christian/rmm2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: Agent-Key braucht 'agent' Permission, nicht 'read'

Browse Source 
- Auto-Erstellung bei neuem Kunden: jetzt agent-Key + read-Key
- agent: fuer OPNsense/Linux Agents (WS + Heartbeat)
- read:  fuer externe Lesezugriffe / Dashboards
- Agent-Keys fuer alle 4 Kunden nachtraglich erstellt
This commit is contained in:
cynfo3000 2026-03-10 00:03:19 +01:00
parent 15ad9be8e7
commit fba824da8b
1 changed files with 25 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
backend/api/customers.go
View File

@ -12,15 +12,23 @@ import (
"github.com/cynfo/rmm-backend/db"
)
// generateCustomerAPIKey erstellt automatisch einen Read-only Key fuer einen Kunden
func generateCustomerAPIKey(database *db.Database, customerID int, number, name string) (*db.APIKey, error) {
// generateCustomerKey erstellt automatisch einen API-Key fuer einen Kunden
func generateCustomerKey(database *db.Database, customerID int, number, name, perm string) (*db.APIKey, error) {
b := make([]byte, 16)
if _, err := rand.Read(b); err != nil {
return nil, err
}
key := hex.EncodeToString(b)
keyName := fmt.Sprintf("Read-only — %s %s", number, name)
return database.CreateAPIKey(keyName, key, "read", &customerID)
var label string
switch perm {
case "agent":
label = fmt.Sprintf("Agent — %s %s", number, name)
case "read":
label = fmt.Sprintf("Read-only — %s %s", number, name)
default:
label = fmt.Sprintf("%s — %s %s", perm, number, name)
}
return database.CreateAPIKey(label, key, perm, &customerID)
}
// GET /api/v1/customers
@ -49,19 +57,24 @@ func (h *Handler) createCustomer(w http.ResponseWriter, r *http.Request) {
return
}
// Automatisch einen Read-only API-Key fuer den neuen Kunden erstellen
apiKey, keyErr := generateCustomerAPIKey(h.db, c.ID, req.Number, req.Name)
if keyErr != nil {
log.Printf("Auto-API-Key fuer Kunde %s fehlgeschlagen: %v", req.Number, keyErr)
// Automatisch zwei API-Keys erstellen:
// - agent: fuer die Agents (OPNsense, Linux) auf Kundensystemen
// - read: fuer externe Lesezugriffe / Dashboards
agentKey, err1 := generateCustomerKey(h.db, c.ID, req.Number, req.Name, "agent")
readKey, err2 := generateCustomerKey(h.db, c.ID, req.Number, req.Name, "read")
if err1 != nil {
log.Printf("Auto-Agent-Key fuer Kunde %s fehlgeschlagen: %v", req.Number, err1)
}
if err2 != nil {
log.Printf("Auto-Read-Key fuer Kunde %s fehlgeschlagen: %v", req.Number, err2)
}
h.auditLog(r, "customer.create", "customer", req.Number, req.Name, "")
resp := map[string]interface{}{
"customer": c,
}
if apiKey != nil {
resp["api_key"] = apiKey
"agent_key": agentKey,
"read_key": readKey,
}
writeJSON(w, http.StatusCreated, resp)
}