mirror of
https://github.com/AdguardTeam/AdGuardHome.git
synced 2024-12-23 23:28:17 +03:00
cdf970fcbf
Updates #5704. Squashed commit of the following: commitf111e2033aAuthor: Dimitry Kolyshev <dkolyshev@adguard.com> Date: Thu Aug 8 11:27:41 2024 +0300 docs: chlog commit0d56423056Merge:866239a491a6ec30bdAuthor: Dimitry Kolyshev <dkolyshev@adguard.com> Date: Thu Aug 8 11:26:14 2024 +0300 Merge remote-tracking branch 'origin/master' into 5704-riscv commit866239a490Author: Dimitry Kolyshev <dkolyshev@adguard.com> Date: Tue Aug 6 16:00:05 2024 +0500 home: riscv arch commit6069382857Author: Dimitry Kolyshev <dkolyshev@adguard.com> Date: Tue Aug 6 15:56:23 2024 +0500 scripts: riscv arch commitea7cb3a0bdAuthor: Dimitry Kolyshev <dkolyshev@adguard.com> Date: Tue Aug 6 14:35:14 2024 +0500 scripts: riscv arch
109 lines
2.1 KiB
Go
109 lines
2.1 KiB
Go
package home
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/binary"
|
|
"io"
|
|
"net"
|
|
"net/http"
|
|
"os"
|
|
"time"
|
|
|
|
"github.com/AdguardTeam/golibs/ioutil"
|
|
"github.com/AdguardTeam/golibs/log"
|
|
"github.com/josharian/native"
|
|
)
|
|
|
|
// GLMode - enable GL-Inet compatibility mode
|
|
var GLMode bool
|
|
|
|
var glFilePrefix = "/tmp/gl_token_"
|
|
|
|
const (
|
|
glTokenTimeoutSeconds = 3600
|
|
glCookieName = "Admin-Token"
|
|
)
|
|
|
|
func glProcessRedirect(w http.ResponseWriter, r *http.Request) bool {
|
|
if !GLMode {
|
|
return false
|
|
}
|
|
// redirect to gl-inet login
|
|
host, _, _ := net.SplitHostPort(r.Host)
|
|
url := "http://" + host
|
|
log.Debug("Auth: redirecting to %s", url)
|
|
http.Redirect(w, r, url, http.StatusFound)
|
|
return true
|
|
}
|
|
|
|
func glProcessCookie(r *http.Request) bool {
|
|
if !GLMode {
|
|
return false
|
|
}
|
|
|
|
glCookie, glerr := r.Cookie(glCookieName)
|
|
if glerr != nil {
|
|
return false
|
|
}
|
|
|
|
log.Debug("Auth: GL cookie value: %s", glCookie.Value)
|
|
if glCheckToken(glCookie.Value) {
|
|
return true
|
|
}
|
|
log.Info("Auth: invalid GL cookie value: %s", glCookie)
|
|
return false
|
|
}
|
|
|
|
func glCheckToken(sess string) bool {
|
|
tokenName := glFilePrefix + sess
|
|
_, err := os.Stat(tokenName)
|
|
if err != nil {
|
|
log.Error("os.Stat: %s", err)
|
|
return false
|
|
}
|
|
tokenDate := glGetTokenDate(tokenName)
|
|
now := uint32(time.Now().UTC().Unix())
|
|
return now <= (tokenDate + glTokenTimeoutSeconds)
|
|
}
|
|
|
|
// MaxFileSize is a maximum file length in bytes.
|
|
const MaxFileSize = 1024 * 1024
|
|
|
|
func glGetTokenDate(file string) uint32 {
|
|
f, err := os.Open(file)
|
|
if err != nil {
|
|
log.Error("os.Open: %s", err)
|
|
|
|
return 0
|
|
}
|
|
defer func() {
|
|
derr := f.Close()
|
|
if derr != nil {
|
|
log.Error("glinet: closing file: %s", err)
|
|
}
|
|
}()
|
|
|
|
fileReader := ioutil.LimitReader(f, MaxFileSize)
|
|
|
|
var dateToken uint32
|
|
|
|
// This use of ReadAll is now safe, because we limited reader.
|
|
bs, err := io.ReadAll(fileReader)
|
|
if err != nil {
|
|
log.Error("reading token: %s", err)
|
|
|
|
return 0
|
|
}
|
|
|
|
buf := bytes.NewBuffer(bs)
|
|
|
|
// TODO(a.garipov): Get rid of github.com/josharian/native dependency.
|
|
err = binary.Read(buf, native.Endian, &dateToken)
|
|
if err != nil {
|
|
log.Error("decoding token: %s", err)
|
|
|
|
return 0
|
|
}
|
|
|
|
return dateToken
|
|
}
|