2020-11-30 09:37:17 +00:00
|
|
|
package main
|
|
|
|
|
|
|
|
import (
|
|
|
|
"context"
|
2024-02-23 09:37:04 +00:00
|
|
|
"errors"
|
2020-11-30 09:37:17 +00:00
|
|
|
"fmt"
|
|
|
|
"net/url"
|
2022-09-06 11:55:03 +00:00
|
|
|
"os"
|
2020-11-30 09:37:17 +00:00
|
|
|
|
2023-06-22 13:01:34 +00:00
|
|
|
"github.com/go-openapi/strfmt"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
"gopkg.in/yaml.v2"
|
|
|
|
|
2023-07-28 14:35:08 +00:00
|
|
|
"github.com/crowdsecurity/go-cs-lib/version"
|
2023-05-23 08:52:47 +00:00
|
|
|
|
2023-12-11 09:32:54 +00:00
|
|
|
"github.com/crowdsecurity/crowdsec/cmd/crowdsec-cli/require"
|
2022-10-13 10:28:24 +00:00
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/apiclient"
|
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/csconfig"
|
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/cwhub"
|
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/models"
|
2023-01-31 13:47:44 +00:00
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/types"
|
2023-12-11 09:32:54 +00:00
|
|
|
)
|
2023-07-27 15:02:20 +00:00
|
|
|
|
2023-12-11 09:32:54 +00:00
|
|
|
const (
|
|
|
|
CAPIBaseURL = "https://api.crowdsec.net/"
|
|
|
|
CAPIURLPrefix = "v3"
|
2020-11-30 09:37:17 +00:00
|
|
|
)
|
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
type cliCapi struct {
|
|
|
|
cfg configGetter
|
|
|
|
}
|
2020-11-30 09:37:17 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
func NewCLICapi(cfg configGetter) *cliCapi {
|
|
|
|
return &cliCapi{
|
|
|
|
cfg: cfg,
|
|
|
|
}
|
2023-12-11 09:32:54 +00:00
|
|
|
}
|
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
func (cli *cliCapi) NewCommand() *cobra.Command {
|
|
|
|
cmd := &cobra.Command{
|
2021-08-31 13:03:47 +00:00
|
|
|
Use: "capi [action]",
|
|
|
|
Short: "Manage interaction with Central API (CAPI)",
|
|
|
|
Args: cobra.MinimumNArgs(1),
|
|
|
|
DisableAutoGenTag: true,
|
2024-01-12 13:41:36 +00:00
|
|
|
PersistentPreRunE: func(_ *cobra.Command, _ []string) error {
|
2024-02-23 09:37:04 +00:00
|
|
|
cfg := cli.cfg()
|
|
|
|
if err := require.LAPI(cfg); err != nil {
|
2023-07-27 15:02:20 +00:00
|
|
|
return err
|
2020-11-30 09:37:17 +00:00
|
|
|
}
|
2023-07-27 15:02:20 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
if err := require.CAPI(cfg); err != nil {
|
2023-07-27 15:02:20 +00:00
|
|
|
return err
|
2020-11-30 09:37:17 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
},
|
|
|
|
}
|
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
cmd.AddCommand(cli.newRegisterCmd())
|
|
|
|
cmd.AddCommand(cli.newStatusCmd())
|
2023-01-06 22:14:02 +00:00
|
|
|
|
2023-12-11 09:32:54 +00:00
|
|
|
return cmd
|
2023-01-06 22:14:02 +00:00
|
|
|
}
|
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
func (cli *cliCapi) register(capiUserPrefix string, outputFile string) error {
|
|
|
|
cfg := cli.cfg()
|
|
|
|
|
|
|
|
capiUser, err := generateID(capiUserPrefix)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("unable to generate machine id: %w", err)
|
|
|
|
}
|
|
|
|
|
|
|
|
password := strfmt.Password(generatePassword(passwordLength))
|
|
|
|
|
|
|
|
apiurl, err := url.Parse(types.CAPIBaseURL)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("unable to parse api url %s: %w", types.CAPIBaseURL, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
_, err = apiclient.RegisterClient(&apiclient.Config{
|
|
|
|
MachineID: capiUser,
|
|
|
|
Password: password,
|
|
|
|
UserAgent: fmt.Sprintf("crowdsec/%s", version.String()),
|
|
|
|
URL: apiurl,
|
|
|
|
VersionPrefix: CAPIURLPrefix,
|
|
|
|
}, nil)
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("api client register ('%s'): %w", types.CAPIBaseURL, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
log.Infof("Successfully registered to Central API (CAPI)")
|
|
|
|
|
|
|
|
var dumpFile string
|
|
|
|
|
|
|
|
switch {
|
|
|
|
case outputFile != "":
|
|
|
|
dumpFile = outputFile
|
|
|
|
case cfg.API.Server.OnlineClient.CredentialsFilePath != "":
|
|
|
|
dumpFile = cfg.API.Server.OnlineClient.CredentialsFilePath
|
|
|
|
default:
|
|
|
|
dumpFile = ""
|
|
|
|
}
|
|
|
|
|
|
|
|
apiCfg := csconfig.ApiCredentialsCfg{
|
|
|
|
Login: capiUser,
|
|
|
|
Password: password.String(),
|
|
|
|
URL: types.CAPIBaseURL,
|
|
|
|
}
|
|
|
|
|
|
|
|
apiConfigDump, err := yaml.Marshal(apiCfg)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("unable to marshal api credentials: %w", err)
|
|
|
|
}
|
|
|
|
|
|
|
|
if dumpFile != "" {
|
|
|
|
err = os.WriteFile(dumpFile, apiConfigDump, 0o600)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("write api credentials in '%s' failed: %w", dumpFile, err)
