first commit
This commit is contained in:
sriram
@@ -0,0 +1,34 @@
|
|||||||
|
# Dependencies
|
||||||
|
node_modules/
|
||||||
|
|
||||||
|
# Logs
|
||||||
|
*.log
|
||||||
|
npm-debug.log*
|
||||||
|
|
||||||
|
# Database files
|
||||||
|
*.db
|
||||||
|
*.db-shm
|
||||||
|
*.db-wal
|
||||||
|
*.sqlite
|
||||||
|
|
||||||
|
# Certificates & keys
|
||||||
|
*.pem
|
||||||
|
*.key
|
||||||
|
*.crt
|
||||||
|
|
||||||
|
# Environment files
|
||||||
|
.env
|
||||||
|
.env.*
|
||||||
|
|
||||||
|
# Build output
|
||||||
|
dist/
|
||||||
|
build/
|
||||||
|
out/
|
||||||
|
|
||||||
|
# OS files
|
||||||
|
.DS_Store
|
||||||
|
Thumbs.db
|
||||||
|
|
||||||
|
# Editor
|
||||||
|
.vscode/
|
||||||
|
.idea/
|
||||||
@@ -0,0 +1,42 @@
|
|||||||
|
# Install & Test — Remote Access Platform
|
||||||
|
|
||||||
|
## Prerequisite
|
||||||
|
Install **Node.js 22.5 or newer** (LTS is fine): https://nodejs.org
|
||||||
|
(The installer adds `node` and `npm` to your PATH.)
|
||||||
|
|
||||||
|
## Steps
|
||||||
|
|
||||||
|
1. **Unzip** this folder anywhere (e.g. `C:\remote-access-app`).
|
||||||
|
2. Double-click **`SETUP.bat`** — installs all dependencies (the agent pulls
|
||||||
|
Electron, so the first run takes a few minutes).
|
||||||
|
3. Double-click **`Start-Server.bat`** — leave this window open.
|
||||||
|
4. Open **http://localhost:8090** in your browser:
|
||||||
|
- Click **Register team**, enter an email + password.
|
||||||
|
- Add the shown **2FA secret** to an authenticator app (Google Authenticator,
|
||||||
|
Authy, 1Password), enter a code to finish, then log in.
|
||||||
|
- In **Machines**, type a name and click **Enroll machine** — copy the
|
||||||
|
`AGENT_ENROLL_TOKEN` it shows.
|
||||||
|
5. Double-click **`Start-Agent.bat`**, accept the default server URL, and paste
|
||||||
|
the token. The agent window appears and the machine turns **green** in the
|
||||||
|
console.
|
||||||
|
6. In the console, click **Connect**. The agent shows a **consent prompt** —
|
||||||
|
click **Allow**. You'll see the live screen and can control it; a red banner
|
||||||
|
stays on the host while the session is active.
|
||||||
|
|
||||||
|
> To test on **two PCs**, run the server on one and use that PC's IP as the
|
||||||
|
> server URL on the other (e.g. `http://192.168.1.50:8090`). Both must be on the
|
||||||
|
> same network for direct connection (a TURN relay is the next step for
|
||||||
|
> internet-wide use).
|
||||||
|
|
||||||
|
## Notes
|
||||||
|
- **Same-machine test:** you can run the server, browser, and agent all on one PC
|
||||||
|
to see the full flow (you'll be controlling your own screen).
|
||||||
|
- **Input control** uses the `nut-js` library. If it failed to install, the agent
|
||||||
|
still streams the screen but logs input instead of injecting it — re-run
|
||||||
|
`SETUP.bat` on a machine with build tools to enable full control.
|
||||||
|
- To stop: close the agent window and press `Ctrl+C` in the server window.
|
||||||
|
|
||||||
|
## Troubleshooting
|
||||||
|
- *"Node.js is not installed"* → install from nodejs.org, reopen `SETUP.bat`.
|
||||||
|
- *Browser can't reach localhost:8090* → make sure `Start-Server.bat` is still running.
|
||||||
|
- *Machine stays offline* → check the token was pasted fully and the server URL is correct.
|
||||||
@@ -0,0 +1,94 @@
|
|||||||
|
# Remote Access Platform — Alpha
|
||||||
|
|
||||||
|
A self-hostable remote support platform for IT teams: technicians log in to a web
|
||||||
|
console, see their team's machines, and start a screen-share + remote-control
|
||||||
|
session to any online machine after the end user grants consent. Built to the
|
||||||
|
spec in `PRD-remote-access-platform.md`.
|
||||||
|
|
||||||
|
This alpha implements the PRD's P0 requirements: authenticated console, **MFA**,
|
||||||
|
**RBAC**, **machine enrollment**, **per-session consent**, **WebRTC screen
|
||||||
|
streaming + remote input**, and an **immutable audit log**.
|
||||||
|
|
||||||
|
```
|
||||||
|
remote-access-app/
|
||||||
|
├── server/ Backend: HTTP API + WebSocket signaling + SQLite
|
||||||
|
│ ├── server.js Auth, MFA, machines, audit API + signaling broker
|
||||||
|
│ ├── auth.js scrypt passwords, TOTP MFA, tokens (no external auth deps)
|
||||||
|
│ ├── db.js Schema via Node's built-in node:sqlite
|
||||||
|
│ ├── public/ Web console (index.html) + remote viewer (viewer.html)
|
||||||
|
│ └── test/e2e.js 26-check end-to-end test of the whole backend flow
|
||||||
|
└── agent/ Native host agent (Electron)
|
||||||
|
├── main.js Consent window, screen source, OS input injection
|
||||||
|
├── input/inject.js Mouse/keyboard injection via nut-js (Win32 SendInput)
|
||||||
|
└── renderer/ Agent UI + WebRTC screen capture
|
||||||
|
```
|
||||||
|
|
||||||
|
## Quick start
|
||||||
|
|
||||||
|
### 1. Server (any OS, Node 22.5+)
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd server
|
||||||
|
npm install # only dependency is `ws`
|
||||||
|
npm start # serves http://localhost:8090
|
||||||
|
```
|
||||||
|
|
||||||
|
Open **http://localhost:8090**, click **Register team**, then set up MFA
|
||||||
|
(add the shown secret to Google Authenticator / Authy / 1Password and enter a code).
|
||||||
|
Log in, and enroll a machine — you'll get an `AGENT_ENROLL_TOKEN`.
|
||||||
|
|
||||||
|
### 2. Agent (on the Windows/macOS PC to be controlled)
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd agent
|
||||||
|
npm install # installs Electron + nut-js (input injection)
|
||||||
|
set SERVER_URL=http://<server-ip>:8090 # Windows
|
||||||
|
set AGENT_ENROLL_TOKEN=<token from console>
|
||||||
|
npm start
|
||||||
|
```
|
||||||
|
|
||||||
|
The agent window comes online; the machine shows green in the console.
|
||||||
|
Click **Connect** in the console — the agent shows a consent prompt. On **Allow**,
|
||||||
|
the technician sees the live screen and can control it. A red banner stays on the
|
||||||
|
host screen for the whole session, and every step is written to the audit log.
|
||||||
|
|
||||||
|
> Set a machine to **unattended** at enrollment to skip the consent prompt
|
||||||
|
> (for servers / headless machines), per the PRD's unattended-access policy.
|
||||||
|
|
||||||
|
## What's tested (in this sandbox)
|
||||||
|
|
||||||
|
```
|
||||||
|
cd server && npm test # 26/26 checks pass
|
||||||
|
cd agent && npm run test:input # 5/5 input-mapping checks pass
|
||||||
|
```
|
||||||
|
|
||||||
|
The e2e test drives the real backend: register → enable MFA → login (password +
|
||||||
|
TOTP) → enroll machine → agent connects → technician requests session → consent →
|
||||||
|
SDP/ICE relay → session end → audit verification → consent-denial path.
|
||||||
|
|
||||||
|
## What requires real hardware (not testable in a headless sandbox)
|
||||||
|
|
||||||
|
- **OS input injection** runs through `nut-js` (Win32 `SendInput` on Windows,
|
||||||
|
`CGEvent` on macOS). Without it installed, `inject.js` degrades to a safe
|
||||||
|
logging no-op so the agent still runs. Verify on a real desktop.
|
||||||
|
- **Screen capture** uses Electron's `desktopCapturer` / `getDisplayMedia`.
|
||||||
|
|
||||||
|
## Architecture notes
|
||||||
|
|
||||||
|
- **Media is peer-to-peer.** The server only brokers signaling (SDP/ICE) and
|
||||||
|
consent; screen frames and input never pass through it. Channels are
|
||||||
|
DTLS-encrypted by WebRTC.
|
||||||
|
- **NAT traversal** uses a public STUN server. ~10–15% of connections behind
|
||||||
|
symmetric NATs will need a **TURN relay** (coturn) — the next infra item.
|
||||||
|
- **Auth** uses scrypt password hashing and RFC-6238 TOTP, implemented on Node's
|
||||||
|
built-in `crypto` — no `bcrypt`/`jsonwebtoken`/`speakeasy` dependencies.
|
||||||
|
- **Storage** is `node:sqlite` (built into Node 22.5+), so the backend has a
|
||||||
|
single runtime dependency (`ws`).
|
||||||
|
|
||||||
|
## Gaps before production (from PRD §5)
|
||||||
|
|
||||||
|
1. **TURN relay** for non-P2P connections (coturn).
|
||||||
|
2. **macOS/Linux agents** + code-signed installers; packaged Windows binary.
|
||||||
|
3. **File transfer, clipboard sync, multi-monitor** (PRD P1).
|
||||||
|
4. **SSO, session recording, SOC 2** (PRD P1/T8).
|
||||||
|
5. Harden signaling: rate limiting, per-session authz checks, CSRF on cookie API.
|
||||||
@@ -0,0 +1,51 @@
|
|||||||
|
@echo off
|
||||||
|
setlocal
|
||||||
|
title Remote Access Platform - Setup
|
||||||
|
echo ============================================
|
||||||
|
echo Remote Access Platform - Setup
|
||||||
|
echo ============================================
|
||||||
|
echo.
|
||||||
|
|
||||||
|
REM --- Check Node.js ---
|
||||||
|
where node >nul 2>nul
|
||||||
|
if errorlevel 1 (
|
||||||
|
echo [X] Node.js is not installed.
|
||||||
|
echo Please install Node.js 22.5 or newer from https://nodejs.org
|
||||||
|
echo Then run this SETUP.bat again.
|
||||||
|
echo.
|
||||||
|
pause
|
||||||
|
exit /b 1
|
||||||
|
)
|
||||||
|
for /f "tokens=*" %%v in ('node -v') do set NODEV=%%v
|
||||||
|
echo [OK] Node.js found: %NODEV%
|
||||||
|
echo.
|
||||||
|
|
||||||
|
REM --- Install server dependencies ---
|
||||||
|
echo Installing SERVER dependencies...
|
||||||
|
pushd "%~dp0server"
|
||||||
|
call npm install --no-audit --no-fund
|
||||||
|
if errorlevel 1 ( echo [X] Server install failed. & popd & pause & exit /b 1 )
|
||||||
|
popd
|
||||||
|
echo [OK] Server ready.
|
||||||
|
echo.
|
||||||
|
|
||||||
|
REM --- Install agent dependencies (Electron + input injection) ---
|
||||||
|
echo Installing AGENT dependencies (Electron download may take a few minutes)...
|
||||||
|
pushd "%~dp0agent"
|
||||||
|
call npm install --no-audit --no-fund
|
||||||
|
if errorlevel 1 ( echo [!] Agent install had issues. Input injection may be limited, but the agent will still run. )
|
||||||
|
popd
|
||||||
|
echo [OK] Agent ready.
|
||||||
|
echo.
|
||||||
|
|
||||||
|
echo ============================================
|
||||||
|
echo Setup complete!
|
||||||
|
echo ============================================
|
||||||
|
echo.
|
||||||
|
echo Next steps:
|
||||||
|
echo 1. Double-click Start-Server.bat
|
||||||
|
echo 2. Open http://localhost:8090 in your browser
|
||||||
|
echo 3. Register a team, set up 2FA, enroll a machine (copy the token)
|
||||||
|
echo 4. Double-click Start-Agent.bat and paste the token
|
||||||
|
echo.
|
||||||
|
pause
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
@echo off
|
||||||
|
setlocal
|
||||||
|
title Remote Access - Agent
|
||||||
|
echo ============================================
|
||||||
|
echo Remote Access Agent
|
||||||
|
echo ============================================
|
||||||
|
echo.
|
||||||
|
set "DEF_URL=http://localhost:8090"
|
||||||
|
set /p SERVER_URL=Server URL [%DEF_URL%]:
|
||||||
|
if "%SERVER_URL%"=="" set SERVER_URL=%DEF_URL%
|
||||||
|
echo.
|
||||||
|
set /p AGENT_ENROLL_TOKEN=Paste the enroll token from the console:
|
||||||
|
if "%AGENT_ENROLL_TOKEN%"=="" ( echo [X] No token entered. & pause & exit /b 1 )
|
||||||
|
echo.
|
||||||
|
echo Connecting to %SERVER_URL% ...
|
||||||
|
cd /d "%~dp0agent"
|
||||||
|
call npm start
|
||||||
|
pause
|
||||||
@@ -0,0 +1,8 @@
|
|||||||
|
@echo off
|
||||||
|
title Remote Access - Server
|
||||||
|
echo Starting server on http://localhost:8090 ...
|
||||||
|
echo (Keep this window open. Press Ctrl+C to stop.)
|
||||||
|
echo.
|
||||||
|
cd /d "%~dp0server"
|
||||||
|
node server.js
|
||||||
|
pause
|
||||||
@@ -0,0 +1,34 @@
|
|||||||
|
# Dependencies
|
||||||
|
node_modules/
|
||||||
|
|
||||||
|
# Logs
|
||||||
|
*.log
|
||||||
|
npm-debug.log*
|
||||||
|
|
||||||
|
# Database files
|
||||||
|
*.db
|
||||||
|
*.db-shm
|
||||||
|
*.db-wal
|
||||||
|
*.sqlite
|
||||||
|
|
||||||
|
# Certificates & keys
|
||||||
|
*.pem
|
||||||
|
*.key
|
||||||
|
*.crt
|
||||||
|
|
||||||
|
# Environment files
|
||||||
|
.env
|
||||||
|
.env.*
|
||||||
|
|
||||||
|
# Build output
|
||||||
|
dist/
|
||||||
|
build/
|
||||||
|
out/
|
||||||
|
|
||||||
|
# OS files
|
||||||
|
.DS_Store
|
||||||
|
Thumbs.db
|
||||||
|
|
||||||
|
# Editor
|
||||||
|
.vscode/
|
||||||
|
.idea/
|
||||||
@@ -0,0 +1,103 @@
|
|||||||
|
// OS input injection layer.
|
||||||
|
//
|
||||||
|
// Cross-platform mouse/keyboard control via @nut-tree-fork/nut-js (optional
|
||||||
|
// native dependency). If nut-js isn't installed (e.g. CI, or a sandbox without
|
||||||
|
// a display), this module degrades to a logging no-op so the rest of the agent
|
||||||
|
// still runs and can be tested. On Windows, nut-js drives the Win32 SendInput
|
||||||
|
// API under the hood — the same mechanism TeamViewer/AnyDesk use.
|
||||||
|
|
||||||
|
let nut = null;
|
||||||
|
try {
|
||||||
|
// eslint-disable-next-line import/no-extraneous-dependencies
|
||||||
|
nut = require('@nut-tree-fork/nut-js');
|
||||||
|
nut.mouse.config.autoDelayMs = 0;
|
||||||
|
nut.keyboard.config.autoDelayMs = 0;
|
||||||
|
} catch {
|
||||||
|
nut = null;
|
||||||
|
}
|
||||||
|
|
||||||
|
const available = !!nut;
|
||||||
|
|
||||||
|
// Map browser KeyboardEvent.key values to nut-js Key enum names.
|
||||||
|
function mapKey(key, code) {
|
||||||
|
if (!nut) return null;
|
||||||
|
const K = nut.Key;
|
||||||
|
const direct = {
|
||||||
|
'Enter': K.Enter, 'Backspace': K.Backspace, 'Tab': K.Tab, 'Escape': K.Escape,
|
||||||
|
' ': K.Space, 'ArrowLeft': K.Left, 'ArrowRight': K.Right, 'ArrowUp': K.Up, 'ArrowDown': K.Down,
|
||||||
|
'Home': K.Home, 'End': K.End, 'PageUp': K.PageUp, 'PageDown': K.PageDown, 'Delete': K.Delete,
|
||||||
|
'Control': K.LeftControl, 'Shift': K.LeftShift, 'Alt': K.LeftAlt, 'Meta': K.LeftSuper,
|
||||||
|
'CapsLock': K.CapsLock,
|
||||||
|
};
|
||||||
|
if (direct[key] !== undefined) return [direct[key]];
|
||||||
|
if (/^F\d{1,2}$/.test(key) && K[key] !== undefined) return [K[key]];
|
||||||
|
if (key && key.length === 1) {
|
||||||
|
const upper = key.toUpperCase();
|
||||||
|
if (/[A-Z]/.test(upper) && K[upper] !== undefined) return [K[upper]];
|
||||||
|
if (/[0-9]/.test(key) && K['Num' + key] !== undefined) return [K['Num' + key]];
|
||||||
|
// Fall back to typing the literal character (handles symbols/shifted chars)
|
||||||
|
return { type: key };
|
||||||
|
}
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async function moveTo(xNorm, yNorm) {
|
||||||
|
if (!nut) return;
|
||||||
|
const { width, height } = await nut.screen.getResolution();
|
||||||
|
await nut.mouse.setPosition(new nut.Point(Math.round(xNorm * width), Math.round(yNorm * height)));
|
||||||
|
}
|
||||||
|
|
||||||
|
function buttonEnum(b) {
|
||||||
|
if (!nut) return null;
|
||||||
|
return b === 2 ? nut.Button.RIGHT : b === 1 ? nut.Button.MIDDLE : nut.Button.LEFT;
|
||||||
|
}
|
||||||
|
|
||||||
|
const pressed = new Set();
|
||||||
|
|
||||||
|
// Inject a single normalized input event coming from the viewer.
