@serve.zone/dcrouter 14.4.0 → 15.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/deno.json +1 -1
- package/dist_ts/00_commitinfo_data.js +1 -1
- package/dist_ts/config/classes.route-config-manager.js +6 -22
- package/dist_ts/email/classes.workapp-mail-manager.d.ts +11 -1
- package/dist_ts/email/classes.workapp-mail-manager.js +1 -1
- package/dist_ts/opsserver/classes.opsserver.d.ts +1 -1
- package/dist_ts/opsserver/classes.opsserver.js +3 -3
- package/dist_ts/opsserver/handlers/{workhoster.handler.d.ts → gatewayclient.handler.d.ts} +1 -3
- package/dist_ts/opsserver/handlers/gatewayclient.handler.js +578 -0
- package/dist_ts/opsserver/handlers/index.d.ts +1 -1
- package/dist_ts/opsserver/handlers/index.js +2 -2
- package/dist_ts_apiclient/classes.certificate.js +1 -1
- package/dist_ts_apiclient/classes.dcrouterapiclient.d.ts +2 -2
- package/dist_ts_apiclient/classes.dcrouterapiclient.js +4 -4
- package/dist_ts_apiclient/classes.gatewayclient.d.ts +16 -0
- package/dist_ts_apiclient/classes.gatewayclient.js +36 -0
- package/dist_ts_apiclient/index.d.ts +1 -1
- package/dist_ts_apiclient/index.js +2 -2
- package/dist_ts_interfaces/data/route-management.d.ts +2 -17
- package/dist_ts_interfaces/data/route-management.js +1 -1
- package/dist_ts_interfaces/data/workhoster.d.ts +0 -29
- package/dist_ts_interfaces/requests/certificate.d.ts +0 -5
- package/dist_ts_interfaces/requests/certificate.js +3 -1
- package/dist_ts_interfaces/requests/workhoster.d.ts +1 -63
- package/dist_ts_migrations/index.js +63 -2
- package/dist_ts_web/00_commitinfo_data.js +1 -1
- package/dist_ts_web/appstate.js +1 -1
- package/package.json +1 -1
- package/ts/00_commitinfo_data.ts +1 -1
- package/ts/config/classes.route-config-manager.ts +5 -20
- package/ts/email/classes.workapp-mail-manager.ts +11 -1
- package/ts/opsserver/classes.opsserver.ts +2 -2
- package/ts/opsserver/handlers/certificate.handler.ts +2 -2
- package/ts/opsserver/handlers/{workhoster.handler.ts → gatewayclient.handler.ts} +26 -105
- package/ts/opsserver/handlers/index.ts +1 -1
- package/ts_apiclient/classes.certificate.ts +3 -2
- package/ts_apiclient/classes.dcrouterapiclient.ts +3 -3
- package/ts_apiclient/classes.gatewayclient.ts +65 -0
- package/ts_apiclient/index.ts +1 -1
- package/ts_web/00_commitinfo_data.ts +1 -1
- package/ts_web/appstate.ts +3 -2
- package/dist_ts/opsserver/handlers/workhoster.handler.js +0 -635
- package/dist_ts_apiclient/classes.workhoster.d.ts +0 -15
- package/dist_ts_apiclient/classes.workhoster.js +0 -33
- package/ts_apiclient/classes.workhoster.ts +0 -57
|
@@ -0,0 +1,578 @@
|
|
|
1
|
+
import * as plugins from '../../plugins.js';
|
|
2
|
+
import * as interfaces from '../../../dist_ts_interfaces/index.js';
|
|
3
|
+
import { requireOpsAuth } from '../helpers/auth.js';
|
|
4
|
+
export class GatewayClientHandler {
|
|
5
|
+
opsServerRef;
|
|
6
|
+
typedrouter = new plugins.typedrequest.TypedRouter();
|
|
7
|
+
constructor(opsServerRef) {
|
|
8
|
+
this.opsServerRef = opsServerRef;
|
|
9
|
+
this.opsServerRef.typedrouter.addTypedRouter(this.typedrouter);
|
|
10
|
+
this.registerHandlers();
|
|
11
|
+
}
|
|
12
|
+
async requireAuth(request, requiredScope) {
|
|
13
|
+
const auth = await requireOpsAuth(this.opsServerRef, request, {
|
|
14
|
+
scope: requiredScope,
|
|
15
|
+
requireAdminIdentity: requiredScope?.endsWith(':write'),
|
|
16
|
+
});
|
|
17
|
+
return { userId: auth.userId, isAdmin: auth.isAdmin, token: auth.token };
|
|
18
|
+
}
|
|
19
|
+
async requireAdmin(request, scope = 'gateway-clients:write') {
|
|
20
|
+
const auth = await requireOpsAuth(this.opsServerRef, request, {
|
|
21
|
+
scope,
|
|
22
|
+
requireAdminIdentity: true,
|
|
23
|
+
requireAdminToken: true,
|
|
24
|
+
});
|
|
25
|
+
return auth.userId;
|
|
26
|
+
}
|
|
27
|
+
registerHandlers() {
|
|
28
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('getGatewayCapabilities', async (dataArg) => {
|
|
29
|
+
