mirror of
https://github.com/pomerium/pomerium.git
synced 2025-08-02 16:30:17 +02:00
very bad demo code
This commit is contained in:
Joe Kralicky
parent
b4aa275403
commit
d588135b3a
30 changed files with 1308 additions and 248 deletions
|
|
@ -6,6 +6,7 @@ import (
|
|||
"context"
|
||||
"fmt"
|
||||
"slices"
|
||||
"sync"
|
||||
"time"
|
||||
|
||||
"github.com/rs/zerolog"
|
||||
|
|
@ -36,6 +37,9 @@ type Authorize struct {
|
|||
|
||||
tracerProvider oteltrace.TracerProvider
|
||||
tracer oteltrace.Tracer
|
||||
|
||||
activeStreamsMu sync.Mutex
|
||||
activeStreams []chan error
|
||||
}
|
||||
|
||||
// New validates and creates a new Authorize service from a set of config options.
|
||||
|
|
@ -48,6 +52,7 @@ func New(ctx context.Context, cfg *config.Config) (*Authorize, error) {
|
|||
globalCache: storage.NewGlobalCache(time.Minute),
|
||||
tracerProvider: tracerProvider,
|
||||
tracer: tracer,
|
||||
activeStreams: []chan error{},
|
||||
}
|
||||
a.accessTracker = NewAccessTracker(a, accessTrackerMaxSize, accessTrackerDebouncePeriod)
|
||||
|
||||
|
|
@ -154,6 +159,15 @@ func newPolicyEvaluator(
|
|||
|
||||
// OnConfigChange updates internal structures based on config.Options
|
||||
func (a *Authorize) OnConfigChange(ctx context.Context, cfg *config.Config) {
|
||||
a.activeStreamsMu.Lock()
|
||||
// demo code
|
||||
if cfg.Options.Routes[0].AllowAnyAuthenticatedUser == false {
|
||||
for _, s := range a.activeStreams {
|
||||
s <- fmt.Errorf("no longer authorized")
|
||||
}
|
||||
clear(a.activeStreams)
|
||||
}
|
||||
a.activeStreamsMu.Unlock()
|
||||
currentState := a.state.Load()
|
||||
a.currentOptions.Store(cfg.Options)
|
||||
if newState, err := newAuthorizeStateFromConfig(ctx, a.tracerProvider, cfg, a.store, currentState.evaluator); err != nil {
|
||||
|
|
|
|||
|
|
@ -9,13 +9,10 @@ import (
|
|||
"strings"
|
||||
|
||||
envoy_service_auth_v3 "github.com/envoyproxy/go-control-plane/envoy/service/auth/v3"
|
||||
"google.golang.org/grpc/codes"
|
||||
"google.golang.org/grpc/status"
|
||||
"google.golang.org/protobuf/types/known/structpb"
|
||||
|
||||
"github.com/pomerium/pomerium/authorize/evaluator"
|
||||
"github.com/pomerium/pomerium/config"
|
||||
"github.com/pomerium/pomerium/config/envoyconfig"
|
||||
|
||||
"github.com/pomerium/pomerium/internal/httputil"
|
||||
"github.com/pomerium/pomerium/internal/log"
|
||||
"github.com/pomerium/pomerium/internal/sessions"
|
||||
|
|
@ -24,6 +21,9 @@ import (
|
|||
"github.com/pomerium/pomerium/pkg/grpc/user"
|
||||
"github.com/pomerium/pomerium/pkg/storage"
|
||||
"github.com/pomerium/pomerium/pkg/telemetry/requestid"
|
||||
"google.golang.org/grpc/codes"
|
||||
"google.golang.org/grpc/status"
|
||||
"google.golang.org/protobuf/types/known/structpb"
|
||||
)
|
||||
|
||||
// Check implements the envoy auth server gRPC endpoint.