|
||||||
|
async function inject(evt) {
|
||||||
|
if (!nut) {
|
||||||
|
if (evt.kind !== 'mousemove') console.log('[input:noop]', JSON.stringify(evt));
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
switch (evt.kind) {
|
||||||
|
case 'mousemove':
|
||||||
|
await moveTo(evt.x, evt.y); break;
|
||||||
|
case 'mousedown':
|
||||||
|
await moveTo(evt.x, evt.y); await nut.mouse.pressButton(buttonEnum(evt.button)); break;
|
||||||
|
case 'mouseup':
|
||||||
|
await nut.mouse.releaseButton(buttonEnum(evt.button)); break;
|
||||||
|
case 'dblclick':
|
||||||
|
await moveTo(evt.x, evt.y); await nut.mouse.doubleClick(nut.Button.LEFT); break;
|
||||||
|
case 'scroll':
|
||||||
|
if (evt.dy) await (evt.dy > 0 ? nut.mouse.scrollDown(Math.abs(evt.dy)) : nut.mouse.scrollUp(Math.abs(evt.dy)));
|
||||||
|
if (evt.dx) await (evt.dx > 0 ? nut.mouse.scrollRight(Math.abs(evt.dx)) : nut.mouse.scrollLeft(Math.abs(evt.dx)));
|
||||||
|
break;
|
||||||
|
case 'keydown': {
|
||||||
|
const m = mapKey(evt.key, evt.code);
|
||||||
|
if (!m) break;
|
||||||
|
if (m.type) { await nut.keyboard.type(m.type); break; }
|
||||||
|
await nut.keyboard.pressKey(...m); m.forEach((k) => pressed.add(k));
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
case 'keyup': {
|
||||||
|
const m = mapKey(evt.key, evt.code);
|
||||||
|
if (!m || m.type) break;
|
||||||
|
await nut.keyboard.releaseKey(...m); m.forEach((k) => pressed.delete(k));
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
} catch (e) {
|
||||||
|
console.error('[input] inject error:', e.message);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Safety: release any stuck modifier keys when a session ends.
|
||||||
|
async function releaseAll() {
|
||||||
|
if (!nut) { pressed.clear(); return; }
|
||||||
|
for (const k of pressed) { try { await nut.keyboard.releaseKey(k); } catch {} }
|
||||||
|
pressed.clear();
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = { inject, releaseAll, available, mapKey };
|
||||||
@@ -0,0 +1,44 @@
|
|||||||
|
// Unit test for the input mapping logic — runs without a display or nut-js.
|
||||||
|
// Verifies keymap returns sane shapes and inject() no-ops gracefully.
|
||||||
|
const inject = require('./inject');
|
||||||
|
const assert = require('assert');
|
||||||
|
|
||||||
|
let pass = 0;
|
||||||
|
function check(name, cond) {
|
||||||
|
assert.ok(cond, name);
|
||||||
|
console.log(' ok -', name);
|
||||||
|
pass++;
|
||||||
|
}
|
||||||
|
|
||||||
|
(async () => {
|
||||||
|
console.log('input layer tests:');
|
||||||
|
check('module exposes inject/releaseAll/available', typeof inject.inject === 'function' && typeof inject.releaseAll === 'function');
|
||||||
|
check('available is boolean', typeof inject.available === 'boolean');
|
||||||
|
|
||||||
|
// mapKey returns null when nut-js absent (sandbox) — that is expected & safe.
|
||||||
|
if (!inject.available) {
|
||||||
|
check('mapKey is null-safe without nut-js', inject.mapKey('a', 'KeyA') === null);
|
||||||
|
} else {
|
||||||
|
check('mapKey letter -> array', Array.isArray(inject.mapKey('a', 'KeyA')));
|
||||||
|
check('mapKey Enter -> array', Array.isArray(inject.mapKey('Enter', 'Enter')));
|
||||||
|
check('mapKey symbol -> type fallback', inject.mapKey('@', 'Digit2').type === '@');
|
||||||
|
}
|
||||||
|
|
||||||
|
// inject() must not throw on any event kind, even with no backend.
|
||||||
|
for (const evt of [
|
||||||
|
{ kind: 'mousemove', x: 0.5, y: 0.5 },
|
||||||
|
{ kind: 'mousedown', button: 0, x: 0.1, y: 0.2 },
|
||||||
|
{ kind: 'mouseup', button: 0 },
|
||||||
|
{ kind: 'dblclick', x: 0.3, y: 0.3 },
|
||||||
|
{ kind: 'scroll', dx: 0, dy: 120 },
|
||||||
|
{ kind: 'keydown', key: 'a', code: 'KeyA' },
|
||||||
|
{ kind: 'keyup', key: 'a', code: 'KeyA' },
|
||||||
|
]) {
|
||||||
|
await inject.inject(evt);
|
||||||
|
}
|
||||||
|
check('inject handled all event kinds without throwing', true);
|
||||||
|
await inject.releaseAll();
|
||||||
|
check('releaseAll clears state', true);
|
||||||
|
|
||||||
|
console.log(`\n${pass} checks passed.`);
|
||||||
|
})();
|
||||||
@@ -0,0 +1,47 @@
|
|||||||
|
// OS input injection for Windows via user32 SendInput (koffi FFI).
|
||||||
|
// On non-Windows platforms, exports a stub that logs instead of injecting,
|
||||||
|
// so the agent can run in dev/test environments.
|
||||||
|
|
||||||
|
const { toVirtualKey } = require('./keymap');
|
||||||
|
|
||||||
|
const MOUSEEVENTF_MOVE = 0x0001;
|
||||||
|
const MOUSEEVENTF_ABSOLUTE = 0x8000;
|
||||||
|
const MOUSEEVENTF_LEFTDOWN = 0x0002;
|
||||||
|
const MOUSEEVENTF_LEFTUP = 0x0004;
|
||||||
|
const MOUSEEVENTF_RIGHTDOWN = 0x0008;
|
||||||
|
const MOUSEEVENTF_RIGHTUP = 0x0010;
|
||||||
|
const MOUSEEVENTF_MIDDLEDOWN = 0x0020;
|
||||||
|
const MOUSEEVENTF_MIDDLEUP = 0x0040;
|
||||||
|
const MOUSEEVENTF_WHEEL = 0x0800;
|
||||||
|
const KEYEVENTF_KEYUP = 0x0002;
|
||||||
|
const INPUT_MOUSE = 0;
|
||||||
|
const INPUT_KEYBOARD = 1;
|
||||||
|
|
||||||
|
const BUTTON_DOWN = { 0: MOUSEEVENTF_LEFTDOWN, 1: MOUSEEVENTF_MIDDLEDOWN, 2: MOUSEEVENTF_RIGHTDOWN };
|
||||||
|
const BUTTON_UP = { 0: MOUSEEVENTF_LEFTUP, 1: MOUSEEVENTF_MIDDLEUP, 2: MOUSEEVENTF_RIGHTUP };
|
||||||
|
|
||||||
|
function createWindowsInjector() {
|
||||||
|
const koffi = require('koffi');
|
||||||
|
const user32 = koffi.load('user32.dll');
|
||||||
|
|
||||||
|
const MOUSEINPUT = koffi.struct('MOUSEINPUT', {
|
||||||
|
dx: 'long', dy: 'long', mouseData: 'int32',
|
||||||
|
dwFlags: 'uint32', time: 'uint32', dwExtraInfo: 'uintptr_t',
|
||||||
|
});
|
||||||
|
const KEYBDINPUT = koffi.struct('KEYBDINPUT', {
|
||||||
|
wVk: 'uint16', wScan: 'uint16',
|
||||||
|
dwFlags: 'uint32', time: 'uint32', dwExtraInfo: 'uintptr_t',
|
||||||
|
});
|
||||||
|
const HARDWAREINPUT = koffi.struct('HARDWAREINPUT', {
|
||||||
|
uMsg: 'uint32', wParamL: 'uint16', wParamH: 'uint16',
|
||||||
|
});
|
||||||
|
const INPUT_UNION = koffi.union('INPUT_UNION', {
|
||||||
|
mi: MOUSEINPUT, ki: KEYBDINPUT, hi: HARDWAREINPUT,
|
||||||
|
});
|
||||||
|
const INPUT = koffi.struct('INPUT', { type: 'uint32', u: INPUT_UNION });
|
||||||
|
|
||||||
|
const SendInput = user32.func('uint32 SendInput(uint32 cInputs, INPUT *pInputs, int cbSize)');
|
||||||
|
const INPUT_SIZE = koffi.sizeof(INPUT);
|
||||||
|
|
||||||
|
function sendMouse(mi) {
|
||||||
|
SendInput(1, [{ type: INPUT_MOUSE, u: { mi:
|
||||||
@@ -0,0 +1,71 @@
|
|||||||
|
// Maps browser KeyboardEvent.code values to Windows virtual-key codes.
|
||||||
|
// Reference: https://learn.microsoft.com/en-us/windows/win32/inputdev/virtual-key-codes
|
||||||
|
|
||||||
|
const VK = {};
|
||||||
|
|
||||||
|
// Letters (KeyA..KeyZ -> 0x41..0x5A)
|
||||||
|
for (let i = 0; i < 26; i++) VK['Key' + String.fromCharCode(65 + i)] = 0x41 + i;
|
||||||
|
// Top-row digits (Digit0..Digit9 -> 0x30..0x39)
|
||||||
|
for (let i = 0; i <= 9; i++) VK['Digit' + i] = 0x30 + i;
|
||||||
|
// Numpad digits
|
||||||
|
for (let i = 0; i <= 9; i++) VK['Numpad' + i] = 0x60 + i;
|
||||||
|
// Function keys
|
||||||
|
for (let i = 1; i <= 24; i++) VK['F' + i] = 0x70 + (i - 1);
|
||||||
|
|
||||||
|
Object.assign(VK, {
|
||||||
|
Escape: 0x1b,
|
||||||
|
Tab: 0x09,
|
||||||
|
CapsLock: 0x14,
|
||||||
|
ShiftLeft: 0xa0,
|
||||||
|
ShiftRight: 0xa1,
|
||||||
|
ControlLeft: 0xa2,
|
||||||
|
ControlRight: 0xa3,
|
||||||
|
AltLeft: 0xa4,
|
||||||
|
AltRight: 0xa5,
|
||||||
|
MetaLeft: 0x5b,
|
||||||
|
MetaRight: 0x5c,
|
||||||
|
ContextMenu: 0x5d,
|
||||||
|
Space: 0x20,
|
||||||
|
Enter: 0x0d,
|
||||||
|
NumpadEnter: 0x0d,
|
||||||
|
Backspace: 0x08,
|
||||||
|
Delete: 0x2e,
|
||||||
|
Insert: 0x2d,
|
||||||
|
Home: 0x24,
|
||||||
|
End: 0x23,
|
||||||
|
PageUp: 0x21,
|
||||||
|
PageDown: 0x22,
|
||||||
|
ArrowUp: 0x26,
|
||||||
|
ArrowDown: 0x28,
|
||||||
|
ArrowLeft: 0x25,
|
||||||
|
ArrowRight: 0x27,
|
||||||
|
PrintScreen: 0x2c,
|
||||||
|
ScrollLock: 0x91,
|
||||||
|
Pause: 0x13,
|
||||||
|
NumLock: 0x90,
|
||||||
|
// OEM punctuation (US layout)
|
||||||
|
Semicolon: 0xba,
|
||||||
|
Equal: 0xbb,
|
||||||
|
Comma: 0xbc,
|
||||||
|
Minus: 0xbd,
|
||||||
|
Period: 0xbe,
|
||||||
|
Slash: 0xbf,
|
||||||
|
Backquote: 0xc0,
|
||||||
|
BracketLeft: 0xdb,
|
||||||
|
Backslash: 0xdc,
|
||||||
|
BracketRight: 0xdd,
|
||||||
|
Quote: 0xde,
|
||||||
|
// Numpad operators
|
||||||
|
NumpadMultiply: 0x6a,
|
||||||
|
NumpadAdd: 0x6b,
|
||||||
|
NumpadSubtract: 0x6d,
|
||||||
|
NumpadDecimal: 0x6e,
|
||||||
|
NumpadDivide: 0x6f,
|
||||||
|
});
|
||||||
|
|
||||||
|
/** @param {string} code KeyboardEvent.code @returns {number|undefined} Windows VK code */
|
||||||
|
function toVirtualKey(code) {
|
||||||
|
return VK[code];
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = { toVirtualKey, VK };
|
||||||
@@ -0,0 +1,66 @@
|
|||||||
|
// Electron main process for the host agent.
|
||||||
|
// Owns: the consent window, screen-source selection, and OS input injection.
|
||||||
|
// WebRTC lives in the renderer (it needs a DOM/navigator); input events arrive
|
||||||
|
// from the renderer over IPC and are injected here.
|
||||||
|
const { app, BrowserWindow, ipcMain, desktopCapturer, screen } = require('electron');
|
||||||
|
const path = require('path');
|
||||||
|
const injector = require('./input/inject');
|
||||||
|
|
||||||
|
const SERVER_URL = process.env.SERVER_URL || 'http://localhost:8090';
|
||||||
|
const ENROLL_TOKEN = process.env.AGENT_ENROLL_TOKEN || '';
|
||||||
|
|
||||||
|
let win;
|
||||||
|
|
||||||
|
function createWindow() {
|
||||||
|
win = new BrowserWindow({
|
||||||
|
width: 460,
|
||||||
|
height: 560,
|
||||||
|
resizable: false,
|
||||||
|
title: 'Remote Access Agent',
|
||||||
|
webPreferences: {
|
||||||
|
preload: path.join(__dirname, 'preload.js'),
|
||||||
|
contextIsolation: true,
|
||||||
|
nodeIntegration: false,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
win.loadFile(path.join(__dirname, 'renderer', 'agent.html'));
|
||||||
|
// Pass config to the renderer once loaded
|
||||||
|
win.webContents.on('did-finish-load', () => {
|
||||||
|
win.webContents.send('config', { serverUrl: SERVER_URL, enrollToken: ENROLL_TOKEN });
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
// ---- Screen source for getDisplayMedia (Electron requires a handler) ----
|
||||||
|
function registerDisplayMediaHandler() {
|
||||||
|
const { session } = require('electron');
|
||||||
|
session.defaultSession.setDisplayMediaRequestHandler((request, callback) => {
|
||||||
|
desktopCapturer.getSources({ types: ['screen'] }).then((sources) => {
|
||||||
|
// Default to the primary display; production would let the user pick.
|
||||||
|
callback({ video: sources[0], audio: 'loopback' });
|
||||||
|
});
|
||||||
|
}, { useSystemPicker: false });
|
||||||
|
}
|
||||||
|
|
||||||
|
// ---- IPC: renderer forwards remote input events here for OS injection ----
|
||||||
|
ipcMain.on('inject-input', (_e, evt) => {
|
||||||
|
injector.inject(evt);
|
||||||
|
});
|
||||||
|
ipcMain.on('session-ended', () => {
|
||||||
|
injector.releaseAll();
|
||||||
|
});
|
||||||
|
ipcMain.handle('get-primary-size', () => {
|
||||||
|
const { size } = screen.getPrimaryDisplay();
|
||||||
|
return size;
|
||||||
|
});
|
||||||
|
|
||||||
|
app.whenReady().then(() => {
|
||||||
|
registerDisplayMediaHandler();
|
||||||
|
createWindow();
|
||||||
|
app.on('activate', () => {
|
||||||
|
if (BrowserWindow.getAllWindows().length === 0) createWindow();
|
||||||
|
});
|
||||||
|
});
|
||||||
|
|
||||||
|
app.on('window-all-closed', () => {
|
||||||
|
if (process.platform !== 'darwin') app.quit();
|
||||||
|
});
|
||||||
wygenerowano
+2491
Plik diff jest za duży
Load Diff
@@ -0,0 +1,19 @@
|
|||||||
|
{
|
||||||
|
"name": "remote-access-agent",
|
||||||
|
"version": "0.2.0",
|
||||||
|
"description": "Native host agent — screen capture, WebRTC, consent, OS input injection",
|
||||||
|
"main": "main.js",
|
||||||
|
"scripts": {
|
||||||
|
"start": "electron .",
|
||||||
|
"test:input": "node input/inject.test.js"
|
||||||
|
},
|
||||||
|
"dependencies": {
|
||||||
|
"ws": "^8.18.0"
|
||||||
|
},
|
||||||
|
"optionalDependencies": {
|
||||||
|
"@nut-tree-fork/nut-js": "^4.2.0"
|
||||||
|
},
|
||||||
|
"devDependencies": {
|
||||||
|
"electron": "^31.0.0"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,9 @@
|
|||||||
|
// Secure bridge between the sandboxed renderer and the main process.
|
||||||
|
const { contextBridge, ipcRenderer } = require('electron');
|
||||||
|
|
||||||
|
contextBridge.exposeInMainWorld('agent', {
|
||||||
|
onConfig: (cb) => ipcRenderer.on('config', (_e, cfg) => cb(cfg)),
|
||||||
|
injectInput: (evt) => ipcRenderer.send('inject-input', evt),
|
||||||
|
sessionEnded: () => ipcRenderer.send('session-ended'),
|
||||||
|
getPrimarySize: () => ipcRenderer.invoke('get-primary-size'),
|
||||||
|
});
|
||||||
@@ -0,0 +1,33 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>Remote Access Agent</title>
|
||||||
|
<style>
|
||||||
|
body { font-family: system-ui, sans-serif; background: #0f172a; color: #e2e8f0; margin: 0; padding: 1.5rem; }
|
||||||
|
h1 { font-size: 1.1rem; }
|
||||||
|
.status { background: #1e293b; padding: 0.7rem 1rem; border-radius: 8px; margin: 0.8rem 0; font-size: 0.9rem; }
|
||||||
|
.status.on { background: #14532d; }
|
||||||
|
.status.warn { background: #7c2d12; }
|
||||||
|
.consent { background: #1e293b; border: 1px solid #3b82f6; border-radius: 10px; padding: 1.2rem; margin-top: 1rem; }
|
||||||
|
.consent h2 { font-size: 1rem; margin: 0 0 0.5rem; }
|
||||||
|
button { padding: 0.6rem 1.2rem; border: none; border-radius: 8px; font-weight: 600; cursor: pointer; }
|
||||||
|
.grant { background: #22c55e; color: #052e16; }
|
||||||
|
.deny { background: #ef4444; color: #fff; margin-left: 0.5rem; }
|
||||||
|
.muted { color: #94a3b8; font-size: 0.82rem; }
|
||||||
|
.indicator { position: fixed; bottom: 0; left: 0; right: 0; background: #b91c1c; color: #fff; text-align: center; padding: 0.4rem; font-size: 0.85rem; display: none; }
|
||||||
|
.indicator.show { display: block; }
|
||||||
|
#log { font-family: monospace; font-size: 0.72rem; color: #64748b; height: 120px; overflow-y: auto; margin-top: 1rem; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<h1>🛡️ Remote Access Agent</h1>
|
||||||
|
<div id="status" class="status">Starting…</div>
|
||||||
|
<div id="consentBox"></div>
|
||||||
|
<p class="muted">This machine accepts remote support sessions. You'll be asked to approve each connection unless an unattended-access policy is set.</p>
|
||||||
|
<div id="log"></div>
|
||||||
|
<div id="indicator" class="indicator">● A technician is currently viewing/controlling this screen</div>
|
||||||
|
|
||||||
|
<script src="agent.js"></script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,135 @@
|
|||||||
|
// Agent renderer: connects to the signaling server, handles consent,
|
||||||
|
// captures the screen, and streams it over WebRTC to the technician's viewer.
