summaryrefslogtreecommitdiff
path: root/internal/server.go
diff options
context:
space:
mode:
authorjwijenbergh <jeroenwijenbergh@protonmail.com>2022-05-03 14:10:40 +0200
committerjwijenbergh <jeroenwijenbergh@protonmail.com>2022-05-03 14:10:40 +0200
commit43604f7ffcbbf5b06ae481d2af7e66f6423f183f (patch)
tree6eb74ed54929edcfac61e5ca55078ab6670e0081 /internal/server.go
parent466450f0c47bdc614e66326d90e5fc6fb56ae732 (diff)
Refactor: Secure internet into a different type but with interface
Diffstat (limited to 'internal/server.go')
-rw-r--r--internal/server.go366
1 files changed, 266 insertions, 100 deletions
diff --git a/internal/server.go b/internal/server.go
index 489719e..7500a26 100644
--- a/internal/server.go
+++ b/internal/server.go
@@ -2,114 +2,225 @@ package internal
import (
"encoding/json"
- "errors"
"fmt"
)
-type Server struct {
- BaseURL string `json:"base_url"`
+// The base type for servers
+type ServerBase struct {
+ URL string `json:"base_url"`
Endpoints ServerEndpoints `json:"endpoints"`
- OAuth OAuth `json:"oauth"`
Profiles ServerProfileInfo `json:"profiles"`
ProfilesRaw string `json:"profiles_raw"`
Logger *FileLogger `json:"-"`
FSM *FSM `json:"-"`
}
-type Servers struct {
- List map[string]*Server `json:"list"`
- Current string `json:"current"`
- SecureHome string `json:"secure_home"`
+// An instute access server
+type InstituteAccessServer struct {
+ // An instute access server has its own OAuth
+ OAuth OAuth `json:"oauth"`
+
+ // Embed the server base
+ Base ServerBase `json:"base"`
+}
+
+// A secure internet server which has its own OAuth tokens
+// It specifies the current location url it is connected to
+type SecureInternetHomeServer struct {
+ OAuth OAuth `json:"oauth"`
+
+ // The home server has a list of info for each configured server
+ BaseMap map[string]*ServerBase `json:"base_map"`
+
+ // We have the home url and the current url
+ HomeURL string `json:"home_url"`
+ CurrentURL string `json:"current_url"`
}
-func (servers *Servers) GetCurrentServer() (*Server, error) {
- if servers.List == nil {
+type InstituteServers struct {
+ Map map[string]*InstituteAccessServer `json:"map"`
+ CurrentURL string `json:"current_url"`
+}
+
+func (servers *Servers) GetCurrentServer() (Server, error) {
+ if servers.IsSecureInternet {
+ return &servers.SecureInternetHomeServer, nil
+ }
+ currentInstitute := servers.InstituteServers.CurrentURL
+ institutes := servers.InstituteServers.Map
+ if institutes == nil {
return nil, &ServerGetCurrentNoMapError{}
}
- server, exists := servers.List[servers.Current]
+ institute, exists := institutes[currentInstitute]
- if !exists || server == nil {
+ if !exists || institute == nil {
return nil, &ServerGetCurrentNotFoundError{}
}
- return server, nil
+ return institute, nil
}
-func (server *Server) CancelOAuth() {
- server.OAuth.Cancel()
+type Servers struct {
+ InstituteServers InstituteServers `json:"institute_servers"`
+ SecureInternetHomeServer SecureInternetHomeServer `json:"secure_internet_home"`
+ IsSecureInternet bool `json:"is_secure_internet"`
}
-func (server *Server) Init(url string, fsm *FSM, logger *FileLogger) error {
- server.BaseURL = url
- server.FSM = fsm
- server.Logger = logger
- server.OAuth.Init(fsm, logger)
- endpointsErr := server.GetEndpoints()
- if endpointsErr != nil {
- return &ServerInitializeError{URL: url, Err: endpointsErr}
+type Server interface {
+ // Gets the current OAuth object
+ GetOAuth() *OAuth
+
+ // Gets the server base
+ GetBase() (*ServerBase, error)
+
+ // initialize method
+ init(url string, fsm *FSM, logger *FileLogger) error
+}
+
+// For an institute, we can simply get the OAuth
+func (institute *InstituteAccessServer) GetOAuth() *OAuth {
+ return &institute.OAuth
+}
+
