[cli] Add admin cmd to disable passkey (#2250)

## Description ## Tests
ente-io · Jun 23, 2024 · 279bdc1 · 279bdc1
2 parents f108ee2 + 169e70c
commit 279bdc1
Show file tree

Hide file tree

Showing 22 changed files with 109 additions and 20 deletions.
diff --git a/cli/cmd/admin.go b/cli/cmd/admin.go
@@ -58,6 +58,27 @@ var _disable2faCmd = &cobra.Command{
 	},
 }
 
+var _disablePasskeyCmd = &cobra.Command{
+	Use:   "disable-passkey",
+	Short: "Disable passkey for a user",
+	RunE: func(cmd *cobra.Command, args []string) error {
+		recoverWithLog()
+		var flags = &model.AdminActionForUser{}
+		cmd.Flags().VisitAll(func(f *pflag.Flag) {
+			if f.Name == "admin-user" {
+				flags.AdminEmail = f.Value.String()
+			}
+			if f.Name == "user" {
+				flags.UserEmail = f.Value.String()
+			}
+		})
+		if flags.UserEmail == "" {
+			return fmt.Errorf("user email is required")
+		}
+		return ctrl.DisablePasskeys(context.Background(), *flags)
+	},
+}
+
 var _deleteUser = &cobra.Command{
 	Use:   "delete-user",
 	Short: "Delete  a user",
@@ -130,11 +151,13 @@ func init() {
 	_listUsers.Flags().StringP("admin-user", "a", "", "The email of the admin user. ")
 	_disable2faCmd.Flags().StringP("admin-user", "a", "", "The email of the admin user. ")
 	_disable2faCmd.Flags().StringP("user", "u", "", "The email of the user to disable 2FA for. (required)")
+	_disablePasskeyCmd.Flags().StringP("admin-user", "a", "", "The email of the admin user. ")
+	_disablePasskeyCmd.Flags().StringP("user", "u", "", "The email of the user to disable passkey for. (required)")
 	_deleteUser.Flags().StringP("admin-user", "a", "", "The email of the admin user. ")
 	_deleteUser.Flags().StringP("user", "u", "", "The email of the user to delete. (required)")
 	_updateFreeUserStorage.Flags().StringP("admin-user", "a", "", "The email of the admin user.")
 	_updateFreeUserStorage.Flags().StringP("user", "u", "", "The email of the user to update subscription for. (required)")
 	// add a flag with no value --no-limit
 	_updateFreeUserStorage.Flags().String("no-limit", "True", "When true, sets 100TB as storage limit, and expiry to current date + 100 years")
-	_adminCmd.AddCommand(_userDetailsCmd, _disable2faCmd, _updateFreeUserStorage, _listUsers, _deleteUser)
+	_adminCmd.AddCommand(_userDetailsCmd, _disable2faCmd, _disablePasskeyCmd, _updateFreeUserStorage, _listUsers, _deleteUser)
 }
diff --git a/cli/docs/generated/ente.md b/cli/docs/generated/ente.md
diff --git a/cli/docs/generated/ente_account.md b/cli/docs/generated/ente_account.md
diff --git a/cli/docs/generated/ente_account_add.md b/cli/docs/generated/ente_account_add.md
diff --git a/cli/docs/generated/ente_account_get-token.md b/cli/docs/generated/ente_account_get-token.md
diff --git a/cli/docs/generated/ente_account_list.md b/cli/docs/generated/ente_account_list.md
diff --git a/cli/docs/generated/ente_account_update.md b/cli/docs/generated/ente_account_update.md
diff --git a/cli/docs/generated/ente_admin.md b/cli/docs/generated/ente_admin.md
diff --git a/cli/docs/generated/ente_admin_delete-user.md b/cli/docs/generated/ente_admin_delete-user.md
diff --git a/cli/docs/generated/ente_admin_disable-2fa.md b/cli/docs/generated/ente_admin_disable-2fa.md
diff --git a/cli/docs/generated/ente_admin_disable-passkey.md b/cli/docs/generated/ente_admin_disable-passkey.md
diff --git a/cli/docs/generated/ente_admin_get-user-id.md b/cli/docs/generated/ente_admin_get-user-id.md
diff --git a/cli/docs/generated/ente_admin_list-users.md b/cli/docs/generated/ente_admin_list-users.md
diff --git a/cli/docs/generated/ente_admin_update-subscription.md b/cli/docs/generated/ente_admin_update-subscription.md
diff --git a/cli/docs/generated/ente_auth.md b/cli/docs/generated/ente_auth.md
diff --git a/cli/docs/generated/ente_auth_decrypt.md b/cli/docs/generated/ente_auth_decrypt.md
diff --git a/cli/docs/generated/ente_export.md b/cli/docs/generated/ente_export.md
diff --git a/cli/docs/generated/ente_version.md b/cli/docs/generated/ente_version.md
diff --git a/cli/internal/api/admin.go b/cli/internal/api/admin.go
@@ -88,6 +88,29 @@ func (c *Client) Disable2Fa(ctx context.Context, userID int64) error {
 	return nil
 }
 
