mirror of
https://github.com/gravitl/netmaker.git
synced 2025-09-06 13:14:24 +08:00
* feat: api access tokens
* revoke all user tokens
* redefine access token api routes, add auto egress option to enrollment keys
* add server settings apis, add db table for settigs
* handle server settings updates
* switch to using settings from DB
* fix sever settings migration
* revet force migration for settings
* fix server settings database write
* egress model
* fix revoked tokens to be unauthorized
* update egress model
* remove unused functions
* convert access token to sql schema
* switch access token to sql schema
* fix merge conflicts
* fix server settings types
* bypass basic auth setting for super admin
* add TODO comment
* setup api handlers for egress revamp
* use single DB, fix update nat boolean field
* extend validaiton checks for egress ranges
* add migration to convert to new egress model
* fix panic interface conversion
* publish peer update on settings update
* revoke token generated by an user
* add user token creation restriction by user role
* add forbidden check for access token creation
* revoke user token when group or role is changed
* add default group to admin users on update
* chore(go): import style changes from migration branch;
1. Singular file names for table schema.
2. No table name method.
3. Use .Model instead of .Table.
4. No unnecessary tagging.
* remove nat check on egress gateway request
* Revert "remove nat check on egress gateway request"
This reverts commit 0aff12a189
.
* remove nat check on egress gateway request
* feat(go): add db middleware;
* feat(go): restore method;
* feat(go): add user access token schema;
* add inet gw status to egress model
* fetch node ids in the tag, add inet gw info clients
* add inet gw info to node from egress list
* add migration logic internet gws
* create default acl policies
* add egress info
* add egress TODO
* add egress TODO
* fix user auth api:
* add reference id to acl policy
* add egress response from DB
* publish peer update on egress changes
* re initalise oauth and email config
* set verbosity
* normalise cidr on egress req
* add egress id to acl group
* change acls to use egress id
* resolve merge conflicts
* fix egress reference errors
* move egress model to schema
* add api context to DB
* sync auto update settings with hosts
* sync auto update settings with hosts
* check acl for egress node
* check for egress policy in the acl dst groups
* fix acl rules for egress policies with new models
* add status to egress model
* fix inet node func
* mask secret and convert jwt duration to minutes
* enable egress policies on creation
* convert jwt duration to minutes
* add relevant ranges to inet egress
* skip non active egress routes
* resolve merge conflicts
* fix static check
* update gorm tag for primary key on egress model
* create user policies for egress resources
* resolve merge conflicts
* get egress info on failover apis, add egress src validation for inet gws
* add additional validation checks on egress req
* add additional validation checks on egress req
* skip all resources for inet policy
* delete associated egress acl policies
* fix failover of inetclient
* avoid setting inet client asd inet gw
* fix all resource egress policy
* fix inet gw egress rule
* check for node egress on relay req
* fix egress acl rules comms
* add new field for egress info on node
* check acl policy in failover ctx
* avoid default host to be set as inet client
* fix relayed egress node
* add valid error messaging for egress validate func
* return if inet default host
* jump port detection to 51821
* check host ports on pull
* check user access gws via acls
* add validation check for default host and failover for inet clients
* add error messaging for acl policy check
* fix inet gw status
* ignore failover req for peer using inet gw
* check for allowed egress ranges for a peer
* add egress routes to static nodes by access
* avoid setting failvoer as inet client
* fix egress error messaging
* fix extclients egress comms
* fix inet gw acting as inet client
* return formatted error on update acl validation
* add default route for static nodes on inetclient
* check relay node acting as inetclient
* move inet node info to separate field, fix all resouces policy
* remove debug logs
---------
Co-authored-by: Vishal Dalwadi <dalwadivishal26@gmail.com>
103 lines
2.5 KiB
Go
103 lines
2.5 KiB
Go
package controller
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"github.com/gravitl/netmaker/db"
|
|
"net/http"
|
|
"os"
|
|
"strings"
|
|
"sync"
|
|
"time"
|
|
|
|
"github.com/gorilla/handlers"
|
|
"github.com/gorilla/mux"
|
|
"github.com/gravitl/netmaker/logger"
|
|
m "github.com/gravitl/netmaker/migrate"
|
|
"github.com/gravitl/netmaker/servercfg"
|
|
)
|
|
|
|
// HttpMiddlewares - middleware functions for REST interactions
|
|
var HttpMiddlewares = []mux.MiddlewareFunc{
|
|
db.Middleware,
|
|
userMiddleWare,
|
|
}
|
|
|
|
// HttpHandlers - handler functions for REST interactions
|
|
var HttpHandlers = []interface{}{
|
|
nodeHandlers,
|
|
gwHandlers,
|
|
userHandlers,
|
|
networkHandlers,
|
|
dnsHandlers,
|
|
fileHandlers,
|
|
serverHandlers,
|
|
extClientHandlers,
|
|
ipHandlers,
|
|
loggerHandlers,
|
|
hostHandlers,
|
|
enrollmentKeyHandlers,
|
|
tagHandlers,
|
|
aclHandlers,
|
|
egressHandlers,
|
|
legacyHandlers,
|
|
}
|
|
|
|
func HandleRESTRequests(wg *sync.WaitGroup, ctx context.Context) {
|
|
defer wg.Done()
|
|
|
|
r := mux.NewRouter()
|
|
// Currently allowed dev origin is all. Should change in prod
|
|
// should consider analyzing the allowed methods further
|
|
headersOk := handlers.AllowedHeaders(
|
|
[]string{
|
|
"Access-Control-Allow-Origin",
|
|
"X-Requested-With",
|
|
"Content-Type",
|
|
"authorization",
|
|
"From-Ui",
|
|
},
|
|
)
|
|
originsOk := handlers.AllowedOrigins(strings.Split(servercfg.GetAllowedOrigin(), ","))
|
|
methodsOk := handlers.AllowedMethods(
|
|
[]string{http.MethodGet, http.MethodPut, http.MethodPost, http.MethodDelete},
|
|
)
|
|
|
|
for _, middleware := range HttpMiddlewares {
|
|
r.Use(middleware)
|
|
}
|
|
|
|
for _, handler := range HttpHandlers {
|
|
handler.(func(*mux.Router))(r)
|
|
}
|
|
|
|
port := servercfg.GetAPIPort()
|
|
|
|
srv := &http.Server{
|
|
Addr: ":" + port,
|
|
Handler: handlers.CORS(originsOk, headersOk, methodsOk)(r),
|
|
}
|
|
go func() {
|
|
err := srv.ListenAndServe()
|
|
if err != nil {
|
|
logger.Log(0, err.Error())
|
|
}
|
|
}()
|
|
if os.Getenv("MIGRATE_EMQX") == "true" {
|
|
logger.Log(0, "migrating emqx...")
|
|
time.Sleep(time.Second * 2)
|
|
m.MigrateEmqx()
|
|
}
|
|
logger.Log(0, "REST Server successfully started on port ", port, " (REST)")
|
|
|
|
// Block main routine until a signal is received
|
|
// As long as user doesn't press CTRL+C a message is not passed and our main routine keeps running
|
|
<-ctx.Done()
|
|
// After receiving CTRL+C Properly stop the server
|
|
logger.Log(0, "Stopping the REST server...")
|
|
if err := srv.Shutdown(context.TODO()); err != nil {
|
|
logger.Log(0, "REST shutdown error occurred -", err.Error())
|
|
}
|
|
logger.Log(0, "REST Server closed.")
|
|
logger.DumpFile(fmt.Sprintf("data/netmaker.log.%s", time.Now().Format(logger.TimeFormatDay)))
|
|
}
|