mirror of
https://github.com/Buriburizaem0n/nezha_domains.git
synced 2026-09-21 02:30:14 +00:00
feat(auth): add PAT auth, scoped REST/MCP access, CSRF, and tenant isolation
Introduce Personal Access Tokens (nzp_*) as a stateless auth path alongside
JWT, gated per-endpoint by a scope middleware (nezha:{resource}:{verb}) with
fail-closed empty-scope defaults and a server-id whitelist. Self-management
endpoints (profile, api-tokens, oauth2 bind, refresh-token) explicitly reject
PATs to block privilege-escalation chains. A revoke registry tears down active
long-lived connections (terminal, fm, ws, transfer, mcp) the moment a PAT is
deleted, with a tombstone closing the revoke->register race.
Add an MCP endpoint that proxies tool calls (exec, fs read/write/delete,
transfer) to agents over gRPC, guarded by origin/DNS-rebinding checks, a
per-token rate limiter, audit logging, and a kill switch. Serialize all
sends through the IOStream wrapper to honour grpc-go's concurrency contract.
Add CSRF double-submit protection on unsafe cookie-authenticated methods,
exempting authenticated PAT requests by context identity (not a forgeable
Authorization header). Apply visibility/whitelist filtering consistently
across list, get-by-id, and mutate paths to enforce tenant isolation.
Migrate legacy mcp:* scopes: rewrite read/exec to nezha:* equivalents and
drop dangerous write/delete/wildcard grants.
Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
This commit is contained in:
naiba
cloudcode
@@ -0,0 +1,248 @@
|
||||
package controller
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"errors"
|
||||
"time"
|
||||
|
||||
"github.com/gin-gonic/gin"
|
||||
|
||||
"github.com/nezhahq/nezha/model"
|
||||
"github.com/nezhahq/nezha/service/rpc"
|
||||
)
|
||||
|
||||
const fsCallTimeout = 30 * time.Second
|
||||
|
||||
func init() {
|
||||
registerMCPTool(&mcpTool{
|
||||
Name: "fs.list",
|
||||
Description: "List entries of a directory on the target server.",
|
||||
InputSchema: map[string]any{
|
||||
"type": "object",
|
||||
"properties": map[string]any{
|
||||
"server_id": map[string]any{"type": "integer"},
|
||||
"path": map[string]any{"type": "string", "description": "Absolute path."},
|
||||
"show_hidden": map[string]any{"type": "boolean"},
|
||||
},
|
||||
"required": []string{"server_id", "path"},
|
||||
},
|
||||
RequiredScope: model.ScopeServerRead,
|
||||
Handler: handleFsList,
|
||||
})
|
||||
|
||||
registerMCPTool(&mcpTool{
|
||||
Name: "fs.read",
|
||||
Description: "Read a file. Default max 1MB; use offset/length for larger ranges, or fs.download_url for streaming up to 100MiB out-of-band.",
|
||||
InputSchema: map[string]any{
|
||||
"type": "object",
|
||||
"properties": map[string]any{
|
||||
"server_id": map[string]any{"type": "integer"},
|
||||
"path": map[string]any{"type": "string"},
|
||||
"offset": map[string]any{"type": "integer", "minimum": 0},
|
||||
"length": map[string]any{"type": "integer", "minimum": 1},
|
||||
"encoding": map[string]any{"type": "string", "enum": []string{"utf8", "base64"}},
|
||||
},
|
||||
"required": []string{"server_id", "path"},
|
||||
},
|
||||
RequiredScope: model.ScopeServerRead,
|
||||
Handler: handleFsRead,
|
||||
})
|
||||
|
||||
registerMCPTool(&mcpTool{
|
||||
Name: "fs.write",
|
||||
Description: "Atomic write to a file. Supports utf8 / base64 content, optional sha256 optimistic lock, create_dirs.",
|
||||
InputSchema: map[string]any{
|
||||
"type": "object",
|
||||
"properties": map[string]any{
|
||||
"server_id": map[string]any{"type": "integer"},
|
||||
"path": map[string]any{"type": "string"},
|
||||
"content": map[string]any{"type": "string"},
|
||||
"encoding": map[string]any{"type": "string", "enum": []string{"utf8", "base64"}},
|
||||
"mode": map[string]any{"type": "string", "description": "Octal mode like '0644'."},
|
||||
"if_match_sha256": map[string]any{"type": "string"},
|
||||
"create_dirs": map[string]any{"type": "boolean"},
|
||||
},
|
||||
"required": []string{"server_id", "path", "content"},
|
||||
},
|
||||
RequiredScope: model.ScopeServerWrite,
|
||||
Handler: handleFsWrite,
|
||||
})
|
||||
|
||||
registerMCPTool(&mcpTool{
|
||||
Name: "fs.delete",
|
||||
Description: "Delete a file or directory. Pass recursive=true for non-empty directories.",
|
||||
InputSchema: map[string]any{
|
||||
"type": "object",
|
||||
"properties": map[string]any{
|
||||
"server_id": map[string]any{"type": "integer"},
|
||||
"path": map[string]any{"type": "string"},
|
||||
"recursive": map[string]any{"type": "boolean"},
|
||||
},
|
||||
"required": []string{"server_id", "path"},
|
||||
},
|
||||
RequiredScope: model.ScopeServerDelete,
|
||||
Handler: handleFsDelete,
|
||||
})
|
||||
}
|
||||
|
||||
type fsListArgs struct {
|
||||
ServerID uint64 `json:"server_id"`
|
||||
Path string `json:"path"`
|
||||
ShowHidden bool `json:"show_hidden,omitempty"`
|
||||
