mirror of
https://github.com/pelican-dev/panel.git
synced 2025-05-20 00:34:44 +02:00
e1308cb04d
* update scramble * cleanup application api endpoints * cleanup client api endpoints * fix security schema and make docs homepage nicer * remove duplicate myclabs/deep-copy * style(api-docs): use Blade template and Tailwind for styling * Publish scramble view * Use localStorage theme instead of config * Update routes/docs.php Co-authored-by: Lance Pioch <git@lance.sh> --------- Co-authored-by: Quinten <67589015+QuintenQVD0@users.noreply.github.com> Co-authored-by: RMartinOscar <40749467+RMartinOscar@users.noreply.github.com> Co-authored-by: Lance Pioch <git@lance.sh>
78 lines
2.8 KiB
PHP
78 lines
2.8 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\Client\Servers;
|
|
|
|
use Carbon\CarbonImmutable;
|
|
use App\Models\Server;
|
|
use Illuminate\Http\JsonResponse;
|
|
use App\Models\Permission;
|
|
use App\Services\Nodes\NodeJWTService;
|
|
use App\Exceptions\Http\HttpForbiddenException;
|
|
use App\Http\Requests\Api\Client\ClientApiRequest;
|
|
use App\Services\Servers\GetUserPermissionsService;
|
|
use App\Http\Controllers\Api\Client\ClientApiController;
|
|
use Dedoc\Scramble\Attributes\Group;
|
|
|
|
#[Group('Server - Websocket')]
|
|
class WebsocketController extends ClientApiController
|
|
{
|
|
/**
|
|
* WebsocketController constructor.
|
|
*/
|
|
public function __construct(
|
|
private NodeJWTService $jwtService,
|
|
private GetUserPermissionsService $permissionsService
|
|
) {
|
|
parent::__construct();
|
|
}
|
|
|
|
/**
|
|
* Get websocket token
|
|
*
|
|
* Generates a one-time token that is sent along in every websocket call to the Daemon.
|
|
* This is a signed JWT that the Daemon then uses to verify the user's identity, and
|
|
* allows us to continually renew this token and avoid users maintaining sessions wrongly,
|
|
* as well as ensure that user's only perform actions they're allowed to.
|
|
*/
|
|
public function __invoke(ClientApiRequest $request, Server $server): JsonResponse
|
|
{
|
|
$user = $request->user();
|
|
if ($user->cannot(Permission::ACTION_WEBSOCKET_CONNECT, $server)) {
|
|
throw new HttpForbiddenException('You do not have permission to connect to this server\'s websocket.');
|
|
}
|
|
|
|
$permissions = $this->permissionsService->handle($server, $user);
|
|
|
|
$node = $server->node;
|
|
if (!is_null($server->transfer)) {
|
|
// Check if the user has permissions to receive transfer logs.
|
|
if (!in_array('admin.websocket.transfer', $permissions)) {
|
|
throw new HttpForbiddenException('You do not have permission to view server transfer logs.');
|
|
}
|
|
|
|
// Redirect the websocket request to the new node if the server has been archived.
|
|
if ($server->transfer->archived) {
|
|
$node = $server->transfer->newNode;
|
|
}
|
|
}
|
|
|
|
$token = $this->jwtService
|
|
->setExpiresAt(CarbonImmutable::now()->addMinutes(10))
|
|
->setUser($request->user())
|
|
->setClaims([
|
|
'server_uuid' => $server->uuid,
|
|
'permissions' => $permissions,
|
|
])
|
|
->handle($node, $user->id . $server->uuid);
|
|
|
|
$socket = str_replace(['https://', 'http://'], ['wss://', 'ws://'], $node->getConnectionAddress());
|
|
|
|
return new JsonResponse([
|
|
'data' => [
|
|
'token' => $token->toString(),
|
|
'socket' => $socket . sprintf('/api/servers/%s/ws', $server->uuid),
|
|
],
|
|
]);
|
|
}
|
|
}
|