unifly-api 0.9.0

Async Rust client, reactive data layer, and domain model for UniFi controller APIs
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121

use crate::command::{Command, CommandResult};
use crate::core_error::CoreError;
use crate::model::EntityId;
use serde::Serialize;
use serde_json::json;

use super::{CommandContext, require_session};

fn require_legacy_id(id: &EntityId) -> Result<&str, CoreError> {
    match id {
        EntityId::Legacy(id) => Ok(id),
        EntityId::Uuid(_) => Err(CoreError::ValidationFailed {
            message: "VPN mutations require a legacy string id".into(),
        }),
    }
}

fn serialize_body<T: Serialize>(value: T, label: &str) -> Result<serde_json::Value, CoreError> {
    serde_json::to_value(value).map_err(|error| CoreError::ValidationFailed {
        message: format!("invalid {label} payload: {error}"),
    })
}

pub(super) async fn route(ctx: &CommandContext, cmd: Command) -> Result<CommandResult, CoreError> {
    let session = ctx.session.as_ref();

    match cmd {
        Command::CreateSiteToSiteVpn(req) => {
            let session = require_session(session)?;
            let body = serialize_body(req, "site-to-site VPN")?;
            session.create_network_conf(&body).await?;
            Ok(CommandResult::Ok)
        }
        Command::UpdateSiteToSiteVpn { id, update } => {
            let session = require_session(session)?;
            let body = serialize_body(update, "site-to-site VPN")?;
            session
                .update_network_conf(require_legacy_id(&id)?, &body)
                .await?;
            Ok(CommandResult::Ok)
        }
        Command::CreateRemoteAccessVpnServer(req) => {
            let session = require_session(session)?;
            let body = serialize_body(req, "remote-access VPN server")?;
            session.create_network_conf(&body).await?;
            Ok(CommandResult::Ok)
        }
        Command::UpdateRemoteAccessVpnServer { id, update } => {
            let session = require_session(session)?;
            let body = serialize_body(update, "remote-access VPN server")?;
            session
                .update_network_conf(require_legacy_id(&id)?, &body)
                .await?;
            Ok(CommandResult::Ok)
        }
        Command::CreateVpnClientProfile(req) => {
            let session = require_session(session)?;
            let body = serialize_body(req, "VPN client profile")?;
            session.create_network_conf(&body).await?;
            Ok(CommandResult::Ok)
        }
        Command::UpdateVpnClientProfile { id, update } => {
            let session = require_session(session)?;
            let body = serialize_body(update, "VPN client profile")?;
            session
                .update_network_conf(require_legacy_id(&id)?, &body)
                .await?;
            Ok(CommandResult::Ok)
        }
        Command::CreateWireGuardPeer { server_id, peer } => {
            let session = require_session(session)?;
            let body = serialize_body(vec![peer], "WireGuard peer")?;
            session
                .create_wireguard_peers(require_legacy_id(&server_id)?, &body)
                .await?;
            Ok(CommandResult::Ok)
        }
        Command::UpdateWireGuardPeer {
            server_id,
            peer_id,
            update,
        } => {
            let session = require_session(session)?;
            let mut body = serialize_body(update, "WireGuard peer")?;
            body.as_object_mut()
                .ok_or_else(|| CoreError::ValidationFailed {
                    message: "invalid WireGuard peer payload: expected an object".into(),
                })?
                .insert("_id".into(), json!(require_legacy_id(&peer_id)?));
            session
                .update_wireguard_peers(require_legacy_id(&server_id)?, &json!([body]))
                .await?;
            Ok(CommandResult::Ok)
        }
        Command::DeleteSiteToSiteVpn { id }
        | Command::DeleteRemoteAccessVpnServer { id }
        | Command::DeleteVpnClientProfile { id } => {
            let session = require_session(session)?;
            session.delete_network_conf(require_legacy_id(&id)?).await?;
            Ok(CommandResult::Ok)
        }
        Command::DeleteWireGuardPeer { server_id, peer_id } => {
            let session = require_session(session)?;
            session
                .delete_wireguard_peers(
                    require_legacy_id(&server_id)?,
                    &json!([require_legacy_id(&peer_id)?]),
                )
                .await?;
            Ok(CommandResult::Ok)
        }
        Command::RestartVpnClientConnection { id } => {
            let session = require_session(session)?;
            session
                .restart_vpn_client_connection(require_legacy_id(&id)?)
                .await?;
            Ok(CommandResult::Ok)
        }
        _ => unreachable!("vpn::route received non-VPN command"),
    }
}