6 Commits

Author SHA1 Message Date
29d13371a8 made it so no documents is not an error in get
Some checks failed
Build and Push Docker Image / Build image (push) Has been cancelled
2025-04-09 17:48:52 +03:00
b71bf21b48 fixed
Some checks failed
Build and Push Docker Image / Build image (push) Failing after 2m59s
2025-04-09 17:41:08 +03:00
ae12746ff2 added file browser to auth verify, setting up from clients
Some checks failed
Build and Push Docker Image / Build image (push) Has been cancelled
2025-04-09 17:34:27 +03:00
4ffaabd6e6 added log on failure to attach
Some checks failed
Build and Push Docker Image / Build image (push) Has been cancelled
2025-04-09 16:45:18 +03:00
c647f76894 removed container attach thingy 2025-04-09 16:20:34 +03:00
c1c5d23f92 plz
Some checks failed
Build and Push Docker Image / Build image (push) Has been cancelled
2025-04-09 04:14:08 +03:00
5 changed files with 84 additions and 62 deletions

View File

@@ -6,11 +6,11 @@ import (
"fmt"
"log"
"net/http"
"strings"
"time"
"git.acooldomain.co/server-manager/backend/dbhandler"
"git.acooldomain.co/server-manager/backend/factories"
"git.acooldomain.co/server-manager/backend/instancemanager"
"git.acooldomain.co/server-manager/backend/models"
"github.com/gin-gonic/gin"
"github.com/golang-jwt/jwt"
@@ -19,6 +19,7 @@ import (
type AuthApi struct {
config models.GlobalConfig
instanceManager instancemanager.InstanceManager
tokenHandler dbhandler.InviteTokenDbHandler
userAuthDbHandler dbhandler.UserPassAuthanticationDbHandler
serverAuthDbHandler dbhandler.ServersAuthorizationDbHandler
@@ -119,8 +120,8 @@ func (con AuthApi) signUp(ctx *gin.Context) {
}
type SignInRequest struct {
Username string
Password string
Username string `json:"username"`
Password string `json:"password"`
}
func (con AuthApi) signIn(ctx *gin.Context) {
@@ -169,14 +170,14 @@ func (con AuthApi) Verify(ctx *gin.Context) {
forwardedUri := ctx.Request.Header.Get("x-forwarded-uri")
pathSegments := strings.Split(forwardedUri, "/")
fileBrowser, err := con.instanceManager.GetFileBrowserFromUrl(ctx, forwardedUri)
if err != nil {
ctx.AbortWithError(500, err)
return
}
serverId, service := pathSegments[2], pathSegments[1]
switch service {
case "browsers":
fmt.Printf("%#v %s", claims, serverId)
serverPermissions, err := con.serverAuthDbHandler.GetPermissions(ctx, claims.Username, serverId)
fmt.Printf("%#v %s", claims, fileBrowser.ServerId)
serverPermissions, err := con.serverAuthDbHandler.GetPermissions(ctx, claims.Username, fileBrowser.ServerId)
if err != nil {
ctx.AbortWithError(500, err)
return
@@ -187,14 +188,6 @@ func (con AuthApi) Verify(ctx *gin.Context) {
ctx.Status(200)
return
}
case "cloud":
if claims.Permissions&models.Cloud == models.Cloud || claims.Permissions&models.Admin == models.Admin {
log.Printf("Set header X-Username %s", claims.Username)
ctx.Header("X-Auth-Username", claims.Username)
ctx.Status(200)
return
}
}
ctx.Redirect(303, fmt.Sprintf("http://%s/login", con.config.Domain))
}
@@ -210,6 +203,11 @@ func LoadGroup(group *gin.RouterGroup, config models.GlobalConfig) gin.HandlerFu
panic(err)
}
instanceManager, err := factories.GetInstanceManager(config.InstanceManager, config.Domain)
if err != nil {
panic(err)
}
inviteHandler, err := factories.GetInviteTokenDbHandler(config.Authentication.UserPass.InviteTokenDatabase)
if err != nil {
panic(err)
@@ -218,6 +216,7 @@ func LoadGroup(group *gin.RouterGroup, config models.GlobalConfig) gin.HandlerFu
connection := AuthApi{
userAuthDbHandler: userAuthHandler,
serverAuthDbHandler: serverAuthDbHandler,
instanceManager: instanceManager,
tokenHandler: inviteHandler,
config: config,
}