|
||||
|
|
|
|||
685
authorize/ssh_grpc.go
Normal file
685
authorize/ssh_grpc.go
Normal file
|
|
@ -0,0 +1,685 @@
|
|||
package authorize
|
||||
|
||||
import (
|
||||
"encoding/binary"
|
||||
"errors"
|
||||
"fmt"
|
||||
"io"
|
||||
"net/url"
|
||||
"slices"
|
||||
"strings"
|
||||
"sync/atomic"
|
||||
"time"
|
||||
|
||||
"github.com/charmbracelet/bubbles/list"
|
||||
tea "github.com/charmbracelet/bubbletea"
|
||||
"github.com/charmbracelet/lipgloss"
|
||||
extensions_ssh "github.com/pomerium/envoy-custom/api/extensions/filters/network/ssh"
|
||||
"github.com/pomerium/pomerium/config"
|
||||
"github.com/pomerium/pomerium/internal/sessions"
|
||||
"github.com/pomerium/pomerium/pkg/identity"
|
||||
"github.com/pomerium/pomerium/pkg/identity/oauth"
|
||||
gossh "golang.org/x/crypto/ssh"
|
||||
"golang.org/x/sync/errgroup"
|
||||
"google.golang.org/protobuf/types/known/anypb"
|
||||
"google.golang.org/protobuf/types/known/timestamppb"
|
||||
"google.golang.org/protobuf/types/known/wrapperspb"
|
||||
)
|
||||
|
||||
type StreamState struct {
|
||||
Username string
|
||||
Hostname string
|
||||
PublicKey []byte
|
||||
MethodsAuthenticated []string
|
||||
}
|
||||
|
||||
func (a *Authorize) ManageStream(
|
||||
server extensions_ssh.StreamManagement_ManageStreamServer,
|
||||
) error {
|
||||
recvC := make(chan *extensions_ssh.ClientMessage, 32)
|
||||
sendC := make(chan *extensions_ssh.ServerMessage, 32)
|
||||
eg, ctx := errgroup.WithContext(server.Context())
|
||||
eg.Go(func() error {
|
||||
defer close(recvC)
|
||||
for {
|
||||
req, err := server.Recv()
|
||||
if err != nil {
|
||||
if errors.Is(err, io.EOF) {
|
||||
return nil
|
||||
}
|
||||
return err
|
||||
}
|
||||
recvC <- req
|
||||
}
|
||||
})
|
||||
|
||||
eg.Go(func() error {
|
||||
for {
|
||||
select {
|
||||
case <-ctx.Done():
|
||||
return nil
|
||||
case msg := <-sendC:
|
||||
if err := server.Send(msg); err != nil {
|
||||
if errors.Is(err, io.EOF) {
|
||||
return nil
|
||||
}
|
||||
return err
|
||||
}
|
||||
}
|
||||
}
|
||||
})
|
||||
|
||||
var state StreamState
|
||||
|
||||
deviceAuthSuccess := &atomic.Bool{}
|
||||
|
||||
errC := make(chan error, 1)
|
||||
a.activeStreamsMu.Lock()
|
||||
a.activeStreams = append(a.activeStreams, errC)
|
||||
a.activeStreamsMu.Unlock()
|
||||
for {
|
||||
select {
|
||||
case err := <-errC:
|
||||
|
||||
return err
|
||||
case req, ok := <-recvC:
|
||||
if !ok {
|
||||
return nil
|
||||
}
|
||||
switch req := req.Message.(type) {
|
||||
case *extensions_ssh.ClientMessage_Event:
|
||||
switch event := req.Event.Event.(type) {
|
||||
case *extensions_ssh.StreamEvent_DownstreamConnected:
|
||||
fmt.Println("downstream connected")
|
||||
_ = event
|
||||
case nil:
|
||||
}
|
||||
case *extensions_ssh.ClientMessage_AuthRequest:
|
||||
authReq := req.AuthRequest
|
||||
fmt.Println("auth request")
|
||||
if state.Username == "" {
|
||||
state.Username = authReq.Username
|
||||
}
|
||||
if state.Hostname == "" {
|