|
||||||
|
// Remote input events arrive on the data channel and are handed to the main
|
||||||
|
// process (via the preload bridge) for OS-level injection.
|
||||||
|
|
||||||
|
const statusEl = document.getElementById('status');
|
||||||
|
const consentBox = document.getElementById('consentBox');
|
||||||
|
const indicator = document.getElementById('indicator');
|
||||||
|
const logEl = document.getElementById('log');
|
||||||
|
|
||||||
|
let cfg = null;
|
||||||
|
let ws = null;
|
||||||
|
let pc = null;
|
||||||
|
let localStream = null;
|
||||||
|
let currentSessionId = null;
|
||||||
|
|
||||||
|
const log = (t) => { const d = document.createElement('div'); d.textContent = t; logEl.appendChild(d); logEl.scrollTop = logEl.scrollHeight; };
|
||||||
|
const setStatus = (t, cls = '') => { statusEl.textContent = t; statusEl.className = 'status ' + cls; };
|
||||||
|
|
||||||
|
window.agent.onConfig((c) => {
|
||||||
|
cfg = c;
|
||||||
|
if (!cfg.enrollToken) {
|
||||||
|
setStatus('No enroll token. Set AGENT_ENROLL_TOKEN and restart.', 'warn');
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
connect();
|
||||||
|
});
|
||||||
|
|
||||||
|
function wsUrl() {
|
||||||
|
const u = new URL(cfg.serverUrl);
|
||||||
|
const proto = u.protocol === 'https:' ? 'wss:' : 'ws:';
|
||||||
|
return `${proto}//${u.host}/ws`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function connect() {
|
||||||
|
setStatus('Connecting to server…');
|
||||||
|
ws = new WebSocket(wsUrl());
|
||||||
|
ws.onopen = () => {
|
||||||
|
ws.send(JSON.stringify({ type: 'agent-hello', enrollToken: cfg.enrollToken }));
|
||||||
|
};
|
||||||
|
ws.onmessage = (e) => handle(JSON.parse(e.data));
|
||||||
|
ws.onclose = () => { setStatus('Disconnected. Reconnecting in 3s…', 'warn'); setTimeout(connect, 3000); };
|
||||||
|
}
|
||||||
|
|
||||||
|
async function handle(m) {
|
||||||
|
switch (m.type) {
|
||||||
|
case 'agent-registered':
|
||||||
|
setStatus(`Online as "${m.name}". Waiting for sessions.`, 'on');
|
||||||
|
log(`registered: ${m.name}`);
|
||||||
|
break;
|
||||||
|
|
||||||
|
case 'session-request':
|
||||||
|
if (m.unattended) { log(`unattended session ${m.sessionId} — auto-granting`); grant(m.sessionId); }
|
||||||
|
else showConsent(m);
|
||||||
|
break;
|
||||||
|
|
||||||
|
case 'start-stream':
|
||||||
|
currentSessionId = m.sessionId;
|
||||||
|
await startStreaming();
|
||||||
|
break;
|
||||||
|
|
||||||
|
case 'answer':
|
||||||
|
if (pc) await pc.setRemoteDescription(new RTCSessionDescription(m.sdp));
|
||||||
|
break;
|
||||||
|
case 'ice-candidate':
|
||||||
|
if (m.candidate && pc) await pc.addIceCandidate(new RTCIceCandidate(m.candidate));
|
||||||
|
break;
|
||||||
|
|
||||||
|
case 'session-ended':
|
||||||
|
teardown();
|
||||||
|
break;
|
||||||
|
case 'error':
|
||||||
|
setStatus('Server: ' + m.message, 'warn');
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function showConsent(m) {
|
||||||
|
consentBox.innerHTML = `
|
||||||
|
<div class="consent">
|
||||||
|
<h2>Allow remote support?</h2>
|
||||||
|
<p class="muted"><b>${escapeHtml(m.technician)}</b> is requesting to view and control this PC.</p>
|
||||||
|
<button class="grant" id="grantBtn">Allow</button>
|
||||||
|
<button class="deny" id="denyBtn">Deny</button>
|
||||||
|
</div>`;
|
||||||
|
document.getElementById('grantBtn').onclick = () => { consentBox.innerHTML = ''; grant(m.sessionId); };
|
||||||
|
document.getElementById('denyBtn').onclick = () => { consentBox.innerHTML = ''; deny(m.sessionId); };
|
||||||
|
}
|
||||||
|
|
||||||
|
const grant = (sessionId) => ws.send(JSON.stringify({ type: 'consent', sessionId, granted: true }));
|
||||||
|
const deny = (sessionId) => ws.send(JSON.stringify({ type: 'consent', sessionId, granted: false }));
|
||||||
|
|
||||||
|
async function startStreaming() {
|
||||||
|
setStatus('Sharing screen with technician…', 'on');
|
||||||
|
indicator.classList.add('show');
|
||||||
|
try {
|
||||||
|
localStream = await navigator.mediaDevices.getDisplayMedia({ video: { frameRate: { ideal: 30 } }, audio: false });
|
||||||
|
} catch (err) {
|
||||||
|
log('getDisplayMedia failed: ' + err.message);
|
||||||
|
setStatus('Screen capture failed.', 'warn');
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
pc = new RTCPeerConnection({ iceServers: [{ urls: 'stun:stun.l.google.com:19302' }] });
|
||||||
|
localStream.getTracks().forEach((t) => pc.addTrack(t, localStream));
|
||||||
|
|
||||||
|
// Viewer creates the input data channel; we receive it here.
|
||||||
|
pc.ondatachannel = (ev) => {
|
||||||
|
const ch = ev.channel;
|
||||||
|
ch.onmessage = (msg) => {
|
||||||
|
let evt; try { evt = JSON.parse(msg.data); } catch { return; }
|
||||||
|
window.agent.injectInput(evt); // -> main process -> OS injection
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
pc.onicecandidate = (ev) => {
|
||||||
|
if (ev.candidate) ws.send(JSON.stringify({ type: 'ice-candidate', sessionId: currentSessionId, candidate: ev.candidate }));
|
||||||
|
};
|
||||||
|
|
||||||
|
const offer = await pc.createOffer();
|
||||||
|
await pc.setLocalDescription(offer);
|
||||||
|
ws.send(JSON.stringify({ type: 'offer', sessionId: currentSessionId, sdp: pc.localDescription }));
|
||||||
|
log('sent offer for session ' + currentSessionId);
|
||||||
|
}
|
||||||
|
|
||||||
|
function teardown() {
|
||||||
|
indicator.classList.remove('show');
|
||||||
|
window.agent.sessionEnded();
|
||||||
|
if (localStream) { localStream.getTracks().forEach((t) => t.stop()); localStream = null; }
|
||||||
|
if (pc) { pc.close(); pc = null; }
|
||||||
|
currentSessionId = null;
|
||||||
|
setStatus('Session ended. Waiting for sessions.', 'on');
|
||||||
|
}
|
||||||
|
|
||||||
|
function escapeHtml(s) { return String(s).replace(/[&<>"]/g, (c) => ({ '&': '&', '<': '<', '>': '>', '"': '"' }[c])); }
|
||||||
@@ -0,0 +1,34 @@
|
|||||||
|
# Dependencies
|
||||||
|
node_modules/
|
||||||
|
|
||||||
|
# Logs
|
||||||
|
*.log
|
||||||
|
npm-debug.log*
|
||||||
|
|
||||||
|
# Database files
|
||||||
|
*.db
|
||||||
|
*.db-shm
|
||||||
|
*.db-wal
|
||||||
|
*.sqlite
|
||||||
|
|
||||||
|
# Certificates & keys
|
||||||
|
*.pem
|
||||||
|
*.key
|
||||||
|
*.crt
|
||||||
|
|
||||||
|
# Environment files
|
||||||
|
.env
|
||||||
|
.env.*
|
||||||
|
|
||||||
|
# Build output
|
||||||
|
dist/
|
||||||
|
build/
|
||||||
|
out/
|
||||||
|
|
||||||
|
# OS files
|
||||||
|
.DS_Store
|
||||||
|
Thumbs.db
|
||||||
|
|
||||||
|
# Editor
|
||||||
|
.vscode/
|
||||||
|
.idea/
|
||||||
@@ -0,0 +1,75 @@
|
|||||||
|
// Auth utilities — password hashing (scrypt), tokens, and TOTP MFA.
|
||||||
|
// Uses only Node's built-in crypto, no external auth deps.
|
||||||
|
const crypto = require('crypto');
|
||||||
|
|
||||||
|
// ---- Passwords (scrypt) ----
|
||||||
|
function hashPassword(password, salt = crypto.randomBytes(16).toString('hex')) {
|
||||||
|
const hash = crypto.scryptSync(password, salt, 64).toString('hex');
|
||||||
|
return { hash, salt };
|
||||||
|
}
|
||||||
|
function verifyPassword(password, salt, expectedHash) {
|
||||||
|
const hash = crypto.scryptSync(password, salt, 64).toString('hex');
|
||||||
|
return crypto.timingSafeEqual(Buffer.from(hash), Buffer.from(expectedHash));
|
||||||
|
}
|
||||||
|
|
||||||
|
// ---- Random tokens ----
|
||||||
|
const token = (bytes = 24) => crypto.randomBytes(bytes).toString('hex');
|
||||||
|
const id = () => crypto.randomBytes(8).toString('hex');
|
||||||
|
const numericCode = (digits = 6) =>
|
||||||
|
String(crypto.randomInt(0, 10 ** digits)).padStart(digits, '0');
|
||||||
|
|
||||||
|
// ---- TOTP (RFC 6238), SHA-1, 30s, 6 digits ----
|
||||||
|
const B32 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
|
||||||
|
function base32Encode(buf) {
|
||||||
|
let bits = 0, value = 0, out = '';
|
||||||
|
for (const byte of buf) {
|
||||||
|
value = (value << 8) | byte; bits += 8;
|
||||||
|
while (bits >= 5) { out += B32[(value >>> (bits - 5)) & 31]; bits -= 5; }
|
||||||
|
}
|
||||||
|
if (bits > 0) out += B32[(value << (5 - bits)) & 31];
|
||||||
|
return out;
|
||||||
|
}
|
||||||
|
function base32Decode(str) {
|
||||||
|
const clean = str.replace(/=+$/, '').toUpperCase();
|
||||||
|
let bits = 0, value = 0; const out = [];
|
||||||
|
for (const ch of clean) {
|
||||||
|
const idx = B32.indexOf(ch);
|
||||||
|
if (idx === -1) continue;
|
||||||
|
value = (value << 5) | idx; bits += 5;
|
||||||
|
if (bits >= 8) { out.push((value >>> (bits - 8)) & 0xff); bits -= 8; }
|
||||||
|
}
|
||||||
|
return Buffer.from(out);
|
||||||
|
}
|
||||||
|
function newMfaSecret() {
|
||||||
|
return base32Encode(crypto.randomBytes(20));
|
||||||
|
}
|
||||||
|
function totp(secret, timeStep = Math.floor(Date.now() / 30000)) {
|
||||||
|
const key = base32Decode(secret);
|
||||||
|
const buf = Buffer.alloc(8);
|
||||||
|
buf.writeBigUInt64BE(BigInt(timeStep));
|
||||||
|
const hmac = crypto.createHmac('sha1', key).update(buf).digest();
|
||||||
|
const offset = hmac[hmac.length - 1] & 0xf;
|
||||||
|
const code =
|
||||||
|
((hmac[offset] & 0x7f) << 24) |
|
||||||
|
((hmac[offset + 1] & 0xff) << 16) |
|
||||||
|
((hmac[offset + 2] & 0xff) << 8) |
|
||||||
|
(hmac[offset + 3] & 0xff);
|
||||||
|
return String(code % 1_000_000).padStart(6, '0');
|
||||||
|
}
|
||||||
|
function verifyTotp(secret, code, window = 1) {
|
||||||
|
if (!/^\d{6}$/.test(String(code || ''))) return false;
|
||||||
|
const step = Math.floor(Date.now() / 30000);
|
||||||
|
for (let i = -window; i <= window; i++) {
|
||||||
|
if (totp(secret, step + i) === String(code)) return true;
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
function otpauthUrl(secret, email, issuer = 'RemoteAccess') {
|
||||||
|
return `otpauth://totp/${encodeURIComponent(issuer)}:${encodeURIComponent(email)}` +
|
||||||
|
`?secret=${secret}&issuer=${encodeURIComponent(issuer)}&algorithm=SHA1&digits=6&period=30`;
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = {
|
||||||
|
hashPassword, verifyPassword, token, id, numericCode,
|
||||||
|
newMfaSecret, totp, verifyTotp, otpauthUrl,
|
||||||
|
};
|
||||||
@@ -0,0 +1,80 @@
|
|||||||
|
// SQLite data layer + schema.
|
||||||
|
// Uses Node's built-in node:sqlite (no native compilation needed).
|
||||||
|
const { DatabaseSync } = require('node:sqlite');
|
||||||
|
const path = require('path');
|
||||||
|
|
||||||
|
const db = new DatabaseSync(process.env.DB_PATH || path.join(__dirname, 'data.db'));
|
||||||
|
// WAL is preferred but unsupported on some mounted/network filesystems; fall back quietly.
