mirror of
				https://github.com/gravitl/netmaker.git
				synced 2025-10-28 07:00:14 +08:00 
			
		
		
		
	* user mgmt models * define user roles * define models for new user mgmt and groups * oauth debug log * initialize user role after db conn * print oauth token in debug log * user roles CRUD apis * user groups CRUD Apis * additional api checks * add additional scopes * add additional scopes url * add additional scopes url * rm additional scopes url * setup middlleware permission checks * integrate permission check into middleware * integrate permission check into middleware * check for headers for subjects * refactor user role models * refactor user groups models * add new user to pending user via RAC login * untracked * allow multiple groups for an user * change json tag * add debug headers * refer network controls form roles, add debug headers * refer network controls form roles, add debug headers * replace auth checks, add network id to role model * nodes handler * migration funcs * invoke sync users migration func * add debug logs * comment middleware * fix get all nodes api * add debug logs * fix middleware error nil check * add new func to get username from jwt * fix jwt parsing * abort on error * allow multiple network roles * allow multiple network roles * add migration func * return err if jwt parsing fails * set global check to true when accessing user apis * set netid for acls api calls * set netid for acls api calls * update role and groups routes * add validation checks * add invite flow apis and magic links * add invited user via oauth signup automatically * create invited user on oauth signup, with groups in the invite * add group validation for user invite * update create user handler with new role mgmt * add validation checks * create user invites tables * add error logging for email invite * fix invite singup url * debug log * get query params from url * get query params from url * add query escape * debug log * debug log * fix user signup via invite api * set admin field for backward compatbility * use new role id for user apis * deprecate use of old admin fields * deprecate usage of old user fields * add user role as service user if empty * setup email sender * delete invite after user singup * add plaform user role * redirect on invite verification link * fix invite redirect * temporary redirect * fix invite redirect * point invite link to frontend * fix query params lookup * add resend support, configure email interface types * fix groups and user creation * validate user groups, add check for metrics api in middleware * add invite url to invite model * migrate rac apis to new user mgmt * handle network nodes * add platform user to default role * fix user role migration * add default on rag creation and cleanup after deletion * fix rac apis * change to invite code param * filter nodes and hosts based on user network access * extend create user group req to accomodate users * filter network based on user access * format oauth error * move user roles and groups * fix get user v1 api * move user mgmt func to pro * add user auth type to user model * fix roles init * remove platform role from group object * list only platform roles * add network roles to invite req * create default groups and roles * fix middleware for global access * create default role * fix nodes filter with global network roles * block selfupdate of groups and network roles * delete netID if net roles are empty * validate user roles nd groups on update * set extclient permission scope when rag vpn access is set * allow deletion of roles and groups * replace _ with - in role naming convention * fix failover middleware mgmt * format oauth templates * fetch route temaplate * return err if user wrong login type * check user groups on rac apis * fix rac apis * fix resp msg * add validation checks for admin invite * return oauth type * format group err msg * fix html tag * clean up default groups * create default rag role * add UI name to roles * remove default net group from user when deleted * reorder migration funcs * fix duplicacy of hosts * check old field for migration * from pro to ce make all secondary users admins * from pro to ce make all secondary users admins * revert: from pro to ce make all secondary users admins * make sure downgrades work * fix pending users approval * fix duplicate hosts * fix duplicate hosts entries * fix cache reference issue * feat: configure FRONTEND_URL during installation * disable user vpn access when network roles are modified * rm vpn acces when roles or groups are deleted * add http to frontend url * revert crypto version * downgrade crytpo version * add platform id check on user invites --------- Co-authored-by: the_aceix <aceixsmartx@gmail.com>
		
			
				
	
	
		
			208 lines
		
	
	
	
		
			6.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			208 lines
		
	
	
	
		
