netbird/management/internals/modules/reverseproxy/service/manager/api.go

package manager

import (
	"encoding/json"
	"net/http"

	"github.com/gorilla/mux"

	"github.com/netbirdio/netbird/management/internals/modules/permissions"
	"github.com/netbirdio/netbird/management/internals/modules/permissions/modules"
	"github.com/netbirdio/netbird/management/internals/modules/permissions/operations"
	"github.com/netbirdio/netbird/management/internals/modules/reverseproxy/accesslogs"
	accesslogsmanager "github.com/netbirdio/netbird/management/internals/modules/reverseproxy/accesslogs/manager"
	domainmanager "github.com/netbirdio/netbird/management/internals/modules/reverseproxy/domain/manager"
	rpservice "github.com/netbirdio/netbird/management/internals/modules/reverseproxy/service"
	"github.com/netbirdio/netbird/shared/auth"
	"github.com/netbirdio/netbird/shared/management/http/api"
	"github.com/netbirdio/netbird/shared/management/http/util"
	"github.com/netbirdio/netbird/shared/management/status"
)

type handler struct {
	manager            rpservice.Manager
	permissionsManager permissions.Manager
}

// RegisterEndpoints registers all service HTTP endpoints.
func RegisterEndpoints(manager rpservice.Manager, domainManager domainmanager.Manager, accessLogsManager accesslogs.Manager, permissionsManager permissions.Manager, router *mux.Router) {
	h := &handler{
		manager:            manager,
		permissionsManager: permissionsManager,
	}

	domainRouter := router.PathPrefix("/reverse-proxies").Subrouter()
	domainmanager.RegisterEndpoints(domainRouter, domainManager, permissionsManager)

	accesslogsmanager.RegisterEndpoints(router, accessLogsManager, permissionsManager)

	router.HandleFunc("/reverse-proxies/clusters", permissionsManager.WithPermission(modules.Services, operations.Read, h.getClusters)).Methods("GET", "OPTIONS")
	router.HandleFunc("/reverse-proxies/services", permissionsManager.WithPermission(modules.Services, operations.Read, h.getAllServices)).Methods("GET", "OPTIONS")
	router.HandleFunc("/reverse-proxies/services", permissionsManager.WithPermission(modules.Services, operations.Create, h.createService)).Methods("POST", "OPTIONS")
	router.HandleFunc("/reverse-proxies/services/{serviceId}", permissionsManager.WithPermission(modules.Services, operations.Read, h.getService)).Methods("GET", "OPTIONS")
	router.HandleFunc("/reverse-proxies/services/{serviceId}", permissionsManager.WithPermission(modules.Services, operations.Update, h.updateService)).Methods("PUT", "OPTIONS")
	router.HandleFunc("/reverse-proxies/services/{serviceId}", permissionsManager.WithPermission(modules.Services, operations.Delete, h.deleteService)).Methods("DELETE", "OPTIONS")
}

func (h *handler) getAllServices(w http.ResponseWriter, r *http.Request, userAuth *auth.UserAuth) {
	allServices, err := h.manager.GetAllServices(r.Context(), userAuth.AccountId, userAuth.UserId)
	if err != nil {
		util.WriteError(r.Context(), err, w)
		return
	}

	apiServices := make([]*api.Service, 0, len(allServices))
	for _, service := range allServices {
		apiServices = append(apiServices, service.ToAPIResponse())
	}

	util.WriteJSONObject(r.Context(), w, apiServices)
}

func (h *handler) createService(w http.ResponseWriter, r *http.Request, userAuth *auth.UserAuth) {
	var req api.ServiceRequest
	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
		util.WriteErrorResponse("couldn't parse JSON request", http.StatusBadRequest, w)
		return
	}

	service := new(rpservice.Service)
	var err error
	if err = service.FromAPIRequest(&req, userAuth.AccountId); err != nil {
		util.WriteError(r.Context(), status.Errorf(status.InvalidArgument, "%s", err.Error()), w)
		return
	}

	if err := service.Validate(); err != nil {
		util.WriteError(r.Context(), status.Errorf(status.InvalidArgument, "%s", err.Error()), w)
		return
	}

	createdService, err := h.manager.CreateService(r.Context(), userAuth.AccountId, userAuth.UserId, service)
	if err != nil {
		util.WriteError(r.Context(), err, w)
		return
	}

	util.WriteJSONObject(r.Context(), w, createdService.ToAPIResponse())
}

func (h *handler) getService(w http.ResponseWriter, r *http.Request, userAuth *auth.UserAuth) {
	serviceID := mux.Vars(r)["serviceId"]
	if serviceID == "" {
		util.WriteError(r.Context(), status.Errorf(status.InvalidArgument, "service ID is required"), w)
		return
	}

	service, err := h.manager.GetService(r.Context(), userAuth.AccountId, userAuth.UserId, serviceID)
	if err != nil {
		util.WriteError(r.Context(), err, w)
		return
	}

	util.WriteJSONObject(r.Context(), w, service.ToAPIResponse())
}

func (h *handler) updateService(w http.ResponseWriter, r *http.Request, userAuth *auth.UserAuth) {
	serviceID := mux.Vars(r)["serviceId"]
	if serviceID == "" {
		util.WriteError(r.Context(), status.Errorf(status.InvalidArgument, "service ID is required"), w)
		return
	}

	var req api.ServiceRequest
	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
		util.WriteErrorResponse("couldn't parse JSON request", http.StatusBadRequest, w)
		return
	}

	service := new(rpservice.Service)
	service.ID = serviceID
	var err error
	if err = service.FromAPIRequest(&req, userAuth.AccountId); err != nil {
		util.WriteError(r.Context(), status.Errorf(status.InvalidArgument, "%s", err.Error()), w)
		return
	}

	if err := service.Validate(); err != nil {
		util.WriteError(r.Context(), status.Errorf(status.InvalidArgument, "%s", err.Error()), w)
		return
	}

	updatedService, err := h.manager.UpdateService(r.Context(), userAuth.AccountId, userAuth.UserId, service)
	if err != nil {
		util.WriteError(r.Context(), err, w)
		return
	}

	util.WriteJSONObject(r.Context(), w, updatedService.ToAPIResponse())
}

func (h *handler) deleteService(w http.ResponseWriter, r *http.Request, userAuth *auth.UserAuth) {
	serviceID := mux.Vars(r)["serviceId"]
	if serviceID == "" {
		util.WriteError(r.Context(), status.Errorf(status.InvalidArgument, "service ID is required"), w)
		return
	}

	if err := h.manager.DeleteService(r.Context(), userAuth.AccountId, userAuth.UserId, serviceID); err != nil {
		util.WriteError(r.Context(), err, w)
		return
	}

	util.WriteJSONObject(r.Context(), w, util.EmptyObject{})
}

func (h *handler) getClusters(w http.ResponseWriter, r *http.Request, userAuth *auth.UserAuth) {
	clusters, err := h.manager.GetActiveClusters(r.Context(), userAuth.AccountId, userAuth.UserId)
	if err != nil {
		util.WriteError(r.Context(), err, w)
		return
	}

	apiClusters := make([]api.ProxyCluster, 0, len(clusters))
	for _, c := range clusters {
		apiClusters = append(apiClusters, api.ProxyCluster{
			Address:          c.Address,
			ConnectedProxies: c.ConnectedProxies,
		})
	}

	util.WriteJSONObject(r.Context(), w, apiClusters)
}