+func (secure *SecureInternetHomeServer) GetOAuth() *OAuth {
+ return &secure.OAuth
+}
+
+func (institute *InstituteAccessServer) GetBase() (*ServerBase, error) {
+ return &institute.Base, nil
+}
+
+func (server *SecureInternetHomeServer) GetBase() (*ServerBase, error) {
+ if server.BaseMap == nil {
+ return nil, &ServerSecureInternetMapNotFoundError{}
}
- return nil
+
+ base, exists := server.BaseMap[server.CurrentURL]
+
+ if !exists {
+ return nil, &ServerSecureInternetBaseNotFoundError{Current: server.CurrentURL}
+ }
+ return base, nil
}
-func (server *Server) EnsureTokens() error {
- if server.OAuth.NeedsRelogin() {
- server.Logger.Log(LOG_INFO, "OAuth: Tokens are invalid, relogging in")
- return server.Login()
+func (institute *InstituteAccessServer) init(url string, fsm *FSM, logger *FileLogger) error {
+ institute.Base.URL = url
+ institute.Base.FSM = fsm
+ institute.Base.Logger = logger
+ endpoints, endpointsErr := getEndpoints(url)
+ if endpointsErr != nil {
+ return &ServerInitializeError{URL: url, Err: endpointsErr}
}
+ institute.OAuth.Init(endpoints.API.V3.Authorization, endpoints.API.V3.Token, fsm, logger)
+ institute.Base.Endpoints = *endpoints
return nil
}
-func (servers *Servers) EnsureServer(url string, fsm *FSM, logger *FileLogger, makeCurrent bool) (*Server, error) {
- if url == "" {
- return nil, &ServerEnsureServerEmptyURLError{}
+func (secure *SecureInternetHomeServer) init(url string, fsm *FSM, logger *FileLogger) error {
+ // Initialize the base map if it is non-nil
+ if secure.BaseMap == nil {
+ secure.BaseMap = make(map[string]*ServerBase)
}
- if servers.List == nil {
- servers.List = make(map[string]*Server)
+
+ // Add it if not present
+ base, exists := secure.BaseMap[url]
+
+ if !exists || base == nil {
+ // Create the base to be added to the map
+ base = &ServerBase{}
+ base.URL = url
+ endpoints, endpointsErr := getEndpoints(url)
+ if endpointsErr != nil {
+ return &ServerInitializeError{URL: url, Err: endpointsErr}
+ }
+ base.Endpoints = *endpoints
}
- server, exists := servers.List[url]
+ // Pass the fsm and logger
+ base.FSM = fsm
+ base.Logger = logger
+
+ // Ensure it is in the map
+ secure.BaseMap[url] = base
- if !exists || server == nil {
- server = &Server{}
+ // Set the home url if it is not set yet
+ if secure.HomeURL == "" {
+ secure.HomeURL = url
+ // Make sure oauth contains our endpoints
+ secure.OAuth.Init(base.Endpoints.API.V3.Authorization, base.Endpoints.API.V3.Token, fsm, logger)
+ } else { // Else just pass in the fsm and logger
+ secure.OAuth.Update(fsm, logger)
}
- serverInitErr := server.Init(url, fsm, logger)
- if serverInitErr != nil {
- return nil, &ServerEnsureServerError{Err: serverInitErr}
+ // Set the current url
+ secure.CurrentURL = url
+ return nil
+}
+
+func Login(server Server) error {
+ return server.GetOAuth().Login("org.eduvpn.app.linux")
+}
+
+func EnsureTokens(server Server) error {
+ base, baseErr := server.GetBase()
+
+ if baseErr != nil {
+ return &ServerEnsureTokensError{Err: baseErr}
}
- servers.List[url] = server
+ if server.GetOAuth().NeedsRelogin() {
+ base.Logger.Log(LOG_INFO, "OAuth: Tokens are invalid, relogging in")
+ loginErr := Login(server)
- if makeCurrent {
- servers.Current = url
+ if loginErr != nil {
+ return &ServerEnsureTokensError{Err: loginErr}
+ }
}
- return server, nil
+ return nil
}
-func (servers *Servers) getSecureInternetHome() (*Server, error) {
- server, exists := servers.List[servers.SecureHome]
+func NeedsRelogin(server Server) bool {
+ return server.GetOAuth().NeedsRelogin()
+}
+
+func CancelOAuth(server Server) {
+ server.GetOAuth().Cancel()
+}
+
+func (servers *Servers) EnsureServer(url string, isSecureInternet bool, fsm *FSM, logger *FileLogger) (Server, error) {
+ // Intialize the secure internet server
