mirror of
https://github.com/key-networks/ztncui.git
synced 2024-08-31 04:28:00 +00:00
Initial commit
This commit is contained in:
Key Networks
48
controllers/auth.js
Normal file
48
controllers/auth.js
Normal file
@@ -0,0 +1,48 @@
|
||||
/*
|
||||
ztncui - ZeroTier network controller UI
|
||||
Copyright (C) 2017 Key Networks (https://key-networks.com)
|
||||
Licensed under GPLv3 - see LICENSE for details.
|
||||
*/
|
||||
|
||||
const argon2 = require('argon2');
|
||||
const usersController = require('../controllers/usersController');
|
||||
|
||||
hash_check = async function(user, password) {
|
||||
let verified = false;
|
||||
try {
|
||||
var users = await usersController.get_users();
|
||||
} catch (err) {
|
||||
throw err;
|
||||
}
|
||||
try {
|
||||
verified = await argon2.verify(users[user].hash, password);
|
||||
} catch (err) {
|
||||
throw err;
|
||||
}
|
||||
return verified;
|
||||
}
|
||||
|
||||
exports.authenticate = async function(name, pass, callback) {
|
||||
try {
|
||||
var users = await usersController.get_users();
|
||||
} catch (err) {
|
||||
throw err;
|
||||
}
|
||||
let user = users[name];
|
||||
if (!user) return callback(new Error('cannot find user'));
|
||||
let verified = await hash_check(name, pass);
|
||||
if (verified) {
|
||||
return callback(null, user);
|
||||
} else {
|
||||
return callback(new Error('invalid password'));
|
||||
}
|
||||
}
|
||||
|
||||
exports.restrict = function(req, res, next) {
|
||||
if (req.session.user) {
|
||||
next();
|
||||
} else {
|
||||
req.session.error = 'Access denied!';
|
||||
res.redirect('/login');
|
||||
}
|
||||
}
|
||||
559
controllers/networkController.js
Normal file
559
controllers/networkController.js
Normal file
@@ -0,0 +1,559 @@
|
||||
/*
|
||||
ztncui - ZeroTier network controller UI
|
||||
Copyright (C) 2017 Key Networks (https://key-networks.com)
|
||||
Licensed under GPLv3 - see LICENSE for details.
|
||||
*/
|
||||
|
||||
const fs = require('fs');
|
||||
const ipaddr = require('ip-address');
|
||||
const storage = require('node-persist');
|
||||
const zt = require('./zt');
|
||||
|
||||
storage.initSync({dir: 'etc/storage'});
|
||||
|
||||
// ZT network controller home page
|
||||
exports.index = async function(req, res) {
|
||||
const page = 'controller_home';
|
||||
|
||||
try {
|
||||
zt_address = await zt.get_zt_address();
|
||||
res.render('index', {title: 'ztncui', page: page, zt_address: zt_address});
|
||||
} catch (err) {
|
||||
res.render('index', {title: 'ztncui',
|
||||
page: page, error: 'ERROR resolving ZT address: ' + err});
|
||||
}
|
||||
};
|
||||
|
||||
// Display list of all networks on this ZT network controller
|
||||
exports.network_list = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
networks = await zt.network_list();
|
||||
res.render('networks', {title: 'Networks on this controller', page: page, networks: networks});
|
||||
} catch (err) {
|
||||
res.render('networks', {title: 'Networks on this controller', page: page, error: 'Error retrieving list of networks on this controller: ' + err});
|
||||
}
|
||||
};
|
||||
|
||||
// Display detail page for specific network
|
||||
exports.network_detail = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
const members = await zt.members(req.params.nwid);
|
||||
res.render('network_detail', {title: 'Detail for network', page: page, network: network, members: members});
|
||||
} catch (err) {
|
||||
res.render('network_detail', {title: 'Detail for network', page: page, error: 'Error resolving detail for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
};
|
||||
|
||||
// Display Network create form on GET
|
||||
exports.network_create_get = function(req, res) {
|
||||
const page = 'add_network';
|
||||
|
||||
res.render('network_create', {title: 'Create network', page: page});
|
||||
};
|
||||
|
||||
// Handle Network create on POST
|
||||
exports.network_create_post = async function(req, res) {
|
||||
const page = 'add_network';
|
||||
|
||||
req.checkBody('name', 'Network name required').notEmpty();
|
||||
|
||||
req.sanitize('name').escape();
|
||||
req.sanitize('name').trim();
|
||||
|
||||
const errors = req.validationErrors();
|
||||
|
||||
const name = { name: req.body.name };
|
||||
|
||||
if (errors) {
|
||||
