package graphvent import ( "time" "net" "net/http" "github.com/graphql-go/graphql" "github.com/graphql-go/graphql/language/parser" "github.com/graphql-go/graphql/language/source" "github.com/graphql-go/graphql/language/ast" "context" "encoding/json" "io" "reflect" "fmt" "sync" "github.com/gobwas/ws" "github.com/gobwas/ws/wsutil" "strings" "crypto/ecdh" "crypto/ecdsa" "crypto/elliptic" "crypto/rand" "crypto/x509" "crypto/tls" "crypto/x509/pkix" "math/big" "encoding/pem" "github.com/google/uuid" ) func GraphiQLHandler() func(http.ResponseWriter, *http.Request) { return func(w http.ResponseWriter, r * http.Request) { graphiql_string := fmt.Sprintf(` GraphiQL
Loading...
`) w.Header().Set("Content-Type", "text/html; charset=utf-8") w.WriteHeader(http.StatusOK) io.WriteString(w, graphiql_string) } } type GQLPayload struct { OperationName string `json:"operationName,omitempty"` Query string `json:"query,omitempty"` Variables map[string]interface{} `json:"variables,omitempty"` Extensions map[string]interface{} `json:"extensions,omitempty"` Data string `json:"data,omitempty"` } type GQLWSMsg struct { ID string `json:"id,omitempty"` Type string `json:"type"` Payload GQLPayload `json:"payload,omitempty"` } func enableCORS(w *http.ResponseWriter) { (*w).Header().Set("Access-Control-Allow-Origin", "*") (*w).Header().Set("Access-Control-Allow-Credentials", "true") (*w).Header().Set("Access-Control-Allow-Headers", "*") (*w).Header().Set("Access-Control-Allow-Methods", "*") } type GQLUnauthorized string func (e GQLUnauthorized) Is(target error) bool { error_type := reflect.TypeOf(GQLUnauthorized("")) target_type := reflect.TypeOf(target) return error_type == target_type } func (e GQLUnauthorized) Error() string { return fmt.Sprintf("GQL_UNAUTHORIZED_ERROR: %s", string(e)) } func (e GQLUnauthorized) MarshalJSON() ([]byte, error) { return json.MarshalIndent(&struct{ Error string `json:"error"` }{ Error: string(e), }, "", " ") } func checkForAuthHeader(header http.Header) (string, bool) { auths, ok := header["Authorization"] if ok == false { return "", false } for _, auth := range(auths) { parts := strings.SplitN(auth, " ", 2) if len(parts) != 2 { continue } if parts[0] == "TM" { return parts[1], true } } return "", false } // Context passed to each resolve execution type ResolveContext struct { // ID generated for the context so the gql extension can route data to it ID uuid.UUID // Channel for the gql extension to route data to this context Chan chan Signal // Graph Context this resolver is running under Context *Context // GQL Extension context this resolver is running under GQLContext *GQLExtContext // Pointer to the node that's currently processing this request Server *Node // The state data for the node processing this request Ext *GQLExt // ID of the user that made this request // TODO: figure out auth User NodeID } const GQL_RESOLVER_CHAN_SIZE = 10 func NewResolveContext(ctx *Context, server *Node, gql_ext *GQLExt, r *http.Request) (*ResolveContext, error) { username, _, ok := r.BasicAuth() if ok == false { return nil, fmt.Errorf("GQL_REQUEST_ERR: no auth header included in request header") } auth_id, err := ParseID(username) if err != nil { return nil, fmt.Errorf("GQL_REQUEST_ERR: failed to parse ID from auth username: %s", username) } return &ResolveContext{ Ext: gql_ext, ID: uuid.New(), Chan: make(chan Signal, GQL_RESOLVER_CHAN_SIZE), Context: ctx, GQLContext: ctx.Extensions[Hash(GQLExtType)].Data.