mirror of
https://github.com/fosrl/pangolin.git
synced 2025-07-09 13:34:56 +02:00
105 lines
3.2 KiB
TypeScript
105 lines
3.2 KiB
TypeScript
import { Request, Response, NextFunction } from "express";
|
|
import { z } from "zod";
|
|
import { db } from "@server/db";
|
|
import { exitNodes, Org, orgs, sites } from "@server/db/schema";
|
|
import { eq } from "drizzle-orm";
|
|
import response from "@server/utils/response";
|
|
import HttpCode from "@server/types/HttpCode";
|
|
import createHttpError from "http-errors";
|
|
import { ActionsEnum, checkUserActionPermission } from "@server/auth/actions";
|
|
import logger from "@server/logger";
|
|
import { findNextAvailableCidr } from "@server/utils/ip";
|
|
|
|
export type PickSiteDefaultsResponse = {
|
|
exitNodeId: number;
|
|
address: string;
|
|
publicKey: string;
|
|
name: string;
|
|
listenPort: number;
|
|
endpoint: string;
|
|
subnet: string;
|
|
}
|
|
|
|
export async function pickSiteDefaults(
|
|
req: Request,
|
|
res: Response,
|
|
next: NextFunction,
|
|
): Promise<any> {
|
|
try {
|
|
|
|
// Check if the user has permission to list sites
|
|
const hasPermission = await checkUserActionPermission(
|
|
ActionsEnum.createSite,
|
|
req,
|
|
);
|
|
if (!hasPermission) {
|
|
return next(
|
|
createHttpError(
|
|
HttpCode.FORBIDDEN,
|
|
"User does not have permission to perform this action",
|
|
),
|
|
);
|
|
}
|
|
|
|
// TODO: more intelligent way to pick the exit node
|
|
|
|
// make sure there is an exit node by counting the exit nodes table
|
|
const nodes = await db.select().from(exitNodes);
|
|
if (nodes.length === 0) {
|
|
return next(
|
|
createHttpError(
|
|
HttpCode.NOT_FOUND,
|
|
"No exit nodes available",
|
|
),
|
|
);
|
|
}
|
|
|
|
// get the first exit node
|
|
const exitNode = nodes[0];
|
|
|
|
// TODO: this probably can be optimized...
|
|
// list all of the sites on that exit node
|
|
const sitesQuery = await db.select({
|
|
subnet: sites.subnet
|
|
})
|
|
.from(sites)
|
|
.where(eq(sites.exitNodeId, exitNode.exitNodeId));
|
|
|
|
// TODO: we need to lock this subnet for some time so someone else does not take it
|
|
const subnets = sitesQuery.map((site) => site.subnet);
|
|
const newSubnet = findNextAvailableCidr(subnets, 28, exitNode.address);
|
|
if (!newSubnet) {
|
|
return next(
|
|
createHttpError(
|
|
HttpCode.INTERNAL_SERVER_ERROR,
|
|
"No available subnets",
|
|
),
|
|
);
|
|
}
|
|
|
|
return response<PickSiteDefaultsResponse>(res, {
|
|
data: {
|
|
exitNodeId: exitNode.exitNodeId,
|
|
address: exitNode.address,
|
|
publicKey: exitNode.publicKey,
|
|
name: exitNode.name,
|
|
listenPort: exitNode.listenPort,
|
|
endpoint: exitNode.endpoint,
|
|
subnet: newSubnet,
|
|
},
|
|
success: true,
|
|
error: false,
|
|
message: "Organization retrieved successfully",
|
|
status: HttpCode.OK,
|
|
});
|
|
} catch (error) {
|
|
logger.error(error);
|
|
return next(
|
|
createHttpError(
|
|
HttpCode.INTERNAL_SERVER_ERROR,
|
|
"An error occurred...",
|
|
),
|
|
);
|
|
}
|
|
}
|
|
|