await this.requireAuth(dataArg, 'gateway-clients:read');
|
|
30
|
+
return { capabilities: this.getGatewayCapabilities() };
|
|
31
|
+
}));
|
|
32
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('getGatewayClientContext', async (dataArg) => {
|
|
33
|
+
const auth = await this.requireAuth(dataArg, 'gateway-clients:read');
|
|
34
|
+
return {
|
|
35
|
+
context: this.getGatewayClientContext(auth),
|
|
36
|
+
capabilities: this.getGatewayCapabilities(),
|
|
37
|
+
};
|
|
38
|
+
}));
|
|
39
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('listGatewayClients', async (dataArg) => {
|
|
40
|
+
await this.requireAdmin(dataArg, 'gateway-clients:read');
|
|
41
|
+
return { gatewayClients: await this.listManagedGatewayClients() };
|
|
42
|
+
}));
|
|
43
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('createGatewayClient', async (dataArg) => {
|
|
44
|
+
const userId = await this.requireAdmin(dataArg);
|
|
45
|
+
const manager = this.opsServerRef.dcRouterRef.gatewayClientManager;
|
|
46
|
+
if (!manager)
|
|
47
|
+
return { success: false, message: 'Gateway client management not initialized' };
|
|
48
|
+
try {
|
|
49
|
+
const gatewayClient = await manager.createClient({
|
|
50
|
+
id: dataArg.id,
|
|
51
|
+
type: dataArg.type,
|
|
52
|
+
name: dataArg.name,
|
|
53
|
+
description: dataArg.description,
|
|
54
|
+
hostnamePatterns: dataArg.hostnamePatterns,
|
|
55
|
+
allowedRouteTargets: dataArg.allowedRouteTargets,
|
|
56
|
+
capabilities: dataArg.capabilities,
|
|
57
|
+
createdBy: userId,
|
|
58
|
+
});
|
|
59
|
+
return { success: true, gatewayClient };
|
|
60
|
+
}
|
|
61
|
+
catch (error) {
|
|
62
|
+
return { success: false, message: error.message };
|
|
63
|
+
}
|
|
64
|
+
}));
|
|
65
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('updateGatewayClient', async (dataArg) => {
|
|
66
|
+
await this.requireAdmin(dataArg);
|
|
67
|
+
const manager = this.opsServerRef.dcRouterRef.gatewayClientManager;
|
|
68
|
+
if (!manager)
|
|
69
|
+
return { success: false, message: 'Gateway client management not initialized' };
|
|
70
|
+
const gatewayClient = await manager.updateClient(dataArg.id, {
|
|
71
|
+
name: dataArg.name,
|
|
72
|
+
description: dataArg.description,
|
|
73
|
+
hostnamePatterns: dataArg.hostnamePatterns,
|
|
74
|
+
allowedRouteTargets: dataArg.allowedRouteTargets,
|
|
75
|
+
capabilities: dataArg.capabilities,
|
|
76
|
+
enabled: dataArg.enabled,
|
|
77
|
+
});
|
|
78
|
+
return gatewayClient
|
|
79
|
+
? { success: true, gatewayClient }
|
|
80
|
+
: { success: false, message: 'Gateway client not found' };
|
|
81
|
+
}));
|
|
82
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('deleteGatewayClient', async (dataArg) => {
|
|
83
|
+
await this.requireAdmin(dataArg);
|
|
84
|
+
const manager = this.opsServerRef.dcRouterRef.gatewayClientManager;
|
|
85
|
+
if (!manager)
|
|
86
|
+
return { success: false, message: 'Gateway client management not initialized' };
|
|
87
|
+
const success = await manager.deleteClient(dataArg.id);
|
|
88
|
+
return { success, message: success ? undefined : 'Gateway client not found' };
|
|
89
|
+
}));
|
|
90
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('createGatewayClientToken', async (dataArg) => {
|
|
91
|
+
const userId = await this.requireAdmin(dataArg, 'tokens:manage');
|
|
92
|
+
const gatewayClient = await this.opsServerRef.dcRouterRef.gatewayClientManager?.getClient(dataArg.gatewayClientId);
|
|
93
|
+
const tokenManager = this.opsServerRef.dcRouterRef.apiTokenManager;
|
|
94
|
+
if (!gatewayClient || !gatewayClient.enabled) {
|
|
95
|
+
return { success: false, message: 'Gateway client not found or disabled' };
|
|
96
|
+
}
|
|
97
|
+
if (!tokenManager) {
|
|
98
|
+
return { success: false, message: 'Token management not initialized' };
|
|
99
|
+
}
|
|
100
|
+
const result = await tokenManager.createToken(dataArg.name?.trim() || `${gatewayClient.name} Token`, ['gateway-clients:read', 'gateway-clients:write'], dataArg.expiresInDays ?? null, userId, {
