LightsDev.pro - Verifikace

package pro.lightsdev.neoauth.api; import com.google.gson.Gson; import com.google.gson.GsonBuilder; import com.google.gson.JsonObject; import com.google.gson.JsonParser; import com.sun.net.httpserver.HttpExchange; import com.sun.net.httpserver.HttpHandler; import com.sun.net.httpserver.HttpServer; import lombok.Getter; import org.bukkit.Bukkit; import org.bukkit.entity.Player; import pro.lightsdev.neoauth.UltimateNeoAuth; import pro.lightsdev.neoauth.managers.DiscordManager; import pro.lightsdev.neoauth.managers.LogManager; import java.io.BufferedReader; import java.io.IOException; import java.io.InputStreamReader; import java.io.OutputStream; import java.net.InetSocketAddress; import java.nio.charset.StandardCharsets; import java.util.HashMap; import java.util.List; import java.util.Map; import java.util.UUID; import java.util.concurrent.Executors; import java.util.logging.Level; import java.util.stream.Collectors; @Getter public class WebAPI { private final UltimateNeoAuth plugin; private final Gson gson; private HttpServer server; private boolean running = false; private long startTime; private int totalRequests = 0; private int successfulRequests = 0; private int failedRequests = 0; public WebAPI(UltimateNeoAuth plugin) { this.plugin = plugin; this.gson = new GsonBuilder() .setPrettyPrinting() .serializeNulls() .create(); } public void start() { if (running) { plugin.getLogger().warning("Web API již běží!"); return; } try { int port = plugin.getConfigManager().getApiPort(); server = HttpServer.create(new InetSocketAddress(port), 0); server.setExecutor(Executors.newFixedThreadPool(4)); registerRoutes(); server.start(); startTime = System.currentTimeMillis(); running = true; plugin.getLogger().info("╔═══════════════════════════════════════╗"); plugin.getLogger().info("║ Web API úspěšně spuštěno! ║"); plugin.getLogger().info("║ Port: " + port + " ║"); plugin.getLogger().info("║ Endpoint: http://localhost:" + port + " ║"); plugin.getLogger().info("╚═══════════════════════════════════════╝"); } catch (Exception e) { plugin.getLogger().log(Level.SEVERE, "Chyba při spouštění Web API!", e); throw new RuntimeException("Nepodařilo se spustit Web API", e); } } public void stop() { if (!running || server == null) { return; } try { server.stop(2); running = false; plugin.getLogger().info("Web API zastaveno"); plugin.getLogger().info("Celkem požadavků: " + totalRequests); plugin.getLogger().info("Úspěšných: " + successfulRequests); plugin.getLogger().info("Selhání: " + failedRequests); } catch (Exception e) { plugin.getLogger().log(Level.SEVERE, "Chyba při zastavování Web API!", e); } } private void registerRoutes() { server.createContext("/", new RootHandler()); server.createContext("/health", new HealthHandler()); server.createContext("/api/verify", new VerifyHandler()); server.createContext("/api/status", new StatusHandler()); server.createContext("/api/player", new PlayerHandler()); server.createContext("/api/code", new CodeHandler()); server.createContext("/api/stats", new StatsHandler()); server.createContext("/api/oauth/discord", new DiscordOAuthHandler()); server.createContext("/api/oauth/callback", new DiscordCallbackHandler()); server.createContext("/verify", new VerifyPageHandler()); } private void sendJsonResponse(HttpExchange exchange, int statusCode, Object data) throws IOException { String json = gson.toJson(data); byte[] bytes = json.getBytes(StandardCharsets.UTF_8); exchange.getResponseHeaders().set("Content-Type", "application/json; charset=UTF-8"); exchange.getResponseHeaders().set("X-Powered-By", "UltimateNeoAuth"); exchange.getResponseHeaders().set("Access-Control-Allow-Origin", "*"); exchange.getResponseHeaders().set("Access-Control-Allow-Methods", "GET, POST, OPTIONS"); exchange.getResponseHeaders().set("Access-Control-Allow-Headers", "Content-Type, Authorization, X-API-Key"); exchange.sendResponseHeaders(statusCode, bytes.length); try (OutputStream os = exchange.getResponseBody()) { os.write(bytes); } } private