crowdsec/cmd/crowdsec-cli/papi.go

package main

import (
	"time"

	"github.com/crowdsecurity/crowdsec/pkg/apiserver"
	"github.com/crowdsecurity/crowdsec/pkg/database"
	"github.com/crowdsecurity/crowdsec/pkg/types"
	"github.com/pkg/errors"
	log "github.com/sirupsen/logrus"
	"github.com/spf13/cobra"
	"gopkg.in/tomb.v2"
)

func NewPapiCmd() *cobra.Command {
	var cmdLapi = &cobra.Command{
		Use:               "papi [action]",
		Short:             "Manage interaction with Polling API (PAPI)",
		Args:              cobra.MinimumNArgs(1),
		DisableAutoGenTag: true,
		PersistentPreRunE: func(cmd *cobra.Command, args []string) error {
			if err := csConfig.LoadAPIServer(); err != nil || csConfig.DisableAPI {
				return errors.Wrap(err, "Local API is disabled, please run this command on the local API machine")
			}
			if csConfig.API.Server.OnlineClient == nil {
				log.Fatalf("no configuration for Central API in '%s'", *csConfig.FilePath)
			}
			if csConfig.API.Server.OnlineClient.Credentials.PapiURL == "" {
				log.Fatalf("no PAPI URL in configuration")
			}
			return nil
		},
	}

	cmdLapi.AddCommand(NewPapiStatusCmd())
	cmdLapi.AddCommand(NewPapiSyncCmd())

	return cmdLapi
}

func NewPapiStatusCmd() *cobra.Command {
	cmdCapiStatus := &cobra.Command{
		Use:               "status",
		Short:             "Get status of the Polling API",
		Args:              cobra.MinimumNArgs(0),
		DisableAutoGenTag: true,
		Run: func(cmd *cobra.Command, args []string) {
			var err error
			dbClient, err = database.NewClient(csConfig.DbConfig)
			if err != nil {
				log.Fatalf("unable to initialize database client : %s", err)
			}

			apic, err := apiserver.NewAPIC(csConfig.API.Server.OnlineClient, dbClient, csConfig.API.Server.ConsoleConfig, csConfig.API.Server.CapiWhitelists)

			if err != nil {
				log.Fatalf("unable to initialize API client : %s", err)
			}

			papi, err := apiserver.NewPAPI(apic, dbClient, csConfig.API.Server.ConsoleConfig, log.GetLevel())

			if err != nil {
				log.Fatalf("unable to initialize PAPI client : %s", err)
			}

			perms, err := papi.GetPermissions()

			if err != nil {
				log.Fatalf("unable to get PAPI permissions: %s", err)
			}
			var lastTimestampStr *string
			lastTimestampStr, err = dbClient.GetConfigItem(apiserver.PapiPullKey)
			if err != nil {
				lastTimestampStr = types.StrPtr("never")
			}
			log.Infof("You can successfully interact with Polling API (PAPI)")
			log.Infof("Console plan: %s", perms.Plan)
			log.Infof("Last order received: %s", *lastTimestampStr)

			log.Infof("PAPI subscriptions:")
			for _, sub := range perms.Categories {
				log.Infof(" - %s", sub)
			}
		},
	}

	return cmdCapiStatus
}

func NewPapiSyncCmd() *cobra.Command {
	cmdCapiSync := &cobra.Command{
		Use:               "sync",
		Short:             "Sync with the Polling API, pulling all non-expired orders for the instance",
		Args:              cobra.MinimumNArgs(0),
		DisableAutoGenTag: true,
		Run: func(cmd *cobra.Command, args []string) {
			var err error
			t := tomb.Tomb{}
			dbClient, err = database.NewClient(csConfig.DbConfig)
			if err != nil {
				log.Fatalf("unable to initialize database client : %s", err)
			}

			apic, err := apiserver.NewAPIC(csConfig.API.Server.OnlineClient, dbClient, csConfig.API.Server.ConsoleConfig, csConfig.API.Server.CapiWhitelists)

			if err != nil {
				log.Fatalf("unable to initialize API client : %s", err)
			}

			t.Go(apic.Push)

			papi, err := apiserver.NewPAPI(apic, dbClient, csConfig.API.Server.ConsoleConfig, log.GetLevel())

			if err != nil {
				log.Fatalf("unable to initialize PAPI client : %s", err)
			}
			t.Go(papi.SyncDecisions)

			err = papi.PullOnce(time.Time{})

			if err != nil {
				log.Fatalf("unable to sync decisions: %s", err)
			}

			log.Infof("Sending acknowledgements to CAPI")

			apic.Shutdown()
			papi.Shutdown()
			t.Wait()
			time.Sleep(5 * time.Second) //FIXME: the push done by apic.Push is run inside a sub goroutine, sleep to make sure it's done

		},
	}

	return cmdCapiSync
}