jpetree331
f97d4845af
Complete RedFlag codebase with two major security audit implementations.
== A-1: Ed25519 Key Rotation Support ==
Server:
- SignCommand sets SignedAt timestamp and KeyID on every signature
- signing_keys database table (migration 020) for multi-key rotation
- InitializePrimaryKey registers active key at startup
- /api/v1/public-keys endpoint for rotation-aware agents
- SigningKeyQueries for key lifecycle management
Agent:
- Key-ID-aware verification via CheckKeyRotation
- FetchAndCacheAllActiveKeys for rotation pre-caching
- Cache metadata with TTL and staleness fallback
- SecurityLogger events for key rotation and command signing
== A-2: Replay Attack Fixes (F-1 through F-7) ==
F-5 CRITICAL - RetryCommand now signs via signAndCreateCommand
F-1 HIGH - v3 format: "{agent_id}:{cmd_id}:{type}:{hash}:{ts}"
F-7 HIGH - Migration 026: expires_at column with partial index
F-6 HIGH - GetPendingCommands/GetStuckCommands filter by expires_at
F-2 HIGH - Agent-side executedIDs dedup map with cleanup
F-4 HIGH - commandMaxAge reduced from 24h to 4h
F-3 CRITICAL - Old-format commands rejected after 48h via CreatedAt
Verification fixes: migration idempotency (ETHOS #4), log format
compliance (ETHOS #1), stale comments updated.
All 24 tests passing. Docker --no-cache build verified.
See docs/ for full audit reports and deviation log (DEV-001 to DEV-019).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
93 lines
2.7 KiB
Go
93 lines
2.7 KiB
Go
package handlers
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/Fimeg/RedFlag/aggregator-server/internal/database/queries"
|
|
"github.com/Fimeg/RedFlag/aggregator-server/internal/services"
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// AgentSetupHandler handles agent setup operations
|
|
type AgentSetupHandler struct {
|
|
agentQueries *queries.AgentQueries
|
|
}
|
|
|
|
// NewAgentSetupHandler creates a new agent setup handler
|
|
func NewAgentSetupHandler(agentQueries *queries.AgentQueries) *AgentSetupHandler {
|
|
return &AgentSetupHandler{
|
|
agentQueries: agentQueries,
|
|
}
|
|
}
|
|
|
|
// SetupAgent handles the agent setup endpoint
|
|
func (h *AgentSetupHandler) SetupAgent(c *gin.Context) {
|
|
var req services.AgentSetupRequest
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
|
|
return
|
|
}
|
|
|
|
// Create config builder with database access
|
|
configBuilder := services.NewConfigBuilder(req.ServerURL, h.agentQueries.DB)
|
|
|
|
// Build agent configuration
|
|
config, err := configBuilder.BuildAgentConfig(req)
|
|
if err != nil {
|
|
c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
|
|
return
|
|
}
|
|
|
|
// Create response
|
|
response := gin.H{
|
|
"agent_id": config.AgentID,
|
|
"registration_token": config.Secrets["registration_token"],
|
|
"server_public_key": config.Secrets["server_public_key"],
|
|
"configuration": config.PublicConfig,
|
|
"secrets": config.Secrets,
|
|
"template": config.Template,
|
|
"setup_time": config.BuildTime,
|
|
"secrets_created": config.SecretsCreated,
|
|
"secrets_path": config.SecretsPath,
|
|
}
|
|
|
|
c.JSON(http.StatusOK, response)
|
|
}
|
|
|
|
// GetTemplates returns available agent templates
|
|
func (h *AgentSetupHandler) GetTemplates(c *gin.Context) {
|
|
configBuilder := services.NewConfigBuilder("", h.agentQueries.DB)
|
|
templates := configBuilder.GetTemplates()
|
|
c.JSON(http.StatusOK, gin.H{"templates": templates})
|
|
}
|
|
|
|
// ValidateConfiguration validates a configuration before deployment
|
|
func (h *AgentSetupHandler) ValidateConfiguration(c *gin.Context) {
|
|
var config map[string]interface{}
|
|
if err := c.ShouldBindJSON(&config); err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
|
|
return
|
|
}
|
|
|
|
agentType, exists := config["agent_type"].(string)
|
|
if !exists {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "agent_type is required"})
|
|
return
|
|
}
|
|
|
|
configBuilder := services.NewConfigBuilder("", h.agentQueries.DB)
|
|
template, exists := configBuilder.GetTemplate(agentType)
|
|
if !exists {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "Unknown agent type"})
|
|
return
|
|
}
|
|
|
|
// Simple validation response
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"valid": true,
|
|
"message": "Configuration appears valid",
|
|
"agent_type": agentType,
|
|
"template": template.Name,
|
|
})
|
|
}
|