|
||||||
|
try { db.exec('PRAGMA journal_mode = WAL'); } catch { /* default rollback journal is fine */ }
|
||||||
|
db.exec('PRAGMA foreign_keys = ON');
|
||||||
|
|
||||||
|
db.exec(`
|
||||||
|
CREATE TABLE IF NOT EXISTS teams (
|
||||||
|
id TEXT PRIMARY KEY,
|
||||||
|
name TEXT NOT NULL,
|
||||||
|
created_at INTEGER NOT NULL
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE IF NOT EXISTS users (
|
||||||
|
id TEXT PRIMARY KEY,
|
||||||
|
team_id TEXT NOT NULL REFERENCES teams(id),
|
||||||
|
email TEXT NOT NULL UNIQUE,
|
||||||
|
pw_hash TEXT NOT NULL,
|
||||||
|
pw_salt TEXT NOT NULL,
|
||||||
|
role TEXT NOT NULL DEFAULT 'technician',
|
||||||
|
mfa_secret TEXT,
|
||||||
|
mfa_enabled INTEGER NOT NULL DEFAULT 0,
|
||||||
|
created_at INTEGER NOT NULL
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE IF NOT EXISTS sessions_auth (
|
||||||
|
token TEXT PRIMARY KEY,
|
||||||
|
user_id TEXT NOT NULL REFERENCES users(id),
|
||||||
|
mfa_passed INTEGER NOT NULL DEFAULT 0,
|
||||||
|
created_at INTEGER NOT NULL,
|
||||||
|
expires_at INTEGER NOT NULL
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE IF NOT EXISTS machines (
|
||||||
|
id TEXT PRIMARY KEY,
|
||||||
|
team_id TEXT NOT NULL REFERENCES teams(id),
|
||||||
|
name TEXT NOT NULL,
|
||||||
|
enroll_token TEXT NOT NULL UNIQUE,
|
||||||
|
unattended INTEGER NOT NULL DEFAULT 0,
|
||||||
|
last_seen INTEGER,
|
||||||
|
created_at INTEGER NOT NULL
|
||||||
|
);
|
||||||
|
|
||||||
|
CREATE TABLE IF NOT EXISTS audit_log (
|
||||||
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||||
|
team_id TEXT NOT NULL,
|
||||||
|
user_id TEXT,
|
||||||
|
user_email TEXT,
|
||||||
|
machine_id TEXT,
|
||||||
|
machine_name TEXT,
|
||||||
|
action TEXT NOT NULL,
|
||||||
|
detail TEXT,
|
||||||
|
at INTEGER NOT NULL
|
||||||
|
);
|
||||||
|
`);
|
||||||
|
|
||||||
|
// Migration: optional display name for agents (shown to customers on consent)
|
||||||
|
try { db.exec('ALTER TABLE users ADD COLUMN name TEXT'); } catch (e) { /* already exists */ }
|
||||||
|
|
||||||
|
// Migration: agent active flag (deactivate without deleting)
|
||||||
|
try { db.exec('ALTER TABLE users ADD COLUMN active INTEGER NOT NULL DEFAULT 1'); } catch (e) { /* exists */ }
|
||||||
|
|
||||||
|
// Session report: one row per support session with duration
|
||||||
|
db.exec(`
|
||||||
|
CREATE TABLE IF NOT EXISTS sessions_log (
|
||||||
|
id TEXT PRIMARY KEY,
|
||||||
|
team_id TEXT NOT NULL,
|
||||||
|
agent_email TEXT,
|
||||||
|
agent_name TEXT,
|
||||||
|
ticket TEXT,
|
||||||
|
started_at INTEGER NOT NULL,
|
||||||
|
ended_at INTEGER
|
||||||
|
);
|
||||||
|
`);
|
||||||
|
|
||||||
|
module.exports = db;
|
||||||
wygenerowano
+37
@@ -0,0 +1,37 @@
|
|||||||
|
{
|
||||||
|
"name": "remote-access-server",
|
||||||
|
"version": "0.2.0",
|
||||||
|
"lockfileVersion": 3,
|
||||||
|
"requires": true,
|
||||||
|
"packages": {
|
||||||
|
"": {
|
||||||
|
"name": "remote-access-server",
|
||||||
|
"version": "0.2.0",
|
||||||
|
"dependencies": {
|
||||||
|
"ws": "^8.18.0"
|
||||||
|
},
|
||||||
|
"engines": {
|
||||||
|
"node": ">=22.5.0"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"node_modules/ws": {
|
||||||
|
"version": "8.21.0",
|
||||||
|
"license": "MIT",
|
||||||
|
"engines": {
|
||||||
|
"node": ">=10.0.0"
|
||||||
|
},
|
||||||
|
"peerDependencies": {
|
||||||
|
"bufferutil": "^4.0.1",
|
||||||
|
"utf-8-validate": ">=5.0.2"
|
||||||
|
},
|
||||||
|
"peerDependenciesMeta": {
|
||||||
|
"bufferutil": {
|
||||||
|
"optional": true
|
||||||
|
},
|
||||||
|
"utf-8-validate": {
|
||||||
|
"optional": true
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
{
|
||||||
|
"name": "remote-access-server",
|
||||||
|
"version": "0.2.0",
|
||||||
|
"description": "Backend platform: auth, MFA, RBAC, machine enrollment, signaling, audit logs",
|
||||||
|
"main": "server.js",
|
||||||
|
"type": "commonjs",
|
||||||
|
"scripts": {
|
||||||
|
"start": "node server.js",
|
||||||
|
"test": "node test/e2e.js"
|
||||||
|
},
|
||||||
|
"engines": { "node": ">=22.5.0" },
|
||||||
|
"dependencies": { "ws": "^8.18.0" }
|
||||||
|
}
|
||||||
@@ -0,0 +1,183 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||||
|
<title>BizGaze Support — Agent Console</title>
|
||||||
|
<style>
|
||||||
|
:root{ --brand:#FFC708; --brand-d:#E0AC00; --blue:#1F3B73; --blue-d:#16294f; --ink:#1f2430; --muted:#6b7280; --bg:#f6f8fb; --card:#fff; --line:#e6e9ef; }
|
||||||
|
*{box-sizing:border-box;}
|
||||||
|
body{font-family:'Segoe UI',system-ui,sans-serif;background:var(--bg);color:var(--ink);margin:0;}
|
||||||
|
.topbar{background:var(--blue);padding:.7rem 1.2rem;display:flex;align-items:center;justify-content:space-between;gap:.6rem;}
|
||||||
|
.brandrow{display:flex;align-items:center;gap:.6rem;}
|
||||||
|
.logo{width:28px;height:28px;border-radius:7px;background:var(--brand);display:grid;place-items:center;font-weight:800;color:var(--blue);}
|
||||||
|
.brand{font-weight:700;color:#fff;} .brand span{color:var(--brand);font-weight:600;}
|
||||||
|
.agentchip{color:#dbe4f5;font-size:.85rem;}
|
||||||
|
.agentchip b{color:#fff;} .agentchip a{color:var(--brand);text-decoration:none;margin-left:.5rem;cursor:pointer;}
|
||||||
|
.wrap{min-height:calc(100vh - 50px);display:grid;place-items:center;padding:1.5rem;}
|
||||||
|
.card{background:var(--card);border:1px solid var(--line);border-radius:18px;padding:2.2rem;max-width:430px;width:100%;box-shadow:0 10px 30px rgba(20,30,60,.06);}
|
||||||
|
h1{font-size:1.35rem;margin:.1rem 0 .3rem;color:var(--blue);text-align:center;}
|
||||||
|
.sub{color:var(--muted);font-size:.92rem;margin-bottom:1.3rem;text-align:center;}
|
||||||
|
.lbl{display:block;font-size:.74rem;color:var(--muted);text-transform:uppercase;letter-spacing:.06em;margin:.85rem 0 .25rem;}
|
||||||
|
input{width:100%;padding:.7rem;border-radius:10px;border:2px solid var(--line);background:#fbfcfe;color:var(--ink);font-size:1rem;}
|
||||||
|
input:focus{outline:none;border-color:var(--brand);}
|
||||||
|
input.code{font-size:1.7rem;letter-spacing:.35rem;text-align:center;}
|
||||||
|
.btn{margin-top:1.1rem;width:100%;padding:.85rem;background:var(--brand);color:var(--ink);border:none;border-radius:10px;font-weight:700;font-size:1.02rem;cursor:pointer;}
|
||||||
|
.btn:hover{background:var(--brand-d);}
|
||||||
|
.status{color:var(--muted);font-size:.88rem;margin-top:.9rem;text-align:center;min-height:1.1em;}
|
||||||
|
.err{color:#b91c1c;}
|
||||||
|
.prefill{background:#EAF0FB;border:1px solid #c7d6f0;border-radius:8px;padding:.5rem .7rem;font-size:.85rem;color:var(--blue-d);margin-top:.25rem;}
|
||||||
|
.topbar2{background:var(--card);border-bottom:1px solid var(--line);padding:.5rem 1rem;display:none;justify-content:space-between;align-items:center;}
|
||||||
|
.topbar2.show{display:flex;} #barStatus{font-weight:600;font-size:.9rem;color:var(--blue);}
|
||||||
|
#endBtn{padding:.45rem 1rem;background:#fee2e2;color:#b91c1c;border:none;border-radius:8px;font-weight:600;cursor:pointer;}
|
||||||
|
#video{width:100vw;height:calc(100vh - 46px);background:#0b1220;object-fit:contain;display:none;cursor:crosshair;outline:none;}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="topbar" id="topbar">
|
||||||
|
<div class="brandrow"><img src="/logo.png" alt="" style="height:46px;width:auto;max-width:190px;border-radius:8px;object-fit:contain;background:#fff;padding:5px 12px;image-rendering:-webkit-optimize-contrast" onerror="this.replaceWith(Object.assign(document.createElement('div'),{className:'logo',textContent:'B'}))"><div class="brand">BizGaze <span>Support</span></div></div>
|
||||||
|
<div class="agentchip" id="agentChip"></div>
|
||||||
|
</div>
|
||||||
|
<div class="topbar2" id="bar"><span id="barStatus"></span><button id="endBtn">End session</button></div>
|
||||||
|
<div class="wrap" id="wrap"><div class="card" id="card"></div></div>
|
||||||
|
<video id="video" autoplay playsinline muted tabindex="0"></video>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
const params=new URLSearchParams(location.search);
|
||||||
|
const presetTicket=params.get('ticket')||'';
|
||||||
|
const presetCode=params.get('code')||'';
|
||||||
|
const card=document.getElementById('card'), wrap=document.getElementById('wrap'),
|
||||||
|
agentChip=document.getElementById('agentChip'), bar=document.getElementById('bar'),
|
||||||
|
topbar=document.getElementById('topbar'), video=document.getElementById('video'), barStatus=document.getElementById('barStatus');
|
||||||
|
let ws,pc,inputChannel,sessionId,me=null;
|
||||||
|
|
||||||
|
async function api(path,body,method='POST'){
|
||||||
|
const opt={method,headers:{'Content-Type':'application/json'}};
|
||||||
|
if(body)opt.body=JSON.stringify(body);
|
||||||
|
const r=await fetch(path,opt); const data=await r.json().catch(()=>({}));
|
||||||
|
if(!r.ok) throw new Error(data.error||'request failed'); return data;
|
||||||
|
}
|
||||||
|
function onEnter(ids, fn){ ids.forEach(id => { const el=document.getElementById(id); if(el) el.addEventListener('keydown', e=>{ if(e.key==='Enter'){ e.preventDefault(); fn(); } }); }); }
|
||||||
|
|
||||||
|
// ---- boot: are we a logged-in agent? ----
|
||||||
|
(async function boot(){
|
||||||
|
try{ me=await api('/api/me',null,'GET'); renderAgent(); }
|
||||||
|
catch{ renderLogin(); }
|
||||||
|
})();
|
||||||
|
|
||||||
|
// ---- LOGIN ----
|
||||||
|
function renderLogin(){
|
||||||
|
agentChip.textContent='';
|
||||||
|
card.innerHTML = `
|
||||||
|
<h1>Agent sign in</h1>
|
||||||
|
<div class="sub">Sign in to start a support session. Your name is shown to the customer.</div>
|
||||||
|
<span class="lbl">Email</span><input id="email" type="email" placeholder="you@bizgaze.com">
|
||||||
|
<span class="lbl">Password</span><input id="pw" type="password" placeholder="password">
|
||||||
|
<button class="btn" id="loginBtn">Sign in</button>
|
||||||
|
<div class="status err" id="err"></div>`;
|
||||||
|
{
|
||||||
|
const doSignIn=async()=>{
|
||||||
|
try{
|
||||||
|
await api('/api/login',{email:document.getElementById('email').value,password:document.getElementById('pw').value});
|
||||||
|
me=await api('/api/me',null,'GET'); renderAgent();
|
||||||
|
}catch(e){ document.getElementById('err').textContent=e.message; }
|
||||||
|
};
|
||||||
|
document.getElementById('loginBtn').onclick=doSignIn;
|
||||||
|
onEnter(['email','pw'], doSignIn);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// ---- AGENT CONNECT ----
|
||||||
|
function renderAgent(){
|
||||||
|
const displayName = me.name || me.email;
|
||||||
|
agentChip.innerHTML = `Signed in as <b>${esc(displayName)}</b><a id="logout">Log out</a>`;
|
||||||
|
document.getElementById('logout').onclick=async()=>{ await api('/api/logout'); location.reload(); };
|
||||||
|
|
||||||
|
card.innerHTML = `
|
||||||
|
<h1>Start a support session</h1>
|
||||||
|
<div class="sub">Ask the customer to open the share page and read you their code.</div>
|
||||||
|
<span class="lbl">Ticket number (optional)</span>
|
||||||
|
<input id="ticketInput" maxlength="40" placeholder="e.g. TKT-1042 — leave blank for a direct session" value="${esc(presetTicket)}" ${presetTicket?'readonly':''}>
|
||||||
|
${presetTicket?'<div class="prefill">Linked from service request '+esc(presetTicket)+'</div>':''}
|
||||||
|
<span class="lbl">Session code from customer</span>
|
||||||
|
<input id="codeInput" class="code" maxlength="6" inputmode="numeric" placeholder="000000" value="${esc(presetCode)}">
|
||||||
|
<button class="btn" id="connectBtn">Connect</button>
|
||||||
|
<div class="status" id="status">Enter the customer's code to begin.</div>`;
|
||||||
|
connectWS();
|
||||||
|
document.getElementById('connectBtn').onclick=startConnect;
|
||||||
|
onEnter(['ticketInput','codeInput'], startConnect);
|
||||||
|
}
|
||||||
|
|
||||||
|
async function startConnect(){
|
||||||
|
const statusEl=document.getElementById('status'); statusEl.className='status';
|
||||||
|
const ticket=document.getElementById('ticketInput').value.trim();
|
||||||
|
const code=document.getElementById('codeInput').value.trim();
|
||||||
|
if(!/^\d{6}$/.test(code)){ statusEl.textContent='Please enter the 6-digit code.'; return; }
|
||||||
|
statusEl.textContent='Connecting…';
|
||||||
|
ws.send(JSON.stringify({type:'code-connect',code,ticket}));
|
||||||
|
}
|
||||||
|
|
||||||
|
function connectWS(){
|
||||||
|
ws=new WebSocket((location.protocol==='https:'?'wss://':'ws://')+location.host+'/ws');
|
||||||
|
ws.onmessage=async(e)=>{const m=JSON.parse(e.data);const statusEl=document.getElementById('status');switch(m.type){
|
||||||
|
case 'code-pending': sessionId=m.sessionId; renderWaiting(); setupPeer(); break;
|
||||||
|
case 'session-ready': if(statusEl)statusEl.textContent='Allowed — connecting…'; break;
|
||||||
|
case 'offer': await pc.setRemoteDescription(new RTCSessionDescription(m.sdp));
|
||||||
|
const ans=await pc.createAnswer(); await pc.setLocalDescription(ans);
|
||||||
|
ws.send(JSON.stringify({type:'answer',sessionId,sdp:pc.localDescription})); break;
|
||||||
|
case 'ice-candidate': if(m.candidate&&pc) await pc.addIceCandidate(new RTCIceCandidate(m.candidate)); break;
|
||||||
|
case 'session-denied': renderEnded('The customer declined the request.'); break;
|
||||||
|
case 'session-ended': {
|
||||||
|
const msgs={'share-cancelled':'The customer cancelled the screen selection. Ask them to refresh their page for a new code.',
|
||||||
|
'customer-ended':'The customer stopped sharing their screen. Ask them to refresh their page for a new code.',
|
||||||
|
'agent-ended':'You ended the session.'};
|
||||||
|
renderEnded(msgs[m.reason]||'The session has ended.'); break;
|
||||||
|
}
|
||||||
|
case 'error': if(statusEl){statusEl.className='status err';statusEl.textContent=m.message;} break;
|
||||||
|
}};
|
||||||
|
}
|
||||||
|
function renderWaiting(){
|
||||||
|
card.innerHTML=`
|
||||||
|
<h1>Waiting for the customer…</h1>
|
||||||
|
<div class="sub">Code accepted. The customer has been asked to tap <b>Allow</b> on their screen.</div>
|
||||||
|
<div class="status" id="status">Waiting for the customer to tap Allow…</div>
|
||||||
|
<button class="btn" id="cancelBtn" style="background:#eef1f6;color:#1F3B73">Cancel</button>`;
|
||||||
|
document.getElementById('cancelBtn').onclick=()=>{ try{ws.send(JSON.stringify({type:'end-session',sessionId}));}catch(e){} location.reload(); };
|
||||||
|
}
|
||||||
|
|
||||||
|
function renderEnded(msg){
|
||||||
|
if(pc){ try{pc.close();}catch(e){} pc=null; }
|
||||||
|
video.style.display='none'; bar.classList.remove('show');
|
||||||
|
topbar.style.display='flex'; wrap.style.display='grid';
|
||||||
|
card.innerHTML=`
|
||||||
|
<h1>Session ended</h1>
|
||||||
|
<div class="sub">${esc(msg)}</div>
|
||||||
|
<button class="btn" id="againBtn">Start a new session</button>`;
|
||||||
|
document.getElementById('againBtn').onclick=()=>location.reload();
|
||||||
|
}
|
||||||
|
|
||||||
|
function setupPeer(){
|
||||||
|
pc=new RTCPeerConnection({iceServers:[{urls:'stun:stun.l.google.com:19302'}]});
|
||||||
|
inputChannel=pc.createDataChannel('input',{ordered:true});
|
||||||
|
pc.ontrack=(ev)=>{
|
||||||
|
video.srcObject=ev.streams[0]; wrap.style.display='none'; topbar.style.display='none'; bar.classList.add('show'); video.style.display='block';
|
||||||
|
barStatus.textContent='Connected — viewing the customer’s screen'; video.focus();
|
||||||
|
};
|
||||||
|
pc.onicecandidate=(ev)=>{if(ev.candidate)ws.send(JSON.stringify({type:'ice-candidate',sessionId,candidate:ev.candidate}));};
|
||||||
|
}
|
||||||
|
const send=(o)=>{if(inputChannel&&inputChannel.readyState==='open')inputChannel.send(JSON.stringify(o));};
|
||||||
|
const rel=(e)=>{const r=video.getBoundingClientRect();return{x:(e.clientX-r.left)/r.width,y:(e.clientY-r.top)/r.height};};
|
||||||
|
let lm=0;
|
||||||
|
video.addEventListener('mousemove',e=>{const t=performance.now();if(t-lm<30)return;lm=t;send({kind:'mousemove',...rel(e)});});
|
||||||
|
video.addEventListener('mousedown',e=>{video.focus();send({kind:'mousedown',button:e.button,...rel(e)});});
|
||||||
|
video.addEventListener('mouseup',e=>send({kind:'mouseup',button:e.button,...rel(e)}));
|
||||||
|
video.addEventListener('dblclick',e=>send({kind:'dblclick',...rel(e)}));
|
||||||
|
video.addEventListener('wheel',e=>{e.preventDefault();send({kind:'scroll',dx:e.deltaX,dy:e.deltaY});},{passive:false});
|
||||||
|
video.addEventListener('contextmenu',e=>e.preventDefault());
|
||||||
|
video.addEventListener('keydown',e=>{e.preventDefault();send({kind:'keydown',key:e.key,code:e.code});});
|
||||||
|
video.addEventListener('keyup',e=>{e.preventDefault();send({kind:'keyup',key:e.key,code:e.code});});
|
||||||
|
document.getElementById('endBtn').onclick=()=>{ws.send(JSON.stringify({type:'end-session',sessionId,reason:'agent-ended'}));};
|
||||||
|
function esc(s){return String(s==null?'':s).replace(/[&<>"]/g,c=>({'&':'&','<':'<','>':'>','"':'"'}[c]));}
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,102 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||||
|
<title>Browser Host — Remote Access</title>
|
||||||
|
<style>
|
||||||
|
body { font-family: system-ui, sans-serif; background:#0f172a; color:#e2e8f0; margin:0; padding:1.5rem; }
|
||||||
|
.card { max-width:560px; margin:0 auto; background:#1e293b; border-radius:12px; padding:1.5rem; }
|
||||||
|
h1 { font-size:1.15rem; margin:0 0 1rem; }
|
||||||
|
input { width:100%; padding:.7rem; border-radius:8px; border:1px solid #334155; background:#0f172a; color:#e2e8f0; margin:.3rem 0; }
|
||||||
|
button { padding:.7rem 1.3rem; background:#3b82f6; color:#fff; border:none; border-radius:8px; font-weight:600; cursor:pointer; }
|
||||||
|
.status { background:#0f172a; padding:.7rem 1rem; border-radius:8px; margin:1rem 0; font-size:.9rem; }
|
||||||
|
.status.on { background:#14532d; } .status.warn { background:#7c2d12; }
|
||||||
|
.consent { border:1px solid #3b82f6; border-radius:10px; padding:1rem; margin-top:1rem; }
|
||||||
|
.grant { background:#22c55e; color:#052e16; } .deny { background:#ef4444; margin-left:.5rem; }
|
||||||
|
.muted { color:#94a3b8; font-size:.82rem; }
|
||||||
|
#log { font-family:monospace; font-size:.72rem; color:#64748b; height:120px; overflow-y:auto; margin-top:1rem; background:#020617; padding:.6rem; border-radius:8px; }
|
||||||
|
.indicator { position:fixed; bottom:0; left:0; right:0; background:#b91c1c; color:#fff; text-align:center; padding:.4rem; font-size:.85rem; display:none; }
|
||||||
|
.indicator.show { display:block; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="card">
|
||||||
|
<h1>🖥️ Browser Host (no install)</h1>
|
||||||
|
<p class="muted">Shares this screen with a technician. Paste the enroll token from the console and click Go online.</p>
|
||||||
|
<input id="token" placeholder="enroll token">
|
||||||
|
<button id="goBtn">Go online</button>
|
||||||
|
<div id="status" class="status">Idle.</div>
|
||||||
|
<div id="consentBox"></div>
|
||||||
|
<div id="log"></div>
|
||||||
|
</div>
|
||||||
|
<div id="indicator" class="indicator">● A technician is viewing this screen</div>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
const statusEl = document.getElementById('status');
|
||||||
|
const consentBox = document.getElementById('consentBox');
|
||||||
|
const indicator = document.getElementById('indicator');
|
||||||
|
const logEl = document.getElementById('log');
|
||||||
|
const log = (t) => { const d=document.createElement('div'); d.textContent=t; logEl.appendChild(d); logEl.scrollTop=logEl.scrollHeight; };
|
||||||
|
const setStatus = (t,c='') => { statusEl.textContent=t; statusEl.className='status '+c; };
|
||||||
|
|
||||||
|
let ws, pc, localStream, sessionId;
|
||||||
|
|
||||||
|
document.getElementById('goBtn').onclick = () => {
|
||||||
|
const token = document.getElementById('token').value.trim();
|
||||||
|
if (!token) return setStatus('Enter the enroll token first.', 'warn');
|
||||||
|
connect(token);
|
||||||
|
};
|
||||||
|
|
||||||
|
function connect(token) {
|
||||||
|
setStatus('Connecting to server…');
|
||||||
|
ws = new WebSocket((location.protocol==='https:'?'wss://':'ws://') + location.host + '/ws');
|
||||||
|
ws.onopen = () => ws.send(JSON.stringify({ type:'agent-hello', enrollToken: token }));
|
||||||
|
ws.onmessage = (e) => handle(JSON.parse(e.data));
|
||||||
|
ws.onclose = () => setStatus('Disconnected.', 'warn');
|
||||||
|
}
|
||||||
|
|
||||||
|
async function handle(m) {
|
||||||
|
switch (m.type) {
|
||||||
|
case 'agent-registered': setStatus(`Online as "${m.name}". Waiting for a session.`, 'on'); log('registered: '+m.name); break;
|
||||||
|
case 'session-request': m.unattended ? grant(m.sessionId) : showConsent(m); break;
|
||||||
|
case 'start-stream': sessionId = m.sessionId; await startStreaming(); break;
|
||||||
|
case 'answer': if (pc) await pc.setRemoteDescription(new RTCSessionDescription(m.sdp)); break;
|
||||||
|
case 'ice-candidate': if (m.candidate && pc) await pc.addIceCandidate(new RTCIceCandidate(m.candidate)); break;
|
||||||
|
case 'session-ended': teardown(); break;
|
||||||
|
case 'error': setStatus('Server: '+m.message, 'warn'); break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function showConsent(m) {
|
||||||
|
consentBox.innerHTML = `<div class="consent"><b>${esc(m.technician)}</b> wants to view this screen.