(*GQLExtContext), Server: server, User: auth_id, }, nil } func GQLHandler(ctx *Context, server *Node, gql_ext *GQLExt) func(http.ResponseWriter, *http.Request) { return func(w http.ResponseWriter, r * http.Request) { ctx.Log.Logf("gql", "GQL REQUEST: %s", r.RemoteAddr) enableCORS(&w) header_map := map[string]interface{}{} for header, value := range(r.Header) { header_map[header] = value } ctx.Log.Logm("gql", header_map, "REQUEST_HEADERS") resolve_context, err := NewResolveContext(ctx, server, gql_ext, r) if err != nil { ctx.Log.Logf("gql", "GQL_AUTH_ERR: %s", err) json.NewEncoder(w).Encode(GQLUnauthorized(fmt.Sprintf("%s", err))) return } req_ctx := context.Background() req_ctx = context.WithValue(req_ctx, "resolve", resolve_context) str, err := io.ReadAll(r.Body) if err != nil { ctx.Log.Logf("gql", "GQL_READ_ERR: %s", err) json.NewEncoder(w).Encode(fmt.Sprintf("%e", err)) return } query := GQLPayload{} json.Unmarshal(str, &query) gql_context := ctx.Extensions[Hash(GQLExtType)].Data.(*GQLExtContext) params := graphql.Params{ Schema: gql_context.Schema, Context: req_ctx, RequestString: query.Query, } if query.OperationName != "" { params.OperationName = query.OperationName } if len(query.Variables) > 0 { params.VariableValues = query.Variables } gql_ext.resolver_chans_lock.Lock() gql_ext.resolver_chans[resolve_context.ID] = resolve_context.Chan gql_ext.resolver_chans_lock.Unlock() result := graphql.Do(params) if len(result.Errors) > 0 { extra_fields := map[string]interface{}{} extra_fields["body"] = string(str) extra_fields["headers"] = r.Header ctx.Log.Logm("gql", extra_fields, "wrong result, unexpected errors: %v", result.Errors) } json.NewEncoder(w).Encode(result) } } func sendOneResultAndClose(res *graphql.Result) chan *graphql.Result { resultChannel := make(chan *graphql.Result) go func() { resultChannel <- res close(resultChannel) }() return resultChannel } func getOperationTypeOfReq(p graphql.Params) string{ source := source.NewSource(&source.Source{ Body: []byte(p.RequestString), Name: "GraphQL request", }) AST, err := parser.Parse(parser.ParseParams{Source: source}) if err != nil { return "" } for _, node := range AST.Definitions { if operationDef, ok := node.(*ast.OperationDefinition); ok { name := "" if operationDef.Name != nil { name = operationDef.Name.Value } if name == p.OperationName || p.OperationName == "" { return operationDef.Operation } } } return "" } func GQLWSDo(ctx * Context, p graphql.Params) chan *graphql.Result { operation := getOperationTypeOfReq(p) ctx.Log.Logf("gqlws", "GQLWSDO_OPERATION: %s %+v", operation, p.RequestString) if operation == ast.OperationTypeSubscription { return graphql.Subscribe(p) } res := graphql.Do(p) return sendOneResultAndClose(res) } func GQLWSHandler(ctx * Context, server *Node, gql_ext *GQLExt) func(http.ResponseWriter, *http.Request) { return func(w http.ResponseWriter, r * http.Request) { ctx.Log.Logf("gqlws_new", "HANDLING %s",r.RemoteAddr) enableCORS(&w) header_map := map[string]interface{}{} for header, value := range(r.Header) { header_map[header] = value } ctx.Log.Logm("gql", header_map, "REQUEST_HEADERS") resolve_context, err := NewResolveContext(ctx, server, gql_ext, r) if err != nil { ctx.Log.Logf("gql", "GQL_AUTH_ERR: %s", err) return } req_ctx := context.Background() req_ctx = context.WithValue(req_ctx, "resolve", resolve_context) u := ws.HTTPUpgrader{ Protocol: func(protocol string) bool { ctx.Log.Logf("gqlws", "UPGRADE_PROTOCOL: %s", string(protocol)) if string(protocol) == "graphql-transport-ws" || string(protocol) == "graphql-ws" { return true } return false }, } conn, _, _, err := u.Upgrade(r, w) if err == nil { defer conn.Close() conn_state := "init" for { msg_raw, op, err := wsutil.ReadClientData(conn) ctx.Log.Logf("gqlws_hb", "MSG: %s\nOP: 0x%02x\nERR: %+v\n", string(msg_raw), op, err) msg := GQLWSMsg{} json.Unmarshal(msg_raw, &msg) if err != nil { ctx.Log.Logf("gqlws", "WS_CLIENT_ERROR") break } if msg.Type == "connection_init" { if conn_state != "init" { ctx.Log.Logf("gqlws", "WS_CLIENT_ERROR: INIT WHILE IN %s", conn_state) break } conn_state = "ready" err = wsutil.WriteServerMessage(conn, 1, []byte("{\"type\": \"connection_ack\"}")) if err != nil { ctx.Log.Logf("gqlws", "WS_SERVER_ERROR: FAILED TO SEND connection_ack") break } } else if msg.Type == "ping" { ctx.Log.Logf("gqlws_hb", "PING FROM %s", r.RemoteAddr) err = wsutil.WriteServerMessage(conn, 1, []byte("{\"type\": \"pong\"}")) if err != nil { ctx.Log.Logf("gqlws", "WS_SERVER_ERROR: FAILED TO SEND PONG") } } else if msg.Type == "subscribe" { ctx.Log.Logf("gqlws", "SUBSCRIBE: %+v", msg.Payload) gql_context := ctx.Extensions[Hash(GQLExtType)].Data.(*GQLExtContext) params := graphql.Params{ Schema: gql_context.Schema, Context: req_ctx, RequestString: msg.Payload.Query, } if msg.Payload.OperationName != "" { params.OperationName = msg.Payload.OperationName } if len(msg.Payload.Variables) > 0 { params.VariableValues = msg.Payload.Variables } res_chan := GQLWSDo(ctx, params) if res_chan == nil { ctx.Log.Logf("gqlws", "res_chan is nil") } else { ctx.Log.Logf("gqlws", "res_chan: %+v", res_chan) } go func(res_chan chan *graphql.Result) { for { next, ok := <-res_chan if ok == false { ctx.Log.Logf("gqlws", "response channel was closed") return } if next == nil { ctx.Log.Logf("gqlws", "NIL_ON_CHANNEL") return } if len(next.Errors) > 0 { extra_fields := map[string]interface{}{} extra_fields["query"] = string(msg.Payload.Query) ctx.Log.Logm("gqlws", extra_fields, "ERROR: wrong result, unexpected errors: %+v", next.Errors) continue } ctx.Log.Logf("gqlws", "DATA: %+v", next.Data) data, err := json.Marshal(next.Data) if err != nil { ctx.Log.Logf("gqlws", "ERROR: %+v", err) continue } msg, err := json.Marshal(GQLWSMsg{ ID: msg.ID, Type: "next", Payload: GQLPayload{ Data: string(data), }, }) if err != nil { ctx.Log.Logf("gqlws", "ERROR: %+v", err) continue } err = wsutil.WriteServerMessage(conn, 1, msg) if err != nil { ctx.Log.Logf("gqlws", "ERROR: %+v", err) continue } } }(res_chan) } else { } } return } else { panic("Failed to upgrade websocket") } } } type Interface struct { Interface *graphql.Interface Default *graphql.Object List *graphql.List Extensions []ExtType } type Type struct { Type *graphql.Object List *graphql.List } type Field struct { Ext ExtType Name string Field *graphql.Field } // GQL Specific Context information type GQLExtContext struct { // Generated GQL schema Schema graphql.Schema // Custom graphql types, mapped to NodeTypes NodeTypes map[NodeType]*graphql.Object Interfaces map[string]*Interface Fields map[string]Field // Schema parameters Types []graphql.Type Query *graphql.Object Mutation *graphql.Object Subscription *graphql.Object } func (ctx *GQLExtContext) GetACLFields(obj_name string, names []string) (map[ExtType][]string, error) { ext_fields := map[ExtType][]string{} for _, name := range(names) { switch name { case "ID": case "TypeHash": default: field, exists := ctx.Fields[name] if exists == false { return nil, fmt.Errorf("%s is not a know field in GQLContext, cannot resolve", name) } ext, exists := ext_fields[field.Ext] if exists == false { ext = []string{} } ext = append(ext, field.Name) ext_fields[field.Ext] = ext } } return ext_fields, nil } func BuildSchema(ctx *GQLExtContext) (graphql.Schema, error) { schemaConfig := graphql.SchemaConfig{ Types: ctx.Types, Query: ctx.Query, Mutation: ctx.Mutation, Subscription: ctx.Subscription, } return