+ // This calls the init method which takes care of the rest
+ if isSecureInternet {
+ initErr := servers.SecureInternetHomeServer.init(url, fsm, logger)
+
+ if initErr != nil {
+ return nil, &ServerEnsureServerError{Err: initErr}
+ }
- if !exists || server == nil {
- return nil, &ServerGetSecureInternetHomeError{}
+ servers.IsSecureInternet = true
+ return &servers.SecureInternetHomeServer, nil
}
- return server, nil
-}
+ instituteServers := &servers.InstituteServers
-func (servers *Servers) EnsureSecureHome(server *Server) {
- if servers.SecureHome == "" {
- servers.SecureHome = server.BaseURL
+ if instituteServers.Map == nil {
+ instituteServers.Map = make(map[string]*InstituteAccessServer)
}
-}
-func (servers *Servers) CopySecureInternetOAuth(server *Server) error {
- secureHome, secureHomeErr := servers.getSecureInternetHome()
+ institute, exists := instituteServers.Map[url]
- if secureHomeErr != nil {
- return &ServerCopySecureInternetOAuthError{Err: secureHomeErr}
+ // initialize the server if it doesn't exist yet
+ if !exists {
+ institute = &InstituteAccessServer{}
}
- // Forward token properties
- server.OAuth = secureHome.OAuth
- return nil
+ // Set the current server
+ instituteServers.CurrentURL = url
+ instituteInitErr := institute.init(url, fsm, logger)
+ if instituteInitErr != nil {
+ return nil, &ServerEnsureServerError{Err: instituteInitErr}
+ }
+ instituteServers.Map[url] = institute
+ servers.IsSecureInternet = false
+ return institute, nil
}
type ServerProfile struct {
@@ -141,33 +252,22 @@ type ServerEndpoints struct {
V string `json:"v"`
}
-func (server *Server) Login() error {
- return server.OAuth.Login("org.eduvpn.app.linux", server.Endpoints.API.V3.Authorization, server.Endpoints.API.V3.Token)
-}
-
-func (server *Server) NeedsRelogin() bool {
- // Check if OAuth needs relogin
- return server.OAuth.NeedsRelogin()
-}
-
-func (server *Server) GetEndpoints() error {
- url := server.BaseURL + "/.well-known/vpn-user-portal"
+func getEndpoints(baseURL string) (*ServerEndpoints, error) {
+ url := fmt.Sprintf("%s/.well-known/vpn-user-portal", baseURL)
_, body, bodyErr := HTTPGet(url)
if bodyErr != nil {
- return &ServerGetEndpointsError{Err: bodyErr}
+ return nil, &ServerGetEndpointsError{Err: bodyErr}
}
- endpoints := ServerEndpoints{}
- jsonErr := json.Unmarshal(body, &endpoints)
+ endpoints := &ServerEndpoints{}
+ jsonErr := json.Unmarshal(body, endpoints)
if jsonErr != nil {
- return &ServerGetEndpointsError{Err: jsonErr}
+ return nil, &ServerGetEndpointsError{Err: jsonErr}
}
- server.Endpoints = endpoints
-
- return nil
+ return endpoints, nil
}
func (profile *ServerProfile) supportsWireguard() bool {
@@ -179,9 +279,14 @@ func (profile *ServerProfile) supportsWireguard() bool {
return false
}
-func (server *Server) getCurrentProfile() (*ServerProfile, error) {
- profileID := server.Profiles.Current
- for _, profile := range server.Profiles.Info.ProfileList {
+func getCurrentProfile(server Server) (*ServerProfile, error) {
+ base, baseErr := server.GetBase()
+
+ if baseErr != nil {
+ return nil, &ServerGetCurrentProfileError{Err: baseErr}
+ }
+ profileID := base.Profiles.Current
+ for _, profile := range base.Profiles.Info.ProfileList {
if profile.ID == profileID {
return &profile, nil
}
@@ -189,53 +294,68 @@ func (server *Server) getCurrentProfile() (*ServerProfile, error) {
return nil, &ServerGetCurrentProfileNotFoundError{ProfileID: profileID}
}
-func (server *Server) getConfigWithProfile() (string, error) {
- if !server.FSM.HasTransition(HAS_CONFIG) {
- return "", &FSMWrongStateTransitionError{Got: server.FSM.Current, Want: HAS_CONFIG}
+func getConfigWithProfile(server Server) (string, error) {
+ base, baseErr := server.GetBase()
+
+ if baseErr != nil {