res.render('network_create', {title: 'Create Network', page: page, name: name, errors: errors});
|
||||
return;
|
||||
} else {
|
||||
try {
|
||||
const network = await zt.network_create(name);
|
||||
res.redirect('/controller/networks');
|
||||
} catch (err) {
|
||||
res.render('network_detail', {title: 'Create Network - error', page: page, error: 'Error creating network ' + name.name});
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
// Display Network delete form on GET
|
||||
exports.network_delete_get = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
res.render('network_delete', {title: 'Delete network', page: page,
|
||||
nwid: req.params.nwid, network: network});
|
||||
} catch (err) {
|
||||
res.render('network_delete', {title: 'Delete network', page: page, error: 'Error resolving network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
};
|
||||
|
||||
// Handle Network delete on POST
|
||||
exports.network_delete_post = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_delete(req.params.nwid);
|
||||
res.render('network_delete', {title: 'Delete network', page: page, network: network});
|
||||
} catch (err) {
|
||||
res.render('network_delete', {title: 'Delete network', page: page, error: 'Error deleting network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
};
|
||||
|
||||
// Network object GET
|
||||
exports.network_object = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
res.render(req.params.object, {title: req.params.object, page: page, network: network}, function(err, html) {
|
||||
if (err) {
|
||||
if (err.message.indexOf('Failed to lookup view') !== -1 ) {
|
||||
return res.render('not_implemented', {title: req.params.object, page: page, network: network});
|
||||
}
|
||||
throw err;
|
||||
}
|
||||
res.send(html);
|
||||
});
|
||||
} catch (err) {
|
||||
res.render(req.params.object, {title: req.params.object, page: page, error: 'Error resolving detail for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// Handle Network rename form on POST
|
||||
exports.name = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
req.checkBody('name', 'Network name required').notEmpty();
|
||||
req.sanitize('name').escape();
|
||||
req.sanitize('name').trim();
|
||||
|
||||
const errors = req.validationErrors();
|
||||
|
||||
const name = { name: req.body.name };
|
||||
|
||||
if (errors) {
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
res.render('name', {title: 'Rename network', page: page, network: network, name: name, errors: errors});
|
||||
} catch (err) {
|
||||
res.render('name', {title: 'Rename network', page: page, error: 'Error resolving network detail for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
} else {
|
||||
try {
|
||||
const network = await zt.network_object(req.params.nwid, name);
|
||||
res.redirect('/controller/networks');
|
||||
} catch ( err) {
|
||||
res.render('name', {title: 'Rename network', page: page, error: 'Error renaming network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
};
|
||||
|
||||
// ipAssignmentPools POST
|
||||
exports.ipAssignmentPools = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
req.checkBody('ipRangeStart', 'IP range start required').notEmpty();
|
||||
req.checkBody('ipRangeStart', 'IP range start needs a valid IPv4 or IPv6 address').isIP();
|
||||
req.sanitize('ipRangeStart').escape();
|
||||
req.sanitize('ipRangeStart').trim();
|
||||
req.checkBody('ipRangeEnd', 'IP range end required').notEmpty();
|
||||
req.checkBody('ipRangeEnd', 'IP range end needs a valid IPv4 or IPv6 address').isIP();
|
||||
req.sanitize('ipRangEnd').escape();
|
||||
req.sanitize('ipRangEnd').trim();
|
||||
|
||||
const errors = req.validationErrors();
|
||||
|
||||
const ipAssignmentPool =
|
||||
{
|
||||
ipRangeStart: req.body.ipRangeStart,
|
||||
ipRangeEnd: req.body.ipRangeEnd
|
||||
};
|
||||
|
||||
if (errors) {
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
res.render('ipAssignmentPools', {title: 'ipAssignmentPools', page: page, ipAssignmentPool: ipAssignmentPool, network: network, errors: errors});
|
||||
} catch (err) {
|
||||
res.render('ipAssignmentPools', {title: 'ipAssignmentPools', page: page, error: 'Error resolving network detail for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
} else {
|