graphql.NewSchema(schemaConfig) } func RegisterField[T any](ctx *GQLExtContext, gql_type graphql.Type, gql_name string, ext_type ExtType, acl_name string, resolve_fn func(graphql.ResolveParams, T)(interface{}, error)) error { if ctx == nil { return fmt.Errorf("ctx is nil") } if resolve_fn == nil { return fmt.Errorf("resolve_fn cannot be nil") } _, exists := ctx.Fields[gql_name] if exists == true { return fmt.Errorf("%s is already a field in the context, cannot add again", gql_name) } resolver := func(p graphql.ResolveParams)(interface{}, error) { return ResolveNodeResult(p, func(p graphql.ResolveParams, result NodeResult) (interface{}, error) { ext, exists := result.Result.Extensions[ext_type] if exists == false { return nil, fmt.Errorf("%s is not in the extensions of the result", ext_type) } val_if, exists := ext[acl_name] if exists == false { return nil, fmt.Errorf("%s is not in the fields of %s in the result", acl_name, ext_type) } var zero T val, ok := val_if.(T) if ok == false { return nil, fmt.Errorf("%s.%s is not %s", ext_type, acl_name, reflect.TypeOf(zero)) } return resolve_fn(p, val) }) } ctx.Fields[gql_name] = Field{ext_type, acl_name, &graphql.Field{ Type: gql_type, Resolve: resolver, }} return nil } func GQLInterfaces(ctx *GQLExtContext, interface_names []string) ([]*graphql.Interface, error) { ret := make([]*graphql.Interface, len(interface_names)) for i, in := range(interface_names) { ctx_interface, exists := ctx.Interfaces[in] if exists == false { return nil, fmt.Errorf("%s is not in GQLExtContext.Interfaces", in) } ret[i] = ctx_interface.Interface } return ret, nil } func GQLFields(ctx *GQLExtContext, field_names []string) (graphql.Fields, []ExtType, error) { fields := graphql.Fields{ "ID": &graphql.Field{ Type: graphql.String, Resolve: ResolveNodeID, }, "TypeHash": &graphql.Field{ Type: graphql.String, Resolve: ResolveNodeTypeHash, }, } exts := map[ExtType]ExtType{} ext_list := []ExtType{} for _, name := range(field_names) { field, exists := ctx.Fields[name] if exists == false { return nil, nil, fmt.Errorf("%s is not in GQLExtContext.Fields", name) } fields[name] = field.Field _, exists = exts[field.Ext] if exists == false { ext_list = append(ext_list, field.Ext) exts[field.Ext] = field.Ext } } return fields, ext_list, nil } type NodeResult struct { ID NodeID Result *ReadResultSignal } type ListField struct { ACLName string Extension ExtType ResolveFn func(graphql.ResolveParams, interface{}) ([]NodeID, error) } type SelfField struct { ACLName string Extension ExtType ResolveFn func(graphql.ResolveParams, interface{}) (NodeID, error) } func (ctx *GQLExtContext) RegisterInterface(name string, default_name string, interfaces []string, fields []string, self_fields map[string]SelfField, list_fields map[string]ListField) error { if interfaces == nil { return fmt.Errorf("interfaces is nil") } if fields == nil { return fmt.Errorf("fields is nil") } _, exists := ctx.Interfaces[name] if exists == true { return fmt.Errorf("%s is already an interface in ctx", name) } node_interfaces, err := GQLInterfaces(ctx, interfaces) if err != nil { return err } node_fields, node_exts, err := GQLFields(ctx, fields) if err != nil { return err } ctx_interface := Interface{} ctx_interface.Interface = graphql.NewInterface(graphql.InterfaceConfig{ Name: name, ResolveType: NodeInterfaceResolveType(node_exts, &ctx_interface.Default), Fields: node_fields, }) ctx_interface.List = graphql.NewList(ctx_interface.Interface) for field_name, field := range(self_fields) { self_field := field err := RegisterField(ctx, ctx_interface.Interface, field_name, self_field.Extension, self_field.ACLName, func(p