@ -14,6 +14,7 @@ import (
"flag"
"flag"
"fmt"
"fmt"
"html/template"
"html/template"
"io"
"io/ioutil"
"io/ioutil"
"log"
"log"
"net"
"net"
@ -26,6 +27,7 @@ import (
"strings"
"strings"
"github.com/peterbourgon/ff/v3/ffcli"
"github.com/peterbourgon/ff/v3/ffcli"
"inet.af/netaddr"
"tailscale.com/client/tailscale"
"tailscale.com/client/tailscale"
"tailscale.com/ipn"
"tailscale.com/ipn"
"tailscale.com/tailcfg"
"tailscale.com/tailcfg"
@ -56,6 +58,8 @@ type tmplData struct {
Status string
Status string
DeviceName string
DeviceName string
IP string
IP string
AdvertiseExitNode bool
AdvertiseRoutes string
}
}
var webCmd = & ffcli . Command {
var webCmd = & ffcli . Command {
@ -303,15 +307,45 @@ func webHandler(w http.ResponseWriter, r *http.Request) {
}
}
if r . Method == "POST" {
if r . Method == "POST" {
defer r . Body . Close ( )
var postData struct {
AdvertiseRoutes string
AdvertiseExitNode bool
Reauthenticate bool
}
type mi map [ string ] interface { }
type mi map [ string ] interface { }
if err := json . NewDecoder ( r . Body ) . Decode ( & postData ) ; err != nil {
w . WriteHeader ( 400 )
json . NewEncoder ( w ) . Encode ( mi { "error" : err . Error ( ) } )
return
}
prefs , err := tailscale . GetPrefs ( r . Context ( ) )
if err != nil && ! postData . Reauthenticate {
w . WriteHeader ( http . StatusInternalServerError )
json . NewEncoder ( w ) . Encode ( mi { "error" : err . Error ( ) } )
return
} else {
routes , err := calcAdvertiseRoutes ( postData . AdvertiseRoutes , postData . AdvertiseExitNode )
if err != nil {
w . WriteHeader ( http . StatusInternalServerError )
json . NewEncoder ( w ) . Encode ( mi { "error" : err . Error ( ) } )
return
}
prefs . AdvertiseRoutes = routes
}
w . Header ( ) . Set ( "Content-Type" , "application/json" )
w . Header ( ) . Set ( "Content-Type" , "application/json" )
url , err := tailscaleUpForceReauth ( r . Context ( ) )
url , err := tailscaleUp ( r . Context ( ) , prefs , postData . Reauthenticate )
if err != nil {
if err != nil {
w . WriteHeader ( http . StatusInternalServerError )
w . WriteHeader ( http . StatusInternalServerError )
json . NewEncoder ( w ) . Encode ( mi { "error" : err . Error ( ) } )
json . NewEncoder ( w ) . Encode ( mi { "error" : err . Error ( ) } )
return
return
}
}
if url != "" {
json . NewEncoder ( w ) . Encode ( mi { "url" : url } )
json . NewEncoder ( w ) . Encode ( mi { "url" : url } )
} else {
io . WriteString ( w , "{}" )
}
return
return
}
}
@ -320,6 +354,11 @@ func webHandler(w http.ResponseWriter, r *http.Request) {
http . Error ( w , err . Error ( ) , http . StatusInternalServerError )
http . Error ( w , err . Error ( ) , http . StatusInternalServerError )
return
return
}
}
prefs , err := tailscale . GetPrefs ( r . Context ( ) )
if err != nil {
http . Error ( w , err . Error ( ) , http . StatusInternalServerError )
return
}
profile := st . User [ st . Self . UserID ]
profile := st . User [ st . Self . UserID ]
deviceName := strings . Split ( st . Self . DNSName , "." ) [ 0 ]
deviceName := strings . Split ( st . Self . DNSName , "." ) [ 0 ]