|
||||||
|
<div style="margin-top:.6rem"><button class="grant" id="g">Allow</button><button class="deny" id="d">Deny</button></div></div>`;
|
||||||
|
document.getElementById('g').onclick = () => { consentBox.innerHTML=''; grant(m.sessionId); };
|
||||||
|
document.getElementById('d').onclick = () => { consentBox.innerHTML=''; ws.send(JSON.stringify({type:'consent',sessionId:m.sessionId,granted:false})); };
|
||||||
|
}
|
||||||
|
const grant = (sid) => ws.send(JSON.stringify({ type:'consent', sessionId:sid, granted:true }));
|
||||||
|
|
||||||
|
async function startStreaming() {
|
||||||
|
setStatus('Sharing screen…', 'on'); indicator.classList.add('show');
|
||||||
|
try { localStream = await navigator.mediaDevices.getDisplayMedia({ video:{frameRate:{ideal:30}}, audio:false }); }
|
||||||
|
catch (err) { log('getDisplayMedia failed: '+err.message); setStatus('Screen capture cancelled/failed.', 'warn'); return; }
|
||||||
|
pc = new RTCPeerConnection({ iceServers:[{urls:'stun:stun.l.google.com:19302'}] });
|
||||||
|
localStream.getTracks().forEach(t => pc.addTrack(t, localStream));
|
||||||
|
pc.ondatachannel = (ev) => { ev.channel.onmessage = (msg) => { let e; try{e=JSON.parse(msg.data)}catch{return} if(e.kind!=='mousemove') log('remote input: '+e.kind+' '+(e.key||'')); }; };
|
||||||
|
pc.onicecandidate = (ev) => { if (ev.candidate) ws.send(JSON.stringify({type:'ice-candidate',sessionId,candidate:ev.candidate})); };
|
||||||
|
const offer = await pc.createOffer(); await pc.setLocalDescription(offer);
|
||||||
|
ws.send(JSON.stringify({ type:'offer', sessionId, sdp: pc.localDescription }));
|
||||||
|
log('sent offer');
|
||||||
|
localStream.getVideoTracks()[0].onended = () => teardown();
|
||||||
|
}
|
||||||
|
|
||||||
|
function teardown() {
|
||||||
|
indicator.classList.remove('show');
|
||||||
|
if (localStream) { localStream.getTracks().forEach(t=>t.stop()); localStream=null; }
|
||||||
|
if (pc) { pc.close(); pc=null; }
|
||||||
|
setStatus('Session ended. Still online, waiting.', 'on');
|
||||||
|
}
|
||||||
|
function esc(s){return String(s).replace(/[&<>"]/g,c=>({'&':'&','<':'<','>':'>','"':'"'}[c]));}
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,335 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||||
|
<title>BizGaze Support — Console</title>
|
||||||
|
<style>
|
||||||
|
:root{ --brand:#FFC708; --brand-d:#E0AC00; --blue:#1F3B73; --blue-d:#16294f; --blue-soft:#EAF0FB; --ink:#1f2430; --muted:#6b7280; --bg:#f6f8fb; --card:#fff; --line:#e6e9ef; --green:#16a34a; --red:#b91c1c; }
|
||||||
|
*{box-sizing:border-box;}
|
||||||
|
body{font-family:'Segoe UI',system-ui,sans-serif;background:var(--bg);color:var(--ink);margin:0;}
|
||||||
|
header{background:var(--blue);padding:.75rem 1.5rem;display:flex;justify-content:space-between;align-items:center;}
|
||||||
|
.brandrow{display:flex;align-items:center;gap:.6rem;}
|
||||||
|
.logo{width:30px;height:30px;border-radius:8px;background:var(--brand);display:grid;place-items:center;font-weight:800;color:var(--blue);}
|
||||||
|
.brand{font-weight:700;color:#fff;font-size:1.05rem;} .brand span{color:var(--brand);font-weight:600;}
|
||||||
|
.who{color:#dbe4f5;font-size:.85rem;margin-right:.7rem;}
|
||||||
|
main{max-width:1020px;margin:1.8rem auto;padding:0 1rem;}
|
||||||
|
.card{background:var(--card);border:1px solid var(--line);border-radius:14px;padding:1.5rem;margin-bottom:1.25rem;box-shadow:0 6px 18px rgba(20,30,60,.05);}
|
||||||
|
h2{font-size:1rem;margin:0 0 1rem;color:var(--blue);}
|
||||||
|
input,select{width:100%;padding:.6rem .7rem;border-radius:10px;border:2px solid var(--line);background:#fbfcfe;color:var(--ink);margin:.25rem 0;font-size:.92rem;}
|
||||||
|
input:focus,select:focus{outline:none;border-color:var(--brand);}
|
||||||
|
button{padding:.6rem 1.1rem;background:var(--brand);color:var(--ink);border:none;border-radius:10px;font-weight:700;cursor:pointer;font-size:.92rem;}
|
||||||
|
button:hover{background:var(--brand-d);}
|
||||||
|
button.ghost{background:transparent;color:#dbe4f5;border:1px solid #46598c;font-weight:600;}
|
||||||
|
button.ghost:hover{background:var(--blue-d);}
|
||||||
|
button.mini{padding:.32rem .6rem;font-size:.76rem;font-weight:600;background:#eef1f6;color:var(--blue);border:1px solid var(--line);}
|
||||||
|
button.mini:hover{background:var(--blue-soft);}
|
||||||
|
button.mini.danger{color:var(--red);}
|
||||||
|
.row{display:flex;gap:.5rem;align-items:center;}
|
||||||
|
.muted{color:var(--muted);font-size:.85rem;}
|
||||||
|
table{width:100%;border-collapse:collapse;font-size:.88rem;}
|
||||||
|
th{color:var(--muted);font-weight:600;font-size:.76rem;text-transform:uppercase;letter-spacing:.04em;}
|
||||||
|
th,td{text-align:left;padding:.55rem .5rem;border-bottom:1px solid var(--line);}
|
||||||
|
.pill{font-size:.74rem;font-weight:600;padding:.15rem .55rem;border-radius:99px;}
|
||||||
|
.pill.on{background:#ecfdf3;color:#15803d;} .pill.off{background:#fee2e2;color:var(--red);}
|
||||||
|
.hidden{display:none;}
|
||||||
|
.tabs{display:flex;gap:.5rem;margin-bottom:1.2rem;}
|
||||||
|
.tabs button{background:#eef1f6;color:var(--muted);font-weight:600;}
|
||||||
|
.tabs button.active{background:var(--blue);color:#fff;}
|
||||||
|
.quick{display:flex;align-items:center;justify-content:space-between;gap:1rem;background:linear-gradient(120deg,var(--blue),var(--blue-d));color:#fff;border:none;}
|
||||||
|
.quick h2{color:#fff;margin:0 0 .25rem;}
|
||||||
|
.quick p{margin:0;color:#cdd7ee;font-size:.88rem;}
|
||||||
|
.quick a{background:var(--brand);color:var(--ink);text-decoration:none;font-weight:700;padding:.7rem 1.3rem;border-radius:10px;white-space:nowrap;}
|
||||||
|
.quick a:hover{background:var(--brand-d);}
|
||||||
|
.lbl{display:block;font-size:.74rem;color:var(--muted);text-transform:uppercase;letter-spacing:.06em;margin:.7rem 0 .15rem;}
|
||||||
|
.filters{display:flex;gap:.6rem;align-items:flex-end;flex-wrap:wrap;margin-bottom:1rem;}
|
||||||
|
.filters .f{flex:1;min-width:140px;}
|
||||||
|
.filters .lbl{margin:.1rem 0 .15rem;}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<header>
|
||||||
|
<div class="brandrow"><img src="/logo.png" alt="" style="height:46px;width:auto;max-width:190px;border-radius:8px;object-fit:contain;background:#fff;padding:5px 12px;image-rendering:-webkit-optimize-contrast" onerror="this.replaceWith(Object.assign(document.createElement('div'),{className:'logo',textContent:'B'}))"><div class="brand">BizGaze <span>Support</span> <span style="color:#8ea3cf;font-weight:500;font-size:.85rem">· Console</span></div></div>
|
||||||
|
<div class="row"><span id="who" class="who"></span><button id="logoutBtn" class="ghost hidden">Log out</button></div>
|
||||||
|
</header>
|
||||||
|
<main id="app"></main>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
const app = document.getElementById('app');
|
||||||
|
const who = document.getElementById('who');
|
||||||
|
const logoutBtn = document.getElementById('logoutBtn');
|
||||||
|
|
||||||
|
async function api(path, body, method = 'POST') {
|
||||||
|
const opt = { method, headers: { 'Content-Type': 'application/json' } };
|
||||||
|
if (body) opt.body = JSON.stringify(body);
|
||||||
|
const r = await fetch(path, opt);
|
||||||
|
const data = await r.json().catch(() => ({}));
|
||||||
|
if (!r.ok) throw new Error(data.error || 'request failed');
|
||||||
|
return data;
|
||||||
|
}
|
||||||
|
|
||||||
|
logoutBtn.onclick = async () => { await api('/api/logout'); location.reload(); };
|
||||||
|
|
||||||
|
function onEnter(ids, fn){ ids.forEach(id => { const el = document.getElementById(id); if (el) el.addEventListener('keydown', e => { if (e.key === 'Enter') { e.preventDefault(); fn(); } }); }); }
|
||||||
|
|
||||||
|
function view(html) { app.innerHTML = html; }
|
||||||
|
|
||||||
|
// ---------- Auth ----------
|
||||||
|
function authView() {
|
||||||
|
who.textContent = '';
|
||||||
|
logoutBtn.classList.add('hidden');
|
||||||
|
view(`
|
||||||
|
<div class="card" style="max-width:420px;margin:3rem auto">
|
||||||
|
<div class="tabs">
|
||||||
|
<button id="tabLogin" class="active">Sign in</button>
|
||||||
|
<button id="tabReg">Register team</button>
|
||||||
|
</div>
|
||||||
|
<div id="loginForm">
|
||||||
|
<span class="lbl">Email</span>
|
||||||
|
<input id="li_email" placeholder="you@bizgaze.com" type="email">
|
||||||
|
<span class="lbl">Password</span>
|
||||||
|
<input id="li_pw" placeholder="password" type="password">
|
||||||
|
<button id="li_btn" style="width:100%;margin-top:1rem">Sign in</button>
|
||||||
|
<p id="li_err" class="muted"></p>
|
||||||
|
</div>
|
||||||
|
<div id="regForm" class="hidden">
|
||||||
|
<span class="lbl">Team name</span>
|
||||||
|
<input id="rg_team" placeholder="e.g. BizGaze Support">
|
||||||
|
<span class="lbl">Email</span>
|
||||||
|
<input id="rg_email" placeholder="you@bizgaze.com" type="email">
|
||||||
|
<span class="lbl">Password</span>
|
||||||
|
<input id="rg_pw" placeholder="min 8 characters" type="password">
|
||||||
|
<button id="rg_btn" style="width:100%;margin-top:1rem">Create team</button>
|
||||||
|
<p id="rg_err" class="muted"></p>
|
||||||
|
</div>
|
||||||
|
</div>`);
|
||||||
|
document.getElementById('tabLogin').onclick = () => { toggle(true); };
|
||||||
|
document.getElementById('tabReg').onclick = () => { toggle(false); };
|
||||||
|
function toggle(login) {
|
||||||
|
document.getElementById('loginForm').classList.toggle('hidden', !login);
|
||||||
|
document.getElementById('regForm').classList.toggle('hidden', login);
|
||||||
|
document.getElementById('tabLogin').classList.toggle('active', login);
|
||||||
|
document.getElementById('tabReg').classList.toggle('active', !login);
|
||||||
|
}
|
||||||
|
document.getElementById('li_btn').onclick = doLogin;
|
||||||
|
document.getElementById('rg_btn').onclick = doRegister;
|
||||||
|
onEnter(['li_email','li_pw'], doLogin);
|
||||||
|
onEnter(['rg_team','rg_email','rg_pw'], doRegister);
|
||||||
|
}
|
||||||
|
|
||||||
|
async function doLogin() {
|
||||||
|
try {
|
||||||
|
await api('/api/login', { email: li_email.value, password: li_pw.value });
|
||||||
|
location.reload();
|
||||||
|
} catch (e) { li_err.textContent = e.message; }
|
||||||
|
}
|
||||||
|
|
||||||
|
async function doRegister() {
|
||||||
|
try {
|
||||||
|
await api('/api/register', { email: rg_email.value, password: rg_pw.value, teamName: rg_team.value });
|
||||||
|
await api('/api/login', { email: rg_email.value, password: rg_pw.value });
|
||||||
|
location.reload();
|
||||||
|
} catch (e) { rg_err.textContent = e.message; }
|
||||||
|
}
|
||||||
|
|
||||||
|
// ---------- Dashboard ----------
|
||||||
|
let ME = null;
|
||||||
|
async function dashboard(me) {
|
||||||
|
ME = me;
|
||||||
|
who.textContent = `${me.name || me.email} · ${me.role}`;
|
||||||
|
logoutBtn.classList.remove('hidden');
|
||||||
|
view(`
|
||||||
|
<div class="card quick">
|
||||||
|
<div><h2>Start a support session</h2><p>Customer gives you their 6-digit code from the share page.</p></div>
|
||||||
|
<a href="/connect">Open connect page →</a>
|
||||||
|
</div>
|
||||||
|
<div class="card" id="agentsCard">
|
||||||
|
<h2>Agents</h2>
|
||||||
|
<table id="agents"><thead><tr><th>Email</th><th>Display name</th><th>Role</th><th>Status</th><th style="width:280px"></th></tr></thead><tbody></tbody></table>
|
||||||
|
<div class="row" style="margin-top:1rem;flex-wrap:wrap">
|
||||||
|
<input id="agEmail" placeholder="agent email" style="max-width:200px">
|
||||||
|
<input id="agName" placeholder="display name (from BizGaze)" style="max-width:210px">
|
||||||
|
<input id="agPw" placeholder="temporary password" style="max-width:170px">
|
||||||
|
<select id="agRole" style="max-width:140px">
|
||||||
|
<option value="technician">technician</option><option value="admin">admin</option><option value="viewer">view-only</option>
|
||||||
|
</select>
|
||||||
|
<button id="agAdd">Add agent</button>
|
||||||
|
</div>
|
||||||
|
<p id="agOut" class="muted"></p>
|
||||||
|
</div>
|
||||||
|
<div class="card">
|
||||||
|
<h2>Session report</h2>
|
||||||
|
<div class="filters">
|
||||||
|
<div class="f"><span class="lbl">Agent</span><select id="fAgent"><option value="">All agents</option></select></div>
|
||||||
|
<div class="f"><span class="lbl">From</span><input id="fFrom" type="date"></div>
|
||||||
|
<div class="f"><span class="lbl">To</span><input id="fTo" type="date"></div>
|
||||||
|
<button id="fApply">Apply</button>
|
||||||
|
<button id="fExcel" class="mini" style="padding:.6rem .9rem">⬇ Excel</button>
|
||||||
|
<button id="fPdf" class="mini" style="padding:.6rem .9rem">⬇ PDF</button>
|
||||||
|
</div>
|
||||||
|
<table id="report"><thead><tr><th>Date</th><th>Start time</th><th>Agent</th><th>Ticket</th><th>Time spent</th></tr></thead><tbody></tbody></table>
|
||||||
|
<p id="repSummary" class="muted" style="margin-top:.6rem"></p>
|
||||||
|
</div>`);
|
||||||
|
|
||||||
|
if (me.role !== 'admin') document.getElementById('agentsCard').style.display = 'none';
|
||||||
|
else {
|
||||||
|
document.getElementById('agAdd').onclick = addAgent;
|
||||||
|
onEnter(['agEmail','agName','agPw'], addAgent);
|
||||||
|
await loadAgents();
|
||||||
|
}
|
||||||
|
document.getElementById('fApply').onclick = loadReport;
|
||||||
|
document.getElementById('fExcel').onclick = exportExcel;
|
||||||
|
document.getElementById('fPdf').onclick = exportPdf;
|
||||||
|
await populateAgentFilter();
|
||||||
|
await loadReport();
|
||||||
|
}
|
||||||
|
|
||||||
|
async function addAgent() {
|
||||||
|
try {
|
||||||
|
const r = await api('/api/users', { email: agEmail.value, name: agName.value, password: agPw.value, role: agRole.value });
|
||||||
|
agOut.textContent = `Agent ${r.email} added. Share the email + temporary password — they sign in at /connect.`;
|
||||||
|
agEmail.value = ''; agName.value = ''; agPw.value = '';
|
||||||
|
loadAgents(); populateAgentFilter();
|
||||||
|
} catch (e) { agOut.textContent = e.message; }
|
||||||
|
}
|
||||||
|
|
||||||
|
async function loadAgents() {
|
||||||
|
const rows = await api('/api/users', null, 'GET');
|
||||||
|
document.querySelector('#agents tbody').innerHTML = rows.map((u) => `
|
||||||
|
<tr>
|
||||||
|
<td>${esc(u.email)}</td><td>${esc(u.name || '—')}</td><td>${esc(u.role)}</td>
|
||||||
|
<td><span class="pill ${u.active === 0 ? 'off' : 'on'}">${u.active === 0 ? 'deactivated' : 'active'}</span></td>
