Function NewServer

pkg/basicstation/cups/server.go:168–214

NewServer returns a new CUPS server.

(ctx context.Context, c *component.Component, conf ServerConfig, options ...Option)

// NewServer returns a new CUPS server.
func NewServer(ctx context.Context, c *component.Component, conf ServerConfig, options ...Option) (*Server, error) {
	options = append([]Option{
		WithAllowCUPSURIUpdate(conf.AllowCUPSURIUpdate),
		WithDefaultLNSURI(conf.Default.LNSURI),
	}, options...)

	var registerUnknownTo *ttnpb.OrganizationOrUserIdentifiers
	switch conf.RegisterUnknown.Type {
	case "user":
		registerUnknownTo = (&ttnpb.UserIdentifiers{
			UserId: conf.RegisterUnknown.ID,
		}).GetOrganizationOrUserIdentifiers()
	case "organization":
		registerUnknownTo = (&ttnpb.OrganizationIdentifiers{
			OrganizationId: conf.RegisterUnknown.ID,
		}).GetOrganizationOrUserIdentifiers()
	}
	if registerUnknownTo != nil && conf.RegisterUnknown.APIKey != "" {
		options = append(options,
			WithRegisterUnknown(registerUnknownTo, func(_ context.Context) grpc.CallOption {
				return grpc.PerRPCCredentials(rpcmetadata.MD{
					AuthType:      "bearer",
					AuthValue:     conf.RegisterUnknown.APIKey,
					AllowInsecure: c.AllowInsecureForCredentials(),
				})
			}),
		)
	}

	// The Server.tlsConfig is used when dialing a CUPS or an LNS server to query its certificate chain.
	// When dialing servers with self-signed certs, the Root CA of target server must either be trusted by the system or
	// added explicitly via the `--tls.root-ca` option.
	if tlsConfig, err := c.GetTLSClientConfig(c.Context()); err == nil {
		options = append(options, WithTLSConfig(tlsConfig))
	}

	s := &Server{
		component:  c,
		signers:    make(map[uint32]stdcrypto.Signer),
		trustCache: make(map[string]*x509.Certificate),
	}
	for _, opt := range options {
		opt(s)
	}
	c.RegisterWeb(s)
	return s, nil
}

// RegisterRoutes implements web.Registerer.
func (s *Server) RegisterRoutes(srv *web.Server) {