wazuh-kibana-app/public/controllers/settings.js
2018-05-07 11:40:07 +02:00

471 lines
20 KiB
JavaScript

/*
* Wazuh app - Settings controller
* Copyright (C) 2018 Wazuh, Inc.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* Find more information about this on the LICENSE file.
*/
import base64 from 'plugins/wazuh/utils/base64.js';
import chrome from 'ui/chrome';
import * as modules from 'ui/modules'
const app = modules.get('app/wazuh', []);
app.controller('settingsController', function ($scope, $rootScope, $http, $routeParams, $route, $location, testAPI, appState, genericReq, errorHandler) {
$rootScope.page = "settings";
if ($rootScope.comeFromWizard) {
sessionStorage.removeItem('healthCheck');
$rootScope.comeFromWizard = false;
}
// Initialize
let currentApiEntryIndex;
$scope.formData = {
user : '',
password: '',
url : ''
};
$scope.accept_ssl = true;
$scope.editConfiguration = true;
$scope.menuNavItem = 'settings';
$scope.load = true;
$scope.addManagerContainer = false;
$scope.submenuNavItem = "api";
$scope.showEditForm = {};
$scope.formUpdate = {
user : null,
password: null,
url : null,
port : null
};
const userRegEx = new RegExp(/^.{3,100}$/);
const passRegEx = new RegExp(/^.{3,100}$/);
const urlRegEx = new RegExp(/^https?:\/\/[a-zA-Z0-9-.]{1,300}$/);
const urlRegExIP = new RegExp(/^https?:\/\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$/);
const portRegEx = new RegExp(/^[0-9]{2,5}$/);
$scope.indexPatterns = [];
$scope.apiEntries = [];
if ($routeParams.tab){
$scope.submenuNavItem = $routeParams.tab;
}
// Watch tab change
$scope.$watch('submenuNavItem', () => {
$location.search('tab', $scope.submenuNavItem);
});
$scope.$watch('apiEntries',() => {
if(!$scope.$$phase) $scope.$digest();
})
// Remove API entry
$scope.removeManager = async item => {
try {
let index = $scope.apiEntries.indexOf(item);
if (appState.getCurrentAPI() !== undefined && appState.getCurrentAPI() !== null) {
if ($scope.apiEntries[index]._id === JSON.parse(appState.getCurrentAPI()).id) { // We are trying to remove the one selected as default
errorHandler.handle("Can't delete the currently selected API. Please, select another API as default before deleting this one.",'Settings',true);
if(!$rootScope.$$phase) $rootScope.$digest();
return;
}
}
await genericReq.request('DELETE', `/api/wazuh-api/apiEntries/${$scope.apiEntries[index]._id}`);
$scope.apiEntries.splice(index, 1);
$rootScope.apiIsDown = null;
errorHandler.info('The API was removed successfully','Settings');
if(!$scope.$$phase) $scope.$digest();
return;
} catch(error) {
errorHandler.handle('Could not remove the API','Settings');
if(!$rootScope.$$phase) $rootScope.$digest();
}
};
// Get current API index
const getCurrentAPIIndex = () => {
for(let i = 0, len = $scope.apiEntries.length; i < len; i += 1) {
if($scope.apiEntries[i]._id === $scope.currentDefault) {
currentApiEntryIndex = i;
}
}
}
const sortByTimestamp = (a,b) => {
const intA = parseInt(a._id);
const intB = parseInt(b._id);
return intA > intB ? -1 : intA < intB ? 1 : 0;
};
// Set default API
$scope.setDefault = (item) => {
let index = $scope.apiEntries.indexOf(item);
appState.setClusterInfo($scope.apiEntries[index]._source.cluster_info);
if ($scope.apiEntries[index]._source.cluster_info.status == 'disabled'){
appState.setCurrentAPI(JSON.stringify({name: $scope.apiEntries[index]._source.cluster_info.manager, id: $scope.apiEntries[index]._id }));
} else {
appState.setCurrentAPI(JSON.stringify({name: $scope.apiEntries[index]._source.cluster_info.cluster, id: $scope.apiEntries[index]._id }));
}
$scope.$emit('updateAPI', {});
$scope.currentDefault = JSON.parse(appState.getCurrentAPI()).id;
$scope.extensions = $scope.apiEntries[index]._source.extensions;
errorHandler.info(`API ${$scope.apiEntries[index]._source.cluster_info.manager} set as default`,'Settings');
getCurrentAPIIndex();
$scope.extensions = {};
$scope.extensions.oscap = $scope.apiEntries[index]._source.extensions.oscap;
$scope.extensions.audit = $scope.apiEntries[index]._source.extensions.audit;
