 2021-03-04.
|
|
# Arilia Wireless Inc.
|
|
#
|
|
|
|
if [[ "$(which jq)" == "" ]]
|
|
then
|
|
echo "You need the package jq installed to use this script."
|
|
exit 1
|
|
fi
|
|
|
|
if [[ "$(which curl)" == "" ]]
|
|
then
|
|
echo "You need the package curl installed to use this script."
|
|
exit 1
|
|
fi
|
|
|
|
if [[ "${UCENTRALSEC}" == "" ]]
|
|
then
|
|
echo "You must set the variable UCENTRALSEC in order to use this script. Something like"
|
|
echo "UCENTRALSEC=myauthgateway.isp.com:16001"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ "${FLAGS}" == "" ]]
|
|
then
|
|
FLAGS="-s"
|
|
fi
|
|
|
|
token=""
|
|
result_file=result.json
|
|
username="tip@ucentral.com"
|
|
password="openwifi"
|
|
#username="stephb@incognito.com"
|
|
#password="Snoopy98!"
|
|
browser_list=(firefox sensible-browser xdg-open w3m links links2 lynx youtube-dl)
|
|
browser=""
|
|
|
|
login() {
|
|
payload="{ \"userId\" : \"$username\" , \"password\" : \"$password\" }"
|
|
token=$(curl ${FLAGS} -X POST -H "Content-Type: application/json" -d "$payload" "https://${UCENTRALSEC}/api/v1/oauth2" | jq -r '.access_token')
|
|
|
|
if [[ "${token}" == "" ]]
|
|
then
|
|
echo "Could not login. Please verify the host and username/password."
|
|
exit 13
|
|
fi
|
|
echo "${token}" > token.json
|
|
}
|
|
|
|
testlogin() {
|
|
payload="{ \"userId\" : \"$1\" , \"password\" : \"$2\" }"
|
|
curl ${FLAGS} -X POST "https://${UCENTRALSEC}/api/v1/oauth2" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload" > ${result_file}
|
|
userMustChangePassword=$(cat ${result_file} | jq -r '.userMustChangePassword')
|
|
if [[ ${userMustChangePassword} == "true" ]]
|
|
then
|
|
echo "User must change password to login..."
|
|
if [[ "$3" == "" ]]
|
|
then
|
|
echo "Please supply your new password too..."
|
|
exit 1
|
|
fi
|
|
payload="{ \"userId\" : \"$1\" , \"password\" : \"$2\", \"newPassword\" : \"$3\" }"
|
|
curl ${FLAGS} -X POST "https://${UCENTRALSEC}/api/v1/oauth2" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
elif [[ "$3" != "" ]]
|
|
then
|
|
payload="{ \"userId\" : \"$1\" , \"password\" : \"$2\", \"newPassword\" : \"$3\" }"
|
|
curl ${FLAGS} -X POST "https://${UCENTRALSEC}/api/v1/oauth2" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
fi
|
|
jq < ${result_file}
|
|
}
|
|
|
|
emailtest() {
|
|
payload="{ \"userId\" : \"$1\" }"
|
|
curl ${FLAGS} -X POST "https://${UCENTRALSEC}/api/v1/oauth2?forgotPassword=true" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
findbrowser() {
|
|
if [[ "${browser}" != "" ]]
|
|
then
|
|
echo
|
|
elif [[ "$(uname)" == "Darwin" ]]
|
|
then
|
|
browser=open
|
|
else
|
|
BROWSER_LIST=(firefox sensible-browser xdg-open w3m links links2 lynx youtube-dl)
|
|
for br_name in "${browser_list[@]}"
|
|
do
|
|
if [[ $(which ${br_name}) != "" ]]
|
|
then
|
|
browser=${br_name}
|
|
break
|
|
fi
|
|
done
|
|
fi
|
|
}
|
|
|
|
logout() {
|
|
curl ${FLAGS} -X DELETE -H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
"https://${UCENTRALSEC}/api/v1/oauth2/${token}"
|
|
rm -rf token.json
|
|
}
|
|
|
|
me() {
|
|
curl ${FLAGS} -X GET -H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
"https://${UCENTRALSEC}/api/v1/oauth2?me=true"
|
|
}
|
|
|
|
listendpoints() {
|
|
curl ${FLAGS} -X GET "https://${UCENTRALSEC}/api/v1/systemEndpoints" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" > ${result_file}
|
|
jq < ${result_file}
|
|
|
|
for index in {0..10}
|
|
do
|
|
endpointlocation=".endpoints[${index}].uri"
|
|
endpointlocationtype=".endpoints[${index}].type"
|
|
rawurl="$(cat ${result_file} | jq -r ${endpointlocation})"
|
|
svctype="$(cat ${result_file} | jq -r ${endpointlocationtype})"
|
|
proto="$(echo $rawurl | grep :// | sed -e's,^\(.*://\).*,\1,g')"