|
|
101
|
+
role: 'gatewayClient',
|
|
102
|
+
scopes: ['gateway-clients:read', 'gateway-clients:write'],
|
|
103
|
+
gatewayClient: { type: gatewayClient.type, id: gatewayClient.id },
|
|
104
|
+
hostnamePatterns: gatewayClient.hostnamePatterns,
|
|
105
|
+
allowedRouteTargets: gatewayClient.allowedRouteTargets,
|
|
106
|
+
capabilities: gatewayClient.capabilities,
|
|
107
|
+
});
|
|
108
|
+
return { success: true, tokenId: result.id, tokenValue: result.rawToken };
|
|
109
|
+
}));
|
|
110
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('getGatewayClientDomains', async (dataArg) => {
|
|
111
|
+
const auth = await this.requireAuth(dataArg, 'gateway-clients:read');
|
|
112
|
+
this.assertCapability(auth, 'readDomains');
|
|
113
|
+
return { domains: await this.listGatewayClientDomains(auth, dataArg.gatewayClientId) };
|
|
114
|
+
}));
|
|
115
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('getGatewayClientDnsRecords', async (dataArg) => {
|
|
116
|
+
const auth = await this.requireAuth(dataArg, 'gateway-clients:read');
|
|
117
|
+
this.assertCapability(auth, 'readDnsRecords');
|
|
118
|
+
return { records: await this.listGatewayClientDnsRecords(auth, dataArg.gatewayClientId) };
|
|
119
|
+
}));
|
|
120
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('syncGatewayClientRoute', async (dataArg) => {
|
|
121
|
+
const auth = await this.requireAuth(dataArg, 'gateway-clients:write');
|
|
122
|
+
this.assertCapability(auth, 'syncRoutes');
|
|
123
|
+
return await this.syncGatewayClientRoute(auth, dataArg.ownership, dataArg.route, dataArg.enabled, dataArg.delete);
|
|
124
|
+
}));
|
|
125
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('listMailAddressBindings', async (dataArg) => {
|
|
126
|
+
const auth = await this.requireAuth(dataArg.auth || {}, 'gateway-clients:read');
|
|
127
|
+
const manager = this.opsServerRef.dcRouterRef.workAppMailManager;
|
|
128
|
+
if (!manager)
|
|
129
|
+
return { bindings: [] };
|
|
130
|
+
return {
|
|
131
|
+
bindings: await manager.listMailAddressBindings({
|
|
132
|
+
owner: this.resolveMailOwnerFilter(auth, dataArg.owner),
|
|
133
|
+
domain: dataArg.domain,
|
|
134
|
+
address: dataArg.address,
|
|
135
|
+
}),
|
|
136
|
+
};
|
|
137
|
+
}));
|
|
138
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('syncMailAddressBinding', async (dataArg) => {
|
|
139
|
+
const auth = await this.requireAuth(dataArg.auth || {}, 'gateway-clients:write');
|
|
140
|
+
this.assertCapability(auth, 'syncRoutes');
|
|
141
|
+
const manager = this.opsServerRef.dcRouterRef.workAppMailManager;
|
|
142
|
+
if (!manager) {
|
|
143
|
+
return { success: false, message: 'WorkApp mail manager not initialized' };
|
|
144
|
+
}
|
|
145
|
+
try {
|
|
146
|
+
const binding = {
|
|
147
|
+
...dataArg.binding,
|
|
148
|
+
owner: this.resolveMailOwner(auth, dataArg.binding.owner),
|
|
149
|
+
};
|
|
150
|
+
this.assertMailForwardTargetAllowed(auth, binding.inboundTarget);
|
|
151
|
+
return await manager.syncMailAddressBinding(binding, auth.userId);
|
|
152
|
+
}
|
|
153
|
+
catch (error) {
|
|
154
|
+
return { success: false, message: error.message };
|
|
155
|
+
}
|
|
156
|
+
}));
|
|
157
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('deleteMailAddressBinding', async (dataArg) => {
|
|
158
|
+
const auth = await this.requireAuth(dataArg.auth || {}, 'gateway-clients:write');
|
|
159
|
+
this.assertCapability(auth, 'syncRoutes');
|
|
160
|
+
const manager = this.opsServerRef.dcRouterRef.workAppMailManager;
|
|
161
|
+
if (!manager) {
|
|
162
|
+
return { success: false, message: 'WorkApp mail manager not initialized' };
|
|
163
|
+
}
|
|
164
|
+
if (auth.token?.policy?.role === 'gatewayClient') {
|
|
165
|
+
const bindings = await manager.listMailAddressBindings({
|
|
166
|
+
owner: this.resolveMailOwnerFilter(auth),
|
|
167
|
+
});
|
|
168
|
+
const binding = bindings.find((candidate) => candidate.id === dataArg.id);
|