||||
state.Hostname = authReq.Hostname
|
||||
}
|
||||
switch authReq.AuthMethod {
|
||||
case "publickey":
|
||||
methodReq, _ := authReq.MethodRequest.UnmarshalNew()
|
||||
pubkeyReq, ok := methodReq.(*extensions_ssh.PublicKeyMethodRequest)
|
||||
if !ok {
|
||||
return fmt.Errorf("client sent invalid auth request message")
|
||||
}
|
||||
|
||||
//
|
||||
// validate public key here
|
||||
//
|
||||
|
||||
state.MethodsAuthenticated = append(state.MethodsAuthenticated, "publickey")
|
||||
state.PublicKey = pubkeyReq.PublicKey
|
||||
|
||||
if authReq.Username == "" && authReq.Hostname == "" {
|
||||
pkData, _ := anypb.New(&extensions_ssh.PublicKeyAllowResponse{
|
||||
PublicKey: state.PublicKey,
|
||||
Permissions: &extensions_ssh.Permissions{
|
||||
PermitPortForwarding: true,
|
||||
PermitAgentForwarding: true,
|
||||
PermitX11Forwarding: true,
|
||||
PermitPty: true,
|
||||
PermitUserRc: true,
|
||||
ValidBefore: timestamppb.New(time.Now().Add(-1 * time.Minute)),
|
||||
ValidAfter: timestamppb.New(time.Now().Add(12 * time.Hour)),
|
||||
},
|
||||
})
|
||||
resp := extensions_ssh.ServerMessage{
|
||||
Message: &extensions_ssh.ServerMessage_AuthResponse{
|
||||
AuthResponse: &extensions_ssh.AuthenticationResponse{
|
||||
Response: &extensions_ssh.AuthenticationResponse_Allow{
|
||||
Allow: &extensions_ssh.AllowResponse{
|
||||
Username: state.Username,
|
||||
Hostname: state.Hostname,
|
||||
AllowedMethods: []*extensions_ssh.AllowedMethod{
|
||||
{
|
||||
Method: "publickey",
|
||||
MethodData: pkData,
|
||||
},
|
||||
},
|
||||
Target: extensions_ssh.Target_Internal,
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
}
|
||||
sendC <- &resp
|
||||
continue
|
||||
}
|
||||
|
||||
if !slices.Contains(state.MethodsAuthenticated, "keyboard-interactive") {
|
||||
resp := extensions_ssh.ServerMessage{
|
||||
Message: &extensions_ssh.ServerMessage_AuthResponse{
|
||||
AuthResponse: &extensions_ssh.AuthenticationResponse{
|
||||
Response: &extensions_ssh.AuthenticationResponse_Deny{
|
||||
Deny: &extensions_ssh.DenyResponse{
|
||||
Partial: true,
|
||||
Methods: []string{"keyboard-interactive"},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
}
|
||||
sendC <- &resp
|
||||
}
|
||||
case "keyboard-interactive":
|
||||
opts := a.currentOptions.Load()
|
||||
var route *config.Policy
|
||||
for r := range opts.GetAllPolicies() {
|
||||
if r.From == "ssh://"+strings.TrimSuffix(strings.Join([]string{state.Hostname, opts.SSHHostname}, "."), ".") {
|
||||
route = r
|
||||
break
|
||||
}
|
||||
}
|
||||
if route == nil {
|
||||
return fmt.Errorf("invalid route")
|
||||
}
|
||||
// sessionState := a.state.Load()
|
||||
|
||||
idp, err := opts.GetIdentityProviderForPolicy(route)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
authenticator, err := identity.NewAuthenticator(ctx, a.tracerProvider, oauth.Options{
|
||||
RedirectURL: &url.URL{},
|
||||
ProviderName: idp.GetType(),
|
||||
ProviderURL: idp.GetUrl(),
|
