Add basic proxy logic

kylecarbs · kylecarbs · commit 934b1ffd4909 · 2022-05-26T15:52:30.000Z
diff --git a/.vscode/settings.json b/.vscode/settings.json
@@ -1,5 +1,6 @@
 {
   "cSpell.words": [
+    "apps",
     "buildname",
     "circbuf",
     "cliflag",
@@ -9,7 +10,6 @@
     "codersdk",
     "cronstrue",
     "devel",
-    "apps",
     "drpc",
     "drpcconn",
     "drpcmux",
@@ -72,6 +72,7 @@
     "VMID",
     "weblinks",
     "webrtc",
+    "workspaceapps",
     "xerrors",
     "xstate",
     "yamux"
diff --git a/coderd/coderd.go b/coderd/coderd.go
@@ -2,6 +2,7 @@ package coderd
 
 import (
 	"context"
+	"crypto/cipher"
 	"crypto/x509"
 	"fmt"
 	"net/http"
@@ -47,15 +48,18 @@ type Options struct {
 	// app. Specific routes may have their own limiters.
 	APIRateLimit         int
 	AWSCertificates      awsidentity.Certificates
+	Authorizer           rbac.Authorizer
 	AzureCertificates    x509.VerifyOptions
 	GoogleTokenValidator *idtoken.Validator
 	GithubOAuth2Config   *GithubOAuth2Config
 	ICEServers           []webrtc.ICEServer
 	SecureAuthCookie     bool
 	SSHKeygenAlgorithm   gitsshkey.Algorithm
 	TURNServer           *turnconn.Server
-	Authorizer           rbac.Authorizer
 	TracerProvider       *sdktrace.TracerProvider
+	// WildcardCipher is used to encrypt session tokens so that authentication
+	// can be securely transferred to the wildcard host.
+	WildcardCipher cipher.AEAD
 }
 
 // New constructs a Coder API handler.
@@ -342,6 +346,8 @@ func New(options *Options) *API {
 	})
 	r.NotFound(site.DefaultHandler().ServeHTTP)
 
+	// /workspaceapps/auth
+
 	return api
 }
 
diff --git a/coderd/database/databasefake/databasefake.go b/coderd/database/databasefake/databasefake.go
@@ -1043,6 +1043,22 @@ func (q *fakeQuerier) GetWorkspaceAgentsByResourceIDs(_ context.Context, resourc
 	return workspaceAgents, nil
 }
 
+func (q *fakeQuerier) GetWorkspaceAppByAgentIDAndName(ctx context.Context, arg database.GetWorkspaceAppByAgentIDAndNameParams) (database.WorkspaceApp, error) {
+	q.mutex.RLock()
+	defer q.mutex.RUnlock()
+
+	for _, app := range q.workspaceApps {
+		if app.AgentID != arg.AgentID {
+			continue
+		}
+		if app.Name != arg.Name {
+			continue
+		}
+		return app, nil
+	}
+	return database.WorkspaceApp{}, sql.ErrNoRows
+}
+
 func (q *fakeQuerier) GetProvisionerDaemonByID(_ context.Context, id uuid.UUID) (database.ProvisionerDaemon, error) {
 	q.mutex.RLock()
 	defer q.mutex.RUnlock()
diff --git a/coderd/database/querier.go b/coderd/database/querier.go
diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go
diff --git a/coderd/database/queries/workspaceapps.sql b/coderd/database/queries/workspaceapps.sql
@@ -4,6 +4,9 @@ SELECT * FROM workspace_apps WHERE agent_id = $1;
 -- name: GetWorkspaceAppsByAgentIDs :many
 SELECT * FROM workspace_apps WHERE agent_id = ANY(@ids :: uuid [ ]);
 
+-- name: GetWorkspaceAppByAgentIDAndName :one
+SELECT * FROM workspace_apps WHERE agent_id = $1 AND name = $2;
+
 -- name: InsertWorkspaceApp :one
 INSERT INTO
     workspace_apps (
diff --git a/coderd/workspaceapps.go b/coderd/workspaceapps.go
@@ -2,8 +2,32 @@ package coderd
 
 import (
 	"net/http"
+
+	"github.com/coder/coder/coderd/database"
+	"github.com/google/uuid"
 )
 