void sendHtmlResponse(HttpExchange exchange, int statusCode, String html) throws IOException { byte[] bytes = html.getBytes(StandardCharsets.UTF_8); exchange.getResponseHeaders().set("Content-Type", "text/html; charset=UTF-8"); exchange.sendResponseHeaders(statusCode, bytes.length); try (OutputStream os = exchange.getResponseBody()) { os.write(bytes); } } private void sendErrorResponse(HttpExchange exchange, int statusCode, String error, String message) throws IOException { Map errorMap = new HashMap<>(); errorMap.put("error", error); errorMap.put("message", message); errorMap.put("status", statusCode); sendJsonResponse(exchange, statusCode, errorMap); failedRequests++; } private boolean validateApiKey(HttpExchange exchange) { String apiKey = exchange.getRequestHeaders().getFirst("X-API-Key"); if (apiKey == null) { apiKey = exchange.getRequestHeaders().getFirst("Authorization"); if (apiKey != null && apiKey.startsWith("Bearer ")) { apiKey = apiKey.substring(7); } } return plugin.getConfigManager().validateApiKey(apiKey); } private boolean isRateLimited(HttpExchange exchange) { String ip = exchange.getRemoteAddress().getAddress().getHostAddress(); return plugin.getSecurityManager().isRateLimited(ip); } private String readRequestBody(HttpExchange exchange) throws IOException { try (BufferedReader reader = new BufferedReader(new InputStreamReader(exchange.getRequestBody(), StandardCharsets.UTF_8))) { StringBuilder body = new StringBuilder(); String line; while ((line = reader.readLine()) != null) { body.append(line); } return body.toString(); } } private Map parseQueryParams(String query) { Map params = new HashMap<>(); if (query == null || query.isEmpty()) return params; for (String param : query.split("&")) { String[] pair = param.split("=", 2); if (pair.length == 2) { params.put(pair[0], pair[1]); } } return params; } private class RootHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; if ("OPTIONS".equals(exchange.getRequestMethod())) { sendJsonResponse(exchange, 200, Map.of()); return; } Map response = new HashMap<>(); response.put("name", "UltimateNeoAuth API"); response.put("version", plugin.getDescription().getVersion()); response.put("status", "online"); response.put("uptime", plugin.getUptimeFormatted()); List endpoints = List.of( "GET /api/verify?code=CODE", "POST /api/verify", "GET /api/status", "GET /api/player?uuid=UUID", "GET /api/code?uuid=UUID", "GET /api/stats", "GET /api/oauth/discord", "GET /api/oauth/callback?code=CODE&verify_code=CODE", "GET /verify?code=CODE" ); response.put("endpoints", endpoints); sendJsonResponse(exchange, 200, response); successfulRequests++; } } private class HealthHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; Map health = new HashMap<>(); health.put("status", "healthy"); health.put("timestamp", System.currentTimeMillis()); health.put("uptime", plugin.getUptime()); health.put("players", Bukkit.getOnlinePlayers().size()); health.put("database", plugin.getDatabase().isConnected() ? "connected" : "disconnected"); sendJsonResponse(exchange, 200, health); successfulRequests++; } } private class VerifyHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; if (isRateLimited(exchange)) { sendErrorResponse(exchange, 429, "rate_limit", "Příliš mnoho požadavků."); return; } String method = exchange.getRequestMethod(); if ("GET".equals(method)) { Map params = parseQueryParams(exchange.getRequestURI().getQuery()); String code = params.get("code"); if (code == null || code.isEmpty()) { sendErrorResponse(exchange, 400, "missing_code", "Kód je povinný parametr."); return; } boolean valid = plugin.getCodeManager().isValidCode(code); Map response = new HashMap<>(); response.put("code", code); response.put("valid", valid); if (valid) { UUID uuid = plugin.getCodeManager().getPlayerByCode(code); if (uuid != null) { Player player = Bukkit.getPlayer(uuid); response.put("player", player != null ? player.getName() : "unknown"); response.put("timeLeft", plugin.getCodeManager().getTimeLeft(uuid)); } } sendJsonResponse(exchange, 