|
| 1 | +// GatewayPairing.swift |
| 2 | +// VocaMac |
| 3 | +// |
| 4 | +// Pure pairing helpers for VocaGateway: payload decode and loopback rejection. |
| 5 | +// Foundation-only so unit tests cover the contract without process APIs. |
| 6 | + |
| 7 | +import Foundation |
| 8 | + |
| 9 | +/// Decoded phone-pairing document `{v,url,token}` from Gateway admin `payload`. |
| 10 | +struct GatewayPairingPayload: Codable, Equatable { |
| 11 | + let v: Int |
| 12 | + let url: String |
| 13 | + let token: String |
| 14 | + |
| 15 | + enum CodingKeys: String, CodingKey { |
| 16 | + case v |
| 17 | + case url |
| 18 | + case token |
| 19 | + } |
| 20 | + |
| 21 | + var gatewayURL: URL? { URL(string: url) } |
| 22 | + |
| 23 | + /// Compact JSON string suitable for QR encoding (phones expect this shape). |
| 24 | + var qrPayloadString: String { |
| 25 | + let dict: [String: Any] = ["v": v, "url": url, "token": token] |
| 26 | + guard let data = try? JSONSerialization.data(withJSONObject: dict, options: [.sortedKeys]), |
| 27 | + let text = String(data: data, encoding: .utf8) else { |
| 28 | + return #"{"token":"\#(token)","url":"\#(url)","v":\#(v)}"# |
| 29 | + } |
| 30 | + return text |
| 31 | + } |
| 32 | +} |
| 33 | + |
| 34 | +enum GatewayPairingDecodeError: Error, Equatable, LocalizedError { |
| 35 | + case empty |
| 36 | + case invalidJSON |
| 37 | + case missingPayload |
| 38 | + case unsupportedVersion(Int?) |
| 39 | + case missingURL |
| 40 | + case missingToken |
| 41 | + case invalidURL(String) |
| 42 | + case loopbackURL(String) |
| 43 | + |
| 44 | + var errorDescription: String? { |
| 45 | + switch self { |
| 46 | + case .empty: |
| 47 | + return "Pairing payload is empty." |
| 48 | + case .invalidJSON: |
| 49 | + return "Pairing payload is not valid JSON." |
| 50 | + case .missingPayload: |
| 51 | + return "Admin pairing response is missing payload." |
| 52 | + case .unsupportedVersion(let version): |
| 53 | + return "Unsupported pairing version: \(version.map(String.init) ?? "missing")." |
| 54 | + case .missingURL: |
| 55 | + return "Pairing payload is missing a gateway URL." |
| 56 | + case .missingToken: |
| 57 | + return "Pairing payload is missing a bearer token." |
| 58 | + case .invalidURL(let raw): |
| 59 | + return "Pairing payload has an invalid gateway URL: \(raw)." |
| 60 | + case .loopbackURL(let raw): |
| 61 | + return "Pairing URL must not be localhost or 127.0.0.1 (got \(raw)). Set a LAN or Tailscale address." |
| 62 | + } |
| 63 | + } |
| 64 | +} |
| 65 | + |
| 66 | +/// Decodes `/v1/admin/pairing` admin JSON whose `payload` may be an object or a JSON string. |
| 67 | +enum GatewayPairingDecoder { |
| 68 | + static let supportedVersion = 1 |
| 69 | + |
| 70 | + /// Decode from an admin JSON object that exposes `payload` (object or string). |
| 71 | + static func decodeAdminJSON( |
| 72 | + _ json: [String: Any], |
| 73 | + rejectLoopback: Bool = true |
| 74 | + ) -> Result<GatewayPairingPayload, GatewayPairingDecodeError> { |
| 75 | + guard let rawPayload = json["payload"] else { |
| 76 | + return .failure(.missingPayload) |
| 77 | + } |
| 78 | + |
| 79 | + let object: [String: Any] |
| 80 | + if let asObject = rawPayload as? [String: Any] { |
| 81 | + object = asObject |
| 82 | + } else if let asString = rawPayload as? String { |
| 83 | + let trimmed = asString.trimmingCharacters(in: .whitespacesAndNewlines) |
| 84 | + guard !trimmed.isEmpty else { return .failure(.empty) } |
| 85 | + guard let data = trimmed.data(using: .utf8), |
| 86 | + let parsed = try? JSONSerialization.jsonObject(with: data) as? [String: Any] else { |
| 87 | + return .failure(.invalidJSON) |
| 88 | + } |
| 89 | + object = parsed |
| 90 | + } else if let data = try? JSONSerialization.data(withJSONObject: rawPayload), |
| 91 | + let parsed = try? JSONSerialization.jsonObject(with: data) as? [String: Any] { |
| 92 | + object = parsed |
| 93 | + } else { |
| 94 | + return .failure(.invalidJSON) |
| 95 | + } |
| 96 | + |
| 97 | + return decodePayloadObject(object, rejectLoopback: rejectLoopback) |
| 98 | + } |
| 99 | + |
| 100 | + /// Decode a raw payload JSON string `{v,url,token}`. |
| 101 | + static func decodePayloadString( |
