Function setup

chirpstack/src/api/backend/mod.rs:42–84

()

use lrwn::{AES128Key, EUI64, NetID};

pub async fn setup() -> Result<()> {
    let conf = config::get();
    if conf.backend_interfaces.bind.is_empty() {
        info!("Backend interfaces API interface is disabled");
        return Ok(());
    }

    let addr: SocketAddr = conf.backend_interfaces.bind.parse()?;
    info!(bind = %conf.backend_interfaces.bind, "Setting up backend interfaces API");

    let app = Router::new().fallback(handle_request);

    if !conf.backend_interfaces.ca_cert.is_empty()
        || !conf.backend_interfaces.tls_cert.is_empty()
        || !conf.backend_interfaces.tls_key.is_empty()
    {
        let mut server_config = ServerConfig::builder()
            .with_client_cert_verifier(if conf.backend_interfaces.ca_cert.is_empty() {
                Arc::new(NoClientAuth)
            } else {
                let root_certs = get_root_certs(Some(conf.backend_interfaces.ca_cert.clone()))?;
                WebPkiClientVerifier::builder(root_certs.into()).build()?
            })
            .with_single_cert(
                load_cert(&conf.backend_interfaces.tls_cert).await?,
                load_key(&conf.backend_interfaces.tls_key).await?,
            )?;
        server_config.alpn_protocols = vec![b"h2".to_vec(), b"http/1.1".to_vec()];

        axum_server::bind_rustls(
            addr,
            axum_server::tls_rustls::RustlsConfig::from_config(Arc::new(server_config)),
        )
        .serve(app.into_make_service())
        .await?;
    } else {
        axum_server::bind(addr)
            .serve(app.into_make_service())
            .await?;
    }

    Ok(())
}

pub async fn handle_request(b: Bytes) -> Response {
    let b: Vec<u8> = b.into();