200, response); successfulRequests++; } else if ("POST".equals(method)) { String body = readRequestBody(exchange); JsonObject json; try { json = JsonParser.parseString(body).getAsJsonObject(); } catch (Exception e) { sendErrorResponse(exchange, 400, "invalid_json", "Neplatný JSON."); return; } String code = json.has("code") ? json.get("code").getAsString() : null; String discordId = json.has("discord_id") ? json.get("discord_id").getAsString() : null; if (code == null || discordId == null) { sendErrorResponse(exchange, 400, "missing_params", "Kód a discord_id jsou povinné."); return; } boolean success = plugin.getVerificationManager().verifyByCode(code, discordId); Map response = new HashMap<>(); response.put("success", success); response.put("message", success ? "Ověření úspěšné!" : "Neplatný nebo expirovaný kód."); sendJsonResponse(exchange, success ? 200 : 400, response); if (success) successfulRequests++; else failedRequests++; } else { sendErrorResponse(exchange, 405, "method_not_allowed", "Použij GET nebo POST."); } } } private class StatusHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; if (!validateApiKey(exchange)) { sendErrorResponse(exchange, 401, "unauthorized", "Neplatný API klíč."); return; } Map status = new HashMap<>(); status.put("online", true); status.put("version", plugin.getDescription().getVersion()); status.put("uptime", plugin.getUptimeFormatted()); status.put("uptimeMs", plugin.getUptime()); status.put("players", Bukkit.getOnlinePlayers().size()); status.put("maxPlayers", Bukkit.getMaxPlayers()); status.put("database", plugin.getDatabase().isConnected() ? "connected" : "disconnected"); status.put("limboPlayers", plugin.getLimboManager().getPlayersInLimbo()); status.put("activeCodes", plugin.getCodeManager().getActiveCodeCount()); status.put("activeSessions", plugin.getSessionManager().getActiveSessionCount()); sendJsonResponse(exchange, 200, status); successfulRequests++; } } private class PlayerHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; if (!validateApiKey(exchange)) { sendErrorResponse(exchange, 401, "unauthorized", "Neplatný API klíč."); return; } Map params = parseQueryParams(exchange.getRequestURI().getQuery()); String uuidStr = params.get("uuid"); if (uuidStr == null || uuidStr.isEmpty()) { sendErrorResponse(exchange, 400, "missing_uuid", "UUID je povinný parametr."); return; } UUID uuid; try { uuid = UUID.fromString(uuidStr); } catch (IllegalArgumentException e) { sendErrorResponse(exchange, 400, "invalid_uuid", "Neplatné UUID."); return; } Map playerData = new HashMap<>(); playerData.put("uuid", uuid.toString()); playerData.put("verified", plugin.getVerificationManager().isVerified(uuid)); playerData.put("discordId", plugin.getVerificationManager().getLinkedDiscordId(uuid)); playerData.put("hasActiveCode", plugin.getCodeManager().hasActiveCode(uuid)); playerData.put("hasSession", plugin.getSessionManager().hasSession(uuid)); Player player = Bukkit.getPlayer(uuid); if (player != null && player.isOnline()) { playerData.put("online", true); playerData.put("name", player.getName()); playerData.put("inLimbo", plugin.getLimboManager().isInLimbo(player)); } else { playerData.put("online", false); } sendJsonResponse(exchange, 200, playerData); successfulRequests++; } } private class CodeHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; if (!validateApiKey(exchange)) { sendErrorResponse(exchange, 401, "unauthorized", "Neplatný API klíč."); return; } Map params = parseQueryParams(exchange.getRequestURI().getQuery()); String uuidStr = params.get("uuid"); if (uuidStr == null || uuidStr.isEmpty()) { sendErrorResponse(exchange, 400, "missing_uuid", "UUID je povinný parametr."); return; } UUID uuid; try { uuid = UUID.fromString(uuidStr); } catch (IllegalArgumentException e) { sendErrorResponse(exchange, 400, "invalid_uuid", "Neplatné UUID."); return; } String code = plugin.getCodeManager().getCode(uuid); Map response = new