 240cf6dd94
			
		
	
	240cf6dd94
	
	
	
		
			
			* add basic guacamole Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make everything mostly work Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add rac build to CI Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix resize, fix web lint, sendSize correctly Signed-off-by: Jens Langhammer <jens@goauthentik.io> * pre-send connection from client, format Signed-off-by: Jens Langhammer <jens@goauthentik.io> * improve throughput Signed-off-by: Jens Langhammer <jens@goauthentik.io> * cleanup Signed-off-by: Jens Langhammer <jens@goauthentik.io> * rework TokenOutpostConsumer into middleware Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix some layout issues Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add outpost controllers Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start testing audio things Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix a bunch of things Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add deps Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix to work with outpost group Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add simple loadbalancing Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add simple reconnect Signed-off-by: Jens Langhammer <jens@goauthentik.io> * show reconnecting text Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix error when checking ports Signed-off-by: Jens Langhammer <jens@goauthentik.io> * move to providers Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add flow check to interface Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix go lint Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix rac app label Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix audio Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add logging Signed-off-by: Jens Langhammer <jens@goauthentik.io> * cleanup Signed-off-by: Jens Langhammer <jens@goauthentik.io> * allow overriding all settings Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix duplicate keyboard, debug high DPI Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-add deps Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix lint Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix missing __init__.py breaking model loading I love python Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * bump successful ws connection to info Signed-off-by: Jens Langhammer <jens@goauthentik.io> * hide cursor since guac draws that Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add clipboard support (bidirectional) Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make codespell not want to break the code Signed-off-by: Jens Langhammer <jens@goauthentik.io> * run pr comment in separate task Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start endpoint and property mapping stuff Signed-off-by: Jens Langhammer <jens@goauthentik.io> * more endpoint things Signed-off-by: Jens Langhammer <jens@goauthentik.io> * unrelated: fix event model_pk filtering with ints Signed-off-by: Jens Langhammer <jens@goauthentik.io> * unrelated: improve event display for changelog Signed-off-by: Jens Langhammer <jens@goauthentik.io> * rebuild endpoint stuff again Signed-off-by: Jens Langhammer <jens@goauthentik.io> * idk special url Signed-off-by: Jens Langhammer <jens@goauthentik.io> * more stuff, connect token with session Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add disconnect Signed-off-by: Jens Langhammer <jens@goauthentik.io> * rework disconnect cleanly disconnect from guacd instead of just letting the connection timeout Signed-off-by: Jens Langhammer <jens@goauthentik.io> * clear cache when creating outpost Signed-off-by: Jens Langhammer <jens@goauthentik.io> * support host:port and fix protocol Signed-off-by: Jens Langhammer <jens@goauthentik.io> * center smaller viewport Signed-off-by: Jens Langhammer <jens@goauthentik.io> * rework connection to wait more and stop after some time Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add policy control to endpoints Signed-off-by: Jens Langhammer <jens@goauthentik.io> * remove provider protocol Signed-off-by: Jens Langhammer <jens@goauthentik.io> * don't switch to different outpost connection when already chosen Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start using property mappings, add static settings Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add some RAC mapping settings Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix lint Signed-off-by: Jens Langhammer <jens@goauthentik.io> * start adding tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add tests for event changes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add tests and fix issues found by said tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add preview banner, move endpoints to main page Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add locale Signed-off-by: Jens Langhammer <jens@goauthentik.io> * auto-select endpoint if only one is available Signed-off-by: Jens Langhammer <jens@goauthentik.io> * backport https://github.com/goauthentik/authentik/pull/7831 to rac Signed-off-by: Jens Langhammer <jens@goauthentik.io> * dont select property mappings on endpoints Signed-off-by: Jens Langhammer <jens@goauthentik.io> * make table modal only load when opened Signed-off-by: Jens Langhammer <jens@goauthentik.io> * only auto-redirect when open Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix web deps Signed-off-by: Jens Langhammer <jens@goauthentik.io> * check for token expiry and terminate session Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-add endpoint name to title Signed-off-by: Jens Langhammer <jens@goauthentik.io> * disconnect connection when token is manually deleted Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add initial RAC docs Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add connection expiry setting to provider Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix flaky tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>
		
			
				
	
	
		
			127 lines
		
	
	
		
			2.9 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			127 lines
		
	
	
