with ESPAsyncWebServer 3.3.0, the setAuthentication() method became
deprecated and a replacement method was provided which acts as a shim
and uses the new middleware-based approach to setup authentication. in
order to eventually apply a changed "read-only access allowed" setting,
the setAuthentication() method was called periodically. the shim
implementation each time allocates a new AuthenticationMiddleware and
adds it to the chain of middlewares, eventually exhausting the memory.
we now use the new middleware-based approach ourselves and only add the
respective AuthenticatonMiddleware instance once to the respective
websocket server instance.
a regression where enabling unauthenticated read-only access is not
applied until reboot is also fixed. all the AuthenticationMiddleware
instances were never removed from the chain of middlewares when calling
setAuthentication("", "").
72 lines
2.4 KiB
C++
72 lines
2.4 KiB
C++
// SPDX-License-Identifier: GPL-2.0-or-later
|
|
#pragma once
|
|
|
|
#include "WebApi_config.h"
|
|
#include "WebApi_device.h"
|
|
#include "WebApi_devinfo.h"
|
|
#include "WebApi_dtu.h"
|
|
#include "WebApi_errors.h"
|
|
#include "WebApi_eventlog.h"
|
|
#include "WebApi_firmware.h"
|
|
#include "WebApi_gridprofile.h"
|
|
#include "WebApi_inverter.h"
|
|
#include "WebApi_limit.h"
|
|
#include "WebApi_maintenance.h"
|
|
#include "WebApi_mqtt.h"
|
|
#include "WebApi_network.h"
|
|
#include "WebApi_ntp.h"
|
|
#include "WebApi_power.h"
|
|
#include "WebApi_prometheus.h"
|
|
#include "WebApi_security.h"
|
|
#include "WebApi_sysstatus.h"
|
|
#include "WebApi_webapp.h"
|
|
#include "WebApi_ws_console.h"
|
|
#include "WebApi_ws_live.h"
|
|
#include <AsyncJson.h>
|
|
#include <ESPAsyncWebServer.h>
|
|
#include <TaskSchedulerDeclarations.h>
|
|
|
|
class WebApiClass {
|
|
public:
|
|
WebApiClass();
|
|
void init(Scheduler& scheduler);
|
|
void reload();
|
|
|
|
static bool checkCredentials(AsyncWebServerRequest* request);
|
|
static bool checkCredentialsReadonly(AsyncWebServerRequest* request);
|
|
|
|
static void sendTooManyRequests(AsyncWebServerRequest* request);
|
|
|
|
static void writeConfig(JsonVariant& retMsg, const WebApiError code = WebApiError::GenericSuccess, const String& message = "Settings saved!");
|
|
|
|
static bool parseRequestData(AsyncWebServerRequest* request, AsyncJsonResponse* response, JsonDocument& json_document);
|
|
static uint64_t parseSerialFromRequest(AsyncWebServerRequest* request, String param_name = "inv");
|
|
static bool sendJsonResponse(AsyncWebServerRequest* request, AsyncJsonResponse* response, const char* function, const uint16_t line);
|
|
|
|
private:
|
|
AsyncWebServer _server;
|
|
|
|
WebApiConfigClass _webApiConfig;
|
|
WebApiDeviceClass _webApiDevice;
|
|
WebApiDevInfoClass _webApiDevInfo;
|
|
WebApiDtuClass _webApiDtu;
|
|
WebApiEventlogClass _webApiEventlog;
|
|
WebApiFirmwareClass _webApiFirmware;
|
|
WebApiGridProfileClass _webApiGridprofile;
|
|
WebApiInverterClass _webApiInverter;
|
|
WebApiLimitClass _webApiLimit;
|
|
WebApiMaintenanceClass _webApiMaintenance;
|
|
WebApiMqttClass _webApiMqtt;
|
|
WebApiNetworkClass _webApiNetwork;
|
|
WebApiNtpClass _webApiNtp;
|
|
WebApiPowerClass _webApiPower;
|
|
WebApiPrometheusClass _webApiPrometheus;
|
|
WebApiSecurityClass _webApiSecurity;
|
|
WebApiSysstatusClass _webApiSysstatus;
|
|
WebApiWebappClass _webApiWebapp;
|
|
WebApiWsConsoleClass _webApiWsConsole;
|
|
WebApiWsLiveClass _webApiWsLive;
|
|
};
|
|
|
|
extern WebApiClass WebApi;
|