ws.go 6.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239
  1. package ws
  2. import (
  3. "encoding/json"
  4. "fmt"
  5. "goseg/auth"
  6. "goseg/broadcast"
  7. "goseg/config"
  8. "goseg/structs"
  9. "net/http"
  10. "time"
  11. "github.com/gorilla/websocket"
  12. )
  13. var (
  14. upgrader = websocket.Upgrader{
  15. ReadBufferSize: 1024,
  16. WriteBufferSize: 1024,
  17. CheckOrigin: func(r *http.Request) bool {
  18. return true // Allow all origins
  19. },
  20. }
  21. )
  22. // switch on ws event cases
  23. func WsHandler(w http.ResponseWriter, r *http.Request) {
  24. conf := config.Conf()
  25. conn, err := upgrader.Upgrade(w, r, nil)
  26. if err != nil {
  27. config.Logger.Error(fmt.Sprintf("Couldn't upgrade websocket connection: %v", err))
  28. return
  29. }
  30. // keepalive for ws
  31. conn.SetPongHandler(func(string) error {
  32. conn.SetReadDeadline(time.Now().Add(60 * time.Second))
  33. return nil
  34. })
  35. pingInterval := 15 * time.Second
  36. go func() {
  37. ticker := time.NewTicker(pingInterval)
  38. defer ticker.Stop()
  39. for {
  40. select {
  41. case <-ticker.C:
  42. if err := conn.WriteMessage(websocket.PingMessage, nil); err != nil {
  43. return
  44. }
  45. }
  46. }
  47. }()
  48. for {
  49. _, msg, err := conn.ReadMessage()
  50. if err != nil {
  51. }
  52. config.Logger.Error(fmt.Sprintf("Error reading websocket message: %v", err))
  53. continue
  54. }
  55. var payload structs.WsPayload
  56. if err := json.Unmarshal(msg, &payload); err != nil {
  57. config.Logger.Warn(fmt.Sprintf("Error unmarshalling payload: %v", err))
  58. continue
  59. }
  60. config.Logger.Info(fmt.Sprintf("Received message: %s", string(msg)))
  61. var msgType structs.WsType
  62. err = json.Unmarshal(msg, &msgType)
  63. if err != nil {
  64. config.Logger.Warn(fmt.Sprintf("Error marshalling token (else): %v", err))
  65. continue
  66. }
  67. token := map[string]string{
  68. "id": payload.Token.ID,
  69. "token": payload.Token.Token,
  70. }
  71. if auth.CheckToken(token, conn, r, conf.FirstBoot) {
  72. switch msgType.Payload.Type {
  73. case "new_ship":
  74. config.Logger.Info("New ship")
  75. case "pier_upload":
  76. config.Logger.Info("Pier upload")
  77. case "password":
  78. config.Logger.Info("Password")
  79. case "system":
  80. config.Logger.Info("System")
  81. case "startram":
  82. config.Logger.Info("StarTram")
  83. case "urbit":
  84. config.Logger.Info("Urbit")
  85. case "support":
  86. if err = supportHandler(msg, payload, r, conn); err != nil {
  87. config.Logger.Error(fmt.Sprintf("%v", err))
  88. }
  89. case "broadcast":
  90. if err := broadcast.BroadcastToClients(); err != nil {
  91. errmsg := fmt.Sprintf("Unable to broadcast to peer(s): %v", err)
  92. config.Logger.Error(errmsg)
  93. }
  94. default:
  95. errmsg := fmt.Sprintf("Unknown auth request type: %s", payload.Type)
  96. config.Logger.Warn(errmsg)
  97. }
  98. } else {
  99. switch msgType.Payload.Type {
  100. case "login":
  101. if err = loginHandler(conn, msg, payload); err != nil {
  102. config.Logger.Error(fmt.Sprintf("%v", err))
  103. }
  104. case "setup":
  105. config.Logger.Info("Setup")
  106. // setup.Setup(payload)
  107. case "verify":
  108. config.Logger.Info("New client")
  109. // auth.CreateToken also adds to unauth map
  110. newToken, err := auth.CreateToken(conn, r, false)
  111. if err != nil {
  112. config.Logger.Error("Unable to create token")
  113. }
  114. result := map[string]interface{}{
  115. "type": "activity",
  116. "id": payload.ID, // this is like the action id
  117. "error": "null",
  118. "response": "ack",
  119. "token": newToken,
  120. }
  121. respJson, err := json.Marshal(result)