HashMap<>(); response.put("uuid", uuid.toString()); response.put("hasCode", code != null); response.put("code", code); response.put("timeLeft", plugin.getCodeManager().getTimeLeft(uuid)); sendJsonResponse(exchange, 200, response); successfulRequests++; } } private class StatsHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; if (!validateApiKey(exchange)) { sendErrorResponse(exchange, 401, "unauthorized", "Neplatný API klíč."); return; } Map stats = new HashMap<>(); stats.put("totalUsers", plugin.getDatabase().getTotalUsers()); stats.put("verifiedUsers", plugin.getDatabase().getVerifiedUsers()); stats.put("onlinePlayers", Bukkit.getOnlinePlayers().size()); stats.put("limboPlayers", plugin.getLimboManager().getPlayersInLimbo()); stats.put("activeCodes", plugin.getCodeManager().getActiveCodeCount()); stats.put("activeSessions", plugin.getSessionManager().getActiveSessionCount()); stats.put("cacheStats", plugin.getCacheManager().getStats()); stats.put("uptime", plugin.getUptimeFormatted()); Map apiStats = new HashMap<>(); apiStats.put("totalRequests", totalRequests); apiStats.put("successfulRequests", successfulRequests); apiStats.put("failedRequests", failedRequests); apiStats.put("successRate", totalRequests > 0 ? (successfulRequests * 100.0 / totalRequests) : 0); stats.put("api", apiStats); sendJsonResponse(exchange, 200, stats); successfulRequests++; } } private class DiscordOAuthHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; String oauthUrl = plugin.getDiscordManager().getOAuthUrl(); Map response = new HashMap<>(); response.put("url", oauthUrl); sendJsonResponse(exchange, 200, response); successfulRequests++; } } private class DiscordCallbackHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; Map params = parseQueryParams(exchange.getRequestURI().getQuery()); String authCode = params.get("code"); String verifyCode = params.get("state"); if (verifyCode == null) { verifyCode = params.get("verify_code"); } if (authCode == null || verifyCode == null) { sendErrorResponse(exchange, 400, "missing_params", "Chybí code nebo verify_code parametr."); return; } final String finalVerifyCode = verifyCode; try { String token = plugin.getDiscordManager().exchangeCodeForToken(authCode).get(10, java.util.concurrent.TimeUnit.SECONDS); if (token == null) { sendErrorResponse(exchange, 400, "oauth_failed", "Nepodařilo se získat Discord token."); return; } DiscordManager.DiscordUser discordUser = plugin.getDiscordManager().fetchDiscordUser(token).get(10, java.util.concurrent.TimeUnit.SECONDS); if (discordUser == null) { sendErrorResponse(exchange, 400, "oauth_failed", "Nepodařilo se ověřit přes Discord."); return; } UUID playerUuid = plugin.getCodeManager().getPlayerByCode(finalVerifyCode); boolean success = plugin.getVerificationManager().verifyByCode(finalVerifyCode, discordUser.getId()); if (success) { if (playerUuid != null) { plugin.getLogManager().logVerification("unknown", playerUuid, discordUser.getId()); } String html = buildSuccessPage(discordUser); sendHtmlResponse(exchange, 200, html); successfulRequests++; } else { String html = buildErrorPage("Neplatný nebo expirovaný kód."); sendHtmlResponse(exchange, 400, html); failedRequests++; } } catch (Exception e) { plugin.getLogger().log(Level.SEVERE, "Chyba při zpracování callback", e); sendErrorResponse(exchange, 500, "internal_error", "Interní chyba serveru."); } } } private class VerifyPageHandler implements HttpHandler { @Override public void handle(HttpExchange exchange) throws IOException { totalRequests++; Map params = parseQueryParams(exchange.getRequestURI().getQuery()); String code = params.get("code"); String html = buildVerifyPage(code); sendHtmlResponse(exchange, 200, html); successfulRequests++; } } private String buildVerifyPage(String code) { String websiteUrl = plugin.getConfigManager().getWebsiteUrl(); String oauthUrl = plugin.getDiscordManager().getOAuthUrl(); String codeValue = code != null ? code : ""; return "\n" + "\n" + "\n" + " \n" + " \n" + " LightsDev.pro - Verifikace\n" + " \n" + "\n" + "\n" + "

