2023-03-15 19:00:52 +03:00
|
|
|
// Copyright (c) HashiCorp, Inc.
|
|
|
|
// SPDX-License-Identifier: MPL-2.0
|
|
|
|
|
2015-06-26 04:47:32 +03:00
|
|
|
package api
|
|
|
|
|
2018-07-25 01:49:55 +03:00
|
|
|
import (
|
|
|
|
"context"
|
|
|
|
"fmt"
|
2022-03-24 20:58:03 +03:00
|
|
|
"net/http"
|
2018-07-25 01:49:55 +03:00
|
|
|
)
|
2015-06-26 04:47:32 +03:00
|
|
|
|
2015-07-03 00:23:09 +03:00
|
|
|
// SSH is used to return a client to invoke operations on SSH backend.
|
2015-07-01 18:58:49 +03:00
|
|
|
type SSH struct {
|
2015-08-12 20:30:50 +03:00
|
|
|
c *Client
|
|
|
|
MountPoint string
|
2015-06-26 04:47:32 +03:00
|
|
|
}
|
|
|
|
|
2015-09-29 10:35:16 +03:00
|
|
|
// SSH returns the client for logical-backend API calls.
|
2015-08-12 19:56:17 +03:00
|
|
|
func (c *Client) SSH() *SSH {
|
2016-02-23 08:08:21 +03:00
|
|
|
return c.SSHWithMountPoint(SSHHelperDefaultMountPoint)
|
2015-08-12 19:56:17 +03:00
|
|
|
}
|
|
|
|
|
2015-09-29 10:35:16 +03:00
|
|
|
// SSHWithMountPoint returns the client with specific SSH mount point.
|
2015-08-12 20:30:50 +03:00
|
|
|
func (c *Client) SSHWithMountPoint(mountPoint string) *SSH {
|
2015-07-29 21:21:36 +03:00
|
|
|
return &SSH{
|
2015-08-12 20:30:50 +03:00
|
|
|
c: c,
|
|
|
|
MountPoint: mountPoint,
|
2015-07-06 18:05:02 +03:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2022-03-24 00:47:43 +03:00
|
|
|
// Credential wraps CredentialWithContext using context.Background.
|
2015-07-29 21:21:36 +03:00
|
|
|
func (c *SSH) Credential(role string, data map[string]interface{}) (*Secret, error) {
|
2022-03-24 00:47:43 +03:00
|
|
|
return c.CredentialWithContext(context.Background(), role, data)
|
|
|
|
}
|
|
|
|
|
|
|
|
// CredentialWithContext invokes the SSH backend API to create a credential to establish an SSH session.
|
|
|
|
func (c *SSH) CredentialWithContext(ctx context.Context, role string, data map[string]interface{}) (*Secret, error) {
|
|
|
|
ctx, cancelFunc := c.c.withConfiguredTimeout(ctx)
|
|
|
|
defer cancelFunc()
|
|
|
|
|
2022-03-24 20:58:03 +03:00
|
|
|
r := c.c.NewRequest(http.MethodPut, fmt.Sprintf("/v1/%s/creds/%s", c.MountPoint, role))
|
2015-06-26 04:47:32 +03:00
|
|
|
if err := r.SetJSONBody(data); err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2022-03-24 00:47:43 +03:00
|
|
|
resp, err := c.c.rawRequestWithContext(ctx, r)
|
2015-06-26 04:47:32 +03:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
defer resp.Body.Close()
|
|
|
|
|
|
|
|
return ParseSecret(resp.Body)
|
|
|
|
}
|
2017-08-17 01:44:28 +03:00
|
|
|
|
2022-03-24 00:47:43 +03:00
|
|
|
// SignKey wraps SignKeyWithContext using context.Background.
|
2017-08-17 01:44:28 +03:00
|
|
|
func (c *SSH) SignKey(role string, data map[string]interface{}) (*Secret, error) {
|
2022-03-24 00:47:43 +03:00
|
|
|
return c.SignKeyWithContext(context.Background(), role, data)
|
|
|
|
}
|
|
|
|
|
|
|
|
// SignKeyWithContext signs the given public key and returns a signed public key to pass
|
|
|
|
// along with the SSH request.
|
|
|
|
func (c *SSH) SignKeyWithContext(ctx context.Context, role string, data map[string]interface{}) (*Secret, error) {
|
|
|
|
ctx, cancelFunc := c.c.withConfiguredTimeout(ctx)
|
|
|
|
defer cancelFunc()
|
|
|
|
|
2022-03-24 20:58:03 +03:00
|
|
|
r := c.c.NewRequest(http.MethodPut, fmt.Sprintf("/v1/%s/sign/%s", c.MountPoint, role))
|
2017-08-17 01:44:28 +03:00
|
|
|
if err := r.SetJSONBody(data); err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
|
2022-03-24 00:47:43 +03:00
|
|
|
resp, err := c.c.rawRequestWithContext(ctx, r)
|
2017-08-17 01:44:28 +03:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
defer resp.Body.Close()
|
|
|
|
|
|
|
|
return ParseSecret(resp.Body)
|
|
|
|
}
|