-func (api *API) proxyPath(rw http.ResponseWriter, r *http.Request) {
+// workspaceAppsAuthWildcard authenticates the wildcard domain.
+func (api *API) workspaceAppsAuthWildcard(rw http.ResponseWriter, r *http.Request) {
+	// r.URL.Query().Get("redirect")
+
+}
+
+func (api *API) workspaceAppsProxyWildcard(rw http.ResponseWriter, r *http.Request) {
+
+}
 
+func (api *API) workspaceAppsProxyPath(rw http.ResponseWriter, r *http.Request) {
+	conn, err := api.dialWorkspaceAgent(r, uuid.Nil)
+	if err != nil {
+		return
+	}
+	app, err := api.Database.GetWorkspaceAppByAgentIDAndName(r.Context(), database.GetWorkspaceAppByAgentIDAndNameParams{
+		AgentID: uuid.Nil,
+		Name:    "something",
+	})
+	if err != nil {
+		return
+	}
+	conn.DialContext(r.Context(), "tcp", "localhost:3000")
 }
diff --git a/coderd/workspaceapps_test.go b/coderd/workspaceapps_test.go
@@ -1 +1,59 @@
 package coderd_test
+
+import (
+	"testing"
+
+	"cdr.dev/slog/sloggers/slogtest"
+	"github.com/coder/coder/agent"
+	"github.com/coder/coder/coderd/coderdtest"
+	"github.com/coder/coder/codersdk"
+	"github.com/coder/coder/provisioner/echo"
+	"github.com/coder/coder/provisionersdk/proto"
+	"github.com/google/uuid"
+)
+
+func TestWorkspaceAppsProxyPath(t *testing.T) {
+	t.Parallel()
+	t.Run("Proxies", func(t *testing.T) {
+		t.Parallel()
+		client, coderAPI := coderdtest.NewWithAPI(t, nil)
+		user := coderdtest.CreateFirstUser(t, client)
+		daemonCloser := coderdtest.NewProvisionerDaemon(t, coderAPI)
+		authToken := uuid.NewString()
+		version := coderdtest.CreateTemplateVersion(t, client, user.OrganizationID, &echo.Responses{
+			Parse:           echo.ParseComplete,
+			ProvisionDryRun: echo.ProvisionComplete,
+			Provision: []*proto.Provision_Response{{
+				Type: &proto.Provision_Response_Complete{
+					Complete: &proto.Provision_Complete{
+						Resources: []*proto.Resource{{
+							Name: "example",
+							Type: "aws_instance",
+							Agents: []*proto.Agent{{
+								Id: uuid.NewString(),
+								Auth: &proto.Agent_Token{
+									Token: authToken,
+								},
+							}},
+						}},
+					},
+				},
+			}},
+		})
+		template := coderdtest.CreateTemplate(t, client, user.OrganizationID, version.ID)
+		coderdtest.AwaitTemplateVersionJob(t, client, version.ID)
+		workspace := coderdtest.CreateWorkspace(t, client, user.OrganizationID, template.ID)
+		coderdtest.AwaitWorkspaceBuildJob(t, client, workspace.LatestBuild.ID)
+		daemonCloser.Close()
+
+		agentClient := codersdk.New(client.URL)
+		agentClient.SessionToken = authToken
+		agentCloser := agent.New(agentClient.ListenWorkspaceAgent, &agent.Options{
+			Logger: slogtest.Make(t, nil),
+		})
+		t.Cleanup(func() {
+			_ = agentCloser.Close()
+		})
+		resources := coderdtest.AwaitWorkspaceAgents(t, client, workspace.LatestBuild.ID)
+	})
+}
diff --git a/codersdk/workspaceapps.go b/codersdk/workspaceapps.go
@@ -1,6 +1,10 @@
 package codersdk
 
-import "github.com/google/uuid"
+import (
+	"context"
+
+	"github.com/google/uuid"
+)
 
 type WorkspaceApp struct {
 	ID uuid.UUID `json:"id"`
@@ -14,3 +18,7 @@ type WorkspaceApp struct {
 	// an icon to be displayed in the dashboard.
 	Icon string `json:"icon"`
 }
+
+func (c *Client) ProxyWorkspaceApplication(ctx context.Context) {
+
+}
