mirror of
https://github.com/twofas/2fas-server.git
synced 2024-12-12 04:00:15 +01:00
104 lines
3.4 KiB
Go
104 lines
3.4 KiB
Go
package pass
|
|
|
|
import (
|
|
"log"
|
|
|
|
"github.com/aws/aws-sdk-go/aws"
|
|
"github.com/aws/aws-sdk-go/aws/session"
|
|
"github.com/aws/aws-sdk-go/service/kms"
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"github.com/twofas/2fas-server/config"
|
|
httphelpers "github.com/twofas/2fas-server/internal/common/http"
|
|
"github.com/twofas/2fas-server/internal/common/logging"
|
|
"github.com/twofas/2fas-server/internal/common/recovery"
|
|
"github.com/twofas/2fas-server/internal/pass/connection"
|
|
"github.com/twofas/2fas-server/internal/pass/pairing"
|
|
"github.com/twofas/2fas-server/internal/pass/sign"
|
|
"github.com/twofas/2fas-server/internal/pass/sync"
|
|
)
|
|
|
|
type Server struct {
|
|
router *gin.Engine
|
|
addr string
|
|
}
|
|
|
|
func NewServer(cfg config.PassConfig) *Server {
|
|
var awsEndpoint *string
|
|
if cfg.AWSEndpoint != "" {
|
|
awsEndpoint = aws.String(cfg.AWSEndpoint)
|
|
}
|
|
region := cfg.AWSRegion
|
|
if region == "" {
|
|
region = "us-east-1"
|
|
}
|
|
sess, err := session.NewSessionWithOptions(
|
|
session.Options{
|
|
Config: aws.Config{
|
|
Region: aws.String(region),
|
|
S3ForcePathStyle: aws.Bool(true),
|
|
Endpoint: awsEndpoint,
|
|
},
|
|
SharedConfigState: session.SharedConfigEnable,
|
|
})
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
kmsClient := kms.New(sess)
|
|
|
|
signSvc, err := sign.NewService(cfg.KMSKeyID, kmsClient)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
pairingApp := pairing.NewApp(signSvc, cfg.PairingRequestTokenValidityDuration)
|
|
proxyPairingApp := connection.NewProxyServer("device_id")
|
|
|
|
syncApp := sync.NewApp(signSvc, cfg.FakeMobilePush)
|
|
proxySyncApp := connection.NewProxyServer("fcm_token")
|
|
|
|
router := gin.New()
|
|
router.Use(recovery.RecoveryMiddleware())
|
|
router.Use(httphelpers.RequestIdMiddleware())
|
|
router.Use(httphelpers.CorrelationIdMiddleware())
|
|
// TODO: don't log auth headers.
|
|
router.Use(httphelpers.RequestJsonLogger())
|
|
|
|
router.GET("/health", func(context *gin.Context) {
|
|
context.Status(200)
|
|
})
|
|
|
|
// Deprecated paths start here.
|
|
router.GET("/browser_extension/wait_for_connection", pairing.ExtensionWaitForConnWSHandler(pairingApp))
|
|
router.GET("/browser_extension/proxy_to_mobile", pairing.ExtensionProxyWSHandler(pairingApp, proxyPairingApp))
|
|
router.POST("/mobile/confirm", pairing.MobileConfirmHandler(pairingApp))
|
|
router.GET("/mobile/proxy_to_browser_extension", pairing.MobileProxyWSHandler(pairingApp, proxyPairingApp))
|
|
// Deprecated paths end here.
|
|
|
|
router.POST("/browser_extension/configure", pairing.ExtensionConfigureHandler(pairingApp))
|
|
|
|
router.GET("/browser_extension/pairing/wait", pairing.ExtensionWaitForConnWSHandler(pairingApp))
|
|
router.GET("/browser_extension/pairing/proxy", pairing.ExtensionProxyWSHandler(pairingApp, proxyPairingApp))
|
|
router.POST("/mobile/pairing/confirm", pairing.MobileConfirmHandler(pairingApp))
|
|
router.GET("/mobile/pairing/proxy", pairing.MobileProxyWSHandler(pairingApp, proxyPairingApp))
|
|
|
|
router.GET("/browser_extension/sync/request", sync.ExtensionRequestSync(syncApp))
|
|
router.GET("/browser_extension/sync/proxy", sync.ExtensionProxyWSHandler(syncApp, proxySyncApp))
|
|
router.POST("/mobile/sync/confirm", sync.MobileConfirmHandler(syncApp))
|
|
router.GET("/mobile/sync/proxy", sync.MobileProxyWSHandler(syncApp, proxySyncApp))
|
|
|
|
if cfg.FakeMobilePush {
|
|
logging.Info("Enabled '/mobile/sync/:fcm/token' endpoint. This should happen in test env only!")
|
|
router.GET("/mobile/sync/:fcm/token", sync.MobileGenerateSyncToken(syncApp))
|
|
}
|
|
|
|
return &Server{
|
|
router: router,
|
|
addr: cfg.Addr,
|
|
}
|
|
}
|
|
|
|
func (s *Server) Run() error {
|
|
return s.router.Run(s.addr)
|
|
}
|