mirror of
https://github.com/GNS3/gns3-server.git
synced 2026-09-10 03:55:38 +03:00
3d6d9a3396
Token revocation is a strict version check (token_data.token_version != user.token_version). create_access_token defaults token_version to 0, so the short-lived JWTs minted for the console WebSocket URL (nodes) and the download URLs (symbols, links) carried ver=0. Any user who had logged out at least once (token_version >= 1, e.g. the default admin) got tokens rejected as "revoked" on first use. e433991cf fixed this in _resolve_token's API-key branch but missed these three independent minting sites. Now resolve token_version during _resolve_token (the JWT branch decodes it, the API-key branch reads user.token_version), carry it through gns3_ctx, and pass it at every minting call.
102 lines
4.2 KiB
Python
102 lines
4.2 KiB
Python
#
|
|
# Copyright (C) 2026 GNS3 Technologies Inc.
|
|
# Author: Yue Guobin
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
"""
|
|
MCP tool handlers for GNS3 symbol management.
|
|
"""
|
|
|
|
from typing import Any
|
|
|
|
import logging
|
|
|
|
from gns3server.services import auth_service
|
|
|
|
log = logging.getLogger(__name__)
|
|
|
|
|
|
# ── Helper ─────────────────────────────────────────────────────────────────
|
|
|
|
def _get_connector(gns3_ctx: dict[str, Any]):
|
|
from gns3server.agent.gns3_copilot.gns3_client.custom_gns3fy import Gns3Connector
|
|
return Gns3Connector(
|
|
url=gns3_ctx["server_url"],
|
|
jwt_token=gns3_ctx["jwt_token"],
|
|
api_version=3,
|
|
verify=False,
|
|
)
|
|
|
|
|
|
# ── Tool handlers ──────────────────────────────────────────────────────────
|
|
|
|
def get_symbols_handler(params: dict[str, Any], gns3_ctx: dict[str, Any]) -> dict[str, Any]:
|
|
conn = _get_connector(gns3_ctx)
|
|
symbols = conn.http_call("get", f"{conn.base_url}/symbols").json()
|
|
return {"symbols": symbols, "count": len(symbols)}
|
|
|
|
|
|
def get_symbol_handler(params: dict[str, Any], gns3_ctx: dict[str, Any]) -> dict[str, Any]:
|
|
symbol_id = params.get("symbol_id")
|
|
if not symbol_id:
|
|
return {"error": "symbol_id is required"}
|
|
download_url = f"{gns3_ctx['server_url']}/v3/symbols/{symbol_id}/raw"
|
|
username = gns3_ctx.get("jwt_username")
|
|
download_token = auth_service.create_access_token(username, token_version=gns3_ctx.get("jwt_token_version", 0), expires_in=10) if username else None
|
|
result = {
|
|
"symbol_id": symbol_id,
|
|
"download_url": download_url,
|
|
"note": "Symbol files are SVG images.",
|
|
}
|
|
if download_token:
|
|
safe_name = symbol_id.replace(':', '').replace('/', '_')
|
|
result["curl_command"] = f"curl -L -o '{safe_name}.svg' -H 'Authorization: Bearer {download_token}' '{download_url}'"
|
|
result["note"] += " Download link includes a 10-minute token."
|
|
return result
|
|
|
|
|
|
def get_symbol_dimensions_handler(params: dict[str, Any], gns3_ctx: dict[str, Any]) -> dict[str, Any]:
|
|
symbol_id = params.get("symbol_id")
|
|
if not symbol_id:
|
|
return {"error": "symbol_id is required"}
|
|
conn = _get_connector(gns3_ctx)
|
|
return conn.http_call("get", f"{conn.base_url}/symbols/{symbol_id}/dimensions").json()
|
|
|
|
|
|
def get_default_symbols_handler(params: dict[str, Any], gns3_ctx: dict[str, Any]) -> dict[str, Any]:
|
|
conn = _get_connector(gns3_ctx)
|
|
symbols = conn.http_call("get", f"{conn.base_url}/symbols/default_symbols").json()
|
|
return {"default_symbols": symbols}
|
|
|
|
|
|
def upload_symbol_handler(params: dict[str, Any], gns3_ctx: dict[str, Any]) -> dict[str, Any]:
|
|
symbol_id = params.get("symbol_id")
|
|
content = params.get("content")
|
|
if not symbol_id or content is None:
|
|
return {"error": "symbol_id and content (SVG data) are required"}
|
|
conn = _get_connector(gns3_ctx)
|
|
url = f"{conn.base_url}/symbols/{symbol_id}/raw"
|
|
conn.http_call("post", url, data=content, headers={"Content-Type": "image/svg+xml"})
|
|
return {"message": f"Symbol {symbol_id} uploaded", "symbol_id": symbol_id}
|
|
|
|
|
|
def delete_symbol_handler(params: dict[str, Any], gns3_ctx: dict[str, Any]) -> dict[str, Any]:
|
|
symbol_id = params.get("symbol_id")
|
|
if not symbol_id:
|
|
return {"error": "symbol_id is required"}
|
|
conn = _get_connector(gns3_ctx)
|
|
conn.http_call("delete", f"{conn.base_url}/symbols/{symbol_id}")
|
|
return {"message": f"Symbol {symbol_id} deleted", "symbol_id": symbol_id}
|