| 102 | + _ raw: String, |
| 103 | + rejectLoopback: Bool = true |
| 104 | + ) -> Result<GatewayPairingPayload, GatewayPairingDecodeError> { |
| 105 | + let trimmed = raw.trimmingCharacters(in: .whitespacesAndNewlines) |
| 106 | + guard !trimmed.isEmpty else { return .failure(.empty) } |
| 107 | + guard let data = trimmed.data(using: .utf8), |
| 108 | + let object = try? JSONSerialization.jsonObject(with: data) as? [String: Any] else { |
| 109 | + return .failure(.invalidJSON) |
| 110 | + } |
| 111 | + return decodePayloadObject(object, rejectLoopback: rejectLoopback) |
| 112 | + } |
| 113 | + |
| 114 | + static func decodePayloadObject( |
| 115 | + _ object: [String: Any], |
| 116 | + rejectLoopback: Bool = true |
| 117 | + ) -> Result<GatewayPairingPayload, GatewayPairingDecodeError> { |
| 118 | + let versionValue = object["v"] ?? object["version"] |
| 119 | + let version: Int? |
| 120 | + if let intValue = versionValue as? Int { |
| 121 | + version = intValue |
| 122 | + } else if let number = versionValue as? NSNumber { |
| 123 | + version = number.intValue |
| 124 | + } else { |
| 125 | + version = nil |
| 126 | + } |
| 127 | + guard version == supportedVersion else { |
| 128 | + return .failure(.unsupportedVersion(version)) |
| 129 | + } |
| 130 | + |
| 131 | + guard let urlString = (object["url"] as? String)? |
| 132 | + .trimmingCharacters(in: .whitespacesAndNewlines), |
| 133 | + !urlString.isEmpty else { |
| 134 | + return .failure(.missingURL) |
| 135 | + } |
| 136 | + guard let token = (object["token"] as? String)? |
| 137 | + .trimmingCharacters(in: .whitespacesAndNewlines), |
| 138 | + !token.isEmpty else { |
| 139 | + return .failure(.missingToken) |
| 140 | + } |
| 141 | + guard let url = URL(string: urlString), url.scheme != nil, url.host != nil else { |
| 142 | + return .failure(.invalidURL(urlString)) |
| 143 | + } |
| 144 | + |
| 145 | + if rejectLoopback, GatewayPairingURL.isLoopback(url) { |
| 146 | + return .failure(.loopbackURL(urlString)) |
| 147 | + } |
| 148 | + |
| 149 | + return .success(GatewayPairingPayload(v: supportedVersion, url: urlString, token: token)) |
| 150 | + } |
| 151 | +} |
| 152 | + |
| 153 | +/// Loopback / pairability checks for Gateway URLs used in phone QR codes. |
| 154 | +enum GatewayPairingURL { |
| 155 | + /// True when the URL host is loopback and must not appear in a phone QR. |
| 156 | + static func isLoopback(_ url: URL) -> Bool { |
| 157 | + guard let host = url.host?.lowercased() else { return false } |
| 158 | + if host == "localhost" || host == "127.0.0.1" || host == "::1" || host == "[::1]" { |
| 159 | + return true |
| 160 | + } |
| 161 | + if host.hasPrefix("127.") { return true } |
| 162 | + return false |
| 163 | + } |
| 164 | + |
| 165 | + static func isLoopback(_ raw: String) -> Bool { |
| 166 | + guard let url = URL(string: raw) else { return false } |
| 167 | + return isLoopback(url) |
| 168 | + } |
| 169 | + |
| 170 | + /// True when a URL is usable for pairing QR (has scheme+host and is not loopback). |
| 171 | + static func isPairableURL(_ url: URL) -> Bool { |
| 172 | + guard url.scheme != nil, url.host != nil else { return false } |
| 173 | + return !isLoopback(url) |
| 174 | + } |
| 175 | + |
| 176 | + static func isPairableURL(_ raw: String) -> Bool { |
| 177 | + guard let url = URL(string: raw), url.scheme != nil, url.host != nil else { return false } |
| 178 | + return isPairableURL(url) |
| 179 | + } |
| 180 | + |
| 181 | + /// Normalize a user-supplied public URL override for pairing. |
| 182 | + static func validatedPublicURL(_ raw: String) -> Result<URL, GatewayPairingDecodeError> { |
| 183 | + var trimmed = raw.trimmingCharacters(in: .whitespacesAndNewlines) |
| 184 | + guard !trimmed.isEmpty else { return .failure(.missingURL) } |
| 185 | + if !trimmed.contains("://") { |
| 186 | + trimmed = "http://\(trimmed)" |
| 187 | + } |
| 188 | + guard let url = URL(string: trimmed), url.scheme != nil, url.host != nil else { |
| 189 | + return .failure(.invalidURL(trimmed)) |
| 190 | + } |
| 191 | + if isLoopback(url) { |
| 192 | + return .failure(.loopbackURL(trimmed)) |
| 193 | + } |
| 194 | + return .success(url) |
| 195 | + } |
| 196 | +} |
0 commit comments