sealos/service/auth/api/api.go

// Copyright © 2022 sealos.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package api

import (
	"errors"

	"github.com/emicklei/go-restful/v3"

	"github.com/labring/sealos/pkg/auth"
	hs "github.com/labring/sealos/pkg/utils/httpserver"
)

// RegisterRouter Register auth Router
func RegisterRouter(webService *restful.WebService) {
	webService.Path("/").
		Consumes("*/*").
		Produces(restful.MIME_JSON)
	// redirect to login page
	webService.Route(webService.GET("/login").To(handlerLogin))
	// SSO callback, get token
	webService.Route(webService.POST("/token").To(handlerToken))
	// return user info
	webService.Route(webService.GET("/userinfo").To(handlerUserInfo))
	// generate kubeconfig according to user info
	webService.Route(webService.GET("/kubeconfig").To(handlerKubeConfig))
}

func handlerLogin(_ *restful.Request, response *restful.Response) {
	redirectURL, err := auth.GetLoginRedirect()
	if err != nil {
		_ = hs.RespError(response, err)
		return
	}
	hs.RespRedirect(response, redirectURL)
}

func handlerToken(request *restful.Request, response *restful.Response) {
	cs := &codeState{}
	if err := request.ReadEntity(&cs); err != nil {
		_ = hs.RespError(response, err)
		return
	}
	if cs.State == "" || cs.Code == "" {
		_ = hs.RespError(response, errors.New("state or code is empty"))
		return
	}

	oauthToken, err := auth.GetOAuthToken(cs.State, cs.Code)
	if err != nil {
		_ = hs.RespError(response, err)
		return
	}

	_ = hs.RespData(response, oauthToken)
}

func handlerUserInfo(request *restful.Request, response *restful.Response) {
	accessToken := hs.GetAccessToken(request)
	if accessToken == "" {
		_ = hs.RespError(response, errors.New("access token is empty"))
		return
	}
	userInfo, err := auth.GetUserInfo(accessToken)
	if err != nil {
		_ = hs.RespError(response, err)
		return
	}

	_ = hs.RespData(response, userInfo)
}

func handlerKubeConfig(request *restful.Request, response *restful.Response) {
	accessToken := hs.GetAccessToken(request)
	if accessToken == "" {
		_ = hs.RespError(response, errors.New("access token is empty"))
		return
	}
	kubeConfig, err := auth.GetKubeConfig(accessToken)
	if err != nil {
		_ = hs.RespError(response, err)
		return
	}

	_ = hs.RespData(response, kubeConfig)
}