/* * Copyright 2015 - 2024 Anton Tananaev (anton@traccar.org) * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.traccar.api.resource; import jakarta.ws.rs.FormParam; import org.traccar.api.BaseObjectResource; import org.traccar.api.signature.TokenManager; import org.traccar.broadcast.BroadcastService; import org.traccar.config.Config; import org.traccar.config.Keys; import org.traccar.database.MediaManager; import org.traccar.helper.LogAction; import org.traccar.model.Device; import org.traccar.model.DeviceAccumulators; import org.traccar.model.Permission; import org.traccar.model.Position; import org.traccar.model.User; import org.traccar.session.ConnectionManager; import org.traccar.session.cache.CacheManager; import org.traccar.storage.StorageException; import org.traccar.storage.query.Columns; import org.traccar.storage.query.Condition; import org.traccar.storage.query.Request; import jakarta.inject.Inject; import jakarta.ws.rs.Consumes; import jakarta.ws.rs.GET; import jakarta.ws.rs.HeaderParam; import jakarta.ws.rs.POST; import jakarta.ws.rs.PUT; import jakarta.ws.rs.Path; import jakarta.ws.rs.PathParam; import jakarta.ws.rs.Produces; import jakarta.ws.rs.QueryParam; import jakarta.ws.rs.core.HttpHeaders; import jakarta.ws.rs.core.MediaType; import jakarta.ws.rs.core.Response; import java.io.File; import java.io.FileInputStream; import java.io.IOException; import java.security.GeneralSecurityException; import java.util.Collection; import java.util.Date; import java.util.LinkedList; import java.util.List; @Path("devices") @Produces(MediaType.APPLICATION_JSON) @Consumes(MediaType.APPLICATION_JSON) public class DeviceResource extends BaseObjectResource { @Inject private Config config; @Inject private CacheManager cacheManager; @Inject private ConnectionManager connectionManager; @Inject private BroadcastService broadcastService; @Inject private MediaManager mediaManager; @Inject private TokenManager tokenManager; public DeviceResource() { super(Device.class); } @GET public Collection get( @QueryParam("all") boolean all, @QueryParam("userId") long userId, @QueryParam("uniqueId") List uniqueIds, @QueryParam("id") List deviceIds) throws StorageException { if (!uniqueIds.isEmpty() || !deviceIds.isEmpty()) { List result = new LinkedList<>(); for (String uniqueId : uniqueIds) { result.addAll(storage.getObjects(Device.class, new Request( new Columns.All(), new Condition.And( new Condition.Equals("uniqueId", uniqueId), new Condition.Permission(User.class, getUserId(), Device.class))))); } for (Long deviceId : deviceIds) { result.addAll(storage.getObjects(Device.class, new Request( new Columns.All(), new Condition.And( new Condition.Equals("id", deviceId), new Condition.Permission(User.class, getUserId(), Device.class))))); } return result; } else { var conditions = new LinkedList(); if (all) { if (permissionsService.notAdmin(getUserId())) { conditions.add(new Condition.Permission(User.class, getUserId(), baseClass)); } } else { if (userId == 0) { conditions.add(new Condition.Permission(User.class, getUserId(), baseClass)); } else { permissionsService.checkUser(getUserId(), userId); conditions.add(new Condition.Permission(User.class, userId, baseClass).excludeGroups()); } } return storage.getObjects(baseClass, new Request(new Columns.All(), Condition.merge(conditions))); } } @Path("{id}/accumulators") @PUT public Response updateAccumulators(DeviceAccumulators entity) throws Exception { if (permissionsService.notAdmin(getUserId())) { permissionsService.checkManager(getUserId()); permissionsService.checkPermission(Device.class, getUserId(), entity.getDeviceId()); } Position position = storage.getObject(Position.class, new Request( new Columns.All(), new Condition.LatestPositions(entity.getDeviceId()))); if (position != null) { if (entity.getTotalDistance() != null) { position.getAttributes().put(Position.KEY_TOTAL_DISTANCE, entity.getTotalDistance()); } if (entity.getHours() != null) { position.getAttributes().put(Position.KEY_HOURS, entity.getHours()); } position.setId(storage.addObject(position, new Request(new Columns.Exclude("id")))); Device device = new Device(); device.setId(position.getDeviceId()); device.setPositionId(position.getId()); storage.updateObject(device, new Request( new Columns.Include("positionId"), new Condition.Equals("id", device.getId()))); try { cacheManager.addDevice(position.getDeviceId()); cacheManager.updatePosition(position); connectionManager.updatePosition(true, position); } finally { cacheManager.removeDevice(position.getDeviceId()); } } else { throw new IllegalArgumentException(); } LogAction.resetDeviceAccumulators(getUserId(), entity.getDeviceId()); return Response.noContent().build(); } @Path("{id}/image") @POST @Consumes("image/*") public Response uploadImage( @PathParam("id") long deviceId, File file, @HeaderParam(HttpHeaders.CONTENT_TYPE) String type) throws StorageException, IOException { Device device = storage.getObject(Device.class, new Request( new Columns.All(), new Condition.And( new Condition.Equals("id", deviceId), new Condition.Permission(User.class, getUserId(), Device.class)))); if (device != null) { String name = "device"; String extension = type.substring("image/".length()); try (var input = new FileInputStream(file); var output = mediaManager.createFileStream(device.getUniqueId(), name, extension)) { input.transferTo(output); } return Response.ok(name + "." + extension).build(); } return Response.status(Response.Status.NOT_FOUND).build(); } @Path("share") @Consumes(MediaType.APPLICATION_FORM_URLENCODED) @POST public String shareDevice( @FormParam("deviceId") long deviceId, @FormParam("expiration") Date expiration) throws StorageException, GeneralSecurityException, IOException { User user = permissionsService.getUser(getUserId()); if (permissionsService.getServer().getBoolean(Keys.DEVICE_SHARE_DISABLE.getKey())) { throw new SecurityException("Sharing is disabled"); } if (user.getTemporary()) { throw new SecurityException("Temporary user"); } if (user.getExpirationTime() != null && user.getExpirationTime().before(expiration)) { expiration = user.getExpirationTime(); } Device device = storage.getObject(Device.class, new Request( new Columns.All(), new Condition.And( new Condition.Equals("id", deviceId), new Condition.Permission(User.class, user.getId(), Device.class)))); String shareEmail = user.getEmail() + ":" + device.getUniqueId(); User share = storage.getObject(User.class, new Request( new Columns.All(), new Condition.Equals("email", shareEmail))); if (share == null) { share = new User(); share.setName(device.getName()); share.setEmail(shareEmail); share.setExpirationTime(expiration); share.setTemporary(true); share.setReadonly(true); share.setLimitCommands(user.getLimitCommands() || !config.getBoolean(Keys.WEB_SHARE_DEVICE_COMMANDS)); share.setDisableReports(user.getDisableReports() || !config.getBoolean(Keys.WEB_SHARE_DEVICE_REPORTS)); share.setId(storage.addObject(share, new Request(new Columns.Exclude("id")))); storage.addPermission(new Permission(User.class, share.getId(), Device.class, deviceId)); } return tokenManager.generateToken(share.getId(), expiration); } }