		
			2.9 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| package rac
 | |
| 
 | |
| import (
 | |
| 	"context"
 | |
| 	"os/exec"
 | |
| 	"strconv"
 | |
| 	"sync"
 | |
| 
 | |
| 	"github.com/mitchellh/mapstructure"
 | |
| 	log "github.com/sirupsen/logrus"
 | |
| 	"github.com/wwt/guac"
 | |
| 
 | |
| 	"goauthentik.io/internal/outpost/ak"
 | |
| 	"goauthentik.io/internal/outpost/rac/connection"
 | |
| 	"goauthentik.io/internal/outpost/rac/metrics"
 | |
| )
 | |
| 
 | |
| type RACServer struct {
 | |
| 	log   *log.Entry
 | |
| 	ac    *ak.APIController
 | |
| 	guacd *exec.Cmd
 | |
| 	connm sync.RWMutex
 | |
| 	conns map[string]connection.Connection
 | |
| }
 | |
| 
 | |
| func NewServer(ac *ak.APIController) *RACServer {
 | |
| 	rs := &RACServer{
 | |
| 		log:   log.WithField("logger", "authentik.outpost.rac"),
 | |
| 		ac:    ac,
 | |
| 		connm: sync.RWMutex{},
 | |
| 		conns: map[string]connection.Connection{},
 | |
| 	}
 | |
| 	ac.AddWSHandler(rs.wsHandler)
 | |
| 	return rs
 | |
| }
 | |
| 
 | |
| type WSMessage struct {
 | |
| 	ConnID              string            `mapstructure:"conn_id"`
 | |
| 	DestChannelID       string            `mapstructure:"dest_channel_id"`
 | |
| 	Params              map[string]string `mapstructure:"params"`
 | |
| 	Protocol            string            `mapstructure:"protocol"`
 | |
| 	OptimalScreenWidth  string            `mapstructure:"screen_width"`
 | |
| 	OptimalScreenHeight string            `mapstructure:"screen_height"`
 | |
| 	OptimalScreenDPI    string            `mapstructure:"screen_dpi"`
 | |
| }
 | |
| 
 | |
| func parseIntOrZero(input string) int {
 | |
| 	x, err := strconv.Atoi(input)
 | |
| 	if err != nil {
 | |
| 		return 0
 | |
| 	}
 | |
| 	return x
 | |
| }
 | |
| 
 | |
| func (rs *RACServer) wsHandler(ctx context.Context, args map[string]interface{}) {
 | |
| 	wsm := WSMessage{}
 | |
| 	err := mapstructure.Decode(args, &wsm)
 | |
| 	if err != nil {
 | |
| 		rs.log.WithError(err).Warning("invalid ws message")
 | |
| 		return
 | |
| 	}
 | |
| 	config := guac.NewGuacamoleConfiguration()
 | |
| 	config.Protocol = wsm.Protocol
 | |
| 	config.Parameters = wsm.Params
 | |
| 	config.OptimalScreenWidth = parseIntOrZero(wsm.OptimalScreenWidth)
 | |
| 	config.OptimalScreenHeight = parseIntOrZero(wsm.OptimalScreenHeight)
 | |
| 	config.OptimalResolution = parseIntOrZero(wsm.OptimalScreenDPI)
 | |
| 	config.AudioMimetypes = []string{
 | |
| 		"audio/L8",
 | |
| 		"audio/L16",
 | |
| 	}
 | |
| 	cc, err := connection.NewConnection(rs.ac, wsm.DestChannelID, config)
 | |
| 	if err != nil {
 | |
| 		rs.log.WithError(err).Warning("failed to setup connection")
 | |
| 		return
 | |
| 	}
 | |
| 	cc.OnError = func(err error) {
 | |
| 		rs.connm.Lock()
 | |
| 		delete(rs.conns, wsm.ConnID)
 | |
| 		_ = rs.ac.SendWSHello(map[string]interface{}{
 | |
| 			"active_connections": len(rs.conns),
 | |
| 		})
 | |
| 		rs.connm.Unlock()
 | |
| 	}
 | |
| 	rs.connm.Lock()
 | |
| 	rs.conns[wsm.ConnID] = *cc
 | |
| 	_ = rs.ac.SendWSHello(map[string]interface{}{
 | |
| 		"active_connections": len(rs.conns),
 | |
| 	})
 | |
| 	rs.connm.Unlock()
 | |
| }
 | |
| 
 | |
| func (rs *RACServer) Start() error {
 | |
| 	wg := sync.WaitGroup{}
 | |
| 	wg.Add(2)
 | |
| 	go func() {
 | |
| 		defer wg.Done()
 | |
| 		metrics.RunServer()
 | |
| 	}()
 | |
| 	go func() {
 | |
| 		defer wg.Done()
 | |
| 		err := rs.startGuac()
 | |
| 		if err != nil {
 | |
| 			panic(err)
 | |
| 		}
 | |
| 	}()
 | |
| 	wg.Wait()
 | |
| 	return nil
 | |
| }
 | |
| 
 | |
| func (rs *RACServer) Stop() error {
 | |
| 	if rs.guacd != nil {
 | |
| 		return rs.guacd.Process.Kill()
 | |
| 	}
 | |
| 	return nil
 | |
| }
 | |
| 
 | |
| func (rs *RACServer) TimerFlowCacheExpiry(context.Context) {}
 | |
| 
 | |
| func (rs *RACServer) Type() string {
 | |
| 	return "rac"
 | |
| }
 | |
| 
 | |
| func (rs *RACServer) Refresh() error {
 | |
| 	return nil
 | |
| }
 |