||||
try {
|
||||
const network = await zt.ipAssignmentPools(req.params.nwid, ipAssignmentPool, 'add');
|
||||
res.render('ipAssignmentPools', {title: 'ipAssignmentPools', page: page, ipAssignmentPool: ipAssignmentPool, network: network});
|
||||
} catch (err) {
|
||||
res.render('ipAssignmentPools', {title: 'ipAssignmentPools', page: page, error: 'Error applying IP Assignment Pools for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
isValidPrefix = function(str, max) {
|
||||
const num = Math.floor(Number(str));
|
||||
return String(num) == str && num >= 0 && num <= max;
|
||||
}
|
||||
|
||||
// routes POST
|
||||
exports.routes = async function (req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
req.checkBody('target', 'Target network is required').notEmpty();
|
||||
req.sanitize('target').trim();
|
||||
req.checkBody('target', 'Target network must be valid CIDR format')
|
||||
.custom(value => {
|
||||
const parts = value.split('/');
|
||||
const ipv4 = new ipaddr.Address4(parts[0]);
|
||||
const ipv6 = new ipaddr.Address6(parts[0]);
|
||||
let isValidIPv4orIPv6 = false;
|
||||
let prefixMax = 32;
|
||||
if (ipv4.isValid()) {
|
||||
isValidIPv4orIPv6 = true;
|
||||
} else {
|
||||
}
|
||||
if (ipv6.isValid()) {
|
||||
isValidIPv4orIPv6 = true;
|
||||
prefixMax = 128;
|
||||
} else {
|
||||
}
|
||||
return isValidIPv4orIPv6 && isValidPrefix(parts[1], prefixMax);
|
||||
});
|
||||
req.checkBody('via', 'Gateway must be a valid IPv4 or IPv6 address').optional({ checkFalsy: true }).isIP();
|
||||
req.sanitize('via').escape();
|
||||
req.sanitize('via').trim();
|
||||
if (! req.body.via) {
|
||||
req.body.via = null;
|
||||
}
|
||||
|
||||
const errors = req.validationErrors();
|
||||
|
||||
const route =
|
||||
{
|
||||
target: req.body.target,
|
||||
via: req.body.via
|
||||
};
|
||||
|
||||
if (errors) {
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
res.render('routes', {title: 'routes', page: page, route: route, network: network, errors: errors});
|
||||
} catch (err) {
|
||||
res.render('routes', {title: 'routes', page: page, error: 'Error resolving network detail'});
|
||||
}
|
||||
} else {
|
||||
try {
|
||||
const network = await zt.routes(req.params.nwid, route, 'add');
|
||||
res.render('routes', {title: 'routes', page: page, route: route, network: network});
|
||||
} catch (err) {
|
||||
res.render('routes', {title: 'routes', page: page, error: 'Error adding route for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
// route_delete GET
|
||||
exports.route_delete = async function (req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
const route =
|
||||
{
|
||||
target: req.params.target_ip + '/' + req.params.target_prefix,
|
||||
via: null
|
||||
};
|
||||
|
||||
|
||||
try {
|
||||
const network = await zt.routes(req.params.nwid, route, 'delete');
|
||||
res.render('routes', {title: 'routes', page: page, route: route, network: network});
|
||||
} catch (err) {
|
||||
res.render('routes', {title: 'routes', page: page, error: 'Error deleting route for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// ipAssignmentPool_delete GET
|
||||
exports.ipAssignmentPool_delete = async function (req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
const ipAssignmentPool =
|
||||
{
|
||||
ipRangeStart: req.params.ipRangeStart,
|
||||
ipRangeEnd: req.params.ipRangeEnd
|
||||
};
|
||||
|
||||
|
||||
try {
|
||||
const network = await zt.ipAssignmentPools(req.params.nwid, ipAssignmentPool, 'delete');
|
||||
res.render('ipAssignmentPools', {title: 'ipAssignmentPools', page: page, ipAssignmentPool: ipAssignmentPool, network: network});
|
||||
} catch (err) {
|
||||
res.render('ipAssignmentPools', {title: 'ipAssignmentPools', page: page, error: 'Error deleting IP Assignment Pool for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// v4AssignMode POST
|
||||
exports.v4AssignMode = async function (req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
const v4AssignMode =
|
||||
{
|
||||
v4AssignMode: { zt: req.body.zt }
|
||||
};
|
||||
|
||||
try {
|
||||
const network = await zt.network_object(req.params.nwid, v4AssignMode);
|
||||
res.render('v4AssignMode', {title: 'v4AssignMode', page: page, network: network});
|
||||
} catch (err) {
|
||||
