mirror of
https://github.com/fosrl/pangolin.git
synced 2026-07-05 19:59:43 +00:00
296439fd67
listExitNodes is resolved via the #dynamic path alias, which maps to
server/lib in the OSS build and server/private/lib in enterprise/saas.
Commit 9c18936b added a 4th siteId argument to the shared caller
(handleNewtPingRequestMessage) and to the enterprise implementation, but
not to the OSS one, so under the OSS tsconfig the call fails:
handleNewtPingRequestMessage.ts: error TS2554: Expected 1-3 arguments,
but got 4.
This breaks 'npx tsc --noEmit' for the OSS build (the CI 'Test with tsc'
step runs it after set:oss). Add siteId?: number to the OSS signature
for parity. It is unused in OSS since that build has no remote exit
nodes to label-filter; accepting it keeps the two #dynamic
implementations interface-compatible.
87 lines
2.4 KiB
TypeScript
87 lines
2.4 KiB
TypeScript
import { db, exitNodes, Transaction } from "@server/db";
|
|
import logger from "@server/logger";
|
|
import { ExitNodePingResult } from "@server/routers/newt";
|
|
import { eq } from "drizzle-orm";
|
|
|
|
export async function verifyExitNodeOrgAccess(
|
|
exitNodeId: number,
|
|
orgId: string
|
|
) {
|
|
const [exitNode] = await db
|
|
.select()
|
|
.from(exitNodes)
|
|
.where(eq(exitNodes.exitNodeId, exitNodeId));
|
|
|
|
// For any other type, deny access
|
|
return { hasAccess: true, exitNode };
|
|
}
|
|
|
|
export async function listExitNodes(
|
|
orgId: string,
|
|
filterOnline = false,
|
|
noCloud = false,
|
|
// Accepted for parity with the enterprise implementation (used there for
|
|
// site-label filtering of remote exit nodes). The OSS build has no remote
|
|
// exit nodes, so it is unused here.
|
|
siteId?: number
|
|
) {
|
|
// TODO: pick which nodes to send and ping better than just all of them that are not remote
|
|
const allExitNodes = await db
|
|
.select({
|
|
exitNodeId: exitNodes.exitNodeId,
|
|
name: exitNodes.name,
|
|
address: exitNodes.address,
|
|
endpoint: exitNodes.endpoint,
|
|
publicKey: exitNodes.publicKey,
|
|
listenPort: exitNodes.listenPort,
|
|
reachableAt: exitNodes.reachableAt,
|
|
maxConnections: exitNodes.maxConnections,
|
|
online: exitNodes.online,
|
|
lastPing: exitNodes.lastPing,
|
|
type: exitNodes.type,
|
|
region: exitNodes.region
|
|
})
|
|
.from(exitNodes);
|
|
|
|
// Filter the nodes. If there are NO remoteExitNodes then do nothing. If there are then remove all of the non-remoteExitNodes
|
|
if (allExitNodes.length === 0) {
|
|
logger.warn("No exit nodes found!");
|
|
return [];
|
|
}
|
|
|
|
return allExitNodes;
|
|
}
|
|
|
|
export function selectBestExitNode(
|
|
pingResults: ExitNodePingResult[]
|
|
): ExitNodePingResult | null {
|
|
if (!pingResults || pingResults.length === 0) {
|
|
logger.warn("No ping results provided");
|
|
return null;
|
|
}
|
|
|
|
return pingResults[0];
|
|
}
|
|
|
|
export async function checkExitNodeOrg(
|
|
exitNodeId: number,
|
|
orgId: string,
|
|
trx?: Transaction | typeof db
|
|
): Promise<boolean> {
|
|
return false;
|
|
}
|
|
|
|
export async function resolveExitNodes(
|
|
hostname: string,
|
|
publicKey: string
|
|
): Promise<
|
|
{
|
|
endpoint: string;
|
|
publicKey: string;
|
|
orgId: string;
|
|
}[]
|
|
> {
|
|
// OSS version: simple implementation that returns empty array
|
|
return [];
|
|
}
|