|
||||||
|
<td>
|
||||||
|
<button class="mini" onclick="resetPw('${u.id}','${esc(u.email)}')">Reset password</button>
|
||||||
|
<button class="mini" onclick="renameAgent('${u.id}','${esc(u.email)}')">Edit name</button>
|
||||||
|
${u.id === ME.id ? '' : (u.active === 0
|
||||||
|
? `<button class="mini" onclick="manage('${u.id}','activate')">Activate</button>`
|
||||||
|
: `<button class="mini danger" onclick="manage('${u.id}','deactivate')">Deactivate</button>`)
|
||||||
|
}
|
||||||
|
${u.id === ME.id ? '' : `<button class="mini danger" onclick="delAgent('${u.id}','${esc(u.email)}')">Delete</button>`}
|
||||||
|
</td>
|
||||||
|
</tr>`).join('');
|
||||||
|
}
|
||||||
|
|
||||||
|
window.resetPw = async (id, email) => {
|
||||||
|
const pw = prompt(`New password for ${email} (min 8 characters):`);
|
||||||
|
if (!pw) return;
|
||||||
|
try { await api('/api/users/manage', { id, action: 'reset-password', password: pw }); agOut.textContent = `Password reset for ${email}. They were signed out everywhere.`; }
|
||||||
|
catch (e) { agOut.textContent = e.message; }
|
||||||
|
};
|
||||||
|
window.renameAgent = async (id, email) => {
|
||||||
|
const name = prompt(`Display name for ${email} (as in the BizGaze app):`);
|
||||||
|
if (!name) return;
|
||||||
|
try { await api('/api/users/manage', { id, action: 'rename', name }); loadAgents(); }
|
||||||
|
catch (e) { agOut.textContent = e.message; }
|
||||||
|
};
|
||||||
|
window.manage = async (id, action) => {
|
||||||
|
try { await api('/api/users/manage', { id, action }); loadAgents(); }
|
||||||
|
catch (e) { agOut.textContent = e.message; }
|
||||||
|
};
|
||||||
|
window.delAgent = async (id, email) => {
|
||||||
|
if (!confirm(`Delete ${email}? This cannot be undone. (Tip: Deactivate keeps their history.)`)) return;
|
||||||
|
try { await api('/api/users/manage', { id, action: 'delete' }); loadAgents(); populateAgentFilter(); }
|
||||||
|
catch (e) { agOut.textContent = e.message; }
|
||||||
|
};
|
||||||
|
|
||||||
|
// ---------- Session report ----------
|
||||||
|
async function populateAgentFilter() {
|
||||||
|
try {
|
||||||
|
const rows = await api('/api/users', null, 'GET');
|
||||||
|
const sel = document.getElementById('fAgent');
|
||||||
|
const cur = sel.value;
|
||||||
|
sel.innerHTML = '<option value="">All agents</option>' + rows.map(u => `<option value="${esc(u.email)}">${esc(u.name || u.email)}</option>`).join('');
|
||||||
|
sel.value = cur;
|
||||||
|
} catch { /* non-admins cannot list agents; filter stays "All" */ }
|
||||||
|
}
|
||||||
|
|
||||||
|
function fmtDuration(ms) {
|
||||||
|
if (ms == null) return '—';
|
||||||
|
const s = Math.round(ms / 1000);
|
||||||
|
if (s < 60) return s + 's';
|
||||||
|
const m = Math.floor(s / 60), r = s % 60;
|
||||||
|
if (m < 60) return m + 'm ' + r + 's';
|
||||||
|
return Math.floor(m / 60) + 'h ' + (m % 60) + 'm';
|
||||||
|
}
|
||||||
|
|
||||||
|
let REPORT_ROWS = [];
|
||||||
|
async function loadReport() {
|
||||||
|
const q = new URLSearchParams();
|
||||||
|
if (fAgent.value) q.set('agent', fAgent.value);
|
||||||
|
if (fFrom.value) q.set('from', fFrom.value);
|
||||||
|
if (fTo.value) q.set('to', fTo.value);
|
||||||
|
const rows = await api('/api/report?' + q.toString(), null, 'GET');
|
||||||
|
REPORT_ROWS = rows;
|
||||||
|
document.querySelector('#report tbody').innerHTML = rows.map((r) => {
|
||||||
|
const d = new Date(r.started_at);
|
||||||
|
const dur = r.ended_at ? (r.ended_at - r.started_at) : null;
|
||||||
|
return `<tr>
|
||||||
|
<td>${d.toLocaleDateString()}</td>
|
||||||
|
<td class="muted">${d.toLocaleTimeString([], {hour:'2-digit',minute:'2-digit'})}</td>
|
||||||
|
<td>${esc(r.agent_name || r.agent_email || '—')}</td>
|
||||||
|
<td>${esc(r.ticket || 'Direct session')}</td>
|
||||||
|
<td>${r.ended_at ? fmtDuration(dur) : '<span class="pill on">in progress</span>'}</td>
|
||||||
|
</tr>`;
|
||||||
|
}).join('') || '<tr><td colspan=5 class="muted">No sessions in this period.</td></tr>';
|
||||||
|
const total = rows.reduce((a, r) => a + (r.ended_at ? r.ended_at - r.started_at : 0), 0);
|
||||||
|
repSummary.textContent = rows.length ? `${rows.length} session(s) · total time ${fmtDuration(total)}` : '';
|
||||||
|
}
|
||||||
|
|
||||||
|
function reportData() {
|
||||||
|
return REPORT_ROWS.map((r) => {
|
||||||
|
const d = new Date(r.started_at);
|
||||||
|
return {
|
||||||
|
date: d.toLocaleDateString(), start: d.toLocaleTimeString([], {hour:'2-digit',minute:'2-digit'}),
|
||||||
|
agent: r.agent_name || r.agent_email || '', ticket: r.ticket || 'Direct session',
|
||||||
|
spent: r.ended_at ? fmtDuration(r.ended_at - r.started_at) : 'in progress',
|
||||||
|
};
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
function exportExcel() {
|
||||||
|
const rows = reportData();
|
||||||
|
if (!rows.length) { repSummary.textContent = 'Nothing to export for this period.'; return; }
|
||||||
|
const head = ['Date','Start time','Agent','Ticket','Time spent'];
|
||||||
|
const csvCell = (v) => '"' + String(v).replace(/"/g, '""') + '"';
|
||||||
|
const csv = '\ufeff' + [head, ...rows.map(r => [r.date, r.start, r.agent, r.ticket, r.spent])]
|
||||||
|
.map(line => line.map(csvCell).join(',')).join('\r\n');
|
||||||
|
const a = document.createElement('a');
|
||||||
|
a.href = URL.createObjectURL(new Blob([csv], { type: 'text/csv;charset=utf-8' }));
|
||||||
|
a.download = 'session-report.csv';
|
||||||
|
a.click(); URL.revokeObjectURL(a.href);
|
||||||
|
}
|
||||||
|
|
||||||
|
function exportPdf() {
|
||||||
|
const rows = reportData();
|
||||||
|
if (!rows.length) { repSummary.textContent = 'Nothing to export for this period.'; return; }
|
||||||
|
const period = (fFrom.value || 'start') + ' to ' + (fTo.value || 'today');
|
||||||
|
const agentSel = fAgent.value || 'All agents';
|
||||||
|
const w = window.open('', '_blank');
|
||||||
|
w.document.write('<html><head><title>Session report</title><style>' +
|
||||||
|
'body{font-family:Segoe UI,Arial,sans-serif;color:#1f2430;margin:32px}' +
|
||||||
|
'h1{font-size:18px;color:#1F3B73;border-bottom:3px solid #FFC708;padding-bottom:6px}' +
|
||||||
|
'.meta{color:#6b7280;font-size:12px;margin-bottom:14px}' +
|
||||||
|
'table{width:100%;border-collapse:collapse;font-size:12px}' +
|
||||||
|
'th{background:#1F3B73;color:#fff;text-align:left;padding:6px 8px}' +
|
||||||
|
'td{padding:6px 8px;border-bottom:1px solid #e6e9ef}' +
|
||||||
|
'</style></head><body>' +
|
||||||
|
'<h1>BizGaze Support — Session report</h1>' +
|
||||||
|
'<div class="meta">Agent: ' + esc(agentSel) + ' · Period: ' + esc(period) + ' · Generated ' + new Date().toLocaleString() + '</div>' +
|
||||||
|
'<table><tr><th>Date</th><th>Start time</th><th>Agent</th><th>Ticket</th><th>Time spent</th></tr>' +
|
||||||
|
rows.map(r => '<tr><td>' + [r.date, r.start, esc(r.agent), esc(r.ticket), r.spent].join('</td><td>') + '</td></tr>').join('') +
|
||||||
|
'</table><div class="meta" style="margin-top:12px">' + esc(repSummary.textContent) + '</div></body></html>');
|
||||||
|
w.document.close();
|
||||||
|
w.onload = () => { w.print(); };
|
||||||
|
}
|
||||||
|
|
||||||
|
function esc(s) { return String(s == null ? '' : s).replace(/[&<>"]/g, (c) => ({ '&': '&', '<': '<', '>': '>', '"': '"' }[c])); }
|
||||||
|
|
||||||
|
// ---------- Boot ----------
|
||||||
|
(async function () {
|
||||||
|
try { const me = await api('/api/me', null, 'GET'); dashboard(me); }
|
||||||
|
catch { authView(); }
|
||||||
|
})();
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
Plik binarny nie jest wyświetlany.
|
Po Szerokość: | Wysokość: | Rozmiar: 19 KiB |
@@ -0,0 +1,122 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||||
|
<title>BizGaze Support — Share your screen</title>
|
||||||
|
<style>
|
||||||
|
:root{ --brand:#FFC708; --brand-d:#E0AC00; --blue:#1F3B73; --blue-d:#16294f; --blue-soft:#EAF0FB; --ink:#1f2430; --muted:#6b7280; --bg:#f6f8fb; --card:#ffffff; --line:#e6e9ef; }
|
||||||
|
*{box-sizing:border-box;}
|
||||||
|
body{font-family:'Segoe UI',system-ui,sans-serif;background:var(--bg);color:var(--ink);margin:0;}
|
||||||
|
.stage{display:flex;min-height:100vh;}
|
||||||
|
.brandpanel{flex:1;background:linear-gradient(160deg,var(--blue),var(--blue-d));color:#fff;display:flex;flex-direction:column;justify-content:center;align-items:center;text-align:center;padding:2.5rem;}
|
||||||
|
.mark{width:88px;height:88px;border-radius:22px;background:var(--brand);display:grid;place-items:center;font-weight:800;font-size:2.6rem;color:var(--blue);margin-bottom:1.2rem;box-shadow:0 12px 30px rgba(0,0,0,.25);}
|
||||||
|
.wordmark{font-size:2.2rem;font-weight:800;letter-spacing:.01em;}
|
||||||
|
.wordmark span{color:var(--brand);}
|
||||||
|
.tagline{color:#cdd7ee;margin-top:.6rem;font-size:1rem;max-width:300px;line-height:1.5;}
|
||||||
|
.panelside{flex:1;display:flex;align-items:center;justify-content:center;padding:2rem;}
|
||||||
|
.card{background:var(--card);border:1px solid var(--line);border-radius:18px;padding:2.4rem;max-width:440px;width:100%;text-align:center;box-shadow:0 10px 30px rgba(20,30,60,.06);}
|
||||||
|
h1{font-size:1.45rem;margin:.2rem 0 .4rem;color:var(--blue);}
|
||||||
|
.sub{color:var(--muted);font-size:.97rem;line-height:1.5;margin-bottom:1.6rem;}
|
||||||
|
.codewrap{background:#fffdf2;border:2px dashed var(--brand);border-radius:14px;padding:1.2rem;}
|
||||||
|
.codelabel{font-size:.78rem;letter-spacing:.08em;text-transform:uppercase;color:var(--muted);margin-bottom:.3rem;}
|
||||||
|
.code{font-size:3rem;letter-spacing:.5rem;font-weight:800;color:var(--ink);}
|
||||||
|
.status{margin-top:1.3rem;padding:.7rem 1rem;border-radius:10px;background:#f1f5f9;color:#475569;font-size:.92rem;}
|
||||||
|
.status.on{background:#ecfdf3;color:#15803d;}
|
||||||
|
.consent{margin-top:1.3rem;border:1px solid #c7d6f0;background:var(--blue-soft);border-left:5px solid var(--blue);border-radius:12px;padding:1.3rem;text-align:left;color:var(--blue-d);}
|
||||||
|
.consent .who{font-weight:700;color:var(--blue);}
|
||||||
|
.btns{margin-top:1rem;display:flex;gap:.6rem;}
|
||||||
|
button{flex:1;padding:.8rem 1rem;border:none;border-radius:10px;font-weight:700;font-size:.98rem;cursor:pointer;}
|
||||||
|
.grant{background:var(--brand);color:var(--ink);} .grant:hover{background:var(--brand-d);}
|
||||||
|
.deny{background:#fff;color:var(--blue);border:1px solid #c7d6f0;} .deny:hover{background:#f3f6fc;}
|
||||||
|
.foot{color:var(--muted);font-size:.8rem;margin-top:1.4rem;}
|
||||||
|
.indicator{position:fixed;top:0;left:0;right:0;background:#dc2626;color:#fff;text-align:center;padding:.5rem;font-size:.9rem;display:none;font-weight:600;z-index:9;}
|
||||||
|
.indicator.show{display:block;}
|
||||||
|
@media(max-width:860px){ .stage{flex-direction:column;} .brandpanel{padding:2rem;min-height:auto;} .mark{width:60px;height:60px;border-radius:16px;font-size:1.8rem;margin-bottom:.7rem;} .wordmark{font-size:1.5rem;} .tagline{display:none;} }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="indicator" id="indicator">● Your screen is being shared — close this tab anytime to stop</div>
|
||||||
|
<div class="stage">
|
||||||
|
<div class="brandpanel">
|
||||||
|
<img src="/logo.png" alt="" style="width:88px;height:88px;border-radius:22px;object-fit:contain;margin-bottom:1.2rem;background:#fff;padding:8px;box-shadow:0 12px 30px rgba(0,0,0,.25)" onerror="this.replaceWith(Object.assign(document.createElement('div'),{className:'mark',textContent:'B'}))">
|
||||||
|
<div class="wordmark">BizGaze <span>Support</span></div>
|
||||||
|
<div class="tagline">Secure, instant remote support — no downloads, you stay in control.</div>
|
||||||
|
</div>
|
||||||
|
<div class="panelside">
|
||||||
|
<div class="card">
|
||||||
|
<h1>Let's get you connected</h1>
|
||||||
|
<div class="sub">Share the code below with your BizGaze support agent.</div>
|
||||||
|
<div class="codewrap">
|
||||||
|
<div class="codelabel">Your session code</div>
|
||||||
|
<div style="display:flex;align-items:center;justify-content:center;gap:.7rem">
|
||||||
|
<div class="code" id="code">······</div>
|
||||||
|
<button id="copyBtn" title="Click to copy" aria-label="Click to copy" style="flex:0 0 auto;width:38px;height:38px;padding:0;background:#fff;border:1px solid var(--brand);color:var(--blue);border-radius:8px;cursor:pointer;display:inline-flex;align-items:center;justify-content:center"><svg id="copyIcon" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="9" y="9" width="13" height="13" rx="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg></button>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div id="status" class="status">Preparing your code…</div>
|
||||||
|
<div id="consentBox"></div>
|
||||||
|
<div class="foot">🔒 You stay in control. The agent can only see your screen after you tap Allow, and you can stop anytime.</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<script>
|
||||||
|
const codeEl=document.getElementById('code'), statusEl=document.getElementById('status'),
|
||||||
|
consentBox=document.getElementById('consentBox'), indicator=document.getElementById('indicator');
|
||||||
|
const setStatus=(t,c='')=>{statusEl.textContent=t;statusEl.className='status '+c;};
|
||||||
|
document.getElementById('copyBtn').onclick=async()=>{
|
||||||
|
const code=codeEl.textContent.trim();
|
||||||
|
if(!/^\d{6}$/.test(code)) return;
|
||||||
|
try{ await navigator.clipboard.writeText(code); }
|
||||||
|
catch(e){ const ta=document.createElement('textarea');ta.value=code;document.body.appendChild(ta);ta.select();document.execCommand('copy');ta.remove(); }
|
||||||
|
const b=document.getElementById('copyBtn'); const old=b.innerHTML;
|
||||||
|
b.innerHTML='<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="#16a34a" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"><path d="M20 6 9 17l-5-5"/></svg>';
|
||||||
|
setTimeout(()=>{b.innerHTML=old;},1500);
|
||||||
|
};
|
||||||
|
let ws,pc,localStream,sessionId;
|
||||||
|
ws=new WebSocket((location.protocol==='https:'?'wss://':'ws://')+location.host+'/ws');
|
||||||
|
ws.onopen=()=>ws.send(JSON.stringify({type:'share-create'}));
|
||||||
|
ws.onmessage=async(e)=>{const m=JSON.parse(e.data);switch(m.type){
|
||||||
|
case 'share-code': codeEl.textContent=m.code; setStatus('Waiting for your agent to enter the code…'); break;
|
||||||
|
case 'share-request': onAgentConnected(m); break;
|