res.render('v4AssignMode', {title: 'v4AssignMode', page: page, error: 'Error applying v4AssignMode for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// v6AssignMode POST
|
||||
exports.v6AssignMode = async function (req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
const v6AssignMode =
|
||||
{
|
||||
v6AssignMode:
|
||||
{
|
||||
'6plane': req.body['6plane'],
|
||||
rfc4193: req.body.rfc4193,
|
||||
zt: req.body.zt
|
||||
}
|
||||
};
|
||||
|
||||
try {
|
||||
const network = await zt.network_object(req.params.nwid, v6AssignMode);
|
||||
res.render('v6AssignMode', {title: 'v6AssignMode', page: page, network: network});
|
||||
} catch (err) {
|
||||
res.render('v6AssignMode', {title: 'v6AssignMode', page: page, error: 'Error applying v6AssignMode for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// Display detail page for specific member
|
||||
exports.member_detail = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
const member = await zt.member_detail(req.params.nwid, req.params.id);
|
||||
res.render('member_detail', {title: 'Network member detail', page: page, network: network, member: member});
|
||||
} catch (err) {
|
||||
res.render(req.params.object, {title: req.params.object, page: page, error: 'Error resolving detail for member ' + req.params.id + ' of network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
};
|
||||
|
||||
// Member object GET
|
||||
exports.member_object = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
const member = await zt.member_detail(req.params.nwid, req.params.id);
|
||||
res.render(req.params.object, {title: req.params.object, page: page, network: network, member: member}, function(err, html) {
|
||||
if (err) {
|
||||
if (err.message.indexOf('Failed to lookup view') !== -1 ) {
|
||||
return res.render('not_implemented', {title: req.params.object, page: page, network: network, member: member});
|
||||
}
|
||||
throw err;
|
||||
}
|
||||
res.send(html);
|
||||
});
|
||||
} catch (err) {
|
||||
res.render(req.params.object, {title: req.params.object, page: page, error: 'Error resolving detail for member ' + req.params.id + ' of network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// Member authorized POST
|
||||
exports.member_authorized = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
const authorized = { authorized: req.body.authorized };
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
const member = await zt.member_object(req.params.nwid, req.params.id, authorized);
|
||||
res.render('authorized', {title: 'authorized', page: page, network: network, member: member});
|
||||
} catch (err) {
|
||||
res.render('authorized', {title: 'authorized', page: page, error: 'Error authorizing member ' + req.params.id + ' on network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// Easy network setup GET
|
||||
exports.easy_get = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
res.render('network_easy', {title: 'Easy setup of network', page: page, network: network});
|
||||
} catch (err) {
|
||||
res.render('network_easy', {title: 'Easy setup of network', page: page, error: 'Error resolving detail for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// Easy network setup POST
|
||||
exports.easy_post = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
req.checkBody('networkCIDR', 'Network address is required').notEmpty();
|
||||
req.sanitize('networkCIDR').trim();
|
||||
req.checkBody('networkCIDR', 'Network address must be in CIDR notation')
|
||||
.custom(value => {
|
||||
const parts = value.split('/');
|
||||
const ipv4 = new ipaddr.Address4(parts[0]);
|
||||
return ipv4.isValid() && isValidPrefix(parts[1], 32);
|
||||
});
|
||||
req.checkBody('poolStart', 'Start of IP assignment pool is required')
|
||||
.notEmpty();
|
||||
req.checkBody('poolStart', 'Start of IP assignment pool must be valid IPv4 address')
|
||||
.isIP(4);
|
||||
req.sanitize('poolStart').escape();
|
||||
req.sanitize('poolStart').trim();
|
||||
req.checkBody('poolEnd', 'End of IP assignment pool is required')
|
||||
.notEmpty();
|
||||
req.checkBody('poolEnd', 'End of IP assignment pool must be valid IPv4 address')
|
||||
.isIP(4);
|
||||
req.sanitize('poolEnd').escape();
|
||||
req.sanitize('poolEnd').trim();
|
||||
|
||||
const errors = req.validationErrors();