||||
ClientID: idp.GetClientId(),
|
||||
ClientSecret: idp.GetClientSecret(),
|
||||
Scopes: idp.GetScopes(),
|
||||
AuthCodeOptions: idp.GetRequestParams(),
|
||||
DeviceAuthClientType: idp.GetDeviceAuthClientType(),
|
||||
})
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
deviceAuthResp, err := authenticator.DeviceAuth(ctx)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
infoReq := extensions_ssh.KeyboardInteractiveInfoPrompts{
|
||||
Name: "Sign in with " + idp.GetType(),
|
||||
Instruction: deviceAuthResp.VerificationURIComplete,
|
||||
Prompts: []*extensions_ssh.KeyboardInteractiveInfoPrompts_Prompt{
|
||||
{},
|
||||
},
|
||||
}
|
||||
|
||||
infoReqAny, _ := anypb.New(&infoReq)
|
||||
resp := extensions_ssh.ServerMessage{
|
||||
Message: &extensions_ssh.ServerMessage_AuthResponse{
|
||||
AuthResponse: &extensions_ssh.AuthenticationResponse{
|
||||
Response: &extensions_ssh.AuthenticationResponse_InfoRequest{
|
||||
InfoRequest: &extensions_ssh.InfoRequest{
|
||||
Method: "keyboard-interactive",
|
||||
Request: infoReqAny,
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
}
|
||||
sendC <- &resp
|
||||
|
||||
go func() {
|
||||
var claims identity.SessionClaims
|
||||
|
||||
token, err := authenticator.DeviceAccessToken(ctx, deviceAuthResp, &claims)
|
||||
if err != nil {
|
||||
errC <- err
|
||||
return
|
||||
}
|
||||
s := sessions.NewState(idp.Id)
|
||||
err = claims.Claims.Claims(&s)
|
||||
if err != nil {
|
||||
errC <- fmt.Errorf("error unmarshaling session state: %w", err)
|
||||
return
|
||||
}
|
||||
fmt.Println(token)
|
||||
deviceAuthSuccess.Store(true)
|
||||
}()
|
||||
}
|
||||
case *extensions_ssh.ClientMessage_InfoResponse:
|
||||
resp := req.InfoResponse
|
||||
if resp.Method == "keyboard-interactive" {
|
||||
r, _ := resp.Response.UnmarshalNew()
|
||||
respInfo, ok := r.(*extensions_ssh.KeyboardInteractiveInfoPromptResponses)
|
||||
if ok {
|
||||
fmt.Println(respInfo.Responses)
|
||||
}
|
||||
}
|
||||
if deviceAuthSuccess.Load() {
|
||||
state.MethodsAuthenticated = append(state.MethodsAuthenticated, "keyboard-interactive")
|
||||
} else {
|
||||
retryReq := extensions_ssh.KeyboardInteractiveInfoPrompts{
|
||||
Name: "",
|
||||
Instruction: "Login not successful yet, try again",
|
||||
Prompts: []*extensions_ssh.KeyboardInteractiveInfoPrompts_Prompt{
|
||||
{},
|
||||
},
|
||||
}
|
||||
infoReqAny, _ := anypb.New(&retryReq)
|
||||
|
||||
resp := extensions_ssh.ServerMessage{
|
||||
Message: &extensions_ssh.ServerMessage_AuthResponse{
|
||||
AuthResponse: &extensions_ssh.AuthenticationResponse{
|
||||
Response: &extensions_ssh.AuthenticationResponse_InfoRequest{
|
||||
InfoRequest: &extensions_ssh.InfoRequest{
|
||||
Method: "keyboard-interactive",
|
||||
Request: infoReqAny,
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
}
|
||||
sendC <- &resp
|
||||
continue
|
||||
}
|
||||
if slices.Contains(state.MethodsAuthenticated, "publickey") {
|
||||