$scope.extensions.pci = $scope.apiEntries[index]._source.extensions.pci;
$scope.extensions.aws = $scope.apiEntries[index]._source.extensions.aws;
$scope.extensions.virustotal = $scope.apiEntries[index]._source.extensions.virustotal;
if(!$scope.$$phase) $scope.$digest();
appState.setExtensions($scope.apiEntries[index]._source.extensions);
};
// Get settings function
const getSettings = async () => {
try {
const patternList = await genericReq.request('GET','/get-list',{});
$scope.indexPatterns = patternList.data.data;
if(!patternList.data.data.length){
$rootScope.blankScreenError = 'Sorry but no valid index patterns were found'
$location.search('tab',null);
$location.path('/blank-screen');
return;
}
const data = await genericReq.request('GET', '/api/wazuh-api/apiEntries');
for(const entry of data.data) $scope.showEditForm[entry._id] = false;
$scope.apiEntries = data.data.length > 0 ? data.data : [];
$scope.apiEntries = $scope.apiEntries.sort(sortByTimestamp);
if (appState.getCurrentAPI() !== undefined && appState.getCurrentAPI() !== null)
$scope.currentDefault = JSON.parse(appState.getCurrentAPI()).id;
if(!$scope.$$phase) $scope.$digest();
getCurrentAPIIndex();
if(!currentApiEntryIndex) return;
$scope.extensions = {};
$scope.extensions.oscap = $scope.apiEntries[currentApiEntryIndex]._source.extensions.oscap;
$scope.extensions.audit = $scope.apiEntries[currentApiEntryIndex]._source.extensions.audit;
$scope.extensions.pci = $scope.apiEntries[currentApiEntryIndex]._source.extensions.pci;
$scope.extensions.aws = $scope.apiEntries[currentApiEntryIndex]._source.extensions.aws;
$scope.extensions.virustotal = $scope.apiEntries[currentApiEntryIndex]._source.extensions.virustotal;
appState.setExtensions($scope.apiEntries[currentApiEntryIndex]._source.extensions);
if(!$scope.$$phase) $scope.$digest();
return;
} catch (error) {
errorHandler.handle('Error getting API entries','Settings');
if(!$rootScope.$$phase) $rootScope.$digest();
}
};
const validator = formName => {
// Validate user
if(!userRegEx.test($scope[formName].user)){
return 'Invalid user field';
}
// Validate password
if(!passRegEx.test($scope[formName].password)){
return 'Invalid password field';
}
// Validate url
if(!urlRegEx.test($scope[formName].url) && !urlRegExIP.test($scope[formName].url)){
return 'Invalid url field';
}
// Validate port
const validatePort = parseInt($scope[formName].port);
if(!portRegEx.test($scope[formName].port) || validatePort <= 0 || validatePort >= 99999) {
return 'Invalid port field';
}
return false;
}
$scope.toggleEditor = entry => {
$scope.showEditForm[entry._id] = !$scope.showEditForm[entry._id];
$scope.isEditing = $scope.showEditForm[entry._id];
$scope.addManagerContainer = false;
if(!$scope.$$phase) $scope.$digest();
}
// Save settings function
const saveSettings = async () => {
try {
const invalid = validator('formData');
if(invalid) {
$scope.messageError = invalid;
errorHandler.handle(invalid,'Settings');
if(!$rootScope.$$phase) $rootScope.$digest();
return;
}
const tmpData = {
user : $scope.formData.user,
password : base64.encode($scope.formData.password),
url : $scope.formData.url,
port : $scope.formData.port,
cluster_info: {},
insecure : 'true',
id : (Array.isArray($scope.apiEntries)) ? $scope.apiEntries.length: 0,
extensions : appState.getExtensions().extensions
};
const config = await genericReq.request('GET', '/api/wazuh-api/configuration', {});
appState.setPatternSelector(typeof config.data.data['ip.selector'] !== 'undefined' ? config.data.data['ip.selector'] : true)
if(config.data && config.data.data) {
tmpData.extensions.audit = typeof config.data.data['extensions.audit'] !== 'undefined' ? config.data.data['extensions.audit'] : true;
tmpData.extensions.pci = typeof config.data.data['extensions.pci'] !== 'undefined' ? config.data.data['extensions.pci'] : true;
tmpData.extensions.oscap = typeof config.data.data['extensions.oscap'] !== 'undefined' ? config.data.data['extensions.oscap'] : true;