			6.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| package controller
 | |
| 
 | |
| import (
 | |
| 	"encoding/json"
 | |
| 	"net/http"
 | |
| 	"strings"
 | |
| 	"syscall"
 | |
| 	"time"
 | |
| 
 | |
| 	"github.com/gorilla/mux"
 | |
| 	"golang.org/x/exp/slog"
 | |
| 
 | |
| 	"github.com/gravitl/netmaker/database"
 | |
| 	"github.com/gravitl/netmaker/logic"
 | |
| 	"github.com/gravitl/netmaker/models"
 | |
| 	"github.com/gravitl/netmaker/mq"
 | |
| 	"github.com/gravitl/netmaker/servercfg"
 | |
| )
 | |
| 
 | |
| func serverHandlers(r *mux.Router) {
 | |
| 	// r.HandleFunc("/api/server/addnetwork/{network}", securityCheckServer(true, http.HandlerFunc(addNetwork))).Methods(http.MethodPost)
 | |
| 	r.HandleFunc(
 | |
| 		"/api/server/health",
 | |
| 		func(resp http.ResponseWriter, req *http.Request) {
 | |
| 			resp.WriteHeader(http.StatusOK)
 | |
| 			resp.Write([]byte("Server is up and running!!"))
 | |
| 		},
 | |
| 	).Methods(http.MethodGet)
 | |
| 	r.HandleFunc(
 | |
| 		"/api/server/shutdown",
 | |
| 		func(w http.ResponseWriter, _ *http.Request) {
 | |
| 			msg := "received api call to shutdown server, sending interruption..."
 | |
| 			slog.Warn(msg)
 | |
| 			_, _ = w.Write([]byte(msg))
 | |
| 			w.WriteHeader(http.StatusOK)
 | |
| 			_ = syscall.Kill(syscall.Getpid(), syscall.SIGINT)
 | |
| 		},
 | |
| 	).Methods(http.MethodPost)
 | |
| 	r.HandleFunc("/api/server/getconfig", allowUsers(http.HandlerFunc(getConfig))).
 | |
| 		Methods(http.MethodGet)
 | |
| 	r.HandleFunc("/api/server/getserverinfo", logic.SecurityCheck(true, http.HandlerFunc(getServerInfo))).
 | |
| 		Methods(http.MethodGet)
 | |
| 	r.HandleFunc("/api/server/status", getStatus).Methods(http.MethodGet)
 | |
| 	r.HandleFunc("/api/server/usage", logic.SecurityCheck(false, http.HandlerFunc(getUsage))).
 | |
| 		Methods(http.MethodGet)
 | |
| }
 | |
| 
 | |
| func getUsage(w http.ResponseWriter, _ *http.Request) {
 | |
| 	type usage struct {
 | |
| 		Hosts            int `json:"hosts"`
 | |
| 		Clients          int `json:"clients"`
 | |
| 		Networks         int `json:"networks"`
 | |
| 		Users            int `json:"users"`
 | |
| 		Ingresses        int `json:"ingresses"`
 | |
| 		Egresses         int `json:"egresses"`
 | |
| 		Relays           int `json:"relays"`
 | |
| 		InternetGateways int `json:"internet_gateways"`
 | |
| 		FailOvers        int `json:"fail_overs"`
 | |
| 	}
 | |
| 	var serverUsage usage
 | |
| 	hosts, err := logic.GetAllHosts()
 | |
| 	if err == nil {
 | |
| 		serverUsage.Hosts = len(hosts)
 | |
| 	}
 | |
| 	clients, err := logic.GetAllExtClients()
 | |
| 	if err == nil {
 | |
| 		serverUsage.Clients = len(clients)
 | |
| 	}
 | |
| 	users, err := logic.GetUsers()
 | |
| 	if err == nil {
 | |
| 		serverUsage.Users = len(users)
 | |
| 	}
 | |
| 	networks, err := logic.GetNetworks()
 | |
| 	if err == nil {
 | |
| 		serverUsage.Networks = len(networks)
 | |
| 	}
 | |
| 	// TODO this part bellow can be optimized to get nodes just once
 | |
| 	ingresses, err := logic.GetAllIngresses()
 | |
| 	if err == nil {
 | |
| 		serverUsage.Ingresses = len(ingresses)
 | |
| 	}
 | |
| 	egresses, err := logic.GetAllEgresses()
 | |
| 	if err == nil {
 | |
| 		serverUsage.Egresses = len(egresses)
 | |
| 	}
 | |
| 	relays, err := logic.GetRelays()
 | |
| 	if err == nil {
 | |
| 		serverUsage.Relays = len(relays)
 | |
| 	}
 | |
| 	gateways, err := logic.GetInternetGateways()
 | |
| 	if err == nil {
 | |
| 		serverUsage.InternetGateways = len(gateways)
 | |
| 	}
 | |
| 	failOvers, err := logic.GetAllFailOvers()
 | |
| 	if err == nil {
 | |
| 		serverUsage.FailOvers = len(failOvers)
 | |
| 	}
 | |
| 	w.Header().Set("Content-Type", "application/json")
 | |
| 	json.NewEncoder(w).Encode(models.SuccessResponse{
 | |
| 		Code:     http.StatusOK,
 | |
| 		Response: serverUsage,
 | |
| 	})
 | |
| }
 | |
| 
 | |