graphql.ResolveParams, val interface{})(interface{}, error) { ctx, err := PrepResolve(p) if err != nil { return nil, err } var zero NodeID id, err := self_field.ResolveFn(p, val) if err != nil { return zero, err } nodes, err := ResolveNodes(ctx, p, []NodeID{id}) if err != nil { return nil, err } else if len(nodes) != 1 { return nil, fmt.Errorf("wrong length of nodes returned") } return nodes[0], nil }) if err != nil { return err } ctx_interface.Interface.AddFieldConfig(field_name, ctx.Fields[field_name].Field) node_fields[field_name] = ctx.Fields[field_name].Field } for field_name, field := range(list_fields) { list_field := field resolve_fn := func(p graphql.ResolveParams, val interface{})(interface{}, error) { ctx, err := PrepResolve(p) if err != nil { return nil, err } var zero NodeID ids, err := list_field.ResolveFn(p, val) if err != nil { return zero, err } nodes, err := ResolveNodes(ctx, p, ids) if err != nil { return nil, err } else if len(nodes) != len(ids) { return nil, fmt.Errorf("wrong length of nodes returned") } return nodes, nil } err := RegisterField(ctx, ctx_interface.List, field_name, list_field.Extension, list_field.ACLName, resolve_fn) if err != nil { return err } ctx_interface.Interface.AddFieldConfig(field_name, ctx.Fields[field_name].Field) node_fields[field_name] = ctx.Fields[field_name].Field } ctx_interface.Default = graphql.NewObject(graphql.ObjectConfig{ Name: default_name, Interfaces: append(node_interfaces, ctx_interface.Interface), IsTypeOf: NodeInterfaceDefaultIsType(node_exts), Fields: node_fields, }) ctx.Interfaces[name] = &ctx_interface ctx.Types = append(ctx.Types, ctx_interface.Default) return nil } func (ctx *GQLExtContext) RegisterNodeType(node_type NodeType, name string, interface_names []string, field_names []string) error { if field_names == nil { return fmt.Errorf("fields is nil") } _, exists := ctx.NodeTypes[node_type] if exists == true { return fmt.Errorf("%s already in GQLExtContext.NodeTypes", node_type) } node_interfaces, err := GQLInterfaces(ctx, interface_names) if err != nil { return err } gql_fields, _, err := GQLFields(ctx, field_names) if err != nil { return err } gql_type := graphql.NewObject(graphql.ObjectConfig{ Name: name, Interfaces: node_interfaces, IsTypeOf: func(p graphql.IsTypeOfParams) bool { node, ok := p.Value.(NodeResult) if ok == false { return false } return node.Result.NodeType == node_type }, Fields: gql_fields, }) ctx.NodeTypes[node_type] = gql_type ctx.Types = append(ctx.Types, gql_type) return nil } func NewGQLExtContext() *GQLExtContext { query := graphql.NewObject(graphql.ObjectConfig{ Name: "Query", Fields: graphql.Fields{}, }) mutation := graphql.NewObject(graphql.ObjectConfig{ Name: "Mutation", Fields: graphql.Fields{}, }) context := GQLExtContext{ Schema: graphql.Schema{}, Types: []graphql.Type{}, Query: query, Mutation: mutation, Subscription: nil, NodeTypes: map[NodeType]*graphql.Object{}, Interfaces: map[string]*Interface{}, Fields: map[string]Field{}, } var err error err = context.RegisterInterface("Node", "DefaultNode", []string{}, []string{}, map[string]SelfField{}, map[string]ListField{}) if err != nil { panic(err) } err = RegisterField(&context, context.Interfaces["Node"].List, "Members", GroupExtType, "members", func(p graphql.ResolveParams, val map[NodeID]string)(interface{}, error) { ctx, err := PrepResolve(p) if err != nil { return nil, err } node_list := make([]NodeID, len(val)) i := 0 for id, _ := range(val) { node_list[i] = id i += 1 } nodes, err := ResolveNodes(ctx, p, node_list) if err != nil { return nil, err } return nodes, nil }) if err != nil { panic(err) } err = context.RegisterInterface("Group", "DefaultGroup", []string{"Node"}, []string{"Members"}, map[string]SelfField{}, map[string]ListField{}) if err != nil { panic(err) } err = context.RegisterInterface("Lockable", "DefaultLockable", []string{"Node"}, []string{}, map[string]SelfField{ "Owner": SelfField{ "owner", LockableExtType, func(p graphql.ResolveParams, val interface{}) (NodeID, error) { var zero NodeID id_str, ok := val.