92 lines
2.5 KiB
Go
92 lines
2.5 KiB
Go
package sftp
|
|
|
|
import (
|
|
"github.com/pkg/errors"
|
|
"github.com/pterodactyl/sftp-server"
|
|
"github.com/pterodactyl/wings/api"
|
|
"github.com/pterodactyl/wings/config"
|
|
"github.com/pterodactyl/wings/server"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
func Initialize(config *config.Configuration) error {
|
|
c := &sftp_server.Server{
|
|
User: sftp_server.SftpUser{
|
|
Uid: config.System.User.Uid,
|
|
Gid: config.System.User.Gid,
|
|
},
|
|
Settings: sftp_server.Settings{
|
|
BasePath: config.System.Data,
|
|
ReadOnly: config.System.Sftp.ReadOnly,
|
|
BindAddress: config.System.Sftp.Address,
|
|
BindPort: config.System.Sftp.Port,
|
|
},
|
|
CredentialValidator: validateCredentials,
|
|
PathValidator: validatePath,
|
|
DiskSpaceValidator: validateDiskSpace,
|
|
}
|
|
|
|
if err := sftp_server.New(c); err != nil {
|
|
return err
|
|
}
|
|
|
|
c.ConfigureLogger(func() *zap.SugaredLogger {
|
|
return zap.S().Named("sftp")
|
|
})
|
|
|
|
// Initialize the SFTP server in a background thread since this is
|
|
// a long running operation.
|
|
go func(instance *sftp_server.Server) {
|
|
if err := c.Initalize(); err != nil {
|
|
zap.S().Named("sftp").Errorw("failed to initialize SFTP subsystem", zap.Error(errors.WithStack(err)))
|
|
}
|
|
}(c)
|
|
|
|
return nil
|
|
}
|
|
|
|
func validatePath(fs sftp_server.FileSystem, p string) (string, error) {
|
|
s := server.GetServers().Find(func(server *server.Server) bool {
|
|
return server.Uuid == fs.UUID
|
|
})
|
|
|
|
if s == nil {
|
|
return "", errors.New("no server found with that UUID")
|
|
}
|
|
|
|
return s.Filesystem.SafePath(p)
|
|
}
|
|
|
|
func validateDiskSpace(fs sftp_server.FileSystem) bool {
|
|
s := server.GetServers().Find(func(server *server.Server) bool {
|
|
return server.Uuid == fs.UUID
|
|
})
|
|
|
|
if s == nil {
|
|
return false
|
|
}
|
|
|
|
return s.Filesystem.HasSpaceAvailable()
|
|
}
|
|
|
|
// Validates a set of credentials for a SFTP login aganist Pterodactyl Panel and returns
|
|
// the server's UUID if the credentials were valid.
|
|
func validateCredentials(c sftp_server.AuthenticationRequest) (*sftp_server.AuthenticationResponse, error) {
|
|
resp, err := api.NewRequester().ValidateSftpCredentials(c)
|
|
zap.S().Named("sftp").Debugw("validating credentials for SFTP connection", zap.String("username", c.User))
|
|
if err != nil {
|
|
return resp, err
|
|
}
|
|
|
|
s := server.GetServers().Find(func(server *server.Server) bool {
|
|
return server.Uuid == resp.Server
|
|
})
|
|
|
|
if s == nil {
|
|
return resp, errors.New("no matching server with UUID found")
|
|
}
|
|
|
|
zap.S().Named("sftp").Debugw("matched user to server instance, credentials successfully validated", zap.String("username", c.User), zap.String("server", s.Uuid))
|
|
return resp, err
|
|
}
|