|
169
|
+
if (!binding)
|
|
170
|
+
return { success: true };
|
|
171
|
+
return await manager.deleteMailAddressBinding(binding.id, auth.userId);
|
|
172
|
+
}
|
|
173
|
+
return await manager.deleteMailAddressBinding(dataArg.id, auth.userId);
|
|
174
|
+
}));
|
|
175
|
+
this.typedrouter.addTypedHandler(new plugins.typedrequest.TypedHandler('listWorkAppMailBindings', async (dataArg) => {
|
|
176
|
+
const auth = await this.requireAuth(dataArg.auth || {}, 'gateway-clients:read');
|
|
177
|
+
const manager = this.opsServerRef.dcRouterRef.workAppMailManager;
|
|
178
|
+
if (!manager)
|
|
179
|
+
return { bindings: [] };
|
|
180
|
+
return { bindings: await manager.listWorkAppMailBindings(this.resolveMailOwnerFilter(auth, dataArg.owner)) };
|
|
181
|
+
}));
|
|
182
|
+
}
|
|
183
|
+
getGatewayCapabilities() {
|
|
184
|
+
const dcRouter = this.opsServerRef.dcRouterRef;
|
|
185
|
+
return {
|
|
186
|
+
routes: {
|
|
187
|
+
read: Boolean(dcRouter.routeConfigManager),
|
|
188
|
+
write: Boolean(dcRouter.routeConfigManager),
|
|
189
|
+
idempotentSync: Boolean(dcRouter.routeConfigManager),
|
|
190
|
+
},
|
|
191
|
+
domains: {
|
|
192
|
+
read: Boolean(dcRouter.dnsManager),
|
|
193
|
+
write: Boolean(dcRouter.dnsManager),
|
|
194
|
+
},
|
|
195
|
+
certificates: {
|
|
196
|
+
read: Boolean(dcRouter.smartProxy),
|
|
197
|
+
export: Boolean(dcRouter.smartProxy),
|
|
198
|
+
forceRenew: Boolean(dcRouter.smartProxy),
|
|
199
|
+
},
|
|
200
|
+
email: {
|
|
201
|
+
domains: Boolean(dcRouter.emailDomainManager),
|
|
202
|
+
inbound: Boolean(dcRouter.emailServer),
|
|
203
|
+
outbound: Boolean(dcRouter.emailServer),
|
|
204
|
+
},
|
|
205
|
+
remoteIngress: {
|
|
206
|
+
enabled: Boolean(dcRouter.remoteIngressManager?.getHubSettings().enabled),
|
|
207
|
+
},
|
|
208
|
+
dns: {
|
|
209
|
+
authoritative: Boolean(dcRouter.options.dnsScopes?.length),
|
|
210
|
+
providerManaged: Boolean(dcRouter.dnsManager),
|
|
211
|
+
},
|
|
212
|
+
http3: {
|
|
213
|
+
enabled: dcRouter.options.http3?.enabled !== false,
|
|
214
|
+
},
|
|
215
|
+
};
|
|
216
|
+
}
|
|
217
|
+
getGatewayClientContext(auth) {
|
|
218
|
+
const policy = auth.token?.policy;
|
|
219
|
+
const role = auth.isAdmin ? 'admin' : policy?.role || 'operator';
|
|
220
|
+
return {
|
|
221
|
+
role,
|
|
222
|
+
scopes: auth.token?.scopes || ['*'],
|
|
223
|
+
gatewayClient: policy?.gatewayClient,
|
|
224
|
+
hostnamePatterns: policy?.hostnamePatterns || [],
|
|
225
|
+
allowedRouteTargets: policy?.allowedRouteTargets || [],
|
|
226
|
+
capabilities: policy?.capabilities || {},
|
|
227
|
+
};
|
|
228
|
+
}
|
|
229
|
+
async listManagedGatewayClients() {
|
|
230
|
+
const manager = this.opsServerRef.dcRouterRef.gatewayClientManager;
|
|
231
|
+
if (!manager)
|
|
232
|
+
return [];
|
|
233
|
+
const clients = await manager.listClients();
|
|
234
|
+
const tokens = this.opsServerRef.dcRouterRef.apiTokenManager?.listTokens() || [];
|
|
235
|
+
return clients.map((client) => ({
|
|
236
|
+
...client,
|
|
237
|
+
tokenCount: tokens.filter((token) => token.policy?.gatewayClient?.id === client.id).length,
|
|
238
|
+
}));
|
|
239
|
+
}
|
|
240
|
+
assertCapability(auth, capability) {
|
|
241
|
+
if (auth.isAdmin)
|
|
242
|
+
return;
|
|
243
|
+
const policy = auth.token?.policy;
|
|
244
|
+
if (!policy || policy.role !== 'gatewayClient')
|
|
245
|
+
return;
|
|
246
|
+
if (policy.capabilities?.[capability] === true)
|
|
247
|
+
return;
|
|
248
|
+
throw new plugins.typedrequest.TypedResponseError(`token capability missing: ${String(capability)}`);
|
|
249
|
+
}
|
|
250
|
+
resolveGatewayClientId(auth, requestedId) {
|
|
251
|
+
const policyClient = auth.token?.policy?.gatewayClient;
|
|
252
|
+
if (!policyClient)
|
|
253
|
+
return requestedId;
|
|
254
|
+
if (requestedId && requestedId !== policyClient.id) {
|
|
255
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token cannot access another gateway client');
|
|
256
|
+
}
|
|
257
|
+
