EdgeAdmin/internal/web/actions/default/servers/iplists/createIPPopup.go

package iplists

import (
	"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
	"github.com/TeaOSLab/EdgeCommon/pkg/configutils"
	"github.com/TeaOSLab/EdgeCommon/pkg/iputils"
	"github.com/TeaOSLab/EdgeCommon/pkg/langs/codes"
	"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
	"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs/firewallconfigs"
	"github.com/iwind/TeaGo/actions"
	"github.com/iwind/TeaGo/maps"
	"github.com/iwind/TeaGo/types"
	"net"
	"strings"
)

type CreateIPPopupAction struct {
	actionutils.ParentAction
}

func (this *CreateIPPopupAction) Init() {
	this.Nav("", "", "")
}

func (this *CreateIPPopupAction) RunGet(params struct {
	ListId int64
}) {
	this.Data["listId"] = params.ListId

	listResp, err := this.RPC().IPListRPC().FindEnabledIPList(this.AdminContext(), &pb.FindEnabledIPListRequest{
		IpListId: params.ListId,
	})
	if err != nil {
		this.ErrorPage(err)
		return
	}
	var ipList = listResp.IpList
	if ipList == nil {
		this.NotFound("ipList", params.ListId)
		return
	}
	this.Data["list"] = maps.Map{
		"type": ipList.Type,
	}

	this.Show()
}

func (this *CreateIPPopupAction) RunPost(params struct {
	ListId int64
	Method string

	IpFrom string
	IpTo   string

	IpData string

	ExpiredAt  int64
	Reason     string
	Type       string
	EventLevel string

	Must *actions.Must
	CSRF *actionutils.CSRF
}) {
	// 校验IPList
	if params.ListId != firewallconfigs.GlobalListId {
		existsResp, err := this.RPC().IPListRPC().ExistsEnabledIPList(this.AdminContext(), &pb.ExistsEnabledIPListRequest{IpListId: params.ListId})
		if err != nil {
			this.ErrorPage(err)
			return
		}
		if !existsResp.Exists {
			this.Fail("IP名单不存在")
		}
	}

	type ipData struct {
		ipFrom string
		ipTo   string
	}

	var batchIPs = []*ipData{}
	switch params.Type {
	case "ipv4":
		if params.Method == "single" {
			// 校验IP格式（ipFrom/ipTo）
			params.Must.
				Field("ipFrom", params.IpFrom).
				Require("请输入开始IP")

			if !iputils.IsIPv4(params.IpFrom) {
				this.FailField("ipFrom", "请输入正确的开始IP")
			}

			if len(params.IpTo) > 0 && !iputils.IsIPv4(params.IpTo) {
				this.FailField("ipTo", "请输入正确的结束IP")
			}

			if len(params.IpTo) != 0 && iputils.CompareIP(params.IpFrom, params.IpTo) > 0 {
				params.IpTo, params.IpFrom = params.IpFrom, params.IpTo
			}
		} else if params.Method == "batch" {
			if len(params.IpData) == 0 {
				this.FailField("ipData", "请输入IP")
			}
			var lines = strings.Split(params.IpData, "\n")
			for index, line := range lines {
				line = strings.TrimSpace(line)
				if strings.Contains(line, "/") { // CIDR
					if strings.Contains(line, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					ipFrom, ipTo, err := configutils.ParseCIDR(line)
					if err != nil {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
						ipTo:   ipTo,
					})
				} else if strings.Contains(line, "-") { // IP Range
					var pieces = strings.Split(line, "-")
					var ipFrom = strings.TrimSpace(pieces[0])
					var ipTo = strings.TrimSpace(pieces[1])

					if net.ParseIP(ipFrom) == nil || net.ParseIP(ipTo) == nil || strings.Contains(ipFrom, ":") || strings.Contains(ipTo, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					if len(ipTo) > 0 && iputils.CompareIP(ipFrom, ipTo) > 0 {
						ipFrom, ipTo = ipTo, ipFrom
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
						ipTo:   ipTo,
					})
				} else if strings.Contains(line, ",") { // IP Range
					var pieces = strings.Split(line, ",")
					var ipFrom = strings.TrimSpace(pieces[0])
					var ipTo = strings.TrimSpace(pieces[1])