tmpData.extensions.aws = typeof config.data.data['extensions.aws'] !== 'undefined' ? config.data.data['extensions.aws'] : false;
tmpData.extensions.virustotal = typeof config.data.data['extensions.virustotal'] !== 'undefined' ? config.data.data['extensions.virustotal'] : false;
appState.setExtensions(tmpData.extensions);
}
const checkData = await testAPI.check(tmpData)
// API Check correct. Get Cluster info
tmpData.cluster_info = checkData.data;
// Insert new API entry
const data = await genericReq.request('PUT', '/api/wazuh-api/settings', tmpData);
const newEntry = {
_id: data.data.response._id,
_source: {
cluster_info: tmpData.cluster_info,
active : tmpData.active,
url : tmpData.url,
api_user : tmpData.user,
api_port : tmpData.port,
extensions : tmpData.extensions
}
};
$scope.apiEntries.push(newEntry);
$scope.apiEntries = $scope.apiEntries.sort(sortByTimestamp);
errorHandler.info('Wazuh API successfully added','Settings');
$scope.addManagerContainer = false;
$scope.formData.user = "";
$scope.formData.password = "";
$scope.formData.url = "";
$scope.formData.port = "";
// Setting current API as default if no one is in the cookies
if (!appState.getCurrentAPI()) { // No cookie
if ($scope.apiEntries[$scope.apiEntries.length - 1]._source.cluster_info.status === 'disabled') {
appState.setCurrentAPI(JSON.stringify({name: $scope.apiEntries[$scope.apiEntries.length - 1]._source.cluster_info.manager, id: $scope.apiEntries[$scope.apiEntries.length - 1]._id }));
} else {
appState.setCurrentAPI(JSON.stringify({name: $scope.apiEntries[$scope.apiEntries.length - 1]._source.cluster_info.cluster, id: $scope.apiEntries[$scope.apiEntries.length - 1]._id }));
}
$scope.$emit('updateAPI', {});
$scope.currentDefault = JSON.parse(appState.getCurrentAPI()).id;
}
await Promise.all([
genericReq.request('GET', '/api/wazuh-api/fetchAgents'),
getSettings()
]);
if(!$scope.$$phase) $scope.$digest();
return;
} catch(error) {
if(error.status === 400){
error.message = 'Please, fill all the fields in order to connect with Wazuh RESTful API.'
}
printError(error);
}
};
$scope.isUpdating = () => {
for(let key in $scope.showEditForm){
if($scope.showEditForm[key]) return true;
}
return false;
};
// Update settings function
$scope.updateSettings = async item => {
try {
$scope.messageErrorUpdate = '';
const invalid = validator('formUpdate');
if(invalid) {
$scope.messageErrorUpdate = invalid;
errorHandler.handle(invalid,'Settings');
if(!$rootScope.$$phase) $rootScope.$digest();
return;
}
const index = $scope.apiEntries.indexOf(item);
const tmpData = {
user: $scope.formUpdate.user,
password: base64.encode($scope.formUpdate.password),
url: $scope.formUpdate.url,
port: $scope.formUpdate.port,
cluster_info: {},
insecure: 'true',
id: $scope.apiEntries[index]._id,
extensions: $scope.apiEntries[index]._source.extensions
};
const data = await testAPI.check(tmpData);
tmpData.cluster_info = data.data;
await genericReq.request('PUT', '/api/wazuh-api/update-settings' , tmpData);
$scope.apiEntries[index]._source.cluster_info = tmpData.cluster_info;
$rootScope.apiIsDown = null;
$scope.apiEntries[index]._source.cluster_info.cluster = tmpData.cluster_info.cluster;
$scope.apiEntries[index]._source.cluster_info.manager = tmpData.cluster_info.manager;
$scope.apiEntries[index]._source.url = tmpData.url;
$scope.apiEntries[index]._source.api_port = tmpData.port;
$scope.apiEntries[index]._source.api_user = tmpData.user;
$scope.apiEntries = $scope.apiEntries.sort(sortByTimestamp);
$scope.showEditForm[$scope.apiEntries[index]._id] = false;
errorHandler.info('Connection success','Settings');
if(!$scope.$$phase) $scope.$digest();
return;
} catch (error) {
printError(error,true);
}
};
// Check manager connectivity
$scope.checkManager = async item => {
try {
const index = $scope.apiEntries.indexOf(item);
const tmpData = {
user : $scope.apiEntries[index]._source.api_user,
password : $scope.apiEntries[index]._source.api_password,
url : $scope.apiEntries[index]._source.url,
port : $scope.apiEntries[index]._source.api_port,
cluster_info: {},
insecure : 'true',