View File

@@ -21,8 +21,8 @@ type ServersAuthorizationDbHandler struct {
collection *mongo.Collection
}
func (self *ServersAuthorizationDbHandler) RemoveUser(ctx context.Context, username string) error {
_, err := self.collection.DeleteMany(
func (sa *ServersAuthorizationDbHandler) RemoveUser(ctx context.Context, username string) error {
_, err := sa.collection.DeleteMany(
ctx,
bson.M{
"username": username,
@@ -32,8 +32,8 @@ func (self *ServersAuthorizationDbHandler) RemoveUser(ctx context.Context, usern
return err
}
func (self *ServersAuthorizationDbHandler) RemoveServer(ctx context.Context, serverId string) error {
_, err := self.collection.DeleteMany(
func (sa *ServersAuthorizationDbHandler) RemoveServer(ctx context.Context, serverId string) error {
_, err := sa.collection.DeleteMany(
ctx,
bson.M{
"server_id": serverId,
@@ -43,29 +43,29 @@ func (self *ServersAuthorizationDbHandler) RemoveServer(ctx context.Context, ser
return err
}
func (self *ServersAuthorizationDbHandler) AddPermissions(ctx context.Context, username string, serverId string, permissions models.Permission) error {
func (sa *ServersAuthorizationDbHandler) AddPermissions(ctx context.Context, username string, serverId string, permissions models.Permission) error {
var serverPermissions ServerPermissions
err := self.collection.FindOne(
err := sa.collection.FindOne(
ctx,
bson.M{
"username": username,
"server_id": serverId,
},
).Decode(&serverPermissions)
if err != nil {
return err
}
newPermissions := serverPermissions.Permissions | permissions
_, err = self.collection.UpdateOne(
_, err = sa.collection.UpdateOne(
ctx,
bson.M{
"username": username,
"server_id": serverId,
},
bson.M{"$set": bson.M{
bson.M{
"$set": bson.M{
"username": username,
"server_id": serverId,
"permissions": newPermissions,
@@ -77,29 +77,29 @@ func (self *ServersAuthorizationDbHandler) AddPermissions(ctx context.Context, u
return err
}
func (self *ServersAuthorizationDbHandler) RemovePermissions(ctx context.Context, username string, serverId string, permissions models.Permission) error {
func (sa *ServersAuthorizationDbHandler) RemovePermissions(ctx context.Context, username string, serverId string, permissions models.Permission) error {
var serverPermissions ServerPermissions
err := self.collection.FindOne(
err := sa.collection.FindOne(
ctx,
bson.M{
"username": username,
"server_id": serverId,
},
).Decode(&serverPermissions)
if err != nil {
return err
}
newPermissions := serverPermissions.Permissions | permissions ^ permissions
_, err = self.collection.UpdateOne(
_, err = sa.collection.UpdateOne(
ctx,
bson.M{
"username": username,
"server_id": serverId,
},
bson.M{"$set": bson.M{
bson.M{
"$set": bson.M{
"permissions": newPermissions,
},
},
@@ -108,14 +108,15 @@ func (self *ServersAuthorizationDbHandler) RemovePermissions(ctx context.Context
return err
}
func (self *ServersAuthorizationDbHandler) SetPermissions(ctx context.Context, username string, serverId string, permissions models.Permission) error {
_, err := self.collection.UpdateOne(
func (sa *ServersAuthorizationDbHandler) SetPermissions(ctx context.Context, username string, serverId string, permissions models.Permission) error {
_, err := sa.collection.UpdateOne(
ctx,
bson.M{
"username": username,
"server_id": serverId,
},
bson.M{"$set": bson.M{
bson.M{
"$set": bson.M{
"permissions": permissions,
},
},
@@ -124,18 +125,20 @@ func (self *ServersAuthorizationDbHandler) SetPermissions(ctx context.Context, u
return err
}
func (self *ServersAuthorizationDbHandler) GetPermissions(ctx context.Context, username string, serverId string) (models.Permission, error) {
func (sa *ServersAuthorizationDbHandler) GetPermissions(ctx context.Context, username string, serverId string) (models.Permission, error) {
var serverPermissions ServerPermissions
err := self.collection.FindOne(
err := sa.collection.FindOne(
ctx,
bson.M{
"username": username,
"server_id": serverId,
},
).Decode(&serverPermissions)
if err != nil {
if err == mongo.ErrNoDocuments {
return 0, nil
}
return 0, err
}