|
|
|
|
}
|
|
|
|
|
|
|
|
log.Infof("Central API credentials written to '%s'", dumpFile)
|
|
|
|
} else {
|
|
|
|
fmt.Println(string(apiConfigDump))
|
|
|
|
}
|
|
|
|
|
|
|
|
log.Warning(ReloadMessage())
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (cli *cliCapi) newRegisterCmd() *cobra.Command {
|
2024-01-12 13:41:36 +00:00
|
|
|
var (
|
|
|
|
capiUserPrefix string
|
2024-02-23 09:37:04 +00:00
|
|
|
outputFile string
|
2024-01-12 13:41:36 +00:00
|
|
|
)
|
2023-01-06 22:14:02 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
cmd := &cobra.Command{
|
2021-08-31 13:03:47 +00:00
|
|
|
Use: "register",
|
|
|
|
Short: "Register to Central API (CAPI)",
|
|
|
|
Args: cobra.MinimumNArgs(0),
|
|
|
|
DisableAutoGenTag: true,
|
2024-01-12 13:41:36 +00:00
|
|
|
RunE: func(_ *cobra.Command, _ []string) error {
|
2024-02-23 09:37:04 +00:00
|
|
|
return cli.register(capiUserPrefix, outputFile)
|
2020-11-30 09:37:17 +00:00
|
|
|
},
|
|
|
|
}
|
2023-12-11 09:32:54 +00:00
|
|
|
|
|
|
|
cmd.Flags().StringVarP(&outputFile, "file", "f", "", "output file destination")
|
|
|
|
cmd.Flags().StringVar(&capiUserPrefix, "schmilblick", "", "set a schmilblick (use in tests only)")
|
2024-01-12 13:41:36 +00:00
|
|
|
|
2023-12-11 09:32:54 +00:00
|
|
|
if err := cmd.Flags().MarkHidden("schmilblick"); err != nil {
|
2022-06-06 13:24:48 +00:00
|
|
|
log.Fatalf("failed to hide flag: %s", err)
|
|
|
|
}
|
2020-11-30 09:37:17 +00:00
|
|
|
|
2023-12-11 09:32:54 +00:00
|
|
|
return cmd
|
2023-01-06 22:14:02 +00:00
|
|
|
}
|
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
func (cli *cliCapi) status() error {
|
|
|
|
cfg := cli.cfg()
|
2020-11-30 09:37:17 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
if err := require.CAPIRegistered(cfg); err != nil {
|
|
|
|
return err
|
|
|
|
}
|
2023-10-06 11:59:51 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
password := strfmt.Password(cfg.API.Server.OnlineClient.Credentials.Password)
|
2021-03-24 17:16:17 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
apiurl, err := url.Parse(cfg.API.Server.OnlineClient.Credentials.URL)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("parsing api url ('%s'): %w", cfg.API.Server.OnlineClient.Credentials.URL, err)
|
|
|
|
}
|
2021-03-24 17:16:17 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
hub, err := require.Hub(cfg, nil, nil)
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
2023-10-06 11:59:51 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
scenarios, err := hub.GetInstalledItemNames(cwhub.SCENARIOS)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("failed to get scenarios: %w", err)
|
|
|
|
}
|
2020-11-30 09:37:17 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
if len(scenarios) == 0 {
|
|
|
|
return errors.New("no scenarios installed, abort")
|
|
|
|
}
|
2023-10-06 11:59:51 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
Client, err = apiclient.NewDefaultClient(apiurl, CAPIURLPrefix, fmt.Sprintf("crowdsec/%s", version.String()), nil)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("init default client: %w", err)
|
|
|
|
}
|
2023-10-06 11:59:51 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
t := models.WatcherAuthRequest{
|
|
|
|
MachineID: &cfg.API.Server.OnlineClient.Credentials.Login,
|
|
|
|
Password: &password,
|
|
|
|
Scenarios: scenarios,
|
|
|
|
}
|
2023-10-06 11:59:51 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
log.Infof("Loaded credentials from %s", cfg.API.Server.OnlineClient.CredentialsFilePath)
|
|
|
|
log.Infof("Trying to authenticate with username %s on %s", cfg.API.Server.OnlineClient.Credentials.Login, apiurl)
|
2023-10-06 11:59:51 +00:00
|
|
|
|
2024-02-23 09:37:04 +00:00
|
|
|
_, _, err = Client.Auth.AuthenticateWatcher(context.Background(), t)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("failed to authenticate to Central API (CAPI): %w", err)
|
|
|
|
}
|
|
|
|
|
|
|
|
log.Info("You can successfully interact with Central API (CAPI)")
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (cli *cliCapi) newStatusCmd() *cobra.Command {
|
|
|
|
cmd := &cobra.Command{
|
|
|
|
Use: "status",
|
|
|
|
Short: "Check status with the Central API (CAPI)",
|
|
|
|
Args: cobra.MinimumNArgs(0),
|
|
|
|
DisableAutoGenTag: true,
|
|
|
|
RunE: func(_ *cobra.Command, _ []string) error {
|
|
|
|
return cli.status()
|
2020-11-30 09:37:17 +00:00
|
|
|
},
|
|
|
|
}
|
2021-06-28 15:34:19 +00:00
|
|
|
|
2023-12-11 09:32:54 +00:00
|
|
|
return cmd
|
2020-11-30 09:37:17 +00:00
|
|
|
}
|