From c1254385d09dd1c5f357527a9a94848665203abc Mon Sep 17 00:00:00 2001
From: Sebastian Serfling <sebastian.serfling@stines.de>
Date: Thu, 12 Oct 2023 14:41:45 +0200
Subject: [PATCH] Remove API key From Console

---
 Classes/main_classes.py |  1 +
 main.py                 | 11 ++++++++---
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/Classes/main_classes.py b/Classes/main_classes.py
index c74c087..49610a8 100644
--- a/Classes/main_classes.py
+++ b/Classes/main_classes.py
@@ -104,6 +104,7 @@ class CL_GET_HOST(BaseModel):
 class CL_SET_HOST_USER(BaseModel):
     user: str
     dbname: str
+    hardwareID: str
 
 class CL_GET_HOST_USER(BaseModel):
     user: str
diff --git a/main.py b/main.py
index f221a1f..86d1098 100644
--- a/main.py
+++ b/main.py
@@ -96,7 +96,10 @@ async def gethostname(get: CL.CL_GET_HOST,api_key: APIKey = Depends(auth.get_api
 
 @app.post("/info/sethost")
 async def sethostname(get: CL.CL_SET_HOST,api_key: APIKey = Depends(auth.get_api_key)):
-    result = database(f"INSERT INTO `{get.dbname}`.hardware (hostname,ipadresse,ram,hddused,hddfree,hddtotal) VALUES ('{get.hostname}','{get.ipadresse}','{get.ram}','{get.hddused}','{get.hddfree}','{get.hddtotal}')","","")
+    database(f"INSERT INTO `{get.dbname}`.hardware (hostname,ipadresse,ram,hddused,hddfree,hddtotal) VALUES ('{get.hostname}','{get.ipadresse}','{get.ram}','{get.hddused}','{get.hddfree}','{get.hddtotal}')","","")
+    result = database(
+        f"SELECT id FROM `{get.dbname}`.hardware WHERE hostname = '{get.hostname}')",
+        "", "")
     if not result:
         return False
     else:
@@ -104,11 +107,13 @@ async def sethostname(get: CL.CL_SET_HOST,api_key: APIKey = Depends(auth.get_api
 
 @app.post("/info/sethost_user")
 async def sethost_user(get: CL.CL_SET_HOST_USER,api_key: APIKey = Depends(auth.get_api_key)):
-    result = database(f"INSERT INTO `{get.dbname}`.user (user) VALUES ('{get.user}')","","")
+    database(f"INSERT INTO `{get.dbname}`.user (user) VALUES ('{get.user}')","","")
+    result = database(f"SELECT id FROM `{get.dbname}`.user WHERE user = '{get.user}'","","")
+    database(f"INSERT INTO `{get.dbname}`.hardware_to_user (userID,hardwareID) VALUES ('{result[0][0]}',{get.hardwareID})", "", "")
     if not result:
         return False
     else:
-        return database(f"SELECT id FROM `{get.dbname}`.user WHERE user = '{get.user}'","","")
+        return result
 
 @app.post("/info/gethost_user")
 async def gethost_user(get: CL.CL_GET_HOST_USER,api_key: APIKey = Depends(auth.get_api_key)):