File: //usr/local/CyberCP/__pycache__/fastapi_ssh_server.cpython-310.pyc
o
��h� � @ s� d dl Z d dlZd dlZd dlZd dlmZmZmZmZ d dl m
Z
d dl Z d dl Z d dl
Z
d dlmZmZ d dlZe� ZdZdZeje
dgddgdgd � d
Zd e� d �Zd
d� Zdd� Zdd� Ze�d�ed�ed�fdede de fdd��Z dS )� N)�FastAPI� WebSocket�WebSocketDisconnect�Query)�CORSMiddleware)�jwt�JWTError�+DAsjK2gl50PE09d1N3uZPTQ6JdwwfiuhlyWKMVbUEpc�HS256�*T)�
allow_origins�allow_credentials�
allow_methods�
allow_headers�your_website_userz/home/z/.ssh/authorized_keysc C sD t j�d�} t�� }| �|� |�� }| �� � d| �� � �}||fS )Ni � ) �paramiko�RSAKey�generate�io�StringIO�write_private_key�getvalue�get_name�
get_base64)�key�
private_io� private_key�
public_key� r �(/usr/local/CyberCP/fastapi_ssh_server.py�generate_ssh_keypair s
r! c C sL d| � d|� d�}t td��}|�|� W d � d S 1 s w Y d S )N�from="127.0.0.1,::1" r �
�a)�open�AUTHORIZED_KEYS_PATH�write)r �comment�entry�fr r r �add_key_to_authorized_keys( s "�r+ c C s~ t td�� }|�� }W d � n1 sw Y t td��}|D ] }| |vr,|�|� q!W d � d S 1 s8w Y d S )N�r�w)r% r& � readlinesr' )r( r* �lines�liner r r � remove_key_from_authorized_keys. s
�
��"�r1 z/ws� websocket�token�ssh_userc � sj �z t j|ttgd�}|�d�}|s ��� I d H W d S W n ty. ��� I d H Y d S w t�|�j }t
j � |d�}t
j � |d�}t
j
|dd� t
j �|�set|d�� W d � n1 s`w Y t
�|t�|�jt�|�j� t
�|d� t
�|t�|�jt�|�j� t
�|d � t� \}} d
t
�d ��� � �}
d | � d
|
� d�} t|d��
} | �| � W d � n1 s�w Y tjdd��}
|
�|�� � |
j}W d � n1 s�w Y �� � I d H d }d � z�z1t j d||gd d�I d H }|j dd�I d H � � �fdd�}� �fdd�}t �!|� |� �I d H W ni t"�y� } z\z&d|� �}t#�$d|� �� t%|t&��rB|jd d d �}��'t(|��I d H W n t"�yh } zt#�$d |� �� W Y d }~nd }~ww z ��� I d H W n
t"�y| Y nw W Y d }~nd }~ww W t|d �� } | �)� }W d � n 1 �s�w Y t|d��} |D ]
}|
|v�r�| �|� �q�W d � n 1 �s�w Y t
�*|� � �rՈ �� |�r�|�� d S d S t|d �� } | �)� }W d � n 1 �s�w Y t|d��} |D ]
}|
|v�r| �|� �qW d � n 1 �sw Y t
�*|� � �r,� �� |�r4|�� w w )!N)�
algorithmsr4 z.ssh�authorized_keysT)�exist_okr- i� i� zwebterm-� r" r r# r$ F)�delete� localhost)�username� client_keys� known_hosts�xterm)� term_typec � sJ �z �� � I d H } � j�| jddd�� q ty$ � j�� Y d S w )NT�utf-8�replace��errors)�
receive_bytes�stdinr' �decoder �close)�data��processr2 r r � ws_to_sshd s �� �z%websocket_endpoint.<locals>.ws_to_sshc
� s� �zY� j �� sX� j �d�I d H } | rPt�dt| �� dt| t�r%| d d� n| � �� t| t�r8��| �I d H nt| t �rF��
| �I d H n
��
t | ��I d H � j �� rW d S W d S t yu } zt� d|� �� W Y d }~d S d }~ww )Ni z [ssh_to_ws] Sending to WS: type=z , sample=�( z[ssh_to_ws] Exception: )
�stdout�at_eof�read�logging�debug�type�
isinstance�bytes�
send_bytes�str� send_text� Exception� exception)rH �exrI r r � ssh_to_wsm s" �
0
� ��z%websocket_endpoint.<locals>.ssh_to_wszConnection error: z [websocket_endpoint] Exception: r@ rA rB z2[websocket_endpoint] Error sending error message: r, )+r rF �
JWT_SECRET�
JWT_ALGORITHM�getrG r �pwd�getpwnam�pw_dir�os�path�join�makedirs�existsr% �chown�pw_uid�pw_gid�chmodr! �urandom�hexr' �tempfile�NamedTemporaryFile�encode�name�accept�asyncssh�connect�create_process�asyncio�gatherrX rP rY rS rT rW rV r. �remove)r2 r3 r4 �payload�user�home_dir�ssh_dir�authorized_keys_pathr r r( r) r* �keyfile� keyfile_path�connrK r[ �e�msgrZ r/ r0 r rI r �websocket_endpoint6 s� �
� � *
� � �
������
�
�� �
� �
�
�� �
�r� ) ru rr rm rb �fastapir r r r �fastapi.middleware.corsr r r r_ �joser r rP �appr\ r] �add_middleware�SSH_USERr& r! r+ r1 r2 rV r� r r r r �<module> s8 � *