Add TLS feature with Caddy

2026-10-21 09:13:59 +01:00
parent 1462067e72
commit ed4a6f3ec8
109 changed files with 6374 additions and 156 deletions
@@ -0,0 +1,96 @@
+import checkUserAccess from "@/src/functions/backend/auth/check-user-access";
+import userAuth from "@/src/functions/backend/auth/user-auth";
+import issueCertificate from "@/src/functions/backend/acme/issue-certificate";
+import type { BUN_SQLITE_WGUI_CLIENT_ROUTES } from "@/db/types/db";
+import BunSQLite from "@moduletrace/bun-sqlite";
+import type { ApiReqParams, TableType } from "@/src/types";
+import type {
+    APIResponseObject,
+    BunextAPIRouteHandler,
+} from "@moduletrace/bunext/types";
+
+export const handler: BunextAPIRouteHandler<APIResponseObject> = async ({
+    req,
+    body,
+}) => {
+    if (req.method !== "POST") {
+        return { success: false };
+    }
+
+    const { user, user_types } = await userAuth({ req });
+
+    if (!user?.logged_in_status) {
+        return {
+            success: false,
+            msg: `Unauthorized`,
+            logoutUser: true,
+        };
+    }
+
+    const is_admin = checkUserAccess({
+        user_types,
+        includes: ["admin"],
+    });
+
+    if (!is_admin.success) {
+        return { success: false, msg: `Unauthorized` };
+    }
+
+    const payload = body as
+        | (ApiReqParams & {
+              route_id?: number | "";
+              hostname?: string;
+              staging?: boolean;
+              force?: boolean;
+          })
+        | undefined;
+
+    let route: BUN_SQLITE_WGUI_CLIENT_ROUTES | undefined;
+
+    if (payload?.route_id !== undefined && payload.route_id !== "") {
+        const route_res = await BunSQLite.select<
+            BUN_SQLITE_WGUI_CLIENT_ROUTES,
+            TableType
+        >({
+            table: "client_routes",
+            targetId: payload.route_id,
+        });
+
+        route = route_res.singleRes || undefined;
+    } else if (payload?.hostname) {
+        const route_res = await BunSQLite.select<
+            BUN_SQLITE_WGUI_CLIENT_ROUTES,
+            TableType
+        >({
+            table: "client_routes",
+            query: {
+                query: {
+                    hostname: {
+                        value: payload.hostname.trim().toLowerCase(),
+                    },
+                },
+            },
+        });
+
+        route = route_res.singleRes || undefined;
+    }
+
+    if (!route || typeof route.id !== "number") {
+        return { success: false, msg: `Route not found` };
+    }
+
+    const is_super_admin = checkUserAccess({ user_types }).success;
+
+    if (!is_super_admin && route.user_id != user.id) {
+        return { success: false, msg: `Unauthorized` };
+    }
+
+    return await issueCertificate({
+        route,
+        route_id: route.id,
+        hostname: route.hostname,
+        user_id: user.id,
+        staging: payload?.staging,
+        force: Boolean(payload?.force),
+    });
+};