pkData, _ := anypb.New(&extensions_ssh.PublicKeyAllowResponse{
|
||||
PublicKey: state.PublicKey,
|
||||
Permissions: &extensions_ssh.Permissions{
|
||||
PermitPortForwarding: true,
|
||||
PermitAgentForwarding: true,
|
||||
PermitX11Forwarding: true,
|
||||
PermitPty: true,
|
||||
PermitUserRc: true,
|
||||
ValidBefore: timestamppb.New(time.Now().Add(-1 * time.Minute)),
|
||||
ValidAfter: timestamppb.New(time.Now().Add(12 * time.Hour)),
|
||||
},
|
||||
})
|
||||
authResponse := extensions_ssh.ServerMessage{
|
||||
Message: &extensions_ssh.ServerMessage_AuthResponse{
|
||||
AuthResponse: &extensions_ssh.AuthenticationResponse{
|
||||
Response: &extensions_ssh.AuthenticationResponse_Allow{
|
||||
Allow: &extensions_ssh.AllowResponse{
|
||||
Username: state.Username,
|
||||
Hostname: state.Hostname,
|
||||
AllowedMethods: []*extensions_ssh.AllowedMethod{
|
||||
{
|
||||
Method: "publickey",
|
||||
MethodData: pkData,
|
||||
},
|
||||
{
|
||||
Method: "keyboard-interactive",
|
||||
},
|
||||
},
|
||||
Target: extensions_ssh.Target_Upstream,
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
}
|
||||
sendC <- &authResponse
|
||||
} else {
|
||||
resp := extensions_ssh.ServerMessage{
|
||||
Message: &extensions_ssh.ServerMessage_AuthResponse{
|
||||
AuthResponse: &extensions_ssh.AuthenticationResponse{
|
||||
Response: &extensions_ssh.AuthenticationResponse_Deny{
|
||||
Deny: &extensions_ssh.DenyResponse{
|
||||
Partial: true,
|
||||
Methods: []string{"publickey"},
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
}
|
||||
sendC <- &resp
|
||||
}
|
||||
|
||||
case nil:
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return eg.Wait()
|
||||
}
|
||||
|
||||
// See RFC 4254, section 5.1.
|
||||
const msgChannelOpen = 90
|
||||
|
||||
type channelOpenMsg struct {
|
||||
ChanType string `sshtype:"90"`
|
||||
PeersID uint32
|
||||
PeersWindow uint32
|
||||
MaxPacketSize uint32
|
||||
TypeSpecificData []byte `ssh:"rest"`
|
||||
}
|
||||
|
||||
const (
|
||||
msgChannelExtendedData = 95
|
||||
msgChannelData = 94
|
||||
)
|
||||
|
||||
// Used for debug print outs of packets.
|
||||
type channelDataMsg struct {
|
||||
PeersID uint32 `sshtype:"94"`
|
||||
Length uint32
|
||||
Rest []byte `ssh:"rest"`
|
||||
}
|
||||
|
||||
// See RFC 4254, section 5.1.
|
||||
const msgChannelOpenConfirm = 91
|
||||
|
||||
type channelOpenConfirmMsg struct {
|
||||
PeersID uint32 `sshtype:"91"`
|
||||
MyID uint32
|
||||
MyWindow uint32
|
||||
MaxPacketSize uint32
|
||||
TypeSpecificData []byte `ssh:"rest"`
|
||||
}
|
||||
|
||||
const msgChannelRequest = 98
|
||||
|
||||
type channelRequestMsg struct {
|
||||
PeersID uint32 `sshtype:"98"`
|
||||
Request string
|
||||
WantReply bool
|
||||
RequestSpecificData []byte `ssh:"rest"`
|
||||
}
|
||||
|
||||
// See RFC 4254, section 5.4.
|
||||
const msgChannelSuccess = 99
|
||||
|
||||
type channelRequestSuccessMsg struct {
|
||||
PeersID uint32 `sshtype:"99"`
|
||||
}
|
||||
|
||||
// See RFC 4254, section 5.4.
