main.go

package main

import (
	"fmt"
	"net/http"
	"os"
	"strings"
	"time"

	"github.com/labstack/echo/v4"
	"github.com/labstack/echo/v4/middleware"
)

const userKey = "user"

func main() {
	if len(os.Args) < 2{
		fmt.Println("must specify config yaml as args")
		os.Exit(1)
	}
	// Echo instance
	e := echo.New()

	// Middleware
	e.Use(middleware.Logger())
	e.Use(middleware.Recover())

	e.Use(middleware.BasicAuth(func(username, password string, c echo.Context) (bool, error) {
		conf := &Config{}
		err := conf.LoadConfig(os.Args[1])
		if err != nil {
			return false, err
		}

		err = conf.Auth.LoadUserPass(os.Args[1])
		if err != nil {
			return false, err
		}
		if conf.Auth.IsPermitted(username, password) {
			c.Set(userKey, username)
			return true, nil
		} else {
			return false, fmt.Errorf("not permitted")
		}

	}))

	// Routes
	e.GET("/ping", renew)

	// Start server
	e.Logger.Fatal(e.Start(":1323"))
}

// Handler
func renew(c echo.Context) (err error) {
	remoteIP := strings.Split(c.Request().RemoteAddr, ":")[0]
	conf := &Config{}
	err = conf.LoadConfig(os.Args[1])
	if err != nil {
		return c.String(http.StatusInternalServerError, err.Error())
	}
	err = conf.AwsSg.Init()
	if err != nil {
		return c.String(http.StatusInternalServerError, err.Error())
	}
	desc := fmt.Sprintf("%s %s", c.Get(userKey), time.Now().Format("20060102150405"))
	err = conf.AwsSg.AuthSgIngress(remoteIP, desc)
	if err != nil {
		if !strings.Contains(err.Error(), "Duplicate") {
			return c.String(http.StatusInternalServerError, err.Error())
		}
	}

	groupIds := make([]string, 1)
	groupIds[0] = conf.AwsSg.SgId
	sgs, err := conf.AwsSg.ListSg(groupIds)
	if err != nil {
		return c.String(http.StatusInternalServerError, err.Error())
	}
	return c.String(http.StatusOK, sgs[0].String())
}