id : $scope.apiEntries[index]._id
};
const data = await testAPI.check(tmpData);
tmpData.cluster_info = data.data;
const tmpUrl = `/api/wazuh-api/updateApiHostname/${$scope.apiEntries[index]._id}`;
await genericReq.request('PUT', tmpUrl , { cluster_info: tmpData.cluster_info });
$scope.apiEntries[index]._source.cluster_info = tmpData.cluster_info;
$rootScope.apiIsDown = null;
errorHandler.info('Connection success','Settings');
if(!$scope.$$phase) $scope.$digest();
return;
} catch(error) {
printError(error);
}
};
// Process form
$scope.processForm = () => {
$scope.messageError = "";
saveSettings();
};
// Toggle extension
$scope.toggleExtension = async (extension, state) => {
try{
if (['oscap','audit','pci','aws','virustotal'].includes(extension)) {
await genericReq.request('PUT', `/api/wazuh-api/extension/toggle/${$scope.apiEntries[currentApiEntryIndex]._id}/${extension}/${state}`);
$scope.apiEntries[currentApiEntryIndex]._source.extensions[extension] = state;
appState.setExtensions($scope.apiEntries[currentApiEntryIndex]._source.extensions);
if(!$scope.$$phase) $scope.$digest();
}
return;
} catch (error){
const msg = appState.getCurrentAPI() ? 'Invalid request when toggling extensions.' : 'Can not save extension state: no Wazuh API detected';
errorHandler.handle(msg,'Settings');
if(!$rootScope.$$phase) $rootScope.$digest();
}
};
$scope.changeIndexPattern = async newIndexPattern => {
try {
appState.setCurrentPattern(newIndexPattern);
$scope.$emit('updatePattern', {});
errorHandler.info('Successfully changed the default index-pattern','Settings');
$scope.selectedIndexPattern = newIndexPattern;
if(!$scope.$$phase) $scope.$digest();
return;
} catch (error) {
errorHandler.handle('Error while changing the default index-pattern','Settings');
if(!$rootScope.$$phase) $rootScope.$digest();
}
};
const printError = (error,updating) => {
const text = errorHandler.handle(error,'Settings');
if(!updating) $scope.messageError = text;
else $scope.messageErrorUpdate = text;
if(!$rootScope.$$phase) $rootScope.$digest();
};
const getAppInfo = async () => {
try {
const data = await genericReq.request('GET', '/api/wazuh-elastic/setup');
$scope.appInfo = {};
$scope.appInfo["app-version"] = data.data.data["app-version"];
$scope.appInfo["installationDate"] = data.data.data["installationDate"];
$scope.appInfo["revision"] = data.data.data["revision"];
$scope.load = false;
const config = await genericReq.request('GET', '/api/wazuh-api/configuration', {});
appState.setPatternSelector(typeof config.data.data['ip.selector'] !== 'undefined' ? config.data.data['ip.selector'] : true)
if (appState.getCurrentPattern() !== undefined && appState.getCurrentPattern() !== null) { // There's a pattern in the cookies
$scope.selectedIndexPattern = appState.getCurrentPattern();
} else { // There's no pattern in the cookies, pick the one in the settings
$scope.selectedIndexPattern = config.data.data["pattern"];
}
if(config.data && config.data.data && !appState.getCurrentAPI()) {
$scope.extensions = {};
$scope.extensions.audit = typeof config.data.data['extensions.audit'] !== 'undefined' ? config.data.data['extensions.audit'] : true;
$scope.extensions.pci = typeof config.data.data['extensions.pci'] !== 'undefined' ? config.data.data['extensions.pci'] : true;
$scope.extensions.oscap = typeof config.data.data['extensions.oscap'] !== 'undefined' ? config.data.data['extensions.oscap'] : true;
$scope.extensions.aws = typeof config.data.data['extensions.aws'] !== 'undefined' ? config.data.data['extensions.aws'] : false;
$scope.extensions.virustotal = typeof config.data.data['extensions.virustotal'] !== 'undefined' ? config.data.data['extensions.virustotal'] : false;
appState.setExtensions($scope.extensions);
} else {
$scope.extensions = appState.getExtensions().extensions;
}
if(!$scope.$$phase) $scope.$digest();
return;
} catch (error) {
errorHandler.handle('Error when loading Wazuh setup info','Settings');
if(!$rootScope.$$phase) $rootScope.$digest();
}
};
// Loading data
getSettings().then(getAppInfo);
});