Codex Local
bf1233d5df
ci / verify (push) Canceled after 0s
Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.
89 lines
2.4 KiB
Go
89 lines
2.4 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"data-terminal-cloud/internal/onboarding"
|
|
"encoding/json"
|
|
"errors"
|
|
"fmt"
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
"github.com/redis/go-redis/v9"
|
|
"io"
|
|
"os"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
func main() {
|
|
if err := run(); err != nil {
|
|
fmt.Fprintln(os.Stderr, err)
|
|
os.Exit(1)
|
|
}
|
|
}
|
|
func secret(name string) (string, error) {
|
|
if file := os.Getenv(name + "_FILE"); file != "" {
|
|
b, e := os.ReadFile(file)
|
|
if e != nil {
|
|
return "", fmt.Errorf("read %s_FILE: %w", name, e)
|
|
}
|
|
return strings.TrimSpace(string(b)), nil
|
|
}
|
|
if v := os.Getenv(name); v != "" {
|
|
return v, nil
|
|
}
|
|
return "", fmt.Errorf("missing %s", name)
|
|
}
|
|
func run() error {
|
|
if len(os.Args) != 1 {
|
|
return errors.New("customer-phone-account reads provisioning JSON from standard input")
|
|
}
|
|
var in struct {
|
|
AccountKind string `json:"account_kind"`
|
|
UserID string `json:"user_id"`
|
|
Issuer string `json:"issuer"`
|
|
Subject string `json:"subject"`
|
|
Phone string `json:"phone_e164"`
|
|
Password string `json:"password"`
|
|
RequestID string `json:"request_id"`
|
|
}
|
|
raw, err := io.ReadAll(io.LimitReader(os.Stdin, 8193))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err = onboarding.StrictJSON(raw, &in); err != nil {
|
|
return err
|
|
}
|
|
db, err := secret("DATABASE_URL")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
master, err := secret("ONBOARDING_MASTER_KEY")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
|
|
defer cancel()
|
|
pool, err := pgxpool.New(ctx, db)
|
|
if err != nil {
|
|
return errors.New("database configuration invalid")
|
|
}
|
|
defer pool.Close()
|
|
r := redis.NewClient(&redis.Options{Addr: os.Getenv("REDIS_ADDR")})
|
|
defer r.Close()
|
|
s, err := onboarding.NewService(pool, r, onboarding.Options{MasterKey: master, EntryURL: os.Getenv("ONBOARDING_ENTRY_URL")})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
provision := s.ProvisionCustomerPhone
|
|
if in.AccountKind == "operator" {
|
|
provision = s.ProvisionOperatorPhone
|
|
} else if in.AccountKind != "" && in.AccountKind != "customer" {
|
|
return errors.New("invalid account_kind")
|
|
}
|
|
created, err := provision(ctx, in.UserID, in.Issuer, in.Subject, in.Phone, in.Password, in.RequestID)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return json.NewEncoder(os.Stdout).Encode(map[string]any{"configured": true, "created": created, "user_id": in.UserID, "phone_masked": in.Phone[:len(in.Phone)-8] + "****" + in.Phone[len(in.Phone)-4:], "sms_verified": false})
|
|
}
|