|
|
url="$(echo ${rawurl/$proto/})"
|
|
user="$(echo $url | grep @ | cut -d@ -f1)"
|
|
hostport="$(echo ${url/$user@/} | cut -d/ -f1)"
|
|
host="$(echo $hostport | sed -e 's,:.*,,g')"
|
|
port="$(echo $hostport | sed -e 's,^.*:,:,g' -e 's,.*:\([0-9]*\).*,\1,g' -e 's,[^0-9],,g')"
|
|
path="$(echo $url | grep / | cut -d/ -f2-)"
|
|
if [[ ${url} != "null" ]]
|
|
then
|
|
if [[ ${svctype} == "ucentralgw" ]]
|
|
then
|
|
echo "url: $url"
|
|
echo " proto: $proto"
|
|
echo " user: $user"
|
|
echo " host: $host"
|
|
echo " port: $port"
|
|
echo " path: $path"
|
|
UCENTRALGW=$host
|
|
break
|
|
fi
|
|
fi
|
|
done
|
|
}
|
|
|
|
getlogo() {
|
|
curl ${FLAGS} -X GET "https://${UCENTRALSEC}/wwwassets/open-wifi.svg"
|
|
}
|
|
|
|
createuser() {
|
|
payload="{ \"id\": \"0\", \"email\" : \"$1\", \"currentPassword\" : \"$2\", \"changePassword\" : true}"
|
|
curl ${FLAGS} -X POST "https://${UCENTRALSEC}/api/v1/user/0" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
createuser_v() {
|
|
payload="{ \"id\": \"0\", \"email\" : \"$1\", \"currentPassword\" : \"$2\", \"changePassword\" : true}"
|
|
curl ${FLAGS} -X POST "https://${UCENTRALSEC}/api/v1/user/0?email_verification=true" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
deleteuser() {
|
|
curl ${FLAGS} -X DELETE "https://${UCENTRALSEC}/api/v1/user/$1" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
getuser() {
|
|
curl ${FLAGS} -X GET "https://${UCENTRALSEC}/api/v1/user/$1" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
listusers() {
|
|
curl ${FLAGS} -X GET "https://${UCENTRALSEC}/api/v1/users" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
policies() {
|
|
payload="{}"
|
|
curl ${FLAGS} -X POST "https://${UCENTRALSEC}/api/v1/oauth2?requirements=true" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
setavatar() {
|
|
curl ${FLAGS} -F 'data=@open-wifi.svg' "https://${UCENTRALSEC}/api/v1/avatar/$1" \
|
|
-H "Authorization: Bearer ${token}" > ${result_file};
|
|
jq < ${result_file}
|
|
}
|
|
|
|
getavatar() {
|
|
curl ${FLAGS} -X GET "https://${UCENTRALSEC}/api/v1/avatar/$1" \
|
|
-H "accept: application/octet-stream" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-o "user.svg"
|
|
}
|
|
|
|
deleteavatar() {
|
|
curl ${FLAGS} -X DELETE "https://${UCENTRALSEC}/api/v1/avatar/$1" \
|
|
-H "Authorization: Bearer ${token}" \
|
|
-H "Content-Type: application/json" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
secversion() {
|
|
curl ${FLAGS} -X GET "https://${UCENTRALSEC}/api/v1/system?command=version" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
sectimes() {
|
|
curl ${FLAGS} -X GET "https://${UCENTRALSEC}/api/v1/system?command=times" \
|
|
-H "accept: application/json" \
|
|
-H "Authorization: Bearer ${token}" > ${result_file}
|
|
jq < ${result_file}
|
|
}
|
|
|
|
help() {
|
|
echo
|
|
echo "listendpoints Get all the system endpoints."
|
|
echo
|
|
}
|
|
|
|
shopt -s nocasematch
|
|
case "$1" in
|
|
"createuser") login; createuser "$2" "$3"; logout;;
|
|
"createuser_v") login; createuser_v "$2" "$3"; logout;;
|
|
"deleteuser") login; deleteuser "$2" ; logout;;
|
|
"getuser") login; getuser "$2" ; logout;;
|
|
"listusers") login; listusers ; logout ;;
|
|
"me") login; me ; logout ;;
|
|
"listendpoints") login; listendpoints ; logout ;;
|
|
"testlogin") testlogin "$2" "$3" "$4";;
|
|
"emailtest") emailtest "$2";;
|
|
"getlogo") getlogo ;;
|
|
"policies") policies ;;
|
|
"setavatar") login; setavatar "$2"; logout;;
|
|
"getavatar") login; getavatar "$2"; logout;;
|
|
"deleteavatar") login; deleteavatar "$2"; logout;;
|
|
"secversion") login; secversion ; logout;;
|
|
"sectimes") login; sectimes ; logout;;
|
|
"help") login; help ; logout ;;
|
|
*) help ;;
|
|
esac
|
|
|