| // @Summary     Get the server status
 | |
| // @Router      /api/server/status [get]
 | |
| // @Tags        Server
 | |
| // @Security    oauth2
 | |
| func getStatus(w http.ResponseWriter, r *http.Request) {
 | |
| 	// @Success     200 {object} status
 | |
| 	type status struct {
 | |
| 		DB               bool      `json:"db_connected"`
 | |
| 		Broker           bool      `json:"broker_connected"`
 | |
| 		IsBrokerConnOpen bool      `json:"is_broker_conn_open"`
 | |
| 		LicenseError     string    `json:"license_error"`
 | |
| 		IsPro            bool      `json:"is_pro"`
 | |
| 		TrialEndDate     time.Time `json:"trial_end_date"`
 | |
| 		IsOnTrialLicense bool      `json:"is_on_trial_license"`
 | |
| 	}
 | |
| 
 | |
| 	licenseErr := ""
 | |
| 	if servercfg.ErrLicenseValidation != nil {
 | |
| 		licenseErr = servercfg.ErrLicenseValidation.Error()
 | |
| 	}
 | |
| 	var trialEndDate time.Time
 | |
| 	var err error
 | |
| 	isOnTrial := false
 | |
| 	if servercfg.IsPro &&
 | |
| 		(servercfg.GetLicenseKey() == "" || servercfg.GetNetmakerTenantID() == "") {
 | |
| 		trialEndDate, err = logic.GetTrialEndDate()
 | |
| 		if err != nil {
 | |
| 			slog.Error("failed to get trial end date", "error", err)
 | |
| 		} else {
 | |
| 			isOnTrial = true
 | |
| 		}
 | |
| 	}
 | |
| 	currentServerStatus := status{
 | |
| 		DB:               database.IsConnected(),
 | |
| 		Broker:           mq.IsConnected(),
 | |
| 		IsBrokerConnOpen: mq.IsConnectionOpen(),
 | |
| 		LicenseError:     licenseErr,
 | |
| 		IsPro:            servercfg.IsPro,
 | |
| 		TrialEndDate:     trialEndDate,
 | |
| 		IsOnTrialLicense: isOnTrial,
 | |
| 	}
 | |
| 
 | |
| 	w.Header().Set("Content-Type", "application/json")
 | |
| 	json.NewEncoder(w).Encode(¤tServerStatus)
 | |
| }
 | |
| 
 | |
| // allowUsers - allow all authenticated (valid) users - only used by getConfig, may be able to remove during refactor
 | |
| func allowUsers(next http.Handler) http.HandlerFunc {
 | |
| 	return func(w http.ResponseWriter, r *http.Request) {
 | |
| 		errorResponse := models.ErrorResponse{
 | |
| 			Code: http.StatusUnauthorized, Message: logic.Unauthorized_Msg,
 | |
| 		}
 | |
| 		bearerToken := r.Header.Get("Authorization")
 | |
| 		tokenSplit := strings.Split(bearerToken, " ")
 | |
| 		authToken := ""
 | |
| 		if len(tokenSplit) < 2 {
 | |
| 			logic.ReturnErrorResponse(w, r, errorResponse)
 | |
| 			return
 | |
| 		} else {
 | |
| 			authToken = tokenSplit[1]
 | |
| 		}
 | |
| 		user, _, _, err := logic.VerifyUserToken(authToken)
 | |
| 		if err != nil || user == "" {
 | |
| 			logic.ReturnErrorResponse(w, r, errorResponse)
 | |
| 			return
 | |
| 		}
 | |
| 		next.ServeHTTP(w, r)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| // @Summary     Get the server information
 | |
| // @Router      /api/server/getserverinfo [get]
 | |
| // @Tags        Server
 | |
| // @Security    oauth2
 | |
| // @Success     200 {object} models.ServerConfig
 | |
| func getServerInfo(w http.ResponseWriter, r *http.Request) {
 | |
| 	// Set header
 | |
| 	w.Header().Set("Content-Type", "application/json")
 | |
| 
 | |
| 	// get params
 | |
| 
 | |
| 	json.NewEncoder(w).Encode(servercfg.GetServerInfo())
 | |
| 	// w.WriteHeader(http.StatusOK)
 | |
| }
 | |
| 
 | |
| // @Summary     Get the server configuration
 | |
| // @Router      /api/server/getconfig [get]
 | |
| // @Tags        Server
 | |
| // @Security    oauth2
 | |
| // @Success     200 {object} config.ServerConfig
 | |
| func getConfig(w http.ResponseWriter, r *http.Request) {
 | |
| 	// Set header
 | |
| 	w.Header().Set("Content-Type", "application/json")
 | |
| 
 | |
| 	// get params
 | |
| 
 | |
| 	scfg := servercfg.GetServerConfig()
 | |
| 	scfg.IsPro = "no"
 | |
| 	if servercfg.IsPro {
 | |
| 		scfg.IsPro = "yes"
 | |
| 	}
 | |
| 	json.NewEncoder(w).Encode(scfg)
 | |
| 	// w.WriteHeader(http.StatusOK)
 | |
| }
 |