||||||
|
case 'start-stream': sessionId=m.sessionId; await startStreaming(); break;
|
||||||
|
case 'answer': if(pc) await pc.setRemoteDescription(new RTCSessionDescription(m.sdp)); break;
|
||||||
|
case 'ice-candidate': if(m.candidate&&pc) await pc.addIceCandidate(new RTCIceCandidate(m.candidate)); break;
|
||||||
|
case 'session-ended': teardown(); break;
|
||||||
|
case 'error': setStatus(m.message,''); break;
|
||||||
|
}};
|
||||||
|
ws.onclose=()=>setStatus('Connection closed. Refresh the page to start again.');
|
||||||
|
function onAgentConnected(m){
|
||||||
|
const cw=document.querySelector('.codewrap');
|
||||||
|
if(cw) cw.style.display='none';
|
||||||
|
setStatus('Your agent has connected. Please respond below.','on');
|
||||||
|
showConsent(m);
|
||||||
|
}
|
||||||
|
function showConsent(m){
|
||||||
|
const name=(m.technician&&m.technician.trim())?m.technician:'Your support agent';
|
||||||
|
consentBox.innerHTML='<div class="consent">Your support agent <span class="who">'+esc(name)+'</span> would like to view your screen to help you.'+
|
||||||
|
'<div class="btns"><button class="grant" id="g">Allow</button><button class="deny" id="d">Not now</button></div></div>';
|
||||||
|
const allow=()=>{consentBox.innerHTML='';document.removeEventListener('keydown',onKey);ws.send(JSON.stringify({type:'consent',sessionId:m.sessionId,granted:true}));};
|
||||||
|
const onKey=(e)=>{if(e.key==='Enter'){e.preventDefault();allow();}};
|
||||||
|
document.addEventListener('keydown',onKey);
|
||||||
|
document.getElementById('g').onclick=allow;
|
||||||
|
document.getElementById('d').onclick=()=>{consentBox.innerHTML='';document.removeEventListener('keydown',onKey);ws.send(JSON.stringify({type:'consent',sessionId:m.sessionId,granted:false}));setStatus('Connection declined. Refresh this page if you need a new code.');};
|
||||||
|
}
|
||||||
|
async function startStreaming(){
|
||||||
|
setStatus('In the popup: click the screen preview so it is selected, then press Share.','on');
|
||||||
|
try{ localStream=await navigator.mediaDevices.getDisplayMedia({video:{displaySurface:'monitor',frameRate:{ideal:30}},audio:false,monitorTypeSurfaces:'include'}); }
|
||||||
|
catch(err){ try{ws.send(JSON.stringify({type:'end-session',sessionId,reason:'share-cancelled'}));}catch(e){} setStatus('Screen share was cancelled. Refresh the page to try again.'); return; }
|
||||||
|
indicator.classList.add('show'); setStatus('You are now sharing your screen with your agent.','on');
|
||||||
|
pc=new RTCPeerConnection({iceServers:[{urls:'stun:stun.l.google.com:19302'}]});
|
||||||
|
localStream.getTracks().forEach(t=>pc.addTrack(t,localStream));
|
||||||
|
pc.ondatachannel=(ev)=>{ev.channel.onmessage=()=>{};};
|
||||||
|
pc.onicecandidate=(ev)=>{if(ev.candidate)ws.send(JSON.stringify({type:'ice-candidate',sessionId,candidate:ev.candidate}));};
|
||||||
|
const offer=await pc.createOffer(); await pc.setLocalDescription(offer);
|
||||||
|
ws.send(JSON.stringify({type:'offer',sessionId,sdp:pc.localDescription}));
|
||||||
|
localStream.getVideoTracks()[0].onended=()=>{ws.send(JSON.stringify({type:'end-session',sessionId,reason:'customer-ended'}));teardown();};
|
||||||
|
}
|
||||||
|
function teardown(){indicator.classList.remove('show');if(localStream){localStream.getTracks().forEach(t=>t.stop());localStream=null;}if(pc){pc.close();pc=null;}consentBox.innerHTML='';setStatus('Session ended. Refresh this page to get a new code.');}
|
||||||
|
function esc(s){return String(s).replace(/[&<>"]/g,c=>({'&':'&','<':'<','>':'>','"':'"'}[c]));}
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,107 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<title>Remote Session</title>
|
||||||
|
<style>
|
||||||
|
body { font-family: system-ui, sans-serif; background: #0f172a; color: #e2e8f0; margin: 0; }
|
||||||
|
header { background: #1e293b; padding: 0.6rem 1rem; display: flex; justify-content: space-between; align-items: center; }
|
||||||
|
#status { font-size: 0.9rem; color: #94a3b8; }
|
||||||
|
#video { width: 100vw; height: calc(100vh - 48px); background: #020617; object-fit: contain; cursor: crosshair; display: block; outline: none; }
|
||||||
|
button { padding: 0.5rem 1rem; background: #334155; color: #fff; border: none; border-radius: 6px; cursor: pointer; }
|
||||||
|
a { color: #3b82f6; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<header>
|
||||||
|
<div id="status">Connecting…</div>
|
||||||
|
<div>
|
||||||
|
<a href="/">← Console</a>
|
||||||
|
<button id="endBtn">End session</button>
|
||||||
|
</div>
|
||||||
|
</header>
|
||||||
|
<video id="video" autoplay playsinline muted tabindex="0"></video>
|
||||||
|
|
||||||
|
<script>
|
||||||
|
const params = new URLSearchParams(location.search);
|
||||||
|
const machineId = params.get('machine');
|
||||||
|
const machineName = params.get('name') || 'remote PC';
|
||||||
|
const statusEl = document.getElementById('status');
|
||||||
|
const video = document.getElementById('video');
|
||||||
|
|
||||||
|
let pc, inputChannel, sessionId;
|
||||||
|
const ws = new WebSocket((location.protocol === 'https:' ? 'wss://' : 'ws://') + location.host + '/ws');
|
||||||
|
|
||||||
|
const setStatus = (t) => (statusEl.textContent = t);
|
||||||
|
|
||||||
|
ws.onopen = () => {
|
||||||
|
setStatus(`Requesting access to ${machineName}…`);
|
||||||
|
ws.send(JSON.stringify({ type: 'viewer-connect', machineId }));
|
||||||
|
};
|
||||||
|
|
||||||
|
ws.onmessage = async (e) => {
|
||||||
|
const m = JSON.parse(e.data);
|
||||||
|
switch (m.type) {
|
||||||
|
case 'session-pending':
|
||||||
|
sessionId = m.sessionId;
|
||||||
|
setStatus(`Waiting for ${machineName} to grant consent…`);
|
||||||
|
break;
|
||||||
|
case 'session-denied':
|
||||||
|
setStatus('Consent denied by the remote user.');
|
||||||
|
break;
|
||||||
|
case 'session-ready':
|
||||||
|
setStatus('Consent granted. Establishing connection…');
|
||||||
|
setupPeer();
|
||||||
|
break;
|
||||||
|
case 'offer':
|
||||||
|
await pc.setRemoteDescription(new RTCSessionDescription(m.sdp));
|
||||||
|
const ans = await pc.createAnswer();
|
||||||
|
await pc.setLocalDescription(ans);
|
||||||
|
ws.send(JSON.stringify({ type: 'answer', sessionId, sdp: pc.localDescription }));
|
||||||
|
break;
|
||||||
|
case 'ice-candidate':
|
||||||
|
if (m.candidate && pc) await pc.addIceCandidate(new RTCIceCandidate(m.candidate));
|
||||||
|
break;
|
||||||
|
case 'session-ended':
|
||||||
|
setStatus('Session ended.');
|
||||||
|
video.srcObject = null;
|
||||||
|
break;
|
||||||
|
case 'error':
|
||||||
|
setStatus('Error: ' + m.message);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
function setupPeer() {
|
||||||
|
pc = new RTCPeerConnection({ iceServers: [{ urls: 'stun:stun.l.google.com:19302' }] });
|
||||||
|
inputChannel = pc.createDataChannel('input', { ordered: true });
|
||||||
|
pc.ontrack = (ev) => {
|
||||||
|
video.srcObject = ev.streams[0];
|
||||||
|
setStatus(`Connected to ${machineName} — controlling. Click the screen to send input.`);
|
||||||
|
video.focus();
|
||||||
|
};
|
||||||
|
pc.onicecandidate = (ev) => {
|
||||||
|
if (ev.candidate) ws.send(JSON.stringify({ type: 'ice-candidate', sessionId, candidate: ev.candidate }));
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
// ---- input capture (normalized coords) ----
|
||||||
|
const send = (o) => { if (inputChannel && inputChannel.readyState === 'open') inputChannel.send(JSON.stringify(o)); };
|
||||||
|
const rel = (e) => { const r = video.getBoundingClientRect(); return { x: (e.clientX - r.left) / r.width, y: (e.clientY - r.top) / r.height }; };
|
||||||
|
let lastMove = 0;
|
||||||
|
video.addEventListener('mousemove', (e) => { const t = performance.now(); if (t - lastMove < 30) return; lastMove = t; send({ kind: 'mousemove', ...rel(e) }); });
|
||||||
|
video.addEventListener('mousedown', (e) => { video.focus(); send({ kind: 'mousedown', button: e.button, ...rel(e) }); });
|
||||||
|
video.addEventListener('mouseup', (e) => send({ kind: 'mouseup', button: e.button, ...rel(e) }));
|
||||||
|
video.addEventListener('dblclick', (e) => send({ kind: 'dblclick', ...rel(e) }));
|
||||||
|
video.addEventListener('wheel', (e) => { e.preventDefault(); send({ kind: 'scroll', dx: e.deltaX, dy: e.deltaY }); }, { passive: false });
|
||||||
|
video.addEventListener('contextmenu', (e) => e.preventDefault());
|
||||||
|
video.addEventListener('keydown', (e) => { e.preventDefault(); send({ kind: 'keydown', key: e.key, code: e.code, ctrl: e.ctrlKey, alt: e.altKey, shift: e.shiftKey, meta: e.metaKey }); });
|
||||||
|
video.addEventListener('keyup', (e) => { e.preventDefault(); send({ kind: 'keyup', key: e.key, code: e.code }); });
|
||||||
|
|
||||||
|
document.getElementById('endBtn').onclick = () => {
|
||||||
|
ws.send(JSON.stringify({ type: 'end-session', sessionId }));
|
||||||
|
setTimeout(() => (location.href = '/'), 300);
|
||||||
|
};
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,457 @@
|
|||||||
|
// Remote Access Platform — backend server
|
||||||
|
// HTTP JSON API (auth, MFA, machines, audit) + authenticated WebSocket signaling.
|
||||||
|
const http = require('http');
|
||||||
|
const https = require('https');
|
||||||
|
const fs = require('fs');
|
||||||
|
const path = require('path');
|
||||||
|
const { WebSocketServer } = require('ws');
|
||||||
|
const db = require('./db');
|
||||||
|
const A = require('./auth');
|
||||||
|
|
||||||
|
const PORT = process.env.PORT || 8090;
|
||||||
|
const HTTPS_PORT = process.env.HTTPS_PORT || 8443;
|
||||||
|
const PUBLIC_DIR = path.join(__dirname, 'public');
|
||||||
|
const SESSION_TTL = 1000 * 60 * 60 * 12; // 12h
|
||||||
|
|
||||||
|
// ---------- helpers ----------
|
||||||
|
const now = () => Date.now();
|
||||||
|
const json = (res, code, body) => {
|
||||||
|
res.writeHead(code, { 'Content-Type': 'application/json' });
|
||||||
|
res.end(JSON.stringify(body));
|
||||||
|
};
|
||||||
|
function readBody(req) {
|
||||||
|
return new Promise((resolve) => {
|
||||||
|
let data = '';
|
||||||
|
req.on('data', (c) => (data += c));
|
||||||
|
req.on('end', () => {
|
||||||
|
try { resolve(data ? JSON.parse(data) : {}); } catch { resolve({}); }
|
||||||
|
});
|
||||||
|
});
|
||||||
|
}
|
||||||
|
function parseCookies(req) {
|
||||||
|
const out = {};
|
||||||
|
(req.headers.cookie || '').split(';').forEach((c) => {
|
||||||
|
const [k, ...v] = c.trim().split('=');
|
||||||
|
if (k) out[k] = decodeURIComponent(v.join('='));
|
||||||
|
});
|
||||||
|
return out;
|
||||||
|
}
|
||||||
|
function audit(entry) {
|
||||||
|
db.prepare(
|
||||||
|
`INSERT INTO audit_log (team_id,user_id,user_email,machine_id,machine_name,action,detail,at)
|
||||||
|
VALUES (@team_id,@user_id,@user_email,@machine_id,@machine_name,@action,@detail,@at)`
|
||||||
|
).run({
|
||||||
|
team_id: entry.team_id, user_id: entry.user_id || null, user_email: entry.user_email || null,
|
||||||
|
machine_id: entry.machine_id || null, machine_name: entry.machine_name || null,
|
||||||
|
action: entry.action, detail: entry.detail || null, at: now(),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
// Resolve the logged-in user from the session cookie. Returns user row (with mfa state) or null.
|
||||||
|
function currentUser(req, { requireMfa = true } = {}) {
|
||||||
|
const tok = parseCookies(req).sid;
|
||||||
|
if (!tok) return null;
|
||||||
|
const s = db.prepare('SELECT * FROM sessions_auth WHERE token=?').get(tok);
|
||||||
|
if (!s || s.expires_at < now()) return null;
|
||||||
|
if (requireMfa && !s.mfa_passed) return null;
|
||||||
|
const u = db.prepare('SELECT * FROM users WHERE id=?').get(s.user_id);
|
||||||
|
if (!u || u.active === 0) return null;
|
||||||
|
return { ...u, _session: s };
|
||||||
|
}
|
||||||
|
|
||||||
|
// ---------- HTTP API ----------
|
||||||
|
const routes = {};
|
||||||
|
const route = (method, p, fn) => (routes[`${method} ${p}`] = fn);
|
||||||
|
|
||||||
|
// Register: creates a team + admin user. MFA must be set up before full access.
|
||||||
|
route('POST', '/api/register', async (req, res) => {
|
||||||
|
const { email, password, teamName } = await readBody(req);
|
||||||
|
if (!email || !password) return json(res, 400, { error: 'email and password required' });
|
||||||
|
if (db.prepare('SELECT 1 FROM users WHERE email=?').get(email))
|
||||||
|
return json(res, 409, { error: 'email already registered' });
|
||||||
|
const teamId = A.id(), userId = A.id();
|
||||||
|
const { hash, salt } = A.hashPassword(password);
|
||||||
|
const mfaSecret = A.newMfaSecret();
|
||||||
|
db.prepare('INSERT INTO teams (id,name,created_at) VALUES (?,?,?)')
|
||||||
|
.run(teamId, teamName || `${email}'s team`, now());
|
||||||
|
db.prepare(`INSERT INTO users (id,team_id,email,pw_hash,pw_salt,role,mfa_secret,mfa_enabled,created_at)
|
||||||
|
VALUES (?,?,?,?,?,?,?,0,?)`)
|
||||||
|
.run(userId, teamId, email, hash, salt, 'admin', mfaSecret, now());
|
||||||
|
audit({ team_id: teamId, user_id: userId, user_email: email, action: 'user_registered' });
|
||||||
|
json(res, 200, { ok: true });
|
||||||
|
});
|
||||||
|
|
||||||
|
// Verify MFA enrollment (confirm the user scanned the QR / entered code)
|
||||||
|
route('POST', '/api/mfa/enable', async (req, res) => {
|
||||||
|
const { email, code } = await readBody(req);
|
||||||
|
const u = db.prepare('SELECT * FROM users WHERE email=?').get(email);
|
||||||
|
if (!u) return json(res, 404, { error: 'no such user' });
|
||||||
|
if (!A.verifyTotp(u.mfa_secret, code)) return json(res, 401, { error: 'invalid code' });
|
||||||
|
db.prepare('UPDATE users SET mfa_enabled=1 WHERE id=?').run(u.id);
|
||||||
|
json(res, 200, { ok: true });
|
||||||
|
});
|
||||||
|
|
||||||
|
// Login step 1: email + password -> sets a session cookie (mfa not yet passed)
|
||||||
|
route('POST', '/api/login', async (req, res) => {
|
||||||
|
const { email, password } = await readBody(req);
|
||||||
|
const u = db.prepare('SELECT * FROM users WHERE email=?').get(email);
|
||||||
|
if (!u || !A.verifyPassword(password, u.pw_salt, u.pw_hash))
|
||||||
|
return json(res, 401, { error: 'invalid credentials' });
|
||||||
|
if (u.active === 0) return json(res, 403, { error: 'This account has been deactivated' });
|
||||||
|
const tok = A.token();
|
||||||
|
db.prepare('INSERT INTO sessions_auth (token,user_id,mfa_passed,created_at,expires_at) VALUES (?,?,1,?,?)')