return policyClient.id;
|
|
258
|
+
}
|
|
259
|
+
resolveGatewayClientOwnership(auth, ownership) {
|
|
260
|
+
const policy = auth.token?.policy;
|
|
261
|
+
if (policy?.role === 'gatewayClient') {
|
|
262
|
+
if (!policy.gatewayClient) {
|
|
263
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token is missing gatewayClient binding');
|
|
264
|
+
}
|
|
265
|
+
if (ownership.gatewayClientType && ownership.gatewayClientType !== policy.gatewayClient.type) {
|
|
266
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token cannot act for this ownership');
|
|
267
|
+
}
|
|
268
|
+
if (ownership.gatewayClientId && ownership.gatewayClientId !== policy.gatewayClient.id) {
|
|
269
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token cannot act for this ownership');
|
|
270
|
+
}
|
|
271
|
+
return {
|
|
272
|
+
gatewayClientType: policy.gatewayClient.type,
|
|
273
|
+
gatewayClientId: policy.gatewayClient.id,
|
|
274
|
+
appId: ownership.appId,
|
|
275
|
+
hostname: ownership.hostname,
|
|
276
|
+
};
|
|
277
|
+
}
|
|
278
|
+
if (!ownership.gatewayClientType || !ownership.gatewayClientId) {
|
|
279
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client ownership is missing type or id');
|
|
280
|
+
}
|
|
281
|
+
return ownership;
|
|
282
|
+
}
|
|
283
|
+
resolveMailOwnerFilter(auth, owner) {
|
|
284
|
+
const policy = auth.token?.policy;
|
|
285
|
+
if (policy?.role !== 'gatewayClient')
|
|
286
|
+
return owner;
|
|
287
|
+
if (!policy.gatewayClient) {
|
|
288
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token is missing gatewayClient binding');
|
|
289
|
+
}
|
|
290
|
+
if (owner?.gatewayClientType && owner.gatewayClientType !== policy.gatewayClient.type) {
|
|
291
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token cannot act for this ownership');
|
|
292
|
+
}
|
|
293
|
+
if (owner?.gatewayClientId && owner.gatewayClientId !== policy.gatewayClient.id) {
|
|
294
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token cannot act for this ownership');
|
|
295
|
+
}
|
|
296
|
+
return {
|
|
297
|
+
...owner,
|
|
298
|
+
gatewayClientType: policy.gatewayClient.type,
|
|
299
|
+
gatewayClientId: policy.gatewayClient.id,
|
|
300
|
+
};
|
|
301
|
+
}
|
|
302
|
+
resolveMailOwner(auth, owner) {
|
|
303
|
+
const resolvedOwner = this.resolveMailOwnerFilter(auth, owner);
|
|
304
|
+
if (!resolvedOwner?.gatewayClientType || !resolvedOwner.gatewayClientId) {
|
|
305
|
+
throw new plugins.typedrequest.TypedResponseError('mail owner is missing gateway client type or id');
|
|
306
|
+
}
|
|
307
|
+
return resolvedOwner;
|
|
308
|
+
}
|
|
309
|
+
assertGatewayClientOwnership(auth, ownership) {
|
|
310
|
+
const policy = auth.token?.policy;
|
|
311
|
+
if (!policy || policy.role !== 'gatewayClient')
|
|
312
|
+
return;
|
|
313
|
+
if (!this.matchesHostnamePatterns(ownership.hostname, policy.hostnamePatterns || [])) {
|
|
314
|
+
throw new plugins.typedrequest.TypedResponseError('hostname is outside token policy');
|
|
315
|
+
}
|
|
316
|
+
}
|
|
317
|
+
assertRouteTargetsAllowed(auth, route) {
|
|
318
|
+
const policy = auth.token?.policy;
|
|
319
|
+
if (!policy || policy.role !== 'gatewayClient' || !route)
|
|
320
|
+
return;
|
|
321
|
+
const allowedTargets = policy.allowedRouteTargets || [];
|
|
322
|
+
if (allowedTargets.length === 0) {
|
|
323
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token has no allowed route targets');
|
|
324
|
+
}
|
|
325
|
+
const targets = (route.action?.targets || []);
|
|
326
|
+
for (const target of targets) {
|
|
327
|
+
const host = String(target.host || '').trim().toLowerCase();
|
|
328
|
+
const port = Number(target.port);
|
|
329
|
+
const allowed = allowedTargets.some((allowedTarget) => {
|
|
330
|
+
return allowedTarget.host.trim().toLowerCase() === host && allowedTarget.ports.includes(port);
|
|
331
|
+
});
|
|
332
|
+
if (!allowed) {
|
|
333
|
+
throw new plugins.typedrequest.TypedResponseError(`route target is outside token policy: ${host}:${port}`);
