mirror of
https://github.com/go-acme/lego.git
synced 2024-12-26 03:09:37 +02:00
201 lines
4.4 KiB
Go
201 lines
4.4 KiB
Go
package gandiv5
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
|
|
"github.com/go-acme/lego/v4/log"
|
|
)
|
|
|
|
const apiKeyHeader = "X-Api-Key"
|
|
|
|
// types for JSON responses with only a message.
|
|
type apiResponse struct {
|
|
Message string `json:"message"`
|
|
UUID string `json:"uuid,omitempty"`
|
|
}
|
|
|
|
// Record TXT record representation.
|
|
type Record struct {
|
|
RRSetTTL int `json:"rrset_ttl"`
|
|
RRSetValues []string `json:"rrset_values"`
|
|
RRSetName string `json:"rrset_name,omitempty"`
|
|
RRSetType string `json:"rrset_type,omitempty"`
|
|
}
|
|
|
|
func (d *DNSProvider) addTXTRecord(domain, name, value string, ttl int) error {
|
|
// Get exiting values for the TXT records
|
|
// Needed to create challenges for both wildcard and base name domains
|
|
txtRecord, err := d.getTXTRecord(domain, name)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
values := []string{value}
|
|
if len(txtRecord.RRSetValues) > 0 {
|
|
values = append(values, txtRecord.RRSetValues...)
|
|
}
|
|
|
|
target := fmt.Sprintf("domains/%s/records/%s/TXT", domain, name)
|
|
|
|
newRecord := &Record{RRSetTTL: ttl, RRSetValues: values}
|
|
req, err := d.newRequest(http.MethodPut, target, newRecord)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
message := apiResponse{}
|
|
err = d.do(req, &message)
|
|
if err != nil {
|
|
return fmt.Errorf("unable to create TXT record for domain %s and name %s: %w", domain, name, err)
|
|
}
|
|
|
|
if len(message.Message) > 0 {
|
|
log.Infof("API response: %s", message.Message)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (d *DNSProvider) getTXTRecord(domain, name string) (*Record, error) {
|
|
target := fmt.Sprintf("domains/%s/records/%s/TXT", domain, name)
|
|
|
|
// Get exiting values for the TXT records
|
|
// Needed to create challenges for both wildcard and base name domains
|
|
req, err := d.newRequest(http.MethodGet, target, nil)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
txtRecord := &Record{}
|
|
err = d.do(req, txtRecord)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("unable to get TXT records for domain %s and name %s: %w", domain, name, err)
|
|
}
|
|
|
|
return txtRecord, nil
|
|
}
|
|
|
|
func (d *DNSProvider) deleteTXTRecord(domain, name string) error {
|
|
target := fmt.Sprintf("domains/%s/records/%s/TXT", domain, name)
|
|
|
|
req, err := d.newRequest(http.MethodDelete, target, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
message := apiResponse{}
|
|
err = d.do(req, &message)
|
|
if err != nil {
|
|
return fmt.Errorf("unable to delete TXT record for domain %s and name %s: %w", domain, name, err)
|
|
}
|
|
|
|
if len(message.Message) > 0 {
|
|
log.Infof("API response: %s", message.Message)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (d *DNSProvider) newRequest(method, resource string, body interface{}) (*http.Request, error) {
|
|
u := fmt.Sprintf("%s/%s", d.config.BaseURL, resource)
|
|
|
|
if body == nil {
|
|
req, err := http.NewRequest(method, u, nil)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return req, nil
|
|
}
|
|
|
|
reqBody, err := json.Marshal(body)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
req, err := http.NewRequest(method, u, bytes.NewBuffer(reqBody))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
req.Header.Set("Content-Type", "application/json")
|
|
|
|
return req, nil
|
|
}
|
|
|
|
func (d *DNSProvider) do(req *http.Request, v interface{}) error {
|
|
if len(d.config.APIKey) > 0 {
|
|
req.Header.Set(apiKeyHeader, d.config.APIKey)
|
|
}
|
|
|
|
resp, err := d.config.HTTPClient.Do(req)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = checkResponse(resp)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if v == nil {
|
|
return nil
|
|
}
|
|
|
|
raw, err := readBody(resp)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to read body: %w", err)
|
|
}
|
|
|
|
if len(raw) > 0 {
|
|
err = json.Unmarshal(raw, v)
|
|
if err != nil {
|
|
return fmt.Errorf("unmarshaling error: %w: %s", err, string(raw))
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func checkResponse(resp *http.Response) error {
|
|
if resp.StatusCode == 404 && resp.Request.Method == http.MethodGet {
|
|
return nil
|
|
}
|
|
|
|
if resp.StatusCode >= 400 {
|
|
data, err := readBody(resp)
|
|
if err != nil {
|
|
return fmt.Errorf("%d [%s] request failed: %w", resp.StatusCode, http.StatusText(resp.StatusCode), err)
|
|
}
|
|
|
|
message := &apiResponse{}
|
|
err = json.Unmarshal(data, message)
|
|
if err != nil {
|
|
return fmt.Errorf("%d [%s] request failed: %w: %s", resp.StatusCode, http.StatusText(resp.StatusCode), err, data)
|
|
}
|
|
return fmt.Errorf("%d [%s] request failed: %s", resp.StatusCode, http.StatusText(resp.StatusCode), message.Message)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func readBody(resp *http.Response) ([]byte, error) {
|
|
if resp.Body == nil {
|
|
return nil, errors.New("response body is nil")
|
|
}
|
|
|
|
defer resp.Body.Close()
|
|
|
|
rawBody, err := io.ReadAll(resp.Body)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return rawBody, nil
|
|
}
|