1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
package server
import (
"context"
"log/slog"
"time"
"codeberg.org/eduVPN/eduvpn-common/internal/config/v2"
"codeberg.org/eduVPN/eduvpn-common/internal/discovery"
"codeberg.org/eduVPN/eduvpn-common/internal/eduvpnapi"
"codeberg.org/eduVPN/eduvpn-common/types/server"
"codeberg.org/jwijenbergh/eduoauth-go/v2"
)
// AddInstitute adds an institute access server
// `ctx` is the context used for cancellation
// `disco` are the discovery servers
// `id` is the identifier for the server, the base url
// `ot` specifies specifies the start time OAuth was already triggered
func (s *Servers) AddInstitute(ctx context.Context, disco *discovery.Discovery, id string, ot *int64) error {
// This is basically done to double check if the server is part of the institute access section of disco
dsrv, err := disco.ServerByURL(id, "institute_access")
if err != nil {
return err
}
sd := eduvpnapi.ServerData{
ID: dsrv.BaseURL,
Type: server.TypeInstituteAccess,
BaseWK: dsrv.BaseURL,
BaseAuthWK: dsrv.BaseURL,
}
auth := time.Time{}
if ot != nil {
auth = time.Unix(*ot, 0)
}
err = s.config.AddServer(dsrv.BaseURL, server.TypeInstituteAccess, v2.Server{
LastAuthorizeTime: auth,
})
if err != nil {
return err
}
// no authorization should be triggered, return
if ot != nil {
return nil
}
// Authorize by creating the API object
_, err = eduvpnapi.NewAPI(ctx, s.clientID, sd, s.cb, nil)
if err != nil {
// authorization has failed, remove the server again
rerr := s.config.RemoveServer(dsrv.BaseURL, server.TypeInstituteAccess)
if rerr != nil {
slog.Warn("Could not remove institute access server after failing authorization", "server", dsrv.BaseURL, "error", rerr)
}
return err
}
return nil
}
// GetInstitute gets an institute access server
// `ctx` is the context used for cancellation
// `id` is the identifier for the server, the base url
// `disco` are the discovery servers
// `tok` are the tokens such that we do not have to trigger auth
// `disableAuth` is true when auth should never be triggered
func (s *Servers) GetInstitute(ctx context.Context, id string, disco *discovery.Discovery, tok *eduoauth.Token, disableAuth bool) (*Server, error) {
// This is basically done to double check if the server is part of the institute access section of disco
dsrv, err := disco.ServerByURL(id, "institute_access")
if err != nil {
return nil, err
}
// Get the server from the config
_, err = s.config.GetServer(dsrv.BaseURL, server.TypeInstituteAccess)
if err != nil {
return nil, err
}
sd := eduvpnapi.ServerData{
ID: dsrv.BaseURL,
Type: server.TypeInstituteAccess,
BaseWK: dsrv.BaseURL,
BaseAuthWK: dsrv.BaseURL,
DisableAuthorize: disableAuth,
}
// Authorize by creating the API object
a, err := eduvpnapi.NewAPI(ctx, s.clientID, sd, s.cb, tok)
if err != nil {
return nil, err
}
inst := s.NewServer(dsrv.BaseURL, server.TypeInstituteAccess, a)
return &inst, nil
}
|