View File

@@ -656,6 +656,10 @@ func (im *InstanceManager) StopFileBrowser(ctx context.Context, serverId string)
return nil
}
func (im *InstanceManager) GetFileBrowserFromUrl(ctx context.Context, url string) (*models.FileBrowser, error) {
return im.GetFileBrowser(ctx, strings.Split(url, "/")[1])
}
func NewInstanceManager(config models.DockerInstanceManagerConfig, siteDomain string) (*InstanceManager, error) {
apiClient, err := client.NewClientWithOpts(client.FromEnv, client.WithAPIVersionNegotiation())
if err != nil {

View File

@@ -59,6 +59,7 @@ type InstanceManager interface {
// Read Only
GetFileBrowser(ctx context.Context, serverId string) (*models.FileBrowser, error)
GetFileBrowserFromUrl(ctx context.Context, url string) (*models.FileBrowser, error)
ListFileBrowsers(ctx context.Context) ([]models.FileBrowser, error)
// Status Changing

View File

@@ -3,6 +3,7 @@ package kubernetes
import (
"context"
"io"
"log"
"os"
"path/filepath"
"strings"
@@ -250,11 +251,10 @@ func (i *InstanceManager) InteractiveTerminal(ctx context.Context, serverId stri
req := i.coreV1Cli.CoreV1().RESTClient().
Post().
Resource("pods").
Namespace(i.Config.Namespace).
Name(serverId).
Namespace(i.Config.Namespace).
SubResource("attach").
VersionedParams(&corev1.PodAttachOptions{
Container: "server",
Stdin: true,
Stdout: true,
Stderr: true,
@@ -265,7 +265,10 @@ func (i *InstanceManager) InteractiveTerminal(ctx context.Context, serverId stri
go func() {
defer stdoutWriter.Close()
defer stdinReader.Close()
_ = executor.StreamWithContext(ctx, remotecommand.StreamOptions{Stdin: stdinReader, Stdout: stdoutWriter, Stderr: stdoutWriter, Tty: true, TerminalSizeQueue: queue})
err := executor.StreamWithContext(ctx, remotecommand.StreamOptions{Stdin: stdinReader, Stdout: stdoutWriter, Stderr: stdoutWriter, Tty: true, TerminalSizeQueue: queue})
if err != nil {
log.Printf("Failed to attach %e", err)
}
}()
if err != nil {
@@ -296,6 +299,18 @@ func (i *InstanceManager) GetFileBrowser(ctx context.Context, serverId string) (
return &models.FileBrowser{ServerId: serverManager.Name, Id: serverManager.Name, Url: serverManager.Status.Browser.Url}, nil
}
func (i *InstanceManager) GetFileBrowserFromUrl(ctx context.Context, url string) (*models.FileBrowser, error) {
serverManager := &servermanagerv1.ServerManager{}
urlSegments := strings.Split(url, "/")
namespace, serverId := urlSegments[2], urlSegments[3]
err := i.client.Get(ctx, client.ObjectKey{Namespace: namespace, Name: serverId}, serverManager)
if err != nil {
return nil, err
}
return &models.FileBrowser{ServerId: serverManager.Name, Id: serverManager.Name, Url: serverManager.Status.Browser.Url}, nil
}
func (i *InstanceManager) ListFileBrowsers(ctx context.Context) ([]models.FileBrowser, error) {
serverManagers := &servermanagerv1.ServerManagerList{}
err := i.client.List(ctx, serverManagers, &client.ListOptions{Namespace: i.Config.Namespace})