class ChefZero::Endpoints::SystemRecoveryEndpoint

/system_recovery

Public Instance Methods

post(request) click to toggle source
# File lib/chef_zero/endpoints/system_recovery_endpoint.rb, line 8
def post(request)
  request_json = FFI_Yajl::Parser.parse(request.body)
  name = request_json["username"]
  password = request_json["password"]
  user = get_data(request, request.rest_path[0..-2] + ["users", name], :nil)
  if !user
    raise RestErrorResponse.new(403, "Nonexistent user")
  end

  user = FFI_Yajl::Parser.parse(user)
  user = ChefData::DataNormalizer.normalize_user(user, name, [ "username" ], server.options[:osc_compat])
  if !user["recovery_authentication_enabled"]
    raise RestErrorResponse.new(403, "Only users with recovery_authentication_enabled=true may use /system_recovery to log in")
  end
  if user["password"] != password
    raise RestErrorResponse.new(401, "Incorrect password")
  end

  json_response(200, user)
end