@ -329,6 +368,18 @@ func webHandler(w http.ResponseWriter, r *http.Request) {
Status : st . BackendState ,
Status : st . BackendState ,
DeviceName : deviceName ,
DeviceName : deviceName ,
}
}
exitNodeRouteV4 := netaddr . MustParseIPPrefix ( "0.0.0.0/0" )
exitNodeRouteV6 := netaddr . MustParseIPPrefix ( "::/0" )
for _ , r := range prefs . AdvertiseRoutes {
if r == exitNodeRouteV4 || r == exitNodeRouteV6 {
data . AdvertiseExitNode = true
} else {
if data . AdvertiseRoutes != "" {
data . AdvertiseRoutes = ","
}
data . AdvertiseRoutes += r . String ( )
}
}
if len ( st . TailscaleIPs ) != 0 {
if len ( st . TailscaleIPs ) != 0 {
data . IP = st . TailscaleIPs [ 0 ] . String ( )
data . IP = st . TailscaleIPs [ 0 ] . String ( )
}
}
@ -342,13 +393,15 @@ func webHandler(w http.ResponseWriter, r *http.Request) {
}
}
// TODO(crawshaw): some of this is very similar to the code in 'tailscale up', can we share anything?
// TODO(crawshaw): some of this is very similar to the code in 'tailscale up', can we share anything?
func tailscaleUpForceReauth ( ctx context . Context ) ( authURL string , retErr error ) {
func tailscaleUp ( ctx context . Context , prefs * ipn . Prefs , forceReauth bool ) ( authURL string , retErr error ) {
prefs := ipn . NewPrefs ( )
if prefs == nil {
prefs = ipn . NewPrefs ( )
prefs . ControlURL = ipn . DefaultControlURL
prefs . ControlURL = ipn . DefaultControlURL
prefs . WantRunning = true
prefs . WantRunning = true
prefs . CorpDNS = true
prefs . CorpDNS = true
prefs . AllowSingleHosts = true
prefs . AllowSingleHosts = true
prefs . ForceDaemon = ( runtime . GOOS == "windows" )
prefs . ForceDaemon = ( runtime . GOOS == "windows" )
}
if distro . Get ( ) == distro . Synology {
if distro . Get ( ) == distro . Synology {
prefs . NetfilterMode = preftype . NetfilterOff
prefs . NetfilterMode = preftype . NetfilterOff
@ -395,6 +448,14 @@ func tailscaleUpForceReauth(ctx context.Context) (authURL string, retErr error)
authURL = * url
authURL = * url
cancel ( )
cancel ( )
}
}
if ! forceReauth && n . Prefs != nil {
p1 , p2 := * n . Prefs , * prefs
p1 . Persist = nil
p2 . Persist = nil
if p1 . Equals ( & p2 ) {
cancel ( )
}
}
} )
} )
// Wait for backend client to be connected so we know
// Wait for backend client to be connected so we know
// we're subscribed to updates. Otherwise we can miss
// we're subscribed to updates. Otherwise we can miss
@ -412,10 +473,15 @@ func tailscaleUpForceReauth(ctx context.Context) (authURL string, retErr error)
bc . Start ( ipn . Options {
bc . Start ( ipn . Options {
StateKey : ipn . GlobalDaemonStateKey ,
StateKey : ipn . GlobalDaemonStateKey ,
} )
} )
if forceReauth {
bc . StartLoginInteractive ( )
bc . StartLoginInteractive ( )
}
<- pumpCtx . Done ( ) // wait for authURL or complete failure
<- pumpCtx . Done ( ) // wait for authURL or complete failure
if authURL == "" && retErr == nil {
if authURL == "" && retErr == nil {
if ! forceReauth {
return "" , nil // no auth URL is fine
}
retErr = pumpCtx . Err ( )
retErr = pumpCtx . Err ( )
}
}
if authURL == "" && retErr == nil {
if authURL == "" && retErr == nil {