ayurishchevandClaude Sonnet 5.5
debf2afed2
control-api: every route now carries a mandatory access level (admin / agent / open) in a route table. All /api/v1/admin/* require the admin token; the write calls of validator-agent and prober (self-check, events, results, complete) require a separate static agent token; register, heartbeat and fetching the assignment stay open. Tokens come from env vars, are compared in constant time and never logged. An empty token leaves that level open with a startup warning (backward compatible). validator-agent / prober: apiclient sends the agent token only to control-api. admin-dashboard: login/password (from env) with a stateless HMAC session cookie, Origin-based CSRF check, per-IP brute-force throttle, HX-Redirect for htmx polls, logout in the sidebar; the dashboard calls control-api with the admin token. Login page layout fixed after review. Also: env plumbing in docker-compose/rxprod-compose/systemd/config examples, e2e script with token assertions, tests, docs (API, SETUP, USAGE, DASHBOARD, README), plan and review under docs/changes/, bin/ rebuilt with new SHA256SUMS. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
82 lines
2.4 KiB
Go
82 lines
2.4 KiB
Go
// Command admin-dashboard is a stateless, server-rendered web UI over
|
|
// control-api's /api/v1/admin/* HTTP API — see docs/DASHBOARD.md. It never
|
|
// connects to the database and holds no state of its own.
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"flag"
|
|
"fmt"
|
|
"log/slog"
|
|
"net/http"
|
|
"os"
|
|
"os/signal"
|
|
"syscall"
|
|
"time"
|
|
|
|
"cloudipvalidator/internal/config"
|
|
"cloudipvalidator/internal/dashboard"
|
|
)
|
|
|
|
func main() {
|
|
configPath := flag.String("config", "configs/admin-dashboard.yaml", "path to admin-dashboard config file")
|
|
flag.Parse()
|
|
|
|
log := slog.New(slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{Level: slog.LevelInfo}))
|
|
|
|
if err := run(*configPath, log); err != nil {
|
|
log.Error("fatal", "err", err)
|
|
os.Exit(1)
|
|
}
|
|
}
|
|
|
|
func run(configPath string, log *slog.Logger) error {
|
|
cfg, err := config.LoadAdminDashboard(configPath)
|
|
if err != nil {
|
|
return fmt.Errorf("load config: %w", err)
|
|
}
|
|
|
|
ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
|
|
defer stop()
|
|
|
|
controlAPIToken := os.Getenv(cfg.ControlAPI.TokenEnv)
|
|
if controlAPIToken == "" {
|
|
log.Warn("control-api admin token is not set: calls to control-api are sent without credentials", "env", cfg.ControlAPI.TokenEnv)
|
|
}
|
|
|
|
srv, err := dashboard.New(dashboard.Config{
|
|
ControlAPIBaseURL: cfg.ControlAPI.BaseURL,
|
|
ControlAPITimeout: time.Duration(cfg.ControlAPI.TimeoutSeconds) * time.Second,
|
|
LastCompletedCount: cfg.Overview.LastCompletedCount,
|
|
OverviewPollIntervalS: cfg.Overview.PollIntervalSeconds,
|
|
ControlAPIToken: controlAPIToken,
|
|
Username: os.Getenv(cfg.Auth.UsernameEnv),
|
|
Password: os.Getenv(cfg.Auth.PasswordEnv),
|
|
SessionSecret: os.Getenv(cfg.Auth.SessionSecretEnv),
|
|
SessionTTL: time.Duration(cfg.Auth.SessionTTLMinutes) * time.Minute,
|
|
}, log)
|
|
if err != nil {
|
|
return fmt.Errorf("init dashboard: %w", err)
|
|
}
|
|
|
|
httpServer := &http.Server{Addr: cfg.Server.ListenAddr, Handler: srv.Handler()}
|
|
|
|
errCh := make(chan error, 1)
|
|
go func() {
|
|
log.Info("listening", "addr", cfg.Server.ListenAddr, "control_api", cfg.ControlAPI.BaseURL)
|
|
if err := httpServer.ListenAndServe(); err != nil && err != http.ErrServerClosed {
|
|
errCh <- err
|
|
}
|
|
}()
|
|
|
|
select {
|
|
case <-ctx.Done():
|
|
log.Info("shutting down")
|
|
shutdownCtx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
|
|
defer cancel()
|
|
return httpServer.Shutdown(shutdownCtx)
|
|
case err := <-errCh:
|
|
return err
|
|
}
|
|
}
|