|
||||
|
||||
const ipAssignmentPools =
|
||||
[{
|
||||
ipRangeStart: req.body.poolStart,
|
||||
ipRangeEnd: req.body.poolEnd
|
||||
}];
|
||||
|
||||
const routes =
|
||||
[{
|
||||
target: req.body.networkCIDR,
|
||||
via: null
|
||||
}];
|
||||
|
||||
const v4AssignMode =
|
||||
{
|
||||
zt: true
|
||||
};
|
||||
|
||||
if (errors) {
|
||||
network =
|
||||
{
|
||||
ipAssignmentPools: ipAssignmentPools,
|
||||
routes: routes,
|
||||
v4AssignMode: v4AssignMode
|
||||
};
|
||||
|
||||
res.render('network_easy', {title: 'Easy setup of network', page: page, network: network, errors: errors});
|
||||
} else {
|
||||
try {
|
||||
const network = await zt.network_easy_setup(req.params.nwid,
|
||||
routes,
|
||||
ipAssignmentPools,
|
||||
v4AssignMode);
|
||||
res.render('network_easy', {title: 'Easy setup of network', page: page, network: network, message: 'Network setup succeeded'});
|
||||
} catch (err) {
|
||||
res.render('network_easy', {title: 'Easy setup of network', page: page, error: 'Error resolving detail for network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Easy members auth GET or POST
|
||||
exports.members = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
let errors = null;
|
||||
|
||||
if (req.method === 'POST') {
|
||||
|
||||
req.checkBody('id', 'Member ID is required').notEmpty();
|
||||
req.sanitize('id').trim();
|
||||
req.sanitize('id').escape();
|
||||
|
||||
if (req.body.auth) {
|
||||
req.checkBody('auth', 'Authorization state must be boolean').isBoolean();
|
||||
req.sanitize('auth').trim();
|
||||
req.sanitize('auth').escape();
|
||||
|
||||
errors = req.validationErrors();
|
||||
|
||||
if (!errors) {
|
||||
const auth =
|
||||
{
|
||||
authorized: req.body.auth
|
||||
};
|
||||
|
||||
try {
|
||||
const mem = await zt.member_object(req.params.nwid, req.body.id, auth);
|
||||
} catch (err) {
|
||||
throw err;
|
||||
}
|
||||
}
|
||||
} else if (req.body.name) {
|
||||
req.sanitize('name').trim();
|
||||
req.sanitize('name').escape();
|
||||
|
||||
errors = req.validationErrors();
|
||||
|
||||
if (!errors) {
|
||||
try {
|
||||
const ret = await storage.setItem(req.body.id, req.body.name);
|
||||
} catch (err) {
|
||||
throw err;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
const member_ids = await zt.members(req.params.nwid);
|
||||
const members = [];
|
||||
for (id in member_ids) {
|
||||
let member = await zt.member_detail(req.params.nwid, id);
|
||||
let name = await storage.getItem(member.id);
|
||||
if (!name) name = '';
|
||||
member.name = name;
|
||||
members.push(member);
|
||||
}
|
||||
|
||||
res.render('members', {title: 'Members of this network', page: page,
|
||||
network: network, members: members, errors: errors});
|
||||
} catch (err) {
|
||||
res.render('members', {title: 'Members of this network', page: page,
|
||||
error: 'Error resolving detail for network ' + req.params.nwid
|
||||
+ ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
// Member delete GET and POST
|
||||
exports.member_delete = async function(req, res) {
|
||||
const page = 'networks';
|
||||
|
||||
try {
|
||||
const network = await zt.network_detail(req.params.nwid);
|
||||
let member = null;
|
||||
let name = null;
|
||||
if (req.method === 'POST') {
|
||||
member = await zt.member_delete(req.params.nwid, req.params.id);
|
||||
if (member.deleted) {
|
||||
name = await storage.removeItem(member.id);
|
||||
}
|
||||
} else {
|
||||
member = await zt.member_detail(req.params.nwid, req.params.id);
|
||||
name = await storage.getItem(member.id);
|
||||
}
|
||||
if (!name) name = '';
|
||||
member.name = name;
|
||||
res.render('member_delete', {title: 'Delete member from ' + network.name,
|
||||
network: network, member: member});
|
||||
} catch (err) {
|
||||
res.render('member_delete', {title: 'Delete member from network', page: page,
|
||||
error: 'Error resolving detail for member ' + req.params.id
|
||||
+ ' of network ' + req.params.nwid + ': ' + err});
|
||||
}
|
||||
}
|
||||
|
||||
25
controllers/token.js
Normal file
25
controllers/token.js
Normal file
@@ -0,0 +1,25 @@
|
||||
/*
|
||||
ztncui - ZeroTier network controller UI
|
||||
Copyright (C) 2017 Key Networks (https://key-networks.com)
|
||||
Licensed under GPLv3 - see LICENSE for details.
