Method PostCertificate

backend/handlers/app/config.go:110–168

(c echo.Context)

}

func (h *AppConfigHandler) PostCertificate(c echo.Context) error {
	serverIP := strings.TrimSpace(c.FormValue("serverIP"))
	name := strings.TrimSpace(c.FormValue("name"))
	cert := strings.TrimSpace(c.FormValue("clientCertData"))
	key := strings.TrimSpace(c.FormValue("clientKeyData"))
	configName := strings.TrimSpace(c.FormValue("configName"))
	tlsMode := strings.TrimSpace(c.FormValue("tlsMode"))
	caCert := strings.TrimSpace(c.FormValue("caCertData"))

	if serverIP == "" || name == "" || cert == "" || key == "" {
		return echo.NewHTTPError(http.StatusBadRequest, "missing required fields: serverIP, name, clientCertData, or clientKeyData")
	}

	// Validate config name
	if err := validateConfigName(configName); err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}

	// Normalize to lowercase
	configName = strings.ToLower(strings.TrimSpace(configName))

	// Check for duplicates
	if h.container.Config().ConfigExists(configName) {
		return echo.NewHTTPError(http.StatusConflict, fmt.Sprintf("config '%s' already exists", configName))
	}

	// Default to system mode if not specified
	if tlsMode == "" {
		tlsMode = "system"
	}

	// Validate: if custom mode, CA cert is required
	if tlsMode == "custom" && caCert == "" {
		return echo.NewHTTPError(http.StatusBadRequest, "CA certificate required for custom TLS mode")
	}

	encodedCert := base64.StdEncoding.EncodeToString([]byte(cert))
	encodedKey := base64.StdEncoding.EncodeToString([]byte(key))

	var encodedCaCert string
	if caCert != "" {
		encodedCaCert = base64.StdEncoding.EncodeToString([]byte(caCert))
	}

	kubeconfig := generateCertificateConfig(serverIP, name, encodedCert, encodedKey, encodedCaCert, tlsMode)

	path := filepath.Join(homeDir(), config.AppConfigDir, config.AppKubeConfigDir, configName)
	if err := writeKubeconfigToFile(path, kubeconfig); err != nil {
		return err
	}

	if err := validateKubeconfigFile(path); err != nil {
		defer os.Remove(path)
		return echo.NewHTTPError(http.StatusBadRequest, "invalid kubeconfig").SetInternal(err)
	}

	h.container.Config().SaveKubeConfig(configName)
	return c.JSON(http.StatusOK, echo.Map{"success": true, "configId": configName})