/agent/unaccess handler (#967)

This commit is contained in:
Michael Quigley 2025-06-02 17:04:38 -04:00
parent 6cd7258fad
commit 94f11b16dd
No known key found for this signature in database
GPG Key ID: 9B60314A9DD20A62
2 changed files with 56 additions and 0 deletions

View File

@ -0,0 +1,55 @@
package controller
import (
"context"
"github.com/go-openapi/runtime/middleware"
"github.com/openziti/zrok/agent/agentGrpc"
"github.com/openziti/zrok/controller/agentController"
"github.com/openziti/zrok/rest_model_zrok"
"github.com/openziti/zrok/rest_server_zrok/operations/agent"
"github.com/sirupsen/logrus"
)
type agentRemoteUnaccessHandler struct{}
func newAgentRemoteUnaccessHandler() *agentRemoteUnaccessHandler {
return &agentRemoteUnaccessHandler{}
}
func (h *agentRemoteUnaccessHandler) Handle(params agent.RemoteUnaccessParams, principal *rest_model_zrok.Principal) middleware.Responder {
trx, err := str.Begin()
if err != nil {
logrus.Errorf("error starting transaction for '%v': %v", principal.Email, err)
return agent.NewRemoteUnshareInternalServerError()
}
defer trx.Rollback()
env, err := str.FindEnvironmentForAccount(params.Body.EnvZID, int(principal.ID), trx)
if err != nil {
logrus.Errorf("error finding environment '%v' for '%v': %v", params.Body.EnvZID, principal.Email, err)
return agent.NewRemoteUnshareUnauthorized()
}
ae, err := str.FindAgentEnrollmentForEnvironment(env.Id, trx)
if err != nil {
logrus.Errorf("error finding agent enrollment for environment '%v' (%v): %v", params.Body.EnvZID, principal.Email, err)
return agent.NewRemoteUnshareBadGateway()
}
_ = trx.Rollback() // ...or will block unshare trx on sqlite
acli, aconn, err := agentController.NewAgentClient(ae.Token, cfg.AgentController)
if err != nil {
logrus.Errorf("error creating agent client for '%v' (%v): %v", params.Body.EnvZID, principal.Email, err)
return agent.NewRemoteUnshareInternalServerError()
}
defer aconn.Close()
req := &agentGrpc.ReleaseAccessRequest{FrontendToken: params.Body.FrontendToken}
_, err = acli.ReleaseAccess(context.Background(), req)
if err != nil {
logrus.Errorf("error releasing access '%v' for '%v' (%v): %v", params.Body.FrontendToken, params.Body.EnvZID, principal.Email, err)
return agent.NewRemoteUnaccessBadGateway()
}
return agent.NewRemoteUnaccessOK()
}

View File

@ -71,6 +71,7 @@ func Run(inCfg *config.Config) error {
api.AgentRemoteAccessHandler = newAgentRemoteAccessHandler() api.AgentRemoteAccessHandler = newAgentRemoteAccessHandler()
api.AgentRemoteShareHandler = newAgentRemoteShareHandler() api.AgentRemoteShareHandler = newAgentRemoteShareHandler()
api.AgentRemoteStatusHandler = newAgentRemoteStatusHandler() api.AgentRemoteStatusHandler = newAgentRemoteStatusHandler()
api.AgentRemoteUnaccessHandler = newAgentRemoteUnaccessHandler()
api.AgentRemoteUnshareHandler = newAgentRemoteUnshareHandler() api.AgentRemoteUnshareHandler = newAgentRemoteUnshareHandler()
api.AgentUnenrollHandler = newAgentUnenrollHandler() api.AgentUnenrollHandler = newAgentUnenrollHandler()
} }