|
||||
const msgChannelFailure = 100
|
||||
|
||||
type channelRequestFailureMsg struct {
|
||||
PeersID uint32 `sshtype:"100"`
|
||||
}
|
||||
|
||||
// See RFC 4254, section 5.3
|
||||
const msgChannelClose = 97
|
||||
|
||||
type channelCloseMsg struct {
|
||||
PeersID uint32 `sshtype:"97"`
|
||||
}
|
||||
|
||||
// See RFC 4254, section 5.3
|
||||
const msgChannelEOF = 96
|
||||
|
||||
type channelEOFMsg struct {
|
||||
PeersID uint32 `sshtype:"96"`
|
||||
}
|
||||
|
||||
func (a *Authorize) ServeChannel(
|
||||
server extensions_ssh.StreamManagement_ServeChannelServer,
|
||||
) error {
|
||||
var program *tea.Program
|
||||
inputR, inputW := io.Pipe()
|
||||
outputR, outputW := io.Pipe()
|
||||
var peerId uint32
|
||||
|
||||
var downstreamChannelInfo *extensions_ssh.SSHDownstreamChannelInfo
|
||||
var downstreamPtyInfo *extensions_ssh.SSHDownstreamPTYInfo
|
||||
for {
|
||||
channelMsg, err := server.Recv()
|
||||
if err != nil {
|
||||
if errors.Is(err, io.EOF) {
|
||||
return nil
|
||||
}
|
||||
return err
|
||||
}
|
||||
rawMsg := channelMsg.GetRawBytes().GetValue()
|
||||
switch rawMsg[0] {
|
||||
case msgChannelOpen:
|
||||
var msg channelOpenMsg
|
||||
gossh.Unmarshal(rawMsg, &msg)
|
||||
|
||||
var confirm channelOpenConfirmMsg
|
||||
peerId = msg.PeersID
|
||||
confirm.PeersID = peerId
|
||||
confirm.MyID = 1
|
||||
confirm.MyWindow = msg.PeersWindow
|
||||
confirm.MaxPacketSize = msg.MaxPacketSize
|
||||
downstreamChannelInfo = &extensions_ssh.SSHDownstreamChannelInfo{
|
||||
ChannelType: msg.ChanType,
|
||||
DownstreamChannelId: confirm.PeersID,
|
||||
InternalUpstreamChannelId: confirm.MyID,
|
||||
InitialWindowSize: confirm.MyWindow,
|
||||
MaxPacketSize: confirm.MaxPacketSize,
|
||||
}
|
||||
if err := server.Send(&extensions_ssh.ChannelMessage{
|
||||
Message: &extensions_ssh.ChannelMessage_RawBytes{
|
||||
RawBytes: &wrapperspb.BytesValue{
|
||||
Value: gossh.Marshal(confirm),
|
||||
},
|
||||
},
|
||||
}); err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
case msgChannelRequest:
|
||||
var msg channelRequestMsg
|
||||
gossh.Unmarshal(rawMsg, &msg)
|
||||
|
||||
switch msg.Request {
|
||||
case "pty-req":
|
||||
req := parsePtyReq(msg.RequestSpecificData)
|
||||
items := []list.Item{
|
||||
item("ubuntu@vm"),
|
||||
item("joe@local"),
|
||||
}
|
||||
downstreamPtyInfo = &extensions_ssh.SSHDownstreamPTYInfo{
|
||||
TermEnv: req.TermEnv,
|
||||
WidthColumns: req.Width,
|
||||
HeightRows: req.Height,
|
||||
WidthPx: req.WidthPx,
|
||||
HeightPx: req.HeightPx,
|
||||
Modes: req.Modes,
|
||||
}
|
||||
|
||||
const defaultWidth = 20
|
||||
|
||||
l := list.New(items, itemDelegate{}, defaultWidth, listHeight)
|
||||
l.Title = "Connect to which server?"
