feat: add new API for recording executed commands

- Add the `jsonwebtoken` dependency to the server's `package.json`
- Add a new file `commandController.js` to the server's API controllers
- Add a new route `/commands` to the server's API routes
- Add a new file `commands.js` to the server's API routes
- Modify the `index.js` file in the server's API routes to import and use the `commands.js` route
- Add a `newCommand` function to the `commandController.js` file
- Add a `Command` model to the `command.js` file in the server's models
- Add the `genSessionJWT` and `verifySessionJWT` functions to the `auth.js` file in the server's utils
- Modify the `attachContainer` function in the `docker.js` file in the server's utils to include a `token` parameter
- Modify the `swagger.yaml` file to include a new route `/commands` for recording executed commands in a session

Signed-off-by: wancat <wancat@wancat.cc>

server/src/api/controllers/commandController.js

@@ -0,0 +1,35 @@
+/* eslint-disable import/prefer-default-export */
+import Command from '../../models/command.js'
+import Session from '../../models/session.js'
+import { verifySessionJWT } from '../../utils/auth.js'
+
+export async function newCommand(req, res) {
+  const { token, command, pwd, output } = req.body
+
+  let sessionId
+  try {
+    const decoded = await verifySessionJWT(token)
+    sessionId = decoded.session_id
+  } catch (err) {
+    res.status(401).json({ message: 'token not valid' })
+    return
+  }
+
+  const session = await Session.findById(sessionId)
+
+  if (!session) {
+    res.status(401).json({ message: 'session not found' })
+    return
+  }
+
+  const c = new Command({
+    session,
+    command,
+    pwd,
+    output,
+  })
+
+  await c.save()
+
+  res.status(201).end()
+}

server/src/api/routes/commands.js

@@ -0,0 +1,8 @@
+import { Router } from 'express'
+import * as commandController from '../controllers/commandController.js'
+
+const router = Router()
+
+router.post('/', commandController.newCommand)
+
+export default router

server/src/api/routes/index.js

@@ -1,6 +1,7 @@
 import { Router } from 'express'
 import sessions from './sessions.js'
 import quests from './quests.js'
+import commands from './commands.js'
 import { authMiddleware } from '../../middleware/auth.js'
 
 const router = Router()
@@ -11,5 +12,6 @@ router.get('/', (req, res) => {
 
 router.use('/sessions', authMiddleware, sessions)
 router.use('/quests', quests)
+router.use('/commands', commands)
 
 export default router

server/src/api/socket.js

@@ -1,7 +1,7 @@
 import { Server } from 'socket.io'
 import { getOrCreateContainer, attachContainer } from '../utils/docker.js'
 import Session from '../models/session.js'
-import { defaultUser } from '../utils/auth.js'
+import { defaultUser, genSessionJWT } from '../utils/auth.js'
 
 export default (server) => {
   const io = new Server(server)
@@ -32,8 +32,10 @@ export default (server) => {
       return
     }
 
+    const token = await genSessionJWT(session)
+
     const container = await getOrCreateContainer(session.containerId)
-    const stream = await attachContainer(container)
+    const stream = await attachContainer(container, { token })
 
     stream.on('data', (chunk) => {
       socket.send(chunk)