+ return "", &ServerGetConfigWithProfileError{Err: baseErr}
+ }
+ if !base.FSM.HasTransition(HAS_CONFIG) {
+ return "", &FSMWrongStateTransitionError{Got: base.FSM.Current, Want: HAS_CONFIG}
}
- profile, profileErr := server.getCurrentProfile()
+ profile, profileErr := getCurrentProfile(server)
if profileErr != nil {
return "", &ServerGetConfigWithProfileError{Err: profileErr}
}
if profile.supportsWireguard() {
- return server.WireguardGetConfig()
+ return WireguardGetConfig(server)
}
- return server.OpenVPNGetConfig()
+ return OpenVPNGetConfig(server)
}
-func (server *Server) askForProfileID() error {
- if !server.FSM.HasTransition(ASK_PROFILE) {
- return &FSMWrongStateTransitionError{Got: server.FSM.Current, Want: ASK_PROFILE}
+func askForProfileID(server Server) error {
+ base, baseErr := server.GetBase()
+
+ if baseErr != nil {
+ return &ServerAskForProfileIDError{Err: baseErr}
}
- server.FSM.GoTransitionWithData(ASK_PROFILE, server.ProfilesRaw, false)
+ if !base.FSM.HasTransition(ASK_PROFILE) {
+ return &FSMWrongStateTransitionError{Got: base.FSM.Current, Want: ASK_PROFILE}
+ }
+ base.FSM.GoTransitionWithData(ASK_PROFILE, base.ProfilesRaw, false)
return nil
}
-func (server *Server) GetConfig() (string, error) {
- if !server.FSM.InState(REQUEST_CONFIG) {
- return "", errors.New(fmt.Sprintf("cannot get a config, invalid state %s", server.FSM.Current.String()))
+func GetConfig(server Server) (string, error) {
+ base, baseErr := server.GetBase()
+
+ if baseErr != nil {
+ return "", &ServerGetConfigError{Err: baseErr}
+ }
+ if !base.FSM.InState(REQUEST_CONFIG) {
+ return "", &FSMWrongStateError{Got: base.FSM.Current, Want: REQUEST_CONFIG}
}
- infoErr := server.APIInfo()
+ infoErr := APIInfo(server)
if infoErr != nil {
return "", &ServerGetConfigError{Err: infoErr}
}
// Set the current profile if there is only one profile
- if len(server.Profiles.Info.ProfileList) == 1 {
- server.Profiles.Current = server.Profiles.Info.ProfileList[0].ID
- return server.getConfigWithProfile()
+ if len(base.Profiles.Info.ProfileList) == 1 {
+ base.Profiles.Current = base.Profiles.Info.ProfileList[0].ID
+ return getConfigWithProfile(server)
}
- profileErr := server.askForProfileID()
+ profileErr := askForProfileID(server)
if profileErr != nil {
return "", &ServerGetConfigError{Err: profileErr}
}
- return server.getConfigWithProfile()
+ return getConfigWithProfile(server)
}
type ServerGetCurrentProfileNotFoundError struct {
@@ -318,3 +438,49 @@ type ServerInitializeError struct {
func (e *ServerInitializeError) Error() string {
return fmt.Sprintf("failed initializing server with url %s and error %v", e.URL, e.Err)
}
+
+type ServerInstituteBaseNotFoundError struct {
+ Err error
+}
+
+func (e *ServerInstituteBaseNotFoundError) Error() string {
+ return "institute base not found"
+}
+
+type ServerSecureInternetMapNotFoundError struct{}
+
+func (e *ServerSecureInternetMapNotFoundError) Error() string {
+ return "secure internet map not found"
+}
+
+type ServerSecureInternetBaseNotFoundError struct {
+ Current string
+}
+
+func (e *ServerSecureInternetBaseNotFoundError) Error() string {
+ return fmt.Sprintf("secure internet base not found with current: %s", e.Current)
+}
+
+type ServerGetCurrentProfileError struct {
+ Err error
+}
+
+func (e *ServerGetCurrentProfileError) Error() string {
+ return fmt.Sprintf("failed getting current profile with error: %v", e.Err)
+}
+
+type ServerAskForProfileIDError struct {
+ Err error
+}
+
+func (e *ServerAskForProfileIDError) Error() string {
+ return fmt.Sprintf("ask for profile ID error: %v", e.Err)
+}
+
+type ServerEnsureTokensError struct {
+ Err error
+}
+
+func (e *ServerEnsureTokensError) Error() string {
+ return fmt.Sprintf("failed ensuring tokens with error: %v", e.Err)
+}