|
||||
*/
|
||||
|
||||
const fs = require('fs');
|
||||
const util = require('util');
|
||||
|
||||
const readFile = util.promisify(fs.readFile);
|
||||
|
||||
let _token = null;
|
||||
|
||||
exports.get = async function() {
|
||||
if (_token) {
|
||||
return _token;
|
||||
} else {
|
||||
try {
|
||||
_token = await readFile('/var/lib/zerotier-one/authtoken.secret', 'utf8');
|
||||
return _token;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
}
|
||||
173
controllers/usersController.js
Normal file
173
controllers/usersController.js
Normal file
@@ -0,0 +1,173 @@
|
||||
/*
|
||||
ztncui - ZeroTier network controller UI
|
||||
Copyright (C) 2017 Key Networks (https://key-networks.com)
|
||||
Licensed under GPLv3 - see LICENSE for details.
|
||||
*/
|
||||
|
||||
const fs = require('fs');
|
||||
const argon2 = require('argon2');
|
||||
const util = require('util');
|
||||
|
||||
const passwd_file = 'etc/passwd';
|
||||
const min_pass_len = 10;
|
||||
|
||||
const readFile = util.promisify(fs.readFile);
|
||||
const writeFile = util.promisify(fs.writeFile);
|
||||
const chmod = util.promisify(fs.chmod);
|
||||
|
||||
let _users = null;
|
||||
|
||||
get_users = async function() {
|
||||
if (_users) {
|
||||
return _users;
|
||||
} else {
|
||||
try {
|
||||
_users = JSON.parse(await readFile(passwd_file, 'utf8'));
|
||||
return _users;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
}
|
||||
exports.get_users = get_users;
|
||||
|
||||
update_users = async function(users) {
|
||||
try {
|
||||
await writeFile(passwd_file, JSON.stringify(users), 'utf8');
|
||||
await chmod(passwd_file, 0600);
|
||||
|
||||
} catch (err) {
|
||||
throw err;
|
||||
}
|
||||
_users = null;
|
||||
return await get_users();
|
||||
}
|
||||
|
||||
exports.users_list = async function(req, res) {
|
||||
const page = 'users';
|
||||
|
||||
try {
|
||||
const users = await get_users();
|
||||
res.render('users', { title: 'Admin users', page: page, message: 'List of users with admin priviledges', users: users });
|
||||
} catch (err) {
|
||||
res.render('users', { title: 'Admin users', page: page, message: 'Error', users: null, error: 'Error returning list of users: ' + err });
|
||||
}
|
||||
}
|
||||
|
||||
exports.password_get = async function(req, res) {
|
||||
const page = 'users';
|
||||
|
||||
const user =
|
||||
{
|
||||
name: req.params.name,
|
||||
password1: null,
|
||||
password2: null
|
||||
};
|
||||
res.render('password', { title: 'Set password', page: page, user: user, readonly: true, message: '' });
|
||||
}
|
||||
|
||||
exports.password_post = async function(req, res) {
|
||||
const page = 'users';
|
||||
|
||||
req.checkBody('username', 'Username required').notEmpty();
|
||||
req.sanitize('username').escape();
|
||||
req.sanitize('username').trim();
|
||||
|
||||
req.checkBody('password1', 'Password required').notEmpty();
|
||||
req.checkBody('password1', 'Minimum password length is ' + min_pass_len + ' characters').isLength({ min: min_pass_len, max: 160 });
|
||||
|
||||
req.checkBody('password2', 'Please re-enter password').notEmpty();
|
||||
req.checkBody('password2', 'Minimum password length is ' + min_pass_len + ' characters').isLength({ min: min_pass_len, max: 160 });