}
|
||||
|
||||
func handleFsList(c *gin.Context, raw json.RawMessage) (any, error) {
|
||||
var args fsListArgs
|
||||
if err := decodeToolArgs(raw, &args); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
srv, err := requireServerAccess(c, args.ServerID)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if err := requireAgentSupportsMCP(srv); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if args.Path == "" {
|
||||
return nil, errMCPInvalidArgs("path required")
|
||||
}
|
||||
out, err := rpc.CallAgent(c.Request.Context(), args.ServerID, model.TaskTypeFsList,
|
||||
model.FsListRequest{Path: args.Path, ShowHidden: args.ShowHidden}, fsCallTimeout)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
var res model.FsListResult
|
||||
if err := json.Unmarshal(out, &res); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if res.Error != "" {
|
||||
return nil, errors.New(res.Error)
|
||||
}
|
||||
return res, nil
|
||||
}
|
||||
|
||||
type fsReadArgs struct {
|
||||
ServerID uint64 `json:"server_id"`
|
||||
Path string `json:"path"`
|
||||
Offset int64 `json:"offset,omitempty"`
|
||||
Length int64 `json:"length,omitempty"`
|
||||
Encoding string `json:"encoding,omitempty"`
|
||||
}
|
||||
|
||||
func handleFsRead(c *gin.Context, raw json.RawMessage) (any, error) {
|
||||
var args fsReadArgs
|
||||
if err := decodeToolArgs(raw, &args); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
srv, err := requireServerAccess(c, args.ServerID)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if err := requireAgentSupportsMCP(srv); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if args.Path == "" {
|
||||
return nil, errMCPInvalidArgs("path required")
|
||||
}
|
||||
out, err := rpc.CallAgent(c.Request.Context(), args.ServerID, model.TaskTypeFsRead,
|
||||
model.FsReadRequest{
|
||||
Path: args.Path,
|
||||
Offset: args.Offset,
|
||||
Length: args.Length,
|
||||
Encoding: args.Encoding,
|
||||
}, fsCallTimeout)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
var res model.FsReadResult
|
||||
if err := json.Unmarshal(out, &res); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if res.Error != "" {
|
||||
return nil, errors.New(res.Error)
|
||||
}
|
||||
return res, nil
|
||||
}
|
||||
|
||||
type fsWriteArgs struct {
|
||||
ServerID uint64 `json:"server_id"`
|
||||
Path string `json:"path"`
|
||||
Content string `json:"content"`
|
||||
Encoding string `json:"encoding,omitempty"`
|
||||
Mode string `json:"mode,omitempty"`
|
||||
IfMatchSHA256 string `json:"if_match_sha256,omitempty"`
|
||||
CreateDirs bool `json:"create_dirs,omitempty"`
|
||||
}
|
||||
|
||||
func handleFsWrite(c *gin.Context, raw json.RawMessage) (any, error) {
|
||||
var args fsWriteArgs
|
||||
if err := decodeToolArgs(raw, &args); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
srv, err := requireServerAccess(c, args.ServerID)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if err := requireAgentSupportsMCP(srv); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if args.Path == "" {
|
||||
return nil, errMCPInvalidArgs("path required")
|
||||
}
|
||||
out, err := rpc.CallAgent(c.Request.Context(), args.ServerID, model.TaskTypeFsWrite,
|
||||
model.FsWriteRequest{
|
||||
Path: args.Path,
|
||||
Content: args.Content,
|
||||
Encoding: args.Encoding,
|
||||
Mode: args.Mode,
|
||||
IfMatchSHA256: args.IfMatchSHA256,
|
||||
CreateDirs: args.CreateDirs,
|
||||
}, fsCallTimeout)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
var res model.FsWriteResult
|
||||
if err := json.Unmarshal(out, &res); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if res.Error != "" {
|
||||
return nil, errors.New(res.Error)
|
||||
}
|
||||
return res, nil
|
||||
}
|
||||
|
||||
type fsDeleteArgs struct {
|
||||
ServerID uint64 `json:"server_id"`
|
||||
Path string `json:"path"`
|
||||
Recursive bool `json:"recursive,omitempty"`
|
||||
}
|
||||
|
||||
func handleFsDelete(c *gin.Context, raw json.RawMessage) (any, error) {
|
||||
var args fsDeleteArgs
|
||||
if err := decodeToolArgs(raw, &args); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
srv, err := requireServerAccess(c, args.ServerID)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if err := requireAgentSupportsMCP(srv); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if args.Path == "" {
|
||||
return nil, errMCPInvalidArgs("path required")
|
||||
}
|
||||
out, err := rpc.CallAgent(c.Request.Context(), args.ServerID, model.TaskTypeFsDelete,
|
||||
model.FsDeleteRequest{Path: args.Path, Recursive: args.Recursive}, fsCallTimeout)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
var res model.FsDeleteResult
|
||||
if err := json.Unmarshal(out, &res); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if res.Error != "" {
|
||||
return nil, errors.New(res.Error)
|
||||
}
|
||||
return res, nil
|
||||
}
|
||||
Reference in New Issue
Block a user