yumusb
63cdd37b12
Ensure agent.IP is cleared for unauthenticated requests. Previously IPv4, IPv6 and Hostname were redacted, but agent.IP was left intact and could leak sensitive information. This change sets agent.IP to an empty string in Get() when the user is not authenticated.
111 lines
2.7 KiB
Go
111 lines
2.7 KiB
Go
package handler
|
|
|
|
import (
|
|
"github.com/dushixiang/pika/internal/models"
|
|
"github.com/dushixiang/pika/internal/utils"
|
|
"github.com/go-orz/orz"
|
|
"github.com/labstack/echo/v4"
|
|
"gorm.io/datatypes"
|
|
)
|
|
|
|
// Get 获取探针详情（公开接口，已登录返回全部，未登录返回公开可见）
|
|
func (h *AgentHandler) Get(c echo.Context) error {
|
|
id := c.Param("id")
|
|
ctx := c.Request().Context()
|
|
|
|
// 根据认证状态返回相应的探针
|
|
isAuthenticated := utils.IsAuthenticated(c)
|
|
agent, err := h.agentService.GetAgentByAuth(ctx, id, isAuthenticated)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// 隐藏敏感配置
|
|
agent.SSHLoginConfig = datatypes.JSONType[models.SSHLoginConfigData]{}
|
|
agent.TamperProtectConfig = datatypes.JSONType[models.TamperProtectConfigData]{}
|
|
|
|
// 未登录时隐藏敏感信息
|
|
if !isAuthenticated {
|
|
agent.IP = ""
|
|
agent.IPv4 = ""
|
|
agent.IPv6 = ""
|
|
agent.Hostname = ""
|
|
}
|
|
|
|
return orz.Ok(c, agent)
|
|
}
|
|
|
|
// GetAgents 获取探针列表（公开接口，已登录返回全部，未登录返回公开可见）
|
|
func (h *AgentHandler) GetAgents(c echo.Context) error {
|
|
ctx := c.Request().Context()
|
|
|
|
// 根据认证状态返回相应的探针列表
|
|
isAuthenticated := utils.IsAuthenticated(c)
|
|
agents, err := h.agentService.ListByAuth(ctx, isAuthenticated)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// 排序
|
|
SortAgents(agents)
|
|
|
|
result := make([]map[string]interface{}, 0, len(agents))
|
|
for _, agent := range agents {
|
|
result = append(result, h.buildAgentListItem(agent, isAuthenticated))
|
|
}
|
|
|
|
return orz.Ok(c, result)
|
|
}
|
|
|
|
func (h *AgentHandler) buildAgentListItem(agent models.Agent, isAuthenticated bool) map[string]interface{} {
|
|
item := map[string]any{
|
|
"id": agent.ID,
|
|
"name": agent.Name,
|
|
"os": agent.OS,
|
|
"arch": agent.Arch,
|
|
"version": agent.Version,
|
|
"tags": agent.Tags,
|
|
"expireTime": agent.ExpireTime,
|
|
"status": agent.Status,
|
|
"lastSeenAt": agent.LastSeenAt,
|
|
"visibility": agent.Visibility,
|
|
"weight": agent.Weight,
|
|
}
|
|
|
|
trafficStats := agent.TrafficStats.Data()
|
|
if trafficStats.Enabled {
|
|
item["trafficStats"] = trafficStats
|
|
} else {
|
|
item["trafficStats"] = map[string]any{
|
|
"enabled": false,
|
|
}
|
|
}
|
|
|
|
metrics, ok := h.metricService.GetLatestMetrics(agent.ID)
|
|
if ok {
|
|
if !isAuthenticated && metrics != nil {
|
|
sanitized := *metrics
|
|
sanitized.NetworkInterfaces = nil
|
|
item["metrics"] = &sanitized
|
|
} else {
|
|
item["metrics"] = metrics
|
|
}
|
|
}
|
|
|
|
return item
|
|
}
|
|
|
|
// GetTags 获取所有探针的标签
|
|
func (h *AgentHandler) GetTags(c echo.Context) error {
|
|
ctx := c.Request().Context()
|
|
|
|
tags, err := h.agentService.GetAllTags(ctx)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return orz.Ok(c, orz.Map{
|
|
"tags": tags,
|
|
})
|
|
}
|