wip

app/Server/Http/Controllers/Admin/ListSitesController.php

@@ -26,8 +26,14 @@ class ListSitesController extends PostController
 
     public function handle(Request $request, ConnectionInterface $httpConnection)
     {
+        try {
+            $sites = $this->getView('server.sites.index', ['sites' => $this->connectionManager->getConnections()]);
+        } catch (\Exception $e) {
+            dump($e->getMessage());
+        }
+
         $httpConnection->send(
-            respond_html($this->getView('server.sites.index', ['sites' => $this->connectionManager->getConnections()]))
+            respond_html($sites)
         );
     }
 }

app/Server/Http/Controllers/Admin/LoginController.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Server\Http\Controllers\Admin;
+
+use App\Contracts\ConnectionManager;
+use App\HttpServer\Controllers\PostController;
+use Clue\React\SQLite\DatabaseInterface;
+use Clue\React\SQLite\Result;
+use GuzzleHttp\Psr7\Response;
+use Illuminate\Http\Request;
+use Ratchet\ConnectionInterface;
+use Twig\Environment;
+use Twig\Loader\ArrayLoader;
+use function GuzzleHttp\Psr7\str;
+use function GuzzleHttp\Psr7\stream_for;
+
+class LoginController extends PostController
+{
+    public function handle(Request $request, ConnectionInterface $httpConnection)
+    {
+        $httpConnection->send(
+            respond_html($this->getView('server.login'))
+        );
+    }
+}

app/Server/Http/Controllers/Admin/VerifyLoginController.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Server\Http\Controllers\Admin;
+
+use App\Contracts\ConnectionManager;
+use App\HttpServer\Controllers\PostController;
+use Clue\React\SQLite\DatabaseInterface;
+use Clue\React\SQLite\Result;
+use GuzzleHttp\Psr7\Response;
+use Illuminate\Http\Request;
+use Ratchet\ConnectionInterface;
+use Twig\Environment;
+use Twig\Loader\ArrayLoader;
+use function GuzzleHttp\Psr7\str;
+use function GuzzleHttp\Psr7\stream_for;
+
+class VerifyLoginController extends PostController
+{
+    protected $keepConnectionOpen = true;
+
+    /** @var DatabaseInterface */
+    protected $database;
+
+    public function __construct(DatabaseInterface $database)
+    {
+        $this->database = $database;
+    }
+
+    public function handle(Request $request, ConnectionInterface $httpConnection)
+    {
+        $this->database->query("SELECT * FROM users WHERE email = :email", ['email' => $request->email])
+            ->then(function (Result $result) use ($httpConnection) {
+                if (!is_null($result->rows)) {
+                    $httpConnection->send(
+                        str(new Response(
+                            301,
+                            ['Location' => '/users']
+                        ))
+                    );
+                } else {
+                    $httpConnection->send(
+                        str(new Response(
+                            301,
+                            ['Location' => '/users']
+                        ))
+                    );
+                }
+                $httpConnection->close();
+            });
+    }
+}

app/Server/Http/Controllers/ControlMessageController.php

@@ -78,6 +78,10 @@ class ControlMessageController implements MessageComponentInterface
             $this->verifyAuthToken($connection);
         }
 
+        if (! $this->hasValidSubdomain($connection, $data->subdomain)) {
+            return;
+        }
+
         $connectionInfo = $this->connectionManager->storeConnection($data->host, $data->subdomain, $connection);
 
         $connection->send(json_encode([
@@ -122,4 +126,24 @@ class ControlMessageController implements MessageComponentInterface
                 }
         });
     }
+
+    protected function hasValidSubdomain(ConnectionInterface $connection, ?string $subdomain): bool
+    {
+        if (! is_null($subdomain)) {
+            $controlConnection = $this->connectionManager->findControlConnectionForSubdomain($subdomain);
+            if (! is_null($controlConnection) || $subdomain === config('expose.dashboard_subdomain')) {
+                $connection->send(json_encode([
+                    'event' => 'subdomainTaken',
+                    'data' => [
+                        'subdomain' => $subdomain,
+                    ]
+                ]));
+                $connection->close();
+
+                return false;
+            }
+        }
+
+        return true;
+    }
 }

app/Server/Http/Controllers/TunnelMessageController.php

@@ -82,6 +82,7 @@ class TunnelMessageController extends PostController
     protected function prepareRequest(Request $request, ControlConnection $controlConnection): Request
     {
         $request->headers->set('Host', $controlConnection->host);
+        $request->headers->set('X-Forwarded-Proto', $request->isSecure() ? 'https' : 'http');
         $request->headers->set('X-Expose-Request-ID', uniqid());
         $request->headers->set('X-Exposed-By', config('app.name') . ' '. config('app.version'));
         $request->headers->set('X-Original-Host', "{$controlConnection->subdomain}.{$this->configuration->hostname()}:{$this->configuration->port()}");