From d377ef4eca2516e10daff2ac548c7a6706ac519c Mon Sep 17 00:00:00 2001
From: Craig Oates <craig@craigoates.net>
Date: Thu, 9 Jan 2020 14:44:07 +0000
Subject: [PATCH] add secirity token checks to status change A.P.I. call.

---
 app/readings.db               | Bin 40960 -> 40960 bytes
 app/services/post_services.py |  32 +++++++++++++++++---------------
 app/swagger.yml               |   6 ++++++
 3 files changed, 23 insertions(+), 15 deletions(-)

diff --git a/app/readings.db b/app/readings.db
index f3d6b7a86402687a6a69adc490cef3e1b2e37422..ab91286eeee0e7f8cb670a0a1ffbbf4e2b77df5b 100644
GIT binary patch
delta 218
zcmZoTz|?SnX@WE(*F+g-My`zsOZYdlD7@w8H#D&_F|sl-)-yCRGc&f_r0@|<%)}V0
cn8Q1MAr!qPCi!V;n}`-R#jct(VKbm101gK_Z~y=R

delta 277
zcmZoTz|?SnX@WE(_e2?IM(&LXOZYjM`1dpLKj7cLSx{gzzoR@83xgx0k%6J5uAzah
zp{0VMxs`#5m8rR&0T_tOF#;8E7#SED=o%R68dxeA7+4t?S(zH>nHd<H85wO7_{h(X
jDrSmB%xsgxJANTlb!Pc#X;_5KNfNfet{R81B~Ud0+E7Gu

diff --git a/app/services/post_services.py b/app/services/post_services.py
index 18c6dd2..2706b9c 100644
--- a/app/services/post_services.py
+++ b/app/services/post_services.py
@@ -30,21 +30,23 @@ def add_latest_reading(meter, info):
         return make_response("Meter Id. not recognised. Must be between 1 and 3.", 400)
     return make_response("Invalid token.", 400)
 
-def log_status_change(device, status):
-    # NEED TO ADD TOKEN.
-    if device == 1:
-        return add_status_change_to_device1(status)
-    elif device == 2:
-        return add_status_change_to_device2(status)
-    elif device == 3:
-        return add_status_change_to_device3(status)
-    elif device == 4:
-        return add_status_change_to_device4(status)
-    elif device == 5:
-        return add_status_change_to_device5(status)
-    elif device == 6:
-        return add_status_change_to_device6(status)
-    return make_response("Device Id. not recognised. Must be between 1 and 6.", 400)
+def log_status_change(device, info):
+    if info["token"] == device_check_token:
+        status = {"time":info["time"], "status":info["status"]}
+        if device == 1:
+            return add_status_change_to_device1(status)
+        elif device == 2:
+            return add_status_change_to_device2(status)
+        elif device == 3:
+            return add_status_change_to_device3(status)
+        elif device == 4:
+            return add_status_change_to_device4(status)
+        elif device == 5:
+            return add_status_change_to_device5(status)
+        elif device == 6:
+            return add_status_change_to_device6(status)
+        return make_response("Device Id. not recognised. Must be between 1 and 6.", 400)
+    return make_response("Invalid token.", 400)
 
 '''
 Nitty-Gritty Functions
diff --git a/app/swagger.yml b/app/swagger.yml
index a627543..fd5671a 100644
--- a/app/swagger.yml
+++ b/app/swagger.yml
@@ -255,6 +255,12 @@ paths:
                 description: >-
                   The current status of the device you would like to log.
                   The two status types are "on" and "off".
+              token:
+                type: string
+                example: it-is-not-password-if-you-are-wondering
+                description: >-
+                  This is basically a token to check the info. sent to
+                  the server is from a valid machine.
       responses:
         201:
           description: >-