mirror of
https://github.com/yusing/godoxy.git
synced 2026-03-18 15:34:38 +01:00
35a3e3fef6
- These changes makes the API incombatible with previous versions - Added new types for error handling, success responses, and health checks. - Updated health check logic to utilize the new types for better clarity and structure. - Refactored existing handlers to improve response consistency and error handling. - Updated Makefile to include a new target for generating API types from Swagger. - Updated "new agent" API to respond an encrypted cert pair
77 lines
2.0 KiB
Go
77 lines
2.0 KiB
Go
package agentapi
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"os"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/yusing/go-proxy/agent/pkg/certs"
|
|
. "github.com/yusing/go-proxy/internal/api/types"
|
|
config "github.com/yusing/go-proxy/internal/config/types"
|
|
)
|
|
|
|
type VerifyNewAgentRequest struct {
|
|
Host string `json:"host"`
|
|
CA PEMPairResponse `json:"ca"`
|
|
Client PEMPairResponse `json:"client"`
|
|
} // @name VerifyNewAgentRequest
|
|
|
|
// @x-id "verify"
|
|
// @BasePath /api/v1
|
|
// @Summary Verify a new agent
|
|
// @Description Verify a new agent and return the number of routes added
|
|
// @Tags agent
|
|
// @Accept json
|
|
// @Produce json
|
|
// @Param request body VerifyNewAgentRequest true "Request"
|
|
// @Success 200 {object} SuccessResponse
|
|
// @Failure 400 {object} ErrorResponse
|
|
// @Failure 403 {object} ErrorResponse
|
|
// @Failure 500 {object} ErrorResponse
|
|
// @Router /agent/verify [post]
|
|
func Verify(c *gin.Context) {
|
|
var request VerifyNewAgentRequest
|
|
if err := c.ShouldBindJSON(&request); err != nil {
|
|
c.JSON(http.StatusBadRequest, Error("invalid request", err))
|
|
return
|
|
}
|
|
|
|
filename, ok := certs.AgentCertsFilepath(request.Host)
|
|
if !ok {
|
|
c.JSON(http.StatusBadRequest, Error("invalid host", nil))
|
|
return
|
|
}
|
|
|
|
ca, err := fromEncryptedPEMPairResponse(request.CA)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, Error("invalid CA", err))
|
|
return
|
|
}
|
|
|
|
client, err := fromEncryptedPEMPairResponse(request.Client)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, Error("invalid client", err))
|
|
return
|
|
}
|
|
|
|
nRoutesAdded, err := config.GetInstance().VerifyNewAgent(request.Host, ca, client)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, Error("invalid request", err))
|
|
return
|
|
}
|
|
|
|
zip, err := certs.ZipCert(ca.Cert, client.Cert, client.Key)
|
|
if err != nil {
|
|
c.Error(InternalServerError(err, "failed to zip certs"))
|
|
return
|
|
}
|
|
|
|
if err := os.WriteFile(filename, zip, 0o600); err != nil {
|
|
c.Error(InternalServerError(err, "failed to write certs"))
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, Success(fmt.Sprintf("Added %d routes", nRoutesAdded)))
|
|
}
|