|
||||
l.SetShowStatusBar(false)
|
||||
l.SetFilteringEnabled(false)
|
||||
l.Styles.Title = titleStyle
|
||||
l.Styles.PaginationStyle = paginationStyle
|
||||
l.Styles.HelpStyle = helpStyle
|
||||
|
||||
program = tea.NewProgram(model{list: l},
|
||||
tea.WithInput(inputR),
|
||||
tea.WithOutput(outputW),
|
||||
tea.WithAltScreen(),
|
||||
tea.WithContext(server.Context()),
|
||||
tea.WithEnvironment([]string{"TERM=" + req.TermEnv}),
|
||||
)
|
||||
go func() {
|
||||
answer, err := program.Run()
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
username, hostname, _ := strings.Cut(answer.(model).choice, "@")
|
||||
handOff, _ := anypb.New(&extensions_ssh.SSHChannelControlAction{
|
||||
Action: &extensions_ssh.SSHChannelControlAction_HandOff{
|
||||
HandOff: &extensions_ssh.SSHChannelControlAction_HandOffUpstream{
|
||||
DownstreamChannelInfo: downstreamChannelInfo,
|
||||
DownstreamPtyInfo: downstreamPtyInfo,
|
||||
UpstreamAuth: &extensions_ssh.AllowResponse{
|
||||
Username: username,
|
||||
Hostname: hostname,
|
||||
},
|
||||
},
|
||||
},
|
||||
})
|
||||
|
||||
if err := server.Send(&extensions_ssh.ChannelMessage{
|
||||
Message: &extensions_ssh.ChannelMessage_ChannelControl{
|
||||
ChannelControl: &extensions_ssh.ChannelControl{
|
||||
Protocol: "ssh",
|
||||
ControlAction: handOff,
|
||||
},
|
||||
},
|
||||
}); err != nil {
|
||||
return
|
||||
}
|
||||
}()
|
||||
go func() {
|
||||
var buf [4096]byte
|
||||
for {
|
||||
n, err := outputR.Read(buf[:])
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
if err := server.Send(&extensions_ssh.ChannelMessage{
|
||||
Message: &extensions_ssh.ChannelMessage_RawBytes{
|
||||
RawBytes: &wrapperspb.BytesValue{
|
||||
Value: gossh.Marshal(channelDataMsg{
|
||||
PeersID: peerId,
|
||||
Length: uint32(n),
|
||||
Rest: buf[:n],
|
||||
}),
|
||||
},
|
||||
},
|
||||
}); err != nil {
|
||||
return
|
||||
}
|
||||
}
|
||||
}()
|
||||
program.Send(tea.WindowSizeMsg{Width: int(req.Width), Height: int(req.Height)})
|
||||
|
||||
if err := server.Send(&extensions_ssh.ChannelMessage{
|
||||
Message: &extensions_ssh.ChannelMessage_RawBytes{
|
||||
RawBytes: &wrapperspb.BytesValue{
|
||||
Value: gossh.Marshal(channelRequestSuccessMsg{
|
||||
PeersID: peerId,
|
||||
}),
|
||||
},
|
||||
},
|
||||
}); err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
case msgChannelData:
|
||||
var msg channelDataMsg
|
||||
gossh.Unmarshal(rawMsg, &msg)
|
||||
|
||||
if program != nil {
|
||||
inputW.Write(msg.Rest)
|
||||
}
|
||||
case msgChannelClose:
|
||||
var msg channelDataMsg
|
||||
gossh.Unmarshal(rawMsg, &msg)
|
||||
default:
|
||||
panic("unhandled message: " + fmt.Sprint(rawMsg[1]))
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
type ptyReq struct {
|
||||
TermEnv string
|
||||
Width, Height uint32
|
||||
WidthPx, HeightPx uint32
|
||||
Modes []byte
|
||||
}
|
||||
|
||||
func parsePtyReq(reqData []byte) ptyReq {