|
|
334
|
+
}
|
|
335
|
+
}
|
|
336
|
+
}
|
|
337
|
+
assertMailForwardTargetAllowed(auth, target) {
|
|
338
|
+
const policy = auth.token?.policy;
|
|
339
|
+
if (!policy || policy.role !== 'gatewayClient' || !target?.smtpForward)
|
|
340
|
+
return;
|
|
341
|
+
const allowedTargets = policy.allowedRouteTargets || [];
|
|
342
|
+
if (allowedTargets.length === 0) {
|
|
343
|
+
throw new plugins.typedrequest.TypedResponseError('gateway client token has no allowed route targets');
|
|
344
|
+
}
|
|
345
|
+
const host = target.smtpForward.host.trim().toLowerCase();
|
|
346
|
+
const port = Number(target.smtpForward.port);
|
|
347
|
+
const allowed = allowedTargets.some((allowedTarget) => {
|
|
348
|
+
return allowedTarget.host.trim().toLowerCase() === host && allowedTarget.ports.includes(port);
|
|
349
|
+
});
|
|
350
|
+
if (!allowed) {
|
|
351
|
+
throw new plugins.typedrequest.TypedResponseError(`mail target is outside token policy: ${host}:${port}`);
|
|
352
|
+
}
|
|
353
|
+
}
|
|
354
|
+
matchesHostnamePatterns(hostname, patterns) {
|
|
355
|
+
const normalizedHostname = hostname.trim().toLowerCase();
|
|
356
|
+
if (!normalizedHostname)
|
|
357
|
+
return false;
|
|
358
|
+
for (const pattern of patterns) {
|
|
359
|
+
const normalizedPattern = pattern.trim().toLowerCase();
|
|
360
|
+
if (!normalizedPattern)
|
|
361
|
+
continue;
|
|
362
|
+
if (normalizedPattern === normalizedHostname)
|
|
363
|
+
return true;
|
|
364
|
+
if (normalizedPattern.startsWith('*.')) {
|
|
365
|
+
const suffix = normalizedPattern.slice(2);
|
|
366
|
+
if (!normalizedHostname.endsWith(`.${suffix}`))
|
|
367
|
+
continue;
|
|
368
|
+
const prefix = normalizedHostname.slice(0, -(suffix.length + 1));
|
|
369
|
+
if (prefix && !prefix.includes('.'))
|
|
370
|
+
return true;
|
|
371
|
+
}
|
|
372
|
+
}
|
|
373
|
+
return false;
|
|
374
|
+
}
|
|
375
|
+
getRouteHostnames(route) {
|
|
376
|
+
const domains = route.match?.domains;
|
|
377
|
+
if (Array.isArray(domains)) {
|
|
378
|
+
return domains.map((domain) => String(domain).trim().toLowerCase()).filter(Boolean);
|
|
379
|
+
}
|
|
380
|
+
if (typeof domains === 'string') {
|
|
381
|
+
return domains.split(',').map((domain) => domain.trim().toLowerCase()).filter(Boolean);
|
|
382
|
+
}
|
|
383
|
+
return [];
|
|
384
|
+
}
|
|
385
|
+
getOwnedRoutes(gatewayClientId) {
|
|
386
|
+
const manager = this.opsServerRef.dcRouterRef.routeConfigManager;
|
|
387
|
+
if (!manager)
|
|
388
|
+
return [];
|
|
389
|
+
return manager.getMergedRoutes().routes.filter((route) => {
|
|
390
|
+
const metadata = route.metadata;
|
|
391
|
+
if (!metadata)
|
|
392
|
+
return false;
|
|
393
|
+
if (metadata.ownerType !== 'gatewayClient')
|
|
394
|
+
return false;
|
|
395
|
+
return gatewayClientId ? metadata.gatewayClientId === gatewayClientId : true;
|
|
396
|
+
});
|
|
397
|
+
}
|
|
398
|
+
async listGatewayClientDomains(auth, requestedGatewayClientId) {
|
|
399
|
+
const dnsManager = this.opsServerRef.dcRouterRef.dnsManager;
|
|
400
|
+
if (!dnsManager)
|
|
401
|
+
return [];
|
|
402
|
+
const gatewayClientId = this.resolveGatewayClientId(auth, requestedGatewayClientId);
|
|
403
|
+
const ownedRoutes = this.getOwnedRoutes(gatewayClientId);
|
|
404
|
+
const routeHostnames = ownedRoutes.flatMap((route) => this.getRouteHostnames(route.route));
|
|
405
|
+
const docs = await dnsManager.listDomains();
|
|
406
|
+
return docs
|
|
407
|
+
.filter((domainDoc) => {
|
|
408
|
+
if (!auth.token?.policy || auth.token.policy.role !== 'gatewayClient')
|
|
409
|
+
return true;
|
|
410
|
+
return routeHostnames.some((hostname) => this.isHostnameInDomain(hostname, domainDoc.name));
|
|
411
|
+
})
|
|
412
|
+
.map((domainDoc) => {
|
|
413
|
+
const domain = dnsManager.toPublicDomain(domainDoc);
|
|
414
|
+
const canManageDnsRecords = domain.source === 'dcrouter' || Boolean(domain.providerId);
|
|
415
|
+
