mirror of
https://github.com/openziti/zrok.git
synced 2025-06-21 10:17:51 +02:00
/agent/unaccess handler (#967)
This commit is contained in:
parent
6cd7258fad
commit
94f11b16dd
55
controller/agentRemoteUnaccess.go
Normal file
55
controller/agentRemoteUnaccess.go
Normal file
@ -0,0 +1,55 @@
|
|||||||
|
package controller
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"github.com/go-openapi/runtime/middleware"
|
||||||
|
"github.com/openziti/zrok/agent/agentGrpc"
|
||||||
|
"github.com/openziti/zrok/controller/agentController"
|
||||||
|
"github.com/openziti/zrok/rest_model_zrok"
|
||||||
|
"github.com/openziti/zrok/rest_server_zrok/operations/agent"
|
||||||
|
"github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
type agentRemoteUnaccessHandler struct{}
|
||||||
|
|
||||||
|
func newAgentRemoteUnaccessHandler() *agentRemoteUnaccessHandler {
|
||||||
|
return &agentRemoteUnaccessHandler{}
|
||||||
|
}
|
||||||
|
|
||||||
|
func (h *agentRemoteUnaccessHandler) Handle(params agent.RemoteUnaccessParams, principal *rest_model_zrok.Principal) middleware.Responder {
|
||||||
|
trx, err := str.Begin()
|
||||||
|
if err != nil {
|
||||||
|
logrus.Errorf("error starting transaction for '%v': %v", principal.Email, err)
|
||||||
|
return agent.NewRemoteUnshareInternalServerError()
|
||||||
|
}
|
||||||
|
defer trx.Rollback()
|
||||||
|
|
||||||
|
env, err := str.FindEnvironmentForAccount(params.Body.EnvZID, int(principal.ID), trx)
|
||||||
|
if err != nil {
|
||||||
|
logrus.Errorf("error finding environment '%v' for '%v': %v", params.Body.EnvZID, principal.Email, err)
|
||||||
|
return agent.NewRemoteUnshareUnauthorized()
|
||||||
|
}
|
||||||
|
|
||||||
|
ae, err := str.FindAgentEnrollmentForEnvironment(env.Id, trx)
|
||||||
|
if err != nil {
|
||||||
|
logrus.Errorf("error finding agent enrollment for environment '%v' (%v): %v", params.Body.EnvZID, principal.Email, err)
|
||||||
|
return agent.NewRemoteUnshareBadGateway()
|
||||||
|
}
|
||||||
|
_ = trx.Rollback() // ...or will block unshare trx on sqlite
|
||||||
|
|
||||||
|
acli, aconn, err := agentController.NewAgentClient(ae.Token, cfg.AgentController)
|
||||||
|
if err != nil {
|
||||||
|
logrus.Errorf("error creating agent client for '%v' (%v): %v", params.Body.EnvZID, principal.Email, err)
|
||||||
|
return agent.NewRemoteUnshareInternalServerError()
|
||||||
|
}
|
||||||
|
defer aconn.Close()
|
||||||
|
|
||||||
|
req := &agentGrpc.ReleaseAccessRequest{FrontendToken: params.Body.FrontendToken}
|
||||||
|
_, err = acli.ReleaseAccess(context.Background(), req)
|
||||||
|
if err != nil {
|
||||||
|
logrus.Errorf("error releasing access '%v' for '%v' (%v): %v", params.Body.FrontendToken, params.Body.EnvZID, principal.Email, err)
|
||||||
|
return agent.NewRemoteUnaccessBadGateway()
|
||||||
|
}
|
||||||
|
|
||||||
|
return agent.NewRemoteUnaccessOK()
|
||||||
|
}
|
@ -71,6 +71,7 @@ func Run(inCfg *config.Config) error {
|
|||||||
api.AgentRemoteAccessHandler = newAgentRemoteAccessHandler()
|
api.AgentRemoteAccessHandler = newAgentRemoteAccessHandler()
|
||||||
api.AgentRemoteShareHandler = newAgentRemoteShareHandler()
|
api.AgentRemoteShareHandler = newAgentRemoteShareHandler()
|
||||||
api.AgentRemoteStatusHandler = newAgentRemoteStatusHandler()
|
api.AgentRemoteStatusHandler = newAgentRemoteStatusHandler()
|
||||||
|
api.AgentRemoteUnaccessHandler = newAgentRemoteUnaccessHandler()
|
||||||
api.AgentRemoteUnshareHandler = newAgentRemoteUnshareHandler()
|
api.AgentRemoteUnshareHandler = newAgentRemoteUnshareHandler()
|
||||||
api.AgentUnenrollHandler = newAgentUnenrollHandler()
|
api.AgentUnenrollHandler = newAgentUnenrollHandler()
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user