|
||||
termEnvLen := binary.BigEndian.Uint32(reqData)
|
||||
reqData = reqData[4:]
|
||||
termEnv := string(reqData[:termEnvLen])
|
||||
reqData = reqData[termEnvLen:]
|
||||
return ptyReq{
|
||||
TermEnv: termEnv,
|
||||
Width: binary.BigEndian.Uint32(reqData),
|
||||
Height: binary.BigEndian.Uint32(reqData[4:]),
|
||||
WidthPx: binary.BigEndian.Uint32(reqData[8:]),
|
||||
HeightPx: binary.BigEndian.Uint32(reqData[12:]),
|
||||
Modes: reqData[16:],
|
||||
}
|
||||
}
|
||||
|
||||
const listHeight = 14
|
||||
|
||||
var (
|
||||
titleStyle = lipgloss.NewStyle().MarginLeft(2)
|
||||
itemStyle = lipgloss.NewStyle().PaddingLeft(4)
|
||||
selectedItemStyle = lipgloss.NewStyle().PaddingLeft(2).Foreground(lipgloss.Color("170"))
|
||||
paginationStyle = list.DefaultStyles().PaginationStyle.PaddingLeft(4)
|
||||
helpStyle = list.DefaultStyles().HelpStyle.PaddingLeft(4).PaddingBottom(1)
|
||||
quitTextStyle = lipgloss.NewStyle().Margin(1, 0, 2, 4)
|
||||
)
|
||||
|
||||
type item string
|
||||
|
||||
func (i item) FilterValue() string { return "" }
|
||||
|
||||
type itemDelegate struct{}
|
||||
|
||||
func (d itemDelegate) Height() int { return 1 }
|
||||
func (d itemDelegate) Spacing() int { return 0 }
|
||||
func (d itemDelegate) Update(_ tea.Msg, _ *list.Model) tea.Cmd { return nil }
|
||||
func (d itemDelegate) Render(w io.Writer, m list.Model, index int, listItem list.Item) {
|
||||
i, ok := listItem.(item)
|
||||
if !ok {
|
||||
return
|
||||
}
|
||||
|
||||
str := fmt.Sprintf("%d. %s", index+1, i)
|
||||
|
||||
fn := itemStyle.Render
|
||||
if index == m.Index() {
|
||||
fn = func(s ...string) string {
|
||||
return selectedItemStyle.Render("> " + strings.Join(s, " "))
|
||||
}
|
||||
}
|
||||
|
||||
fmt.Fprint(w, fn(str))
|
||||
}
|
||||
|
||||
type model struct {
|
||||
list list.Model
|
||||
choice string
|
||||
quitting bool
|
||||
}
|
||||
|
||||
func (m model) Init() tea.Cmd {
|
||||
return nil
|
||||
}
|
||||
|
||||
func (m model) Update(msg tea.Msg) (tea.Model, tea.Cmd) {
|
||||
switch msg := msg.(type) {
|
||||
case tea.WindowSizeMsg:
|
||||
m.list.SetWidth(msg.Width)
|
||||
return m, nil
|
||||
|
||||
case tea.KeyMsg:
|
||||
switch keypress := msg.String(); keypress {
|
||||
case "q", "ctrl+c":
|
||||
m.quitting = true
|
||||
return m, tea.Quit
|
||||
|
||||
case "enter":
|
||||
i, ok := m.list.SelectedItem().(item)
|
||||
if ok {
|
||||
m.choice = string(i)
|
||||
}
|
||||
return m, tea.Quit
|
||||
}
|
||||
}
|
||||
|
||||
var cmd tea.Cmd
|
||||
m.list, cmd = m.list.Update(msg)
|
||||
return m, cmd
|
||||
}
|
||||
|
||||
func (m model) View() string {
|
||||
if m.choice != "" {
|
||||
return quitTextStyle.Render(fmt.Sprintf("%s? Sounds good to me.", m.choice))
|
||||
}
|
||||
if m.quitting {
|
||||
return quitTextStyle.Render("Not hungry? That’s cool.")
|
||||
}
|
||||
return "\n" + m.list.View()
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue