Reorganize API files

app/Http/Requests/Api/Application/Allocations/DeleteAllocationRequest.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Allocations;
+
+use Pterodactyl\Models\Node;
+use Pterodactyl\Models\Allocation;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class DeleteAllocationRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_ALLOCATIONS;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::WRITE;
+
+    /**
+     * Determine if the requested allocation exists and belongs to the node that
+     * is being passed in the URL.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $node = $this->route()->parameter('node');
+        $allocation = $this->route()->parameter('allocation');
+
+        if ($node instanceof Node && $node->exists) {
+            if ($allocation instanceof Allocation && $allocation->exists && $allocation->node_id === $node->id) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

app/Http/Requests/Api/Application/Allocations/GetAllocationsRequest.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Allocations;
+
+use Pterodactyl\Models\Node;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class GetAllocationsRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_ALLOCATIONS;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::READ;
+
+    /**
+     * Determine if the node that we are requesting the allocations
+     * for exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $node = $this->route()->parameter('node');
+
+        return $node instanceof Node && $node->exists;
+    }
+}

app/Http/Requests/Api/Application/ApiAdminRequest.php

@@ -0,0 +1,98 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application;
+
+use Pterodactyl\Models\ApiKey;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Illuminate\Foundation\Http\FormRequest;
+use Pterodactyl\Exceptions\PterodactylException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+abstract class ApiAdminRequest extends FormRequest
+{
+    /**
+     * The resource that should be checked when performing the authorization
+     * function for this request.
+     *
+     * @var string|null
+     */
+    protected $resource;
+
+    /**
+     * The permission level that a given API key should have for accessing
+     * the defined $resource during the request cycle.
+     *
+     * @var int
+     */
+    protected $permission = AdminAcl::NONE;
+
+    /**
+     * Determine if the current user is authorized to perform
+     * the requested action aganist the API.
+     *
+     * @return bool
+     *
+     * @throws \Pterodactyl\Exceptions\PterodactylException
+     */
+    public function authorize(): bool
+    {
+        if (is_null($this->resource)) {
+            throw new PterodactylException('An ACL resource must be defined on API requests.');
+        }
+
+        return AdminAcl::check($this->key(), $this->resource, $this->permission);
+    }
+
+    /**
+     * Determine if the requested resource exists on the server.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Default set of rules to apply to API requests.
+     *
+     * @return array
+     */
+    public function rules(): array
+    {
+        return [];
+    }
+
+    /**
+     * Return the API key being used for the request.
+     *
+     * @return \Pterodactyl\Models\ApiKey
+     */
+    public function key(): ApiKey
+    {
+        return $this->attributes->get('api_key');
+    }
+
+    /**
+     * Determine if the request passes the authorization check as well
+     * as the exists check.
+     *
+     * @return bool
+     *
+     * @throws \Symfony\Component\HttpKernel\Exception\NotFoundHttpException
+     */
+    protected function passesAuthorization()
+    {
+        $passes = parent::passesAuthorization();
+
+        // Only let the user know that a resource does not exist if they are
+        // authenticated to access the endpoint. This avoids exposing that
+        // an item exists (or does not exist) to the user until they can prove
+        // that they have permission to know about it.
+        if ($passes && ! $this->resourceExists()) {
+            throw new NotFoundHttpException('The requested resource does not exist on this server.');
+        }
+
+        return $passes;
+    }
+}

app/Http/Requests/Api/Application/Locations/DeleteLocationRequest.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Locations;
+
+use Pterodactyl\Models\Location;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class DeleteLocationRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_LOCATIONS;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::WRITE;
+
+    /**
+     * Determine if the requested location exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $location = $this->route()->parameter('location');
+
+        return $location instanceof Location && $location->exists;
+    }
+}

app/Http/Requests/Api/Application/Locations/GetLocationRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Application\Locations;
+
+use Pterodactyl\Models\Location;
+use Pterodactyl\Http\Requests\Api\Application\Locations\GetLocationsRequest;
+
+class GetLocationRequest extends GetLocationsRequest
+{
+    /**
+     * Determine if the requested location exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $location = $this->route()->parameter('location');
+
+        return $location instanceof Location && $location->exists;
+    }
+}

app/Http/Requests/Api/Application/Locations/GetLocationsRequest.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Locations;
+
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class GetLocationsRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_LOCATIONS;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::READ;
+}

app/Http/Requests/Api/Application/Locations/StoreLocationRequest.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace Pterodactyl\Http\Controllers\Api\Application\Locations;
+
+use Pterodactyl\Models\Location;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class StoreLocationRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_LOCATIONS;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::WRITE;
+
+    /**
+     * Rules to validate the request aganist.
+     *
+     * @return array
+     */
+    public function rules(): array
+    {
+        return collect(Location::getCreateRules())->only([
+            'long',
+            'short',
+        ])->toArray();
+    }
+
+    /**
+     * Rename fields to be more clear in error messages.
+     *
+     * @return array
+     */
+    public function attributes()
+    {
+        return [
+            'long' => 'Location Description',
+            'short' => 'Location Identifier',
+        ];
+    }
+}

app/Http/Requests/Api/Application/Locations/UpdateLocationRequest.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Locations;
+
+use Pterodactyl\Models\Location;
+use Pterodactyl\Http\Controllers\Api\Application\Locations\StoreLocationRequest;
+
+class UpdateLocationRequest extends StoreLocationRequest
+{
+    /**
+     * Determine if the requested location exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $location = $this->route()->parameter('location');
+
+        return $location instanceof Location && $location->exists;
+    }
+
+    /**
+     * Rules to validate this request aganist.
+     *
+     * @return array
+     */
+    public function rules(): array
+    {
+        $locationId = $this->route()->parameter('location')->id;
+
+        return collect(Location::getUpdateRulesForId($locationId))->only([
+            'short',
+            'long',
+        ]);
+    }
+}

app/Http/Requests/Api/Application/Nodes/DeleteNodeRequest.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Nodes;
+
+use Pterodactyl\Models\Node;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class DeleteNodeRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_NODES;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::WRITE;
+
+    /**
+     * Determine if the node being requested for editing exists
+     * on the Panel before validating the data.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $node = $this->route()->parameter('node');
+
+        return $node instanceof Node && $node->exists;
+    }
+}

app/Http/Requests/Api/Application/Nodes/GetNodeRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Nodes;
+
+use Pterodactyl\Models\Node;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class GetNodeRequest extends ApiAdminRequest
+{
+    /**
+     * Determine if the requested node exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $node = $this->route()->parameter('node');
+
+        return $node instanceof Node && $node->exists;
+    }
+}

app/Http/Requests/Api/Application/Nodes/GetNodesRequest.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Nodes;
+
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class GetNodesRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_NODES;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::READ;
+}

app/Http/Requests/Api/Application/Nodes/StoreNodeRequest.php

@@ -0,0 +1,83 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Nodes;
+
+use Pterodactyl\Models\Node;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class StoreNodeRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_NODES;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::WRITE;
+
+    /**
+     * Validation rules to apply to this request.
+     *
+     * @param null|array $rules
+     * @return array
+     */
+    public function rules(array $rules = null): array
+    {
+        return collect($rules ?? Node::getCreateRules())->only([
+            'public',
+            'name',
+            'location_id',
+            'fqdn',
+            'scheme',
+            'behind_proxy',
+            'memory',
+            'memory_overallocate',
+            'disk',
+            'disk_overallocation',
+            'upload_size',
+            'daemonListen',
+            'daemonSFTP',
+            'daemonBase',
+        ])->mapWithKeys(function ($value, $key) {
+            $key = ($key === 'daemonSFTP') ? 'daemonSftp' : $key;
+
+            return [snake_case($key) => $value];
+        })->toArray();
+    }
+
+    /**
+     * Fields to rename for clarity in the API response.
+     *
+     * @return array
+     */
+    public function attributes()
+    {
+        return [
+            'daemon_base' => 'Daemon Base Path',
+            'upload_size' => 'File Upload Size Limit',
+            'location_id' => 'Location',
+            'public' => 'Node Visibility',
+        ];
+    }
+
+    /**
+     * Change the formatting of some data keys in the validated response data
+     * to match what the application expects in the services.
+     *
+     * @return array
+     */
+    public function validated()
+    {
+        $response = parent::validated();
+        $response['daemonListen'] = $response['daemon_listen'];
+        $response['daemonSFTP'] = $response['daemon_sftp'];
+        $response['daemonBase'] = $response['daemon_base'];
+
+        unset($response['daemon_base'], $response['daemon_listen'], $response['daemon_sftp']);
+
+        return $response;
+    }
+}

app/Http/Requests/Api/Application/Nodes/UpdateNodeRequest.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Nodes;
+
+use Pterodactyl\Models\Node;
+
+class UpdateNodeRequest extends StoreNodeRequest
+{
+    /**
+     * Determine if the node being requested for editing exists
+     * on the Panel before validating the data.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $node = $this->route()->parameter('node');
+
+        return $node instanceof Node && $node->exists;
+    }
+
+    /**
+     * Apply validation rules to this request. Uses the parent class rules()
+     * function but passes in the rules for updating rather than creating.
+     *
+     * @param array|null $rules
+     * @return array
+     */
+    public function rules(array $rules = null): array
+    {
+        $nodeId = $this->route()->parameter('node')->id;
+
+        return parent::rules(Node::getUpdateRulesForId($nodeId));
+    }
+}

app/Http/Requests/Api/Application/Users/DeleteUserRequest.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Users;
+
+use Pterodactyl\Models\User;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class DeleteUserRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_USERS;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::WRITE;
+
+    /**
+     * Determine if the requested user exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $user = $this->route()->parameter('user');
+
+        return $user instanceof User && $user->exists;
+    }
+}

app/Http/Requests/Api/Application/Users/GetUserRequest.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Users;
+
+use Pterodactyl\Models\User;
+
+class GetUserRequest extends GetUsersRequest
+{
+    /**
+     * Determine if the requested user exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $user = $this->route()->parameter('user');
+
+        return $user instanceof User && $user->exists;
+    }
+}

app/Http/Requests/Api/Application/Users/GetUsersRequest.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Users;
+
+use Pterodactyl\Services\Acl\Api\AdminAcl as Acl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class GetUsersRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = Acl::RESOURCE_USERS;
+
+    /**
+     * @var int
+     */
+    protected $permission = Acl::READ;
+}

app/Http/Requests/Api/Application/Users/StoreUserRequest.php

@@ -0,0 +1,54 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Users;
+
+use Pterodactyl\Models\User;
+use Pterodactyl\Services\Acl\Api\AdminAcl;
+use Pterodactyl\Http\Requests\Api\Application\ApiAdminRequest;
+
+class StoreUserRequest extends ApiAdminRequest
+{
+    /**
+     * @var string
+     */
+    protected $resource = AdminAcl::RESOURCE_USERS;
+
+    /**
+     * @var int
+     */
+    protected $permission = AdminAcl::WRITE;
+
+    /**
+     * Return the validation rules for this request.
+     *
+     * @return array
+     */
+    public function rules(): array
+    {
+        return collect(User::getCreateRules())->only([
+            'external_id',
+            'email',
+            'username',
+            'name_first',
+            'name_last',
+            'password',
+            'language',
+            'root_admin',
+        ])->toArray();
+    }
+
+    /**
+     * Rename some fields to be more user friendly.
+     *
+     * @return array
+     */
+    public function attributes()
+    {
+        return [
+            'external_id' => 'Third Party Identifier',
+            'name_first' => 'First Name',
+            'name_last' => 'Last Name',
+            'root_admin' => 'Root Administrator Status',
+        ];
+    }
+}

app/Http/Requests/Api/Application/Users/UpdateUserRequest.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace Pterodactyl\Http\Requests\Api\Application\Users;
+
+use Pterodactyl\Models\User;
+
+class UpdateUserRequest extends StoreUserRequest
+{
+    /**
+     * Determine if the requested user exists on the Panel.
+     *
+     * @return bool
+     */
+    public function resourceExists(): bool
+    {
+        $user = $this->route()->parameter('user');
+
+        return $user instanceof User && $user->exists;
+    }
+
+    /**
+     * Return the validation rules for this request.
+     *
+     * @return array
+     */
+    public function rules(): array
+    {
+        $userId = $this->route()->parameter('user')->id;
+
+        return collect(User::getUpdateRulesForId($userId))->only([
+            'external_id',
+            'email',
+            'username',
+            'name_first',
+            'name_last',
+            'password',
+            'language',
+            'root_admin',
+        ])->toArray();
+    }
+}