-
Notifications
You must be signed in to change notification settings - Fork 0
/
module.go
68 lines (56 loc) · 1.83 KB
/
module.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
package tsauth
import (
"fmt"
"net/http"
"github.com/caddyserver/caddy/v2"
"github.com/caddyserver/caddy/v2/caddyconfig"
"github.com/caddyserver/caddy/v2/caddyconfig/httpcaddyfile"
"github.com/caddyserver/caddy/v2/modules/caddyhttp"
"github.com/caddyserver/caddy/v2/modules/caddyhttp/caddyauth"
"tailscale.com/client/tailscale"
"go.uber.org/zap"
)
func init() {
caddy.RegisterModule(TailscaleAuth{})
httpcaddyfile.RegisterHandlerDirective("tailscale_auth", parseCaddyfile)
}
type TailscaleAuth struct {
logger *zap.Logger
}
func (TailscaleAuth) CaddyModule() caddy.ModuleInfo {
return caddy.ModuleInfo{
ID: "http.authentication.providers.tailscale",
New: func() caddy.Module { return new(TailscaleAuth) },
}
}
func (ta* TailscaleAuth) Provision(ctx caddy.Context) error {
ta.logger = ctx.Logger()
return nil
}
func (ta TailscaleAuth) Authenticate(w http.ResponseWriter, r *http.Request) (caddyauth.User, bool, error) {
user := caddyauth.User{}
client := tailscale.LocalClient{}
info, err := client.WhoIs(r.Context(), r.RemoteAddr)
if err != nil {
ta.logger.Error("failed to get whois info from tailscaled", zap.String("remote_addr", r.RemoteAddr))
return user, false, err
}
if len(info.Node.Tags) != 0 {
ta.logger.Error("node has tags", zap.String("hostname", info.Node.Hostinfo.Hostname()))
return user, false, fmt.Errorf("node %s has tags", info.Node.Hostinfo.Hostname())
}
user.ID = info.UserProfile.LoginName
user.Metadata = map[string]string{
"tailscale_user": info.UserProfile.LoginName,
"tailscale_name": info.UserProfile.DisplayName,
}
return user, true, nil
}
func parseCaddyfile(_ httpcaddyfile.Helper) (caddyhttp.MiddlewareHandler, error) {
var ta TailscaleAuth
return caddyauth.Authentication{
ProvidersRaw: caddy.ModuleMap{
"tailscale": caddyconfig.JSON(ta, nil),
},
}, nil
}