control

type AcceptAuth struct{}

type AuthURL struct {
	// contains filtered or unexported fields
}

type Client struct {
	ControlKey key.ControlPublic

	SessionID *string

	IPv4 netip.Prefix
	IPv6 netip.Prefix

	Expiry time.Time
	// contains filtered or unexported fields
}

type ClientID key.NodePublic

type Conn struct {
	// contains filtered or unexported fields
}

type EdgeGraph struct {
	// contains filtered or unexported fields
}

type PairOperation struct {
	// Session IDs
	A, B string

	AN, BN key.NodePublic

	// If nil, then its Bye
	*VisibilityPair
}

type PeerDelta struct {
	// contains filtered or unexported fields
}

type RejectAuth struct {
	*msgcontrol.LogonReject
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerCallbacks interface {
	// OnSessionCreate is called when a new session is created.
	// Indicates a pending authentication state, which will hang unless resolved;
	// Call ServerLogic.AcceptAuthentication or ServerLogic.RejectAuthentication to end this state.
	OnSessionCreate(SessID, ClientID)
	// OnSessionResume is called when a session is resumed.
	OnSessionResume(SessID, ClientID)

	// OnDeviceKey is called when a device key has been received.
	// Will only happen when session is pending authentication.
	OnDeviceKey(id SessID, key string)

	// OnSessionFinalize is called right after ServerLogic.AcceptAuthentication, but before that message is sent to the client.
	// The client needs to known which virtual IPs it can use, and the expiry time of the authentication,
	// and this function will provide it to the control server.
	OnSessionFinalize(SessID, ClientID) (netip.Prefix, netip.Prefix, time.Time)

	// OnSessionDestroy is called after the client has been disconnected.
	OnSessionDestroy(SessID, ClientID)
}

type ServerLogic interface {
	// RegisterCallbacks with custom business logic
	RegisterCallbacks(ServerCallbacks)

	// GetClientID will get the client ID corresponding to a particular session ID.
	// Will error if session does not exist.
	GetClientID(SessID) (ClientID, error)

	// GetConnectedClients returns all connected session and their client IDs.
	GetConnectedClients() (map[SessID]ClientID, error)

	// SendAuthURL will send the authentication URL to the indicated session ID.
	// Must only be called once, will error on a second time.
	// Will error if the session is not pending authentication.
	SendAuthURL(id SessID, url string) error
	// AcceptAuthentication will accept the pending authentication of the indicated session ID.
	// Must be called, or RejectAuthentication must be called.
	// Second time argument dictates for how long the
	// Will error if the session is not pending authentication.
	AcceptAuthentication(SessID) error
	// RejectAuthentication will reject the pending authentication of the indicated session ID.
	// Must be called, or AcceptAuthentication must be called.
	// Will error if the session is not pending authentication.
	RejectAuthentication(id SessID, reason string) error

	// DisconnectSession will disconnect a running client session (and invalidate its ID), if it exists.
	// Will error if session does not exist.
	DisconnectSession(id SessID) error
	// DisconnectClient will disconnect a running session per client (and invalidate its ID), if its connected.
	// Will error if client is not connected.
	DisconnectClient(id ClientID) error

	// GetVisibilityPairs gets all pairs of a particular ClientID.
	// Will error if client ID does not have any pairs, or if client ID is unknown.
	GetVisibilityPairs(ClientID) (map[ClientID]VisibilityPair, error)
	// UpsertVisibilityPair will insert or update a VisibilityPair for a pair of clients.
	UpsertVisibilityPair(ClientID, ClientID, VisibilityPair) error
	// UpsertMultiVisibilityPair will insert or update multiple VisibilityPair's for pairs of clients.
	UpsertMultiVisibilityPair(ClientID, map[ClientID]VisibilityPair) error
	// RemoveVisibilityPair will delete a VisibilityPair between clients.
	// Idempotent, will not error if no pair exists.
	RemoveVisibilityPair(ClientID, ClientID) error
}

type ServerSession struct {
	ID   string
	Peer key.NodePublic
	Sess key.SessionPublic

	IPv4 netip.Prefix
	IPv6 netip.Prefix

	HomeRelay int64

	CurrentEndpoints []netip.AddrPort

	Ctx context.Context
	Ccc context.CancelCauseFunc

	Expiry time.Time
	// contains filtered or unexported fields
}

type ServerSessionState byte

type SessID string

type VisibilityPair struct {
	// One of the two ClientID's, or nil
	// Will quarantine all incoming connections FROM the referenced ClientID
	Quarantine *ClientID

	MDNS bool
}