feat: GCTL Token generation through SWS

services/genssh/controller.go

@@ -1,3 +1,4 @@
+//go:build !windows
 // +build !windows
 
 package genssh

services/master/controllers/term.go

@@ -1,3 +1,4 @@
+//go:build !windows
 // +build !windows
 
 package controllers

services/master/middlewares/jwt.go

@@ -34,6 +34,21 @@ func authenticator(c *gin.Context) (interface{}, error) {
 	return user, nil
 }
 
+// AuthenticatorForGctl doesn't authenticate. Authentication to be done in middleware before invoking this function.
+// This function only gets the user details.
+func authenticatorForGctl(c *gin.Context) (interface{}, error) {
+	auth := &types.GCTLToken{}
+	if err := c.ShouldBind(auth); err != nil {
+		return nil, errMissingCredentials
+	}
+	user, err := mongo.FetchSingleUser(auth.GetEmail())
+	if err != nil || user == nil {
+		return nil, errFailedAuthentication
+	}
+
+	return user, nil
+}
+
 func payloadFunc(data interface{}) jwt.MapClaims {
 	if user, ok := data.(*types.User); ok {
 		return jwt.MapClaims{
@@ -157,7 +172,7 @@ var JWTGctl = &jwt.GinJWTMiddleware{
 	TokenLookup:     "header: Authorization",
 	TokenHeadName:   "gctlToken",
 	TimeFunc:        time.Now,
-	Authenticator:   authenticator,
+	Authenticator:   authenticatorForGctl,
 	PayloadFunc:     payloadFuncForGctl,
 	IdentityHandler: identityHandlerForGctl,
 	Authorizator:    authorizatorForGctl,

services/master/routes.go

@@ -55,6 +55,7 @@ func NewService() http.Handler {
 		auth.PUT("/revoke", c.RevokeToken)
 	}
 
+	auth.POST("/pat", m.AuthRequired(), m.LoginHandler)
 	router.GET("/instances", m.AuthRequired(), c.FetchAllInstancesByUser)
 	router.POST("/gctllogin", m.JWTGctl.MiddlewareFunc(), c.GctlLogin)
 

types/user.go

@@ -99,3 +99,14 @@ func (pw *PasswordUpdate) GetOldPassword() string {
 func (pw *PasswordUpdate) GetNewPassword() string {
 	return pw.NewPassword
 }
+
+// GCTLToken is the request body for generating GCTLToken
+type GCTLToken struct {
+	Email string `form:"email" json:"email" bson:"email" binding:"required"`
+	Token string `form:"token" json:"token" bson:"token" binding:"required"`
+}
+
+// GetEmail returns the email of the user
+func (auth *GCTLToken) GetEmail() string {
+	return auth.Email
+}