mirror of
https://github.com/openziti/zrok.git
synced 2025-06-21 02:07:44 +02:00
/agent/unaccess handler (#967)
This commit is contained in:
parent
6cd7258fad
commit
94f11b16dd
55
controller/agentRemoteUnaccess.go
Normal file
55
controller/agentRemoteUnaccess.go
Normal file
@ -0,0 +1,55 @@
|
||||
package controller
|
||||
|
||||
import (
|
||||
"context"
|
||||
"github.com/go-openapi/runtime/middleware"
|
||||
"github.com/openziti/zrok/agent/agentGrpc"
|
||||
"github.com/openziti/zrok/controller/agentController"
|
||||
"github.com/openziti/zrok/rest_model_zrok"
|
||||
"github.com/openziti/zrok/rest_server_zrok/operations/agent"
|
||||
"github.com/sirupsen/logrus"
|
||||
)
|
||||
|
||||
type agentRemoteUnaccessHandler struct{}
|
||||
|
||||
func newAgentRemoteUnaccessHandler() *agentRemoteUnaccessHandler {
|
||||
return &agentRemoteUnaccessHandler{}
|
||||
}
|
||||
|
||||
func (h *agentRemoteUnaccessHandler) Handle(params agent.RemoteUnaccessParams, principal *rest_model_zrok.Principal) middleware.Responder {
|
||||
trx, err := str.Begin()
|
||||
if err != nil {
|
||||
logrus.Errorf("error starting transaction for '%v': %v", principal.Email, err)
|
||||
return agent.NewRemoteUnshareInternalServerError()
|
||||
}
|
||||
defer trx.Rollback()
|
||||
|
||||
env, err := str.FindEnvironmentForAccount(params.Body.EnvZID, int(principal.ID), trx)
|
||||
if err != nil {
|
||||
logrus.Errorf("error finding environment '%v' for '%v': %v", params.Body.EnvZID, principal.Email, err)
|
||||
return agent.NewRemoteUnshareUnauthorized()
|
||||
}
|
||||
|
||||
ae, err := str.FindAgentEnrollmentForEnvironment(env.Id, trx)
|
||||
if err != nil {
|
||||
logrus.Errorf("error finding agent enrollment for environment '%v' (%v): %v", params.Body.EnvZID, principal.Email, err)
|
||||
return agent.NewRemoteUnshareBadGateway()
|
||||
}
|
||||
_ = trx.Rollback() // ...or will block unshare trx on sqlite
|
||||
|
||||
acli, aconn, err := agentController.NewAgentClient(ae.Token, cfg.AgentController)
|
||||
if err != nil {
|
||||
logrus.Errorf("error creating agent client for '%v' (%v): %v", params.Body.EnvZID, principal.Email, err)
|
||||
return agent.NewRemoteUnshareInternalServerError()
|
||||
}
|
||||
defer aconn.Close()
|
||||
|
||||
req := &agentGrpc.ReleaseAccessRequest{FrontendToken: params.Body.FrontendToken}
|
||||
_, err = acli.ReleaseAccess(context.Background(), req)
|
||||
if err != nil {
|
||||
logrus.Errorf("error releasing access '%v' for '%v' (%v): %v", params.Body.FrontendToken, params.Body.EnvZID, principal.Email, err)
|
||||
return agent.NewRemoteUnaccessBadGateway()
|
||||
}
|
||||
|
||||
return agent.NewRemoteUnaccessOK()
|
||||
}
|
@ -71,6 +71,7 @@ func Run(inCfg *config.Config) error {
|
||||
api.AgentRemoteAccessHandler = newAgentRemoteAccessHandler()
|
||||
api.AgentRemoteShareHandler = newAgentRemoteShareHandler()
|
||||
api.AgentRemoteStatusHandler = newAgentRemoteStatusHandler()
|
||||
api.AgentRemoteUnaccessHandler = newAgentRemoteUnaccessHandler()
|
||||
api.AgentRemoteUnshareHandler = newAgentRemoteUnshareHandler()
|
||||
api.AgentUnenrollHandler = newAgentUnenrollHandler()
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user