  122. if err != nil {
  123. errmsg := fmt.Sprintf("Error marshalling token (init): %v", err)
  124. config.Logger.Error(errmsg)
  125. }
  126. if err := conn.WriteMessage(websocket.TextMessage, respJson); err != nil {
  127. config.Logger.Error(fmt.Sprintf("Error writing response: %v", err))
  128. }
  129. default:
  130. errmsg := fmt.Sprintf("Unknown unauth request type: %s", payload.Type)
  131. config.Logger.Warn(errmsg)
  132. }
  133. }
  134. // default to unauth
  135. if !auth.WsAuthCheck(conn) {
  136. unauthHandler(conn, r)
  137. }
  138. }
  139. }
  140. // validate password and add to auth session map
  141. func loginHandler(conn *websocket.Conn, msg []byte, payload structs.WsPayload) error {
  142. config.Logger.Info("Login")
  143. // lets do this ugly shit to get the password out
  144. var msgMap map[string]interface{}
  145. err := json.Unmarshal(msg, &msgMap)
  146. if err != nil {
  147. return fmt.Errorf("Couldn't unmarshal login bytes: %v",err)
  148. }
  149. payloadData, ok := msgMap["payload"].(map[string]interface{})
  150. if !ok {
  151. return fmt.Errorf("Couldn't extract payload: %v",err)
  152. }
  153. payloadBytes, err := json.Marshal(payloadData)
  154. if err != nil {
  155. return fmt.Errorf("Couldn't remarshal login data: %v",err)
  156. }
  157. var loginPayload structs.WsLoginPayload
  158. err = json.Unmarshal(payloadBytes, &loginPayload)
  159. if err != nil {
  160. return fmt.Errorf("Couldn't unmarshal login payload: %v",err)
  161. }
  162. isAuthenticated := auth.AuthenticateLogin(loginPayload.Password)
  163. if isAuthenticated {
  164. token := map[string]string{
  165. "id": payload.Token.ID,
  166. "token": payload.Token.Token,
  167. }
  168. if err := auth.AddToAuthMap(conn, token, true); err != nil {
  169. return fmt.Errorf("Unable to process login: %v", err)
  170. }
  171. } else {
  172. config.Logger.Info("Login failed")
  173. return fmt.Errorf("Failed auth")
  174. }
  175. broadcast.BroadcastToClients()
  176. return nil
  177. }
  178. // broadcast the unauth payload
  179. func unauthHandler(conn *websocket.Conn, r *http.Request) {
  180. config.Logger.Info("Sending unauth broadcast")
  181. blob := structs.UnauthBroadcast{
  182. Type: "structure",
  183. AuthLevel: "unauthorized",
  184. Login: struct {
  185. Remainder int `json:"remainder"`
  186. }{
  187. Remainder: 0,
  188. },
  189. }
  190. resp, err := json.Marshal(blob)
  191. if err != nil {
  192. config.Logger.Error(fmt.Sprintf("Error unmarshalling message: %v", err))
  193. return
  194. }
  195. if err := conn.WriteMessage(websocket.TextMessage, resp); err != nil {
  196. config.Logger.Error(fmt.Sprintf("Error writing response: %v", err))
  197. return
  198. }
  199. }
  200. // client send:
  201. // {
  202. // "type": "verify",
  203. // "id": "jsgeneratedid",
  204. // "token<optional>": {
  205. // "id": "servergeneratedid",
  206. // "token": "encryptedtext"
  207. // }
  208. // }
  209. // 1. we decrypt the token
  210. // 2. we modify token['authorized'] to true
  211. // 3. remove it from 'unauthorized' in system.json
  212. // 4. hash and add to 'authozired' in system.json
  213. // 5. encrypt that, and send it back to the user
  214. // server respond:
  215. // {
  216. // "type": "activity",
  217. // "response": "ack/nack",
  218. // "error": "null/<some_error>",
  219. // "id": "jsgeneratedid",
  220. // "token": { (either new token or the token the user sent us)
  221. // "id": "relevant_token_id",
  222. // "token": "encrypted_text"
  223. // }
  224. // }
  225. func supportHandler(msg []byte, payload structs.WsPayload, r *http.Request, conn *websocket.Conn) error {
  226. config.Logger.Info("Support")
  227. return nil
  228. }