\n" + "

⚡ LIGHTSDEV.PRO

\n" + "

Minecraft Verifikační Systém

\n" + "

🔐

\n" + "

Ověření účtu

\n" + "

Zadej svůj verifikační kód z Minecraftu a přihlas se přes Discord pro ověření.

\n" + " \n" + "

\n" + "

Připoj se na Minecraft server

\n" + "

Zkopíruj kód z chatu

\n" + "

Vlož kód výše a klikni na tlačítko

\n" + "

\n" + " \n" + " 🎮 Ověřit přes Discord\n" + " \n" + " \n" + "

\n" + " \n" + "\n" + ""; } private String buildSuccessPage(DiscordManager.DiscordUser user) { return "\n" + "\n" + "\n" + " \n" + " \n" + " LightsDev.pro - Ověřeno!\n" + " \n" + "\n" + "\n" + "

\n" + "

⚡ LIGHTSDEV.PRO

\n" + "

✅

\n" + "

Úspěšně ověřeno!

\n" + "

\n" + " $\"avatar\"$ \n" + " " + user.getTag() + "\n" + "

\n" + "

Tvůj účet byl úspěšně propojen s Discordem. Můžeš se vrátit do Minecraftu!

\n" + "

Budeš automaticky přesunut na server.

\n" + " \n" + "

\n" + " \n" + "\n" + ""; } private String buildErrorPage(String errorMessage) { return "\n" + "\n" + "\n" + " \n" + " \n" + " LightsDev.pro - Chyba\n" + " \n" + "\n" + "\n" + "

\n" + "

⚡ LIGHTSDEV.PRO

\n" + "

❌

\n" + "

Chyba ověření

\n" + "

" + errorMessage + "

\n" + " Zkusit znovu\n" + " \n" + "

\n" + "\n" + ""; } public void restart() { plugin.getLogger().info("Restartuji Web API..."); stop(); start(); } public String getApiUrl() { return "http://localhost:" + plugin.getConfigManager().getApiPort(); } public long getUptime() { if (!running) return 0; return System.currentTimeMillis() - startTime; } public Map getStatistics() { Map stats = new HashMap<>(); stats.put("running", running); stats.put("uptime", getUptime()); stats.put("totalRequests", totalRequests); stats.put("successfulRequests", successfulRequests); stats.put("failedRequests", failedRequests); stats.put("successRate", totalRequests > 0 ? (successfulRequests * 100.0 / totalRequests) : 0); return stats; } public void resetStatistics() { totalRequests = 0; successfulRequests = 0; failedRequests = 0; } public void sendJson(HttpExchange exchange, int statusCode, Object data) throws IOException { sendJsonResponse(exchange, statusCode, data); } public Map errorMap(String error, String message, int status) { Map map = new HashMap<>(); map.put("error", error); map.put("message", message); map.put("status", status); return map; } public String readBody(HttpExchange exchange) throws IOException { return readRequestBody(exchange); } }