const serviceCount = routeHostnames.filter((hostname) => this.isHostnameInDomain(hostname, domain.name)).length;
|
|
416
|
+
return {
|
|
417
|
+
...domain,
|
|
418
|
+
serviceCount,
|
|
419
|
+
managePath: `/domains/${domain.id}`,
|
|
420
|
+
capabilities: {
|
|
421
|
+
canCreateSubdomains: canManageDnsRecords,
|
|
422
|
+
canManageDnsRecords,
|
|
423
|
+
canIssueCertificates: Boolean(this.opsServerRef.dcRouterRef.smartProxy),
|
|
424
|
+
canHostEmail: Boolean(this.opsServerRef.dcRouterRef.emailDomainManager),
|
|
425
|
+
},
|
|
426
|
+
};
|
|
427
|
+
});
|
|
428
|
+
}
|
|
429
|
+
async listGatewayClientDnsRecords(auth, requestedGatewayClientId) {
|
|
430
|
+
const dnsManager = this.opsServerRef.dcRouterRef.dnsManager;
|
|
431
|
+
if (!dnsManager)
|
|
432
|
+
return [];
|
|
433
|
+
const gatewayClientId = this.resolveGatewayClientId(auth, requestedGatewayClientId);
|
|
434
|
+
const ownedRoutes = this.getOwnedRoutes(gatewayClientId);
|
|
435
|
+
const domains = await dnsManager.listDomains();
|
|
436
|
+
const records = [];
|
|
437
|
+
for (const route of ownedRoutes) {
|
|
438
|
+
const metadata = route.metadata;
|
|
439
|
+
if (!metadata)
|
|
440
|
+
continue;
|
|
441
|
+
const gatewayClientType = metadata.gatewayClientType || 'custom';
|
|
442
|
+
const routeGatewayClientId = metadata.gatewayClientId || '';
|
|
443
|
+
const appId = metadata.gatewayClientAppId || '';
|
|
444
|
+
for (const hostname of this.getRouteHostnames(route.route)) {
|
|
445
|
+
if (auth.token?.policy?.role === 'gatewayClient' && !this.matchesHostnamePatterns(hostname, auth.token.policy.hostnamePatterns || [])) {
|
|
446
|
+
continue;
|
|
447
|
+
}
|
|
448
|
+
const domainDoc = domains.find((domain) => this.isHostnameInDomain(hostname, domain.name));
|
|
449
|
+
const domainRecords = domainDoc ? await dnsManager.listRecordsForDomain(domainDoc.id) : [];
|
|
450
|
+
const matchingRecords = domainRecords.filter((record) => record.name === hostname);
|
|
451
|
+
if (matchingRecords.length === 0) {
|
|
452
|
+
records.push({
|
|
453
|
+
id: `missing:${hostname}`,
|
|
454
|
+
domainId: domainDoc?.id || '',
|
|
455
|
+
domainName: domainDoc?.name,
|
|
456
|
+
name: hostname,
|
|
457
|
+
type: 'MISSING',
|
|
458
|
+
value: '',
|
|
459
|
+
ttl: 0,
|
|
460
|
+
source: 'local',
|
|
461
|
+
status: 'missing',
|
|
462
|
+
gatewayClientType,
|
|
463
|
+
gatewayClientId: routeGatewayClientId,
|
|
464
|
+
appId,
|
|
465
|
+
hostname,
|
|
466
|
+
routeId: route.id,
|
|
467
|
+
managePath: domainDoc ? `/domains/${domainDoc.id}/dns` : '/domains',
|
|
468
|
+
createdAt: route.createdAt || 0,
|
|
469
|
+
updatedAt: route.updatedAt || 0,
|
|
470
|
+
createdBy: '',
|
|
471
|
+
});
|
|
472
|
+
continue;
|
|
473
|
+
}
|
|
474
|
+
for (const recordDoc of matchingRecords) {
|
|
475
|
+
const record = dnsManager.toPublicRecord(recordDoc);
|
|
476
|
+
records.push({
|
|
477
|
+
...record,
|
|
478
|
+
domainName: domainDoc?.name,
|
|
479
|
+
status: 'active',
|
|
480
|
+
gatewayClientType,
|
|
481
|
+
gatewayClientId: routeGatewayClientId,
|
|
482
|
+
appId,
|
|
483
|
+
hostname,
|
|
484
|
+
routeId: route.id,
|
|
485
|
+
managePath: `/dns-records/${record.id}`,
|
|
486
|
+
});
|
|
487
|
+
}
|
|
488
|
+
}
|
|
489
|
+
}
|
|
490
|
+
return records;
|
|
491
|
+
}
|
|
492
|
+
isHostnameInDomain(hostname, domainName) {
|
|
493
|
+
const normalizedHostname = hostname.trim().toLowerCase();
|
|
494
|
+
const normalizedDomainName = domainName.trim().toLowerCase();
|
|
495
|
+
return normalizedHostname === normalizedDomainName || normalizedHostname.endsWith(`.${normalizedDomainName}`);
|
|
496
|
+
}
|
|
497
|
+
async syncGatewayClientRoute(auth, ownership, route, enabled, deleteRoute) {
|
|
498
|
+
const resolvedOwnership = this.resolveGatewayClientOwnership(auth, ownership);
|
|
499
|
+
this.assertGatewayClientOwnership(auth, resolvedOwnership);
|
|
500
|
+
this.assertRouteTargetsAllowed(auth, route);
|
|
501
|
+
const manager = this.opsServerRef.dcRouterRef.routeConfigManager;
|
|
502
|
+