					if net.ParseIP(ipFrom) == nil || net.ParseIP(ipTo) == nil || strings.Contains(ipFrom, ":") || strings.Contains(ipTo, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					if len(ipTo) > 0 && iputils.CompareIP(ipFrom, ipTo) > 0 {
						ipFrom, ipTo = ipTo, ipFrom
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
						ipTo:   ipTo,
					})
				} else if len(line) > 0 {
					var ipFrom = line
					if net.ParseIP(ipFrom) == nil || strings.Contains(ipFrom, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
					})
				}
			}
		}
	case "ipv6":
		if params.Method == "single" {
			params.Must.
				Field("ipFrom", params.IpFrom).
				Require("请输入正确的开始IP")

			if !iputils.IsIPv6(params.IpFrom) {
				this.FailField("ipFrom", "请输入正确的IPv6地址")
			}

			if len(params.IpTo) > 0 && !iputils.IsIPv6(params.IpTo) {
				this.FailField("ipTo", "请输入正确的IPv6地址")
			}

			if len(params.IpTo) > 0 && iputils.CompareIP(params.IpFrom, params.IpTo) > 0 {
				params.IpTo, params.IpFrom = params.IpFrom, params.IpTo
			}
		} else if params.Method == "batch" {
			if len(params.IpData) == 0 {
				this.FailField("ipData", "请输入IP")
			}
			var lines = strings.Split(params.IpData, "\n")
			for index, line := range lines {
				line = strings.TrimSpace(line)
				if strings.Contains(line, "/") { // CIDR
					if !strings.Contains(line, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					ipFrom, ipTo, err := configutils.ParseCIDR(line)
					if err != nil {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
						ipTo:   ipTo,
					})
				} else if strings.Contains(line, "-") { // IP Range
					var pieces = strings.Split(line, "-")
					var ipFrom = strings.TrimSpace(pieces[0])
					var ipTo = strings.TrimSpace(pieces[1])

					if net.ParseIP(ipFrom) == nil || net.ParseIP(ipTo) == nil || !strings.Contains(ipFrom, ":") || !strings.Contains(ipTo, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					if len(ipTo) > 0 && iputils.CompareIP(ipFrom, ipTo) > 0 {
						ipFrom, ipTo = ipTo, ipFrom
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
						ipTo:   ipTo,
					})
				} else if strings.Contains(line, ",") { // IP Range
					var pieces = strings.Split(line, ",")
					var ipFrom = strings.TrimSpace(pieces[0])
					var ipTo = strings.TrimSpace(pieces[1])

					if net.ParseIP(ipFrom) == nil || net.ParseIP(ipTo) == nil || !strings.Contains(ipFrom, ":") || !strings.Contains(ipTo, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					if len(ipTo) > 0 && iputils.CompareIP(ipFrom, ipTo) > 0 {
						ipFrom, ipTo = ipTo, ipFrom
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
						ipTo:   ipTo,
					})
				} else if len(line) > 0 {
					var ipFrom = line
					if net.ParseIP(ipFrom) == nil || !strings.Contains(ipFrom, ":") {
						this.FailField("ipData", "第"+types.String(index+1)+"行IP格式错误："+line)
					}
					batchIPs = append(batchIPs, &ipData{
						ipFrom: ipFrom,
					})
				}
			}
		}
	case "all":
		params.IpFrom = "0.0.0.0"
	}

	if len(batchIPs) > 0 {
		for _, ip := range batchIPs {
			_, err := this.RPC().IPItemRPC().CreateIPItem(this.AdminContext(), &pb.CreateIPItemRequest{
				IpListId:   params.ListId,
				IpFrom:     ip.ipFrom,
				IpTo:       ip.ipTo,
				ExpiredAt:  params.ExpiredAt,
				Reason:     params.Reason,
				Type:       params.Type,
				EventLevel: params.EventLevel,
			})
			if err != nil {
				this.ErrorPage(err)
				return
			}
		}

		// 日志
		defer this.CreateLogInfo(codes.IPList_LogCreateIPItemsBatch, params.ListId)
	} else {
		createResp, err := this.RPC().IPItemRPC().CreateIPItem(this.AdminContext(), &pb.CreateIPItemRequest{
			IpListId:   params.ListId,
			IpFrom:     params.IpFrom,
			IpTo:       params.IpTo,
			ExpiredAt:  params.ExpiredAt,
			Reason:     params.Reason,
			Type:       params.Type,
			EventLevel: params.EventLevel,
		})
		if err != nil {
			this.ErrorPage(err)
			return
		}
		itemId := createResp.IpItemId

		// 日志
		defer this.CreateLogInfo(codes.IPItem_LogCreateIPItem, params.ListId, itemId)
	}

	this.Success()
}