+func (c *Client) DisablePassKeyMFA(ctx context.Context, userID int64) error {
+	var res interface{}
+
+	payload := map[string]interface{}{
+		"userID": userID,
+	}
+	r, err := c.restClient.R().
+		SetContext(ctx).
+		SetResult(&res).
+		SetBody(payload).
+		Post("/admin/user/disable-passkeys")
+	if err != nil {
+		return err
+	}
+	if r.IsError() {
+		return &ApiError{
+			StatusCode: r.StatusCode(),
+			Message:    r.String(),
+		}
+	}
+	return nil
+}
+
 func (c *Client) UpdateFreePlanSub(ctx context.Context, userDetails *models.UserDetails, storageInBytes int64, expiryTimeInMicro int64) error {
 	var res interface{}
 	if userDetails.Subscription.ProductID != "free" {

diff --git a/cli/main.go b/cli/main.go
@@ -15,7 +15,7 @@ import (
 	"strings"
 )
 
-var AppVersion = "0.1.16"
+var AppVersion = "0.1.17"
 
 func main() {
 	cliDBPath, err := GetCLIConfigPath()

diff --git a/cli/pkg/admin_actions.go b/cli/pkg/admin_actions.go
@@ -82,6 +82,27 @@ func (c *ClICtrl) Disable2FA(ctx context.Context, params model.AdminActionForUse
 	return nil
 }
 
+func (c *ClICtrl) DisablePasskeys(ctx context.Context, params model.AdminActionForUser) error {
+	accountCtx, err := c.buildAdminContext(ctx, params.AdminEmail)
+	if err != nil {
+		return err
+	}
+	userDetails, err := c.Client.GetUserIdFromEmail(accountCtx, params.UserEmail)
+	if err != nil {
+		return err
+	}
+	err = c.Client.DisablePassKeyMFA(accountCtx, userDetails.User.ID)
+	if err != nil {
+		if apiErr, ok := err.(*api.ApiError); ok && apiErr.StatusCode == 400 && strings.Contains(apiErr.Message, "Token is too old") {
+			fmt.Printf("Error: Old admin token, please re-authenticate using `ente account add` \n")
+			return nil
+		}
+		return err
+	}
+	fmt.Println("Successfully disabled passkey for user")
+	return nil
+}
+
 func (c *ClICtrl) UpdateFreeStorage(ctx context.Context, params model.AdminActionForUser, noLimit bool) error {
 	accountCtx, err := c.buildAdminContext(ctx, params.AdminEmail)
 	if err != nil {

diff --git a/cli/pkg/store.go b/cli/pkg/store.go
@@ -12,9 +12,9 @@ import (
 )
 
 func GetDB(path string) (*bolt.DB, error) {
-	db, err := bolt.Open(path, 0600, &bolt.Options{Timeout: 1 * time.Second})
+	db, err := bolt.Open(path, 0600, &bolt.Options{Timeout: 5 * time.Second})
 	if err != nil {
-		log.Fatal(err)
+		log.Fatal(fmt.Sprintf("Failed to open db %s ", path), err)
 	}
 	return db, err
 }