Function api10Get

cmd/incusd/api_1.0.go:228–410

swagger:operation GET /1.0?public server server_get_untrusted Get the server environment Shows a small subset of the server environment and configuration which is required by untrusted clients to reach a server. The `?public` part of the URL isn't required, it's simply used to separate the two be

(d *Daemon, r *http.Request)

//	  "500":
//	    $ref: "#/responses/InternalServerError"
func api10Get(d *Daemon, r *http.Request) response.Response {
	s := d.State()

	// Pull the full server config.
	fullSrvConfig, err := daemonConfigRender(s)
	if err != nil {
		return response.InternalError(err)
	}

	// Get the authentication methods.
	authMethods := []string{api.AuthenticationMethodTLS}

	oidcIssuer, oidcClientID, _, _, _ := s.GlobalConfig.OIDCServer()
	if oidcIssuer != "" && oidcClientID != "" {
		authMethods = append(authMethods, api.AuthenticationMethodOIDC)
	}

	srv := api.ServerUntrusted{
		APIStatus:   "stable",
		APIVersion:  version.APIVersion,
		Public:      false,
		Auth:        "untrusted",
		AuthMethods: authMethods,
	}

	// Populate the untrusted config (user.ui.XYZ).
	srv.Config = map[string]string{}
	for k, v := range fullSrvConfig {
		if strings.HasPrefix(k, "user.ui.") {
			srv.Config[k] = v
		}
	}

	// If untrusted, return now
	if d.checkTrustedClient(r) != nil {
		return response.SyncResponseETag(true, srv, nil)
	}

	// If not authorized, return now.
	err = s.Authorizer.CheckPermission(r.Context(), r, auth.ObjectServer(), auth.EntitlementCanView)
	if err != nil {
		return response.SmartError(err)
	}

	// Add the API extensions to authenticated requests.
	srv.APIExtensions = version.APIExtensions[:d.apiExtensions]

	// If a target was specified, forward the request to the relevant node.
	resp := forwardedResponseIfTargetIsRemote(s, r)
	if resp != nil {
		return resp
	}

	srv.Auth = "trusted"

	localHTTPSAddress := s.LocalConfig.HTTPSAddress()

	addresses, err := localUtil.ListenAddresses(localHTTPSAddress)