forked from TrueCloudLab/lego
115 lines
2.6 KiB
Go
115 lines
2.6 KiB
Go
package internal
|
|
|
|
import (
|
|
"crypto/sha1"
|
|
"encoding/json"
|
|
"fmt"
|
|
"io"
|
|
"math/rand"
|
|
"net/http"
|
|
"net/url"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/go-acme/lego/v4/challenge/dns01"
|
|
querystring "github.com/google/go-querystring/query"
|
|
)
|
|
|
|
const apiURL = "https://api.nearlyfreespeech.net"
|
|
|
|
const authenticationHeader = "X-NFSN-Authentication"
|
|
|
|
const saltBytes = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"
|
|
|
|
type Client struct {
|
|
HTTPClient *http.Client
|
|
baseURL *url.URL
|
|
|
|
login string
|
|
apiKey string
|
|
}
|
|
|
|
func NewClient(login string, apiKey string) *Client {
|
|
baseURL, _ := url.Parse(apiURL)
|
|
return &Client{
|
|
HTTPClient: &http.Client{Timeout: 10 * time.Second},
|
|
baseURL: baseURL,
|
|
login: login,
|
|
apiKey: apiKey,
|
|
}
|
|
}
|
|
|
|
func (c Client) AddRecord(domain string, record Record) error {
|
|
endpoint := c.baseURL.JoinPath("dns", dns01.UnFqdn(domain), "addRR")
|
|
|
|
params, err := querystring.Values(record)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return c.do(endpoint, params)
|
|
}
|
|
|
|
func (c Client) RemoveRecord(domain string, record Record) error {
|
|
endpoint := c.baseURL.JoinPath("dns", dns01.UnFqdn(domain), "removeRR")
|
|
|
|
params, err := querystring.Values(record)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return c.do(endpoint, params)
|
|
}
|
|
|
|
func (c Client) do(endpoint *url.URL, params url.Values) error {
|
|
payload := params.Encode()
|
|
|
|
req, err := http.NewRequest(http.MethodPost, endpoint.String(), strings.NewReader(payload))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
|
req.Header.Set(authenticationHeader, c.createSignature(endpoint.Path, payload))
|
|
|
|
resp, err := c.HTTPClient.Do(req)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
defer func() { _ = resp.Body.Close() }()
|
|
|
|
if resp.StatusCode != http.StatusOK {
|
|
data, _ := io.ReadAll(resp.Body)
|
|
|
|
apiErr := &APIError{}
|
|
err := json.Unmarshal(data, apiErr)
|
|
if err != nil {
|
|
return fmt.Errorf("%s: %s", resp.Status, data)
|
|
}
|
|
|
|
return apiErr
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (c Client) createSignature(uri string, body string) string {
|
|
// This is the only part of this that needs to be serialized.
|
|
salt := make([]byte, 16)
|
|
for i := 0; i < 16; i++ {
|
|
salt[i] = saltBytes[rand.Intn(len(saltBytes))]
|
|
}
|
|
|
|
// Header is "login;timestamp;salt;hash".
|
|
// hash is SHA1("login;timestamp;salt;api-key;request-uri;body-hash")
|
|
// and body-hash is SHA1(body).
|
|
|
|
bodyHash := sha1.Sum([]byte(body))
|
|
timestamp := strconv.FormatInt(time.Now().Unix(), 10)
|
|
|
|
hashInput := fmt.Sprintf("%s;%s;%s;%s;%s;%02x", c.login, timestamp, salt, c.apiKey, uri, bodyHash)
|
|
|
|
return fmt.Sprintf("%s;%s;%s;%02x", c.login, timestamp, salt, sha1.Sum([]byte(hashInput)))
|
|
}
|