|
||||
req.checkBody('password2', 'Passwords are not the same').equals(req.body.password1);
|
||||
|
||||
const errors = req.validationErrors();
|
||||
|
||||
if (errors) {
|
||||
const user =
|
||||
{
|
||||
name: req.body.username,
|
||||
password1: req.body.password1,
|
||||
password2: req.body.password2
|
||||
};
|
||||
const message = 'Please check errors below';
|
||||
res.render('password', { title: 'Set password', page: page, user: user, readonly: true, message: message, errors: errors });
|
||||
} else {
|
||||
let pass_set = true;
|
||||
if (req.body.pass_set === 'check') pass_set = false;
|
||||
|
||||
const hash = await argon2.hash(req.body.password1);
|
||||
|
||||
const user =
|
||||
{
|
||||
name: req.body.username,
|
||||
pass_set: pass_set,
|
||||
hash: hash
|
||||
};
|
||||
|
||||
const passwd_user =
|
||||
{
|
||||
[req.body.username]: user
|
||||
};
|
||||
|
||||
let users = await get_users();
|
||||
users[req.body.username] = user;
|
||||
|
||||
users = await update_users(users);
|
||||
|
||||
const message = 'Successfully set password for ' + req.body.username;
|
||||
res.render('password', { title: 'Set password', page: page, user: user, readonly: true, message: message });
|
||||
}
|
||||
}
|
||||
|
||||
exports.user_create_get = async function(req, res) {
|
||||
const page = 'create_user';
|
||||
|
||||
const user =
|
||||
{
|
||||
name: null,
|
||||
password1: null,
|
||||
password2: null
|
||||
};
|
||||
|
||||
res.render('password', { title: 'Create new admin user', page: page, user: user, readonly: false});
|
||||
}
|
||||
|
||||
exports.user_create_post = async function(req, res) {
|
||||
const page = 'create_user';
|
||||
|
||||
res.redirect(307, '/users/' + req.body.username + '/password');
|
||||
}
|
||||
|
||||
exports.user_delete = async function(req, res) {
|
||||
const page = 'users';
|
||||
|
||||
try {
|
||||
var users = await get_users();
|
||||
} catch (err) {
|
||||
throw err;
|
||||
}
|
||||
|
||||
const user = users[req.params.name];
|
||||
|
||||
if (user && (req.session.user.name === user.name)) {
|
||||
res.render('user_delete', { title: 'Delete user', page: page, user: user, self_delete: true });
|
||||
}
|
||||
|
||||
if (req.body.delete === 'delete') {
|
||||
if (user) {
|
||||
const deleted_user = { name: user.name };
|
||||
delete users[user.name];
|
||||
users = await update_users(users);
|
||||
res.render('user_delete', { title: 'Deleted user', page: page, user: deleted_user, deleted: true });
|
||||
} else {
|
||||
res.render('user_delete', { title: 'Delete user', page: page, user: null });
|
||||
}
|
||||
} else {
|
||||
if (user) {
|
||||
res.render('user_delete', { title: 'Delete user', page: page, user: user });
|
||||
} else {
|
||||
res.render('user_delete', { title: 'Delete user', page: page, user: null });
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
266
controllers/zt.js
Normal file
266
controllers/zt.js
Normal file
@@ -0,0 +1,266 @@
|
||||
/*
|
||||
ztncui - ZeroTier network controller UI
|
||||
Copyright (C) 2017 Key Networks (https://key-networks.com)
|
||||
Licensed under GPLv3 - see LICENSE for details.