(string) if ok == false { return zero, fmt.Errorf("can't parse %+v as string", val) } id, err := ParseID(id_str) if err != nil { return zero, err } return id, nil }, }, }, map[string]ListField{ "Requirements": ListField{ "requirements", LockableExtType, func(p graphql.ResolveParams, val interface{}) ([]NodeID, error) { id_strs, ok := val.(LinkMap) if ok == false { return nil, fmt.Errorf("can't parse requirements %+v as string, %s", val, reflect.TypeOf(val)) } ids := make([]NodeID, len(id_strs)) i := 0 for id, state := range(id_strs) { if state.Link == "linked" { ids[i] = id i++ } } return ids, nil }, }, "Dependencies": ListField{ "dependencies", LockableExtType, func(p graphql.ResolveParams, val interface{}) ([]NodeID, error) { id_strs, ok := val.(LinkMap) if ok == false { return nil, fmt.Errorf("can't parse dependencies %+v as string, %s", val, reflect.TypeOf(val)) } ids := make([]NodeID, len(id_strs)) i := 0 for id, state := range(id_strs) { if state.Link == "linked" { ids[i] = id i++ } } return ids, nil }, }, }) if err != nil { panic(err) } err = RegisterField(&context, graphql.String, "Listen", GQLExtType, "listen", func(p graphql.ResolveParams, listen string) (interface{}, error) { return listen, nil }) if err != nil { panic(err) } err = context.RegisterNodeType(GQLNodeType, "GQLServer", []string{"Node", "Lockable", "Group"}, []string{"Listen", "Owner", "Requirements", "Dependencies", "Members"}) if err != nil { panic(err) } context.Mutation.AddFieldConfig("stopServer", &graphql.Field{ Type: graphql.String, Resolve: func(p graphql.ResolveParams) (interface{}, error) { ctx, err := PrepResolve(p) if err != nil { return nil, err } err = ctx.Context.Send(ctx.User, ctx.Server.ID, StringSignal{NewDirectSignal(GQLStateSignalType), "stop_server"}) if err != nil { return nil, err } return "stop_sent", nil }, }) context.Query.AddFieldConfig("Self", &graphql.Field{ Type: context.Interfaces["Node"].Interface, Resolve: func(p graphql.ResolveParams) (interface{}, error) { ctx, err := PrepResolve(p) if err != nil { return nil, err } nodes, err := ResolveNodes(ctx, p, []NodeID{ctx.Server.ID}) if err != nil { return nil, err } else if len(nodes) != 1 { return nil, fmt.Errorf("wrong length of resolved nodes returned") } return nodes[0], nil }, }) context.Query.AddFieldConfig("Node", &graphql.Field{ Type: context.Interfaces["Node"].Interface, Args: graphql.FieldConfigArgument{ "id": &graphql.ArgumentConfig{ Type: graphql.String, }, }, Resolve: func(p graphql.ResolveParams) (interface{}, error) { ctx, err := PrepResolve(p) if err != nil { return nil, err } id, err := ExtractID(p, "id") if err != nil { return nil, err } nodes, err := ResolveNodes(ctx, p, []NodeID{id}) if err != nil { return nil, err } else if len(nodes) != 1 { return nil, fmt.Errorf("wrong length of resolved nodes returned") } return nodes[0], nil }, }) schema, err := BuildSchema(&context) if err != nil { panic(err) } context.Schema = schema return &context } type GQLExt struct { tcp_listener net.Listener `json:"-"` http_server *http.Server `json:"-"` http_done sync.WaitGroup `json:"-"` // map of read request IDs to gql request ID resolver_response map[uuid.UUID]uuid.UUID `json:"-"` resolver_response_lock sync.RWMutex `json:"-"` // map of gql request ID to active channel resolver_chans map[uuid.UUID]chan Signal `json:"-"` resolver_chans_lock sync.RWMutex `json:"-"` State string `json:"state"` tls_key []byte `json:"tls_key"` tls_cert []byte `json:"tls_cert"` Listen string `json:"listen"` } func (ext *GQLExt) Field(name string) interface{} { return ResolveFields(ext, name, map[string]func(*GQLExt)interface{}{ "listen": func(ext *GQLExt) interface{} { return ext.Listen }, }) } func (ext *GQLExt) Process(ctx *Context, source NodeID, node *Node, signal Signal) { // Process ReadResultSignalType by forwarding it to the waiting resolver if signal.Type() == ErrorSignalType { // TODO: Forward to resolver if waiting for it sig := signal.(ErrorSignal) ext.resolver_response_lock.RLock() resolver_id, exists := ext.resolver_response[sig.UUID] ext.resolver_response_lock.RUnlock() if exists == true { ext.resolver_response_lock.Lock() delete(ext.resolver_response, sig.UUID) ext.resolver_response_lock.Unlock() ext.resolver_chans_lock.RLock() resolver_chan, exists := ext.resolver_chans[resolver_id] ext.resolver_chans_lock.RUnlock() if exists == true { select { case resolver_chan <- sig: ctx.Log.Logf("gql", "Forwarded error to resolver %s, %+v", resolver_id, sig) default: ctx.Log.Logf("gql", "Resolver %s channel overflow %+v", resolver_id, sig) ext.resolver_chans_lock.Lock() delete(ext.resolver_chans, resolver_id) ext.resolver_chans_lock.Unlock() } } else { ctx.Log.Logf("gql", "received error signal response for resolver %s which doesn't exist", resolver_id) } } else { ctx.Log.Logf("gql", "received error signal response %s with no mapped resolver", sig.UUID) } } else if signal.Type() == ReadResultSignalType { sig := signal.(ReadResultSignal) ext.resolver_response_lock.RLock() resolver_id, exists := ext.resolver_response[sig.UUID] ext.resolver_response_lock.RUnlock() if exists == true { ext.resolver_response_lock.Lock() delete(ext.resolver_response, sig.UUID) ext.resolver_response_lock.Unlock() ext.resolver_chans_lock.RLock() resolver_chan, exists := ext.resolver_chans[resolver_id] ext.resolver_chans_lock.RUnlock() if exists == true { select { case resolver_chan <- sig: ctx.Log.Logf("gql", "Forwarded to resolver %s, %+v", resolver_id, sig) default: ctx.Log.Logf("gql", "Resolver %s channel overflow %+v", resolver_id, sig) ext.resolver_chans_lock.Lock() delete(ext.resolver_chans, resolver_id) ext.resolver_chans_lock.Unlock() } } else { ctx.Log.Logf("gql", "Received message for waiting resolver %s which doesn't exist - %+v", resolver_id, sig) } } else { ctx.Log.Logf("gql", "Received read result that wasn't expected - %+v", sig) } } else if signal.Type() == GQLStateSignalType { sig := signal.(StringSignal) switch sig.Str { case "start_server": if ext.State == "stopped" { err := ext.StartGQLServer(ctx, node) if err == nil { ext.State = "running" ctx.Send(node.ID, source, StringSignal{NewDirectSignal(GQLStateSignalType), "server_started"}) } } case "stop_server": if ext.State == "running" { err := ext.StopGQLServer() if err == nil { ext.State = "stopped" ctx.Send(node.ID, source, StringSignal{NewDirectSignal(GQLStateSignalType), "server_stopped"}) } } default: ctx.Log.Logf("gql", "unknown gql state %s", sig.Str) } } else if signal.Type() == StartSignalType { ctx.Log.Logf("gql", "starting with state: %s", ext.State) switch ext.State { case "running": err := ext.StartGQLServer(ctx, node) if err == nil { ctx.Send(node.ID, source, StringSignal{NewDirectSignal(GQLStateSignalType), "server_started"}) } case "stopped": default: ctx.Log.Logf("gql", "unknown state to restore