|
||||||
|
.run(tok, u.id, now(), now() + SESSION_TTL);
|
||||||
|
res.setHeader('Set-Cookie', `sid=${tok}; HttpOnly; Path=/; Max-Age=${SESSION_TTL / 1000}`);
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'login' });
|
||||||
|
json(res, 200, { ok: true, mfaRequired: false });
|
||||||
|
});
|
||||||
|
|
||||||
|
// Login step 2: TOTP code -> marks session mfa_passed
|
||||||
|
route('POST', '/api/login/mfa', async (req, res) => {
|
||||||
|
const { code } = await readBody(req);
|
||||||
|
const tok = parseCookies(req).sid;
|
||||||
|
const s = tok && db.prepare('SELECT * FROM sessions_auth WHERE token=?').get(tok);
|
||||||
|
if (!s) return json(res, 401, { error: 'no session' });
|
||||||
|
const u = db.prepare('SELECT * FROM users WHERE id=?').get(s.user_id);
|
||||||
|
if (!A.verifyTotp(u.mfa_secret, code)) return json(res, 401, { error: 'invalid code' });
|
||||||
|
db.prepare('UPDATE sessions_auth SET mfa_passed=1 WHERE token=?').run(tok);
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'login' });
|
||||||
|
json(res, 200, { ok: true });
|
||||||
|
});
|
||||||
|
|
||||||
|
route('POST', '/api/logout', async (req, res) => {
|
||||||
|
const tok = parseCookies(req).sid;
|
||||||
|
if (tok) db.prepare('DELETE FROM sessions_auth WHERE token=?').run(tok);
|
||||||
|
res.setHeader('Set-Cookie', 'sid=; HttpOnly; Path=/; Max-Age=0');
|
||||||
|
json(res, 200, { ok: true });
|
||||||
|
});
|
||||||
|
|
||||||
|
route('GET', '/api/me', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
json(res, 200, { id: u.id, email: u.email, role: u.role, teamId: u.team_id, name: u.name || null });
|
||||||
|
});
|
||||||
|
|
||||||
|
// Admin adds an agent login to their team
|
||||||
|
route('POST', '/api/users', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
if (u.role !== 'admin') return json(res, 403, { error: 'only admins can add agents' });
|
||||||
|
const { email, password, name, role } = await readBody(req);
|
||||||
|
if (!email || !password) return json(res, 400, { error: 'email and temporary password required' });
|
||||||
|
if (db.prepare('SELECT 1 FROM users WHERE email=?').get(email))
|
||||||
|
return json(res, 409, { error: 'email already registered' });
|
||||||
|
const userId = A.id();
|
||||||
|
const { hash, salt } = A.hashPassword(password);
|
||||||
|
const mfaSecret = A.newMfaSecret();
|
||||||
|
const r = (role === 'admin' || role === 'viewer') ? role : 'technician';
|
||||||
|
db.prepare(`INSERT INTO users (id,team_id,email,pw_hash,pw_salt,role,name,mfa_secret,mfa_enabled,created_at)
|
||||||
|
VALUES (?,?,?,?,?,?,?,?,0,?)`)
|
||||||
|
.run(userId, u.team_id, email, hash, salt, r, (name || null), mfaSecret, now());
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'agent_added', detail: email + ' (' + r + ')' });
|
||||||
|
json(res, 200, { ok: true, id: userId, email, role: r });
|
||||||
|
});
|
||||||
|
|
||||||
|
// List the team's agents
|
||||||
|
route('GET', '/api/users', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
const rows = db.prepare('SELECT id,email,name,role,active,created_at FROM users WHERE team_id=?').all(u.team_id);
|
||||||
|
json(res, 200, rows);
|
||||||
|
});
|
||||||
|
|
||||||
|
// First-login MFA self-setup: a logged-in (password ok) user who hasn't enabled MFA yet
|
||||||
|
route('GET', '/api/mfa/setup', async (req, res) => {
|
||||||
|
const u = currentUser(req, { requireMfa: false });
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
if (u.mfa_enabled) return json(res, 400, { error: 'MFA already enabled' });
|
||||||
|
json(res, 200, { secret: u.mfa_secret, otpauthUrl: A.otpauthUrl(u.mfa_secret, u.email) });
|
||||||
|
});
|
||||||
|
|
||||||
|
// Admin manages an agent: reset password, rename, deactivate/activate, delete.
|
||||||
|
// (Display names are owned by the admin/BizGaze app — agents cannot edit them.)
|
||||||
|
route('POST', '/api/users/manage', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
if (u.role !== 'admin') return json(res, 403, { error: 'only admins can manage agents' });
|
||||||
|
const { id, action, password, name } = await readBody(req);
|
||||||
|
const target = db.prepare('SELECT * FROM users WHERE id=? AND team_id=?').get(id, u.team_id);
|
||||||
|
if (!target) return json(res, 404, { error: 'no such agent' });
|
||||||
|
switch (action) {
|
||||||
|
case 'reset-password': {
|
||||||
|
if (!password || String(password).length < 8) return json(res, 400, { error: 'new password must be at least 8 characters' });
|
||||||
|
const { hash, salt } = A.hashPassword(password);
|
||||||
|
db.prepare('UPDATE users SET pw_hash=?, pw_salt=? WHERE id=?').run(hash, salt, target.id);
|
||||||
|
db.prepare('DELETE FROM sessions_auth WHERE user_id=?').run(target.id); // force re-login
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'agent_password_reset', detail: target.email });
|
||||||
|
return json(res, 200, { ok: true });
|
||||||
|
}
|
||||||
|
case 'rename': {
|
||||||
|
const clean = String(name || '').trim().slice(0, 60);
|
||||||
|
if (!clean) return json(res, 400, { error: 'name required' });
|
||||||
|
db.prepare('UPDATE users SET name=? WHERE id=?').run(clean, target.id);
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'agent_renamed', detail: target.email + ' -> ' + clean });
|
||||||
|
return json(res, 200, { ok: true, name: clean });
|
||||||
|
}
|
||||||
|
case 'deactivate': {
|
||||||
|
if (target.id === u.id) return json(res, 400, { error: 'you cannot deactivate your own account' });
|
||||||
|
db.prepare('UPDATE users SET active=0 WHERE id=?').run(target.id);
|
||||||
|
db.prepare('DELETE FROM sessions_auth WHERE user_id=?').run(target.id);
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'agent_deactivated', detail: target.email });
|
||||||
|
return json(res, 200, { ok: true });
|
||||||
|
}
|
||||||
|
case 'activate': {
|
||||||
|
db.prepare('UPDATE users SET active=1 WHERE id=?').run(target.id);
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'agent_activated', detail: target.email });
|
||||||
|
return json(res, 200, { ok: true });
|
||||||
|
}
|
||||||
|
case 'delete': {
|
||||||
|
if (target.id === u.id) return json(res, 400, { error: 'you cannot delete your own account' });
|
||||||
|
db.prepare('DELETE FROM sessions_auth WHERE user_id=?').run(target.id);
|
||||||
|
db.prepare('DELETE FROM users WHERE id=?').run(target.id);
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, action: 'agent_deleted', detail: target.email });
|
||||||
|
return json(res, 200, { ok: true });
|
||||||
|
}
|
||||||
|
default: return json(res, 400, { error: 'unknown action' });
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
// Session report: one row per session, filterable by agent and date period
|
||||||
|
route('GET', '/api/report', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
const q = new URLSearchParams(req.url.split('?')[1] || '');
|
||||||
|
let sql = 'SELECT * FROM sessions_log WHERE team_id=?';
|
||||||
|
const args = [u.team_id];
|
||||||
|
if (q.get('agent')) { sql += ' AND agent_email=?'; args.push(q.get('agent')); }
|
||||||
|
if (q.get('from')) { sql += ' AND started_at>=?'; args.push(new Date(q.get('from') + 'T00:00:00').getTime()); }
|
||||||
|
if (q.get('to')) { sql += ' AND started_at<=?'; args.push(new Date(q.get('to') + 'T23:59:59').getTime()); }
|
||||||
|
sql += ' ORDER BY started_at DESC LIMIT 500';
|
||||||
|
json(res, 200, db.prepare(sql).all(...args));
|
||||||
|
});
|
||||||
|
|
||||||
|
// List machines for the team (with live online status from signaling layer)
|
||||||
|
route('GET', '/api/machines', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
const rows = db.prepare('SELECT id,name,unattended,last_seen FROM machines WHERE team_id=?').all(u.team_id);
|
||||||
|
json(res, 200, rows.map((m) => ({ ...m, online: onlineAgents.has(m.id) })));
|
||||||
|
});
|
||||||
|
|
||||||
|
// Create a machine enrollment token (admin/technician). Agent uses it to come online.
|
||||||
|
route('POST', '/api/machines', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
if (u.role === 'viewer') return json(res, 403, { error: 'forbidden' });
|
||||||
|
const { name, unattended } = await readBody(req);
|
||||||
|
const mId = A.id(), enroll = A.token();
|
||||||
|
db.prepare('INSERT INTO machines (id,team_id,name,enroll_token,unattended,created_at) VALUES (?,?,?,?,?,?)')
|
||||||
|
.run(mId, u.team_id, name || 'Unnamed PC', enroll, unattended ? 1 : 0, now());
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, machine_id: mId, machine_name: name, action: 'machine_enrolled' });
|
||||||
|
json(res, 200, { id: mId, enrollToken: enroll });
|
||||||
|
});
|
||||||
|
|
||||||
|
route('GET', '/api/audit', async (req, res) => {
|
||||||
|
const u = currentUser(req);
|
||||||
|
if (!u) return json(res, 401, { error: 'unauthorized' });
|
||||||
|
const rows = db.prepare("SELECT * FROM audit_log WHERE team_id=? OR team_id='adhoc' ORDER BY at DESC LIMIT 200").all(u.team_id);
|
||||||
|
json(res, 200, rows);
|
||||||
|
});
|
||||||
|
|
||||||
|
// ---------- static + router ----------
|
||||||
|
const MIME = { '.html': 'text/html', '.js': 'text/javascript', '.css': 'text/css', '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.svg': 'image/svg+xml', '.ico': 'image/x-icon' };
|
||||||
|
function serveStatic(req, res) {
|
||||||
|
let p = req.url.split('?')[0];
|
||||||
|
if (p === '/') p = '/index.html';
|
||||||
|
if (p === '/share') p = '/share.html';
|
||||||
|
if (p === '/connect') p = '/connect.html';
|
||||||
|
const fp = path.join(PUBLIC_DIR, path.normalize(p));
|
||||||
|
if (!fp.startsWith(PUBLIC_DIR)) return json(res, 403, { error: 'forbidden' });
|
||||||
|
fs.readFile(fp, (err, data) => {
|
||||||
|
if (err) return json(res, 404, { error: 'not found' });
|
||||||
|
const ct = MIME[path.extname(fp)] || 'application/octet-stream';
|
||||||
|
res.writeHead(200, { 'Content-Type': ct, 'Cache-Control': 'no-cache' });
|
||||||
|
res.end(data);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
const server = http.createServer(async (req, res) => {
|
||||||
|
const key = `${req.method} ${req.url.split('?')[0]}`;
|
||||||
|
if (routes[key]) return routes[key](req, res);
|
||||||
|
if (req.method === 'GET') return serveStatic(req, res);
|
||||||
|
json(res, 404, { error: 'not found' });
|
||||||
|
});
|
||||||
|
|
||||||
|
// ---------- WebSocket signaling ----------
|
||||||
|
// Two kinds of WS clients:
|
||||||
|
// agent -> authenticates with machine enroll_token, waits for session requests
|
||||||
|
// viewer -> authenticated technician, requests a session to a machine
|
||||||
|
// The server brokers consent and relays SDP/ICE. Media never traverses the server.
|
||||||
|
const onlineAgents = new Map(); // machineId -> { ws, machine }
|
||||||
|
const liveSessions = new Map(); // sessionId -> { agentWs, viewerWs, machine, user }
|
||||||
|
const pendingShares = new Map(); // code -> { sharerWs, sessionId } (no-install ad-hoc shares)
|
||||||
|
|
||||||
|
function onConnection(ws, req) {
|
||||||
|
ws.on('message', (raw) => {
|
||||||
|
let m; try { m = JSON.parse(raw); } catch { return; }
|
||||||
|
handle(ws, m, req);
|
||||||
|
});
|
||||||
|
ws.on('close', () => cleanup(ws));
|
||||||
|
}
|
||||||
|
|
||||||
|
const wss = new WebSocketServer({ server, path: '/ws' });
|
||||||
|
wss.on('connection', onConnection);
|
||||||
|
|
||||||
|
function handle(ws, m, req) {
|
||||||
|
switch (m.type) {
|
||||||
|
// --- Agent comes online ---
|
||||||
|
case 'agent-hello': {
|
||||||
|
const machine = db.prepare('SELECT * FROM machines WHERE enroll_token=?').get(m.enrollToken);
|
||||||
|
if (!machine) return ws.send(JSON.stringify({ type: 'error', message: 'invalid enroll token' }));
|
||||||
|
ws.kind = 'agent'; ws.machineId = machine.id;
|
||||||
|
onlineAgents.set(machine.id, { ws, machine });
|
||||||
|
db.prepare('UPDATE machines SET last_seen=? WHERE id=?').run(now(), machine.id);
|
||||||
|
ws.send(JSON.stringify({ type: 'agent-registered', machineId: machine.id, name: machine.name }));
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
// --- Technician requests control of a machine ---
|
||||||
|
case 'viewer-connect': {
|
||||||
|
const u = currentUser(req); // cookie sent on WS upgrade
|
||||||
|
if (!u) return ws.send(JSON.stringify({ type: 'error', message: 'unauthorized' }));
|
||||||
|
const agent = onlineAgents.get(m.machineId);
|
||||||
|
const machine = db.prepare('SELECT * FROM machines WHERE id=? AND team_id=?').get(m.machineId, u.team_id);
|
||||||
|
if (!machine) return ws.send(JSON.stringify({ type: 'error', message: 'no such machine' }));
|
||||||
|
if (!agent) return ws.send(JSON.stringify({ type: 'error', message: 'machine offline' }));
|
||||||
|
if (u.role === 'viewer' && false) {} // view-only still allowed to watch; control gated agent-side
|
||||||
|
const sessionId = A.token(8);
|
||||||
|
ws.kind = 'viewer'; ws.sessionId = sessionId;
|
||||||
|
liveSessions.set(sessionId, { agentWs: agent.ws, viewerWs: ws, machine, user: u });
|
||||||
|
audit({ team_id: u.team_id, user_id: u.id, user_email: u.email, machine_id: machine.id, machine_name: machine.name, action: 'session_requested' });
|
||||||
|
// Ask the agent for consent (or auto-grant if unattended policy is on)
|
||||||
|
agent.ws.sessionId = sessionId;
|
||||||
|
agent.ws.send(JSON.stringify({
|
||||||
|
type: 'session-request', sessionId,
|
||||||
|
technician: u.email, unattended: !!machine.unattended,
|
||||||
|
}));
|
||||||
|
ws.send(JSON.stringify({ type: 'session-pending', sessionId, machineName: machine.name }));
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
// --- Agent grants/denies consent ---
|
||||||
|
case 'consent': {
|
||||||
|
const sess = liveSessions.get(m.sessionId);
|
||||||
|
if (!sess) return;
|
||||||
|
if (m.granted) {
|
||||||
|
audit({ team_id: sess.machine.team_id, user_id: sess.user.id, user_email: sess.user.email, machine_id: sess.machine.id, machine_name: sess.machine.name, action: 'consent_granted', detail: sess.ticket ? 'Ticket ' + sess.ticket : (sess.machine.id ? null : 'Direct session') });
|
||||||
|
try {
|
||||||
|
db.prepare('INSERT INTO sessions_log (id,team_id,agent_email,agent_name,ticket,started_at) VALUES (?,?,?,?,?,?)')
|
||||||
|
.run(m.sessionId, sess.machine.team_id, sess.user.email, (sess.agentName || sess.user.email), sess.ticket || null, now());
|
||||||
|
} catch (e) { /* duplicate consent */ }
|
||||||
|
sess.viewerWs.send(JSON.stringify({ type: 'session-ready', sessionId: m.sessionId }));
|
||||||
|
sess.agentWs.send(JSON.stringify({ type: 'start-stream', sessionId: m.sessionId }));
|
||||||
|
} else {
|
||||||
|
audit({ team_id: sess.machine.team_id, user_id: sess.user.id, user_email: sess.user.email, machine_id: sess.machine.id, machine_name: sess.machine.name, action: 'consent_denied', detail: sess.ticket ? 'Ticket ' + sess.ticket : (sess.machine.id ? null : 'Direct session') });
|
||||||
|
sess.viewerWs.send(JSON.stringify({ type: 'session-denied', sessionId: m.sessionId }));
|
||||||
|
liveSessions.delete(m.sessionId);
|
||||||
|
}
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
// --- No-install: end user opens /share, gets a one-time code ---
|
||||||
|
case 'share-create': {
|
||||||
|
let code;
|
||||||
|
do { code = A.numericCode(6); } while (pendingShares.has(code));
|
||||||
|
const sessionId = A.token(8);
|
||||||
|
ws.kind = 'sharer'; ws.shareCode = code; ws.sessionId = sessionId;
|
||||||
|
pendingShares.set(code, { sharerWs: ws, sessionId });
|
||||||
|
ws.send(JSON.stringify({ type: 'share-code', code }));
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
// --- Logged-in agent enters the code (+ ticket) to connect ---
|
||||||
|
case 'code-connect': {
|
||||||
|
const agent = currentUser(req); // identity from the agent's authenticated session
|
||||||
|
if (!agent) {
|
||||||
|
return ws.send(JSON.stringify({ type: 'error', message: 'Please sign in as an agent first' }));
|
||||||
|
}
|
||||||
|
const ticket = String(m.ticket || '').trim() || null; // optional: direct sessions have no ticket
|
||||||
|
const pend = pendingShares.get(String(m.code || '').trim());
|
||||||
|
if (!pend