if (!manager) {
|
|
503
|
+
return { success: false, message: 'Route management not initialized' };
|
|
504
|
+
}
|
|
505
|
+
const externalKey = this.buildGatewayClientExternalKey(resolvedOwnership);
|
|
506
|
+
const existingRoute = manager.findApiRouteByExternalKey(externalKey);
|
|
507
|
+
if (deleteRoute) {
|
|
508
|
+
if (!existingRoute) {
|
|
509
|
+
return { success: true, action: 'unchanged' };
|
|
510
|
+
}
|
|
511
|
+
const result = await manager.deleteRoute(existingRoute.id);
|
|
512
|
+
return result.success
|
|
513
|
+
? { success: true, action: 'deleted', routeId: existingRoute.id }
|
|
514
|
+
: { success: false, message: result.message };
|
|
515
|
+
}
|
|
516
|
+
if (!route) {
|
|
517
|
+
return { success: false, message: 'route is required unless delete=true' };
|
|
518
|
+
}
|
|
519
|
+
const sourceBindings = this.getManagedRouteSourceBindings();
|
|
520
|
+
if (!sourceBindings) {
|
|
521
|
+
return { success: false, message: 'STANDARD source profile not found' };
|
|
522
|
+
}
|
|
523
|
+
const metadata = {
|
|
524
|
+
sourceBindings,
|
|
525
|
+
ownerType: 'gatewayClient',
|
|
526
|
+
gatewayClientType: resolvedOwnership.gatewayClientType,
|
|
527
|
+
gatewayClientId: resolvedOwnership.gatewayClientId,
|
|
528
|
+
gatewayClientAppId: resolvedOwnership.appId,
|
|
529
|
+
externalKey,
|
|
530
|
+
};
|
|
531
|
+
const normalizedRoute = this.normalizeGatewayClientRoute(route, resolvedOwnership, externalKey);
|
|
532
|
+
if (existingRoute) {
|
|
533
|
+
const routePatch = { ...normalizedRoute };
|
|
534
|
+
routePatch.security = null;
|
|
535
|
+
const result = await manager.updateRoute(existingRoute.id, {
|
|
536
|
+
route: routePatch,
|
|
537
|
+
enabled: enabled ?? true,
|
|
538
|
+
metadata,
|
|
539
|
+
});
|
|
540
|
+
return result.success
|
|
541
|
+
? { success: true, action: 'updated', routeId: existingRoute.id }
|
|
542
|
+
: { success: false, message: result.message };
|
|
543
|
+
}
|
|
544
|
+
const routeId = await manager.createRoute(normalizedRoute, auth.userId, enabled ?? true, metadata);
|
|
545
|
+
return { success: true, action: 'created', routeId };
|
|
546
|
+
}
|
|
547
|
+
buildGatewayClientExternalKey(ownership) {
|
|
548
|
+
return [
|
|
549
|
+
ownership.gatewayClientType,
|
|
550
|
+
ownership.gatewayClientId,
|
|
551
|
+
ownership.appId,
|
|
552
|
+
ownership.hostname,
|
|
553
|
+
].map((part) => part.trim()).join(':');
|
|
554
|
+
}
|
|
555
|
+
normalizeGatewayClientRoute(route, ownership, externalKey) {
|
|
556
|
+
const normalizedRoute = structuredClone(route);
|
|
557
|
+
delete normalizedRoute.security;
|
|
558
|
+
if (!normalizedRoute.name) {
|
|
559
|
+
normalizedRoute.name = `gateway-client-${externalKey.replace(/[^a-zA-Z0-9-]+/g, '-').slice(0, 80)}`;
|
|
560
|
+
}
|
|
561
|
+
return normalizedRoute;
|
|
562
|
+
}
|
|
563
|
+
getManagedRouteSourceBindings() {
|
|
564
|
+
const resolver = this.opsServerRef.dcRouterRef.referenceResolver;
|
|
565
|
+
const standardProfile = resolver?.listProfiles().find((profile) => {
|
|
566
|
+
return profile.id.trim().toLowerCase() === 'standard'
|
|
567
|
+
|| profile.name.trim().toLowerCase() === 'standard';
|
|
568
|
+
});
|
|
569
|
+
if (!standardProfile) {
|
|
570
|
+
return undefined;
|
|
571
|
+
}
|
|
572
|
+
return [{
|
|
573
|
+
sourceProfileRef: standardProfile.id,
|
|
574
|
+
sourceProfileName: standardProfile.name,
|
|
575
|
+
}];
|
|
576
|
+
}
|
|
577
|
+
}
|
|
578
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -20,5 +20,5 @@ export * from './domain.handler.js';
|
|
|
20
20
|
export * from './dns-record.handler.js';
|
|
21
21
|
export * from './acme-config.handler.js';
|
|
22
22
|
export * from './email-domain.handler.js';
|
|
23
|
-
export * from './
|
|
24
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
23
|
+
export * from './gatewayclient.handler.js';
|
|
24
|
+
//# sourceMappingURL=data:application/json;base64,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
|