diff --git a/index.html b/index.html index 8b5688f..11b59c3 100644 --- a/index.html +++ b/index.html @@ -8,9 +8,7 @@ - +
@@ -23,18 +21,18 @@ Create a new account
-
+

Homeserver details

@@ -42,19 +40,24 @@

+
Privileges
@@ -65,9 +68,17 @@ +

+ Result +

+
+ + 
No output yet.
+ +
diff --git a/index.js b/index.js new file mode 100644 index 0000000..a277ee4 --- /dev/null +++ b/index.js @@ -0,0 +1,205 @@ + +// https://stackoverflow.com/questions/40031688/javascript-arraybuffer-to-hex +const byteToHex = []; +for (let n = 0; n <= 0xff; ++n) +{ + const hexOctet = n.toString(16).padStart(2, "0"); + byteToHex.push(hexOctet); +} +function bufferToHex(buffer) { + const buff = new Uint8Array(buffer); + const hexOctets = []; + + for (let i = 0; i < buff.length; ++i) + hexOctets.push(byteToHex[buff[i]]); + + return hexOctets.join(""); +} + + +class RequestError extends Error { + constructor(message, response) { + super(message) + this.response = response + } +} + + +class SynapseAPI { + /** + * @param baseURL {URL} + * @param registrationSecret {string} + */ + constructor({ baseURL, registrationSecret }) { + this.baseURL = baseURL + this.registrationSecret = registrationSecret + } + + /** + * @returns {Promise} + */ + async getRegistrationNonce() { + if(!this.baseURL) throw new Error("Homeserver URL not set.") + + const nonceURL = new URL("/_synapse/admin/v1/register", this.baseURL) + const nonceResponse = await fetch(nonceURL) + + if(nonceResponse.status !== 200) { + throw new RequestError("Could not get registration nonce.", nonceResponse) + } + + const nonceData = await nonceResponse.json() + return nonceData["nonce"] + } + + /** + * @param username {string} + * @param displayname {string} + * @param password {string} + * @param admin {boolean} + * @returns {Promise} + */ + async registerAccount(username, displayname, password, admin) { + if(!(this.baseURL)) throw new Error("Homeserver URL not set.") + if(!(this.registrationSecret)) throw new Error("Registration secret not set.") + if(!(window.isSecureContext)) throw new Error("Cannot run outside of secure contexts.") + if(!("TextEncoder" in window)) throw new Error("TextEncoder is not supported in this context.") + if(!("TextDecoder" in window)) throw new Error("TextDecoder is not supported in this context.") + if(!("crypto" in window && crypto.subtle !== undefined)) throw new Error("SubtleCrypto is not supported in this context.") + + const nonce = await this.getRegistrationNonce() + + const encoder = new TextEncoder() + const registrationSecretBuffer = encoder.encode(this.registrationSecret) + + // noinspection JSUnresolvedReference + const key = await crypto.subtle.importKey( + "raw", + registrationSecretBuffer, + { + name: "HMAC", + hash: "SHA-1", + }, + false, + ["sign"] + ) + + const adminString = admin ? "admin" : "notadmin" + const string = `${nonce}\0${username}\0${password}\0${adminString}` + const stringBuffer = encoder.encode(string) + + // noinspection JSUnresolvedReference + const macBuffer = await crypto.subtle.sign( + "HMAC", + key, + stringBuffer, + ) + const mac = bufferToHex(macBuffer) + + const registrationURL = new URL("/_synapse/admin/v1/register", this.baseURL) + const registrationResponse = await fetch(registrationURL, { + method: "POST", + body: JSON.stringify({ + nonce, + username, + displayname, + password, + admin, + mac, + }) + }) + + if(registrationResponse.status !== 200) { + throw new RequestError("Failed to register user.", registrationResponse) + } + + return await registrationResponse.json() + } +} + + +async function onClickRegisterUser(e) { + e.preventDefault() + + const homeserverInput = document.getElementById("input-homeserver") + const secretInput = document.getElementById("input-registrationsecret") + const usernameInput = document.getElementById("input-username") + const displaynameInput = document.getElementById("input-displayname") + const passwordInput = document.getElementById("input-password") + const isadminInput = document.getElementById("input-isadmin") + const output = document.getElementById("output") + + output.classList.remove("red") + output.classList.remove("green") + + homeserverInput.disabled = true + secretInput.disabled = true + usernameInput.disabled = true + displaynameInput.disabled = true + passwordInput.disabled = true + isadminInput.disabled = true + + homeserverInput.classList.add("fade") + secretInput.classList.add("fade") + usernameInput.classList.add("fade") + displaynameInput.classList.add("fade") + passwordInput.classList.add("fade") + isadminInput.classList.add("fade") + + try { + const homeserver = homeserverInput.value + const secret = secretInput.value + const username = usernameInput.value + const displayname = displaynameInput.value + const password = passwordInput.value + const isadmin = isadminInput.checked + + const sapi = new SynapseAPI({ + baseURL: new URL(homeserver), + registrationSecret: secret, + }) + + let result = await sapi.registerAccount(username, displayname, password, isadmin) + + output.classList.add("green") + output.innerText = JSON.stringify(result, null, " ") + } + catch(e) { + output.classList.add("red") + console.error(e) + if("response" in e) { + try { + const result = await e.response.json() + output.innerText = JSON.stringify(result, null, " ") + } + catch(e) { + output.innerText = e.toString() + } + } + else { + output.innerText = e.toString() + } + return + } + finally { + homeserverInput.disabled = false + secretInput.disabled = false + usernameInput.disabled = false + displaynameInput.disabled = false + passwordInput.disabled = false + isadminInput.disabled = false + + homeserverInput.classList.remove("fade") + secretInput.classList.remove("fade") + usernameInput.classList.remove("fade") + displaynameInput.classList.remove("fade") + passwordInput.classList.remove("fade") + isadminInput.classList.remove("fade") + output.classList.remove("fade") + } +} + +window.onload = function onload() { + const createButton = document.getElementById("button-create") + createButton.addEventListener("click", onClickRegisterUser) +} \ No newline at end of file