router.go

package admin

import (
	"fmt"
	"net/http"
	"os"
	"strings"
	"time"

	"github.com/CMSgov/bcda-ssas-app/ssas"
	"github.com/CMSgov/bcda-ssas-app/ssas/monitoring"

	"github.com/go-chi/chi/v5"
	gcmw "github.com/go-chi/chi/v5/middleware"

	"github.com/CMSgov/bcda-ssas-app/ssas/constants"
	"github.com/CMSgov/bcda-ssas-app/ssas/service"
)

var infoMap map[string][]string
var adminSigningKeyPath string
var adminSigningKey string
var server *service.Server

func init() {
	infoMap = make(map[string][]string)
	adminSigningKeyPath = os.Getenv("SSAS_ADMIN_SIGNING_KEY_PATH")
	adminSigningKey = os.Getenv("SSAS_ADMIN_SIGNING_KEY")
}

// Server creates an SSAS admin server
func Server() *service.Server {
	unsafeMode := os.Getenv("HTTP_ONLY") == "true"
	useMTLS := os.Getenv("ADMIN_USE_MTLS") == "true"

	signingKey, err := service.ChooseSigningKey(adminSigningKeyPath, adminSigningKey)
	if err != nil {
		msg := fmt.Sprintf("Unable to get admin server signing key %v", err)
		ssas.Logger.Error(msg)
		return nil
	}

	server = service.NewServer("admin", ":3004", constants.Version, infoMap, routes(), unsafeMode, useMTLS, signingKey, 20*time.Minute, "")
	if server != nil {
		r, _ := server.ListRoutes()
		infoMap["banner"] = []string{fmt.Sprintf("%s server running on port %s", "admin", ":3004")}
		infoMap["routes"] = r
	}
	return server
}

func routes() *chi.Mux {
	r := chi.NewRouter()
	m := monitoring.GetMonitor()

	r.Use(gcmw.RequestID, service.NewAPILogger(), service.ConnectionClose)
	r.With(requireBasicAuth).Post(m.WrapHandler("/group", createGroup))
	r.With(requireBasicAuth).Get(m.WrapHandler("/group", listGroups))
	r.With(requireBasicAuth).Put(m.WrapHandler("/group/{id}", updateGroup))
	r.With(requireBasicAuth).Delete(m.WrapHandler("/group/{id}", deleteGroup))
	r.With(requireBasicAuth).Post(m.WrapHandler("/system", createSystem))
	r.With(requireBasicAuth).Put(m.WrapHandler("/system/{systemID}/credentials", resetCredentials))
	r.With(requireBasicAuth).Get(m.WrapHandler("/system/{systemID}/key", getPublicKey))
	r.With(requireBasicAuth).Delete(m.WrapHandler("/system/{systemID}/credentials", deactivateSystemCredentials))
	r.With(requireBasicAuth).Delete(m.WrapHandler("/token/{tokenID}", revokeToken))

	r.Route("/v2", func(r chi.Router) {
		r.With(requireBasicAuth).Post(m.WrapHandler("/system", createV2System))
		r.With(requireBasicAuth).Post(m.WrapHandler("/group", createGroup))
		r.With(requireBasicAuth).Get(m.WrapHandler("/group", listGroups))
		r.With(requireBasicAuth).Patch(m.WrapHandler("/group/{id}", updateGroup))
		r.With(requireBasicAuth).Patch(m.WrapHandler("/system/{id}", updateSystem))
		r.With(requireBasicAuth).Get(m.WrapHandler("/system/{id}", getSystem))
		r.With(requireBasicAuth).Post(m.WrapHandler("/system/{systemID}/ip", registerIP))
		r.With(requireBasicAuth).Get(m.WrapHandler("/system/{systemID}/ip", getSystemIPs))
		r.With(requireBasicAuth).Delete(m.WrapHandler("/system/{systemID}/ip/{id}", deleteSystemIP))
		r.With(requireBasicAuth).Post(m.WrapHandler("/system/{systemID}/token", createToken))
		r.With(requireBasicAuth).Delete(m.WrapHandler("/system/{systemID}/token/{id}", deleteToken))
		r.With(requireBasicAuth).Post(m.WrapHandler("/system/{systemID}/key", createKey))
		r.With(requireBasicAuth).Delete(m.WrapHandler("/system/{systemID}/key/{id}", deleteKey))

	})

	swaggerPath := "./swaggerui"
	if _, err := os.Stat(swaggerPath); os.IsNotExist(err) {
		ssas.Logger.Info("swagger path not found: " + swaggerPath)
		swaggerPath = "../swaggerui"
	} else {
		ssas.Logger.Info("swagger path found: " + swaggerPath)
	}
	FileServer(r, "/swagger", http.Dir(swaggerPath))

	return r
}

// FileServer conveniently sets up a http.FileServer handler to serve
// static files from a http.FileSystem.
// stolen from https://github.com/go-chi/chi/blob/master/_examples/fileserver/main.go
func FileServer(r chi.Router, path string, root http.FileSystem) {
	if strings.ContainsAny(path, "{}*") {
		panic("FileServer does not permit URL parameters.")
	}

	fs := http.StripPrefix(path, http.FileServer(root))

	if path != "/" && path[len(path)-1] != '/' {
		r.Get(path, http.RedirectHandler(path+"/", 301).ServeHTTP)
		path += "/"
	}
	path += "*"

	r.Get(path, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		fs.ServeHTTP(w, r)
	}))
}