|
||||
*/
|
||||
|
||||
const got = require('got');
|
||||
const ipaddr = require('ip-address');
|
||||
const token = require('./token');
|
||||
|
||||
init_options = async function() {
|
||||
let tok = null;
|
||||
|
||||
try {
|
||||
tok = await token.get();
|
||||
} catch (err) {
|
||||
throw(err);
|
||||
}
|
||||
|
||||
options = {
|
||||
json: true,
|
||||
headers: {
|
||||
'X-ZT1-Auth': tok
|
||||
}
|
||||
}
|
||||
|
||||
return options;
|
||||
}
|
||||
|
||||
get_zt_address = async function() {
|
||||
const options = await init_options();
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/status', options);
|
||||
return response.body.address;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
exports.get_zt_address = get_zt_address;
|
||||
|
||||
exports.network_list = async function() {
|
||||
const options = await init_options();
|
||||
|
||||
let network = {};
|
||||
let networks = [];
|
||||
let nwids = [];
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network', options);
|
||||
nwids = response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
|
||||
for (let nwid of nwids) {
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid, options);
|
||||
network = (({name, nwid}) => ({name, nwid}))(response.body);
|
||||
networks.push(network);
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
return networks;
|
||||
}
|
||||
|
||||
network_detail = async function(nwid) {
|
||||
const options = await init_options();
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid, options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
exports.network_detail = network_detail;
|
||||
|
||||
exports.network_create = async function(name) {
|
||||
const options = await init_options();
|
||||
options.method = 'POST';
|
||||
options.body = name;
|
||||
|
||||
const zt_address = await get_zt_address();
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ zt_address + '______', options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.network_delete = async function(nwid) {
|
||||
const options = await init_options();
|
||||
options.method = 'DELETE';
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid, options);
|
||||
response.body.deleted = true;
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.ipAssignmentPools = async function(nwid, ipAssignmentPool, action) {
|
||||
const options = await init_options();
|
||||
options.method = 'POST';
|
||||
|
||||
const network = await network_detail(nwid);
|
||||
let ipAssignmentPools = network.ipAssignmentPools;
|
||||
|
||||
if (action === 'add') {
|
||||
ipAssignmentPools.push(ipAssignmentPool);
|
||||
} else if (action === 'delete') {
|
||||
const pool = ipAssignmentPools.find(pool =>
|
||||
pool.ipRangeStart === ipAssignmentPool.ipRangeStart &&
|
||||
pool.ipRangeEnd === ipAssignmentPool.ipRangeEnd);
|
||||
ipAssignmentPools = ipAssignmentPools.filter(p => p != pool);
|
||||
}
|
||||
|
||||
options.body = { ipAssignmentPools: ipAssignmentPools };
|
||||
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid, options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.routes = async function(nwid, route, action) {
|
||||
const options = await init_options();
|
||||
options.method = 'POST';
|
||||
|
||||
const network = await network_detail(nwid);
|
||||
let routes = network.routes;
|
||||
const target6 = new ipaddr.Address6(route.target);
|
||||
if (target6.isValid()) {
|
||||
const parts = route.target.split('/');
|
||||
route.target = target6.canonicalForm() + '/' + parts[1];
|
||||
}
|
||||
|
||||
const route_to_del = routes.find(rt => rt.target === route.target);
|
||||
|
||||
if (!route_to_del) {
|
||||
if (action === 'add') {
|
||||
routes.push(route);
|
||||
} else if (action === 'delete') {
|
||||
throw new Error('Cannot delete non-existent route target');
|
||||
}
|
||||
} else {
|
||||
if (action === 'add') {
|
||||
throw new Error('Route target is not unique');
|
||||
} else if (action === 'delete') {
|
||||
routes = routes.filter(rt => rt != route_to_del);
|
||||
}
|
||||
}
|
||||
|
||||
options.body = { routes: routes };
|
||||
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid, options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.network_object = async function(nwid, object) {
|
||||
const options = await init_options();
|
||||
options.method = 'POST';
|
||||
options.body = object;
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid, options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.members = async function(nwid) {
|
||||
const options = await init_options();
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid + '/member', options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.member_detail = async function(nwid, id) {
|
||||
const options = await init_options();
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid + '/member/' + id, options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.member_object = async function(nwid, id, object) {
|
||||
const options = await init_options();
|
||||
options.method = 'POST';
|
||||
options.body = object;
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid + '/member/' + id, options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.member_delete = async function(nwid, id) {
|
||||
const options = await init_options();
|
||||
options.method = 'DELETE';
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid + '/member/' + id, options);
|
||||
response.body.deleted = true;
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
|
||||
exports.network_easy_setup = async function(nwid,
|
||||
routes,
|
||||
ipAssignmentPools,
|
||||
v4AssignMode) {
|
||||
const options = await init_options();
|
||||
options.method = 'POST';
|
||||
options.body =
|
||||
{
|
||||
ipAssignmentPools: ipAssignmentPools,
|
||||
routes: routes,
|
||||
v4AssignMode: v4AssignMode
|
||||
};
|
||||
|
||||
try {
|
||||
const response = await got('localhost:9993/controller/network/'
|
||||
+ nwid, options);
|
||||
return response.body;
|
||||
} catch(err) {
|
||||
throw(err);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user