from: %s", ext.State) } } } func (ext *GQLExt) Type() ExtType { return GQLExtType } func (ext *GQLExt) Serialize() ([]byte, error) { return json.MarshalIndent(ext, "", " ") } var ecdsa_curves = map[uint8]elliptic.Curve{ 0: elliptic.P256(), } var ecdsa_curve_ids = map[elliptic.Curve]uint8{ elliptic.P256(): 0, } var ecdh_curves = map[uint8]ecdh.Curve{ 0: ecdh.P256(), } var ecdh_curve_ids = map[ecdh.Curve]uint8{ ecdh.P256(): 0, } func LoadGQLExt(ctx *Context, data []byte) (Extension, error) { var ext GQLExt err := json.Unmarshal(data, &ext) if err != nil { return nil, err } return NewGQLExt(ctx, ext.Listen, ext.tls_cert, ext.tls_key, ext.State) } func NewGQLExt(ctx *Context, listen string, tls_cert []byte, tls_key []byte, state string) (*GQLExt, error) { if tls_cert == nil || tls_key == nil { ssl_key, err := ecdsa.GenerateKey(ctx.ECDSA, rand.Reader) if err != nil { return nil, err } ssl_key_bytes, err := x509.MarshalECPrivateKey(ssl_key) if err != nil { return nil, err } ssl_key_pem := pem.EncodeToMemory(&pem.Block{Type: "PRIVATE KEY", Bytes: ssl_key_bytes}) serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 128) serialNumber, _ := rand.Int(rand.Reader, serialNumberLimit) notBefore := time.Now() notAfter := notBefore.Add(365*24*time.Hour) template := x509.Certificate{ SerialNumber: serialNumber, Subject: pkix.Name{ Organization: []string{"mekkanized"}, }, NotBefore: notBefore, NotAfter: notAfter, KeyUsage: x509.KeyUsageDigitalSignature, ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}, BasicConstraintsValid: true, } ssl_cert, err := x509.CreateCertificate(rand.Reader, &template, &template, &ssl_key.PublicKey, ssl_key) if err != nil { return nil, err } ssl_cert_pem := pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: ssl_cert}) tls_cert = ssl_cert_pem tls_key = ssl_key_pem } return &GQLExt{ State: state, Listen: listen, resolver_response: map[uuid.UUID]uuid.UUID{}, resolver_chans: map[uuid.UUID]chan Signal{}, tls_cert: tls_cert, tls_key: tls_key, }, nil } func (ext *GQLExt) StartGQLServer(ctx *Context, node *Node) error { if ext.tcp_listener != nil || ext.http_server != nil { return fmt.Errorf("listener or server is still running, stop them first") } mux := http.NewServeMux() mux.HandleFunc("/gql", GQLHandler(ctx, node, ext)) mux.HandleFunc("/gqlws", GQLWSHandler(ctx, node, ext)) // Server a graphiql interface(TODO make configurable whether to start this) mux.HandleFunc("/graphiql", GraphiQLHandler()) // Server the ./site directory to /site (TODO make configurable with better defaults) fs := http.FileServer(http.Dir("./site")) mux.Handle("/site/", http.StripPrefix("/site", fs)) http_server := &http.Server{ Addr: ext.Listen, Handler: mux, } l, err := net.Listen("tcp", http_server.Addr) if err != nil { return fmt.Errorf("Failed to start listener for server on %s", http_server.Addr) } cert, err := tls.X509KeyPair(ext.tls_cert, ext.tls_key) if err != nil { return err } config := tls.Config{ Certificates: []tls.Certificate{cert}, NextProtos: []string{"http/1.1"}, } listener := tls.NewListener(l, &config) ext.http_done.Add(1) go func(qql_ext *GQLExt) { defer ext.http_done.Done() err := http_server.Serve(listener) if err != http.ErrServerClosed { panic(fmt.Sprintf("Failed to start gql server: %s", err)) } }(ext) ext.tcp_listener = listener ext.http_server = http_server return nil } func (ext *GQLExt) StopGQLServer() error { if ext.tcp_listener == nil || ext.http_server == nil { return fmt.Errorf("already shutdown, cannot shut down again" ) } ext.http_server.Shutdown(context.TODO()) ext.http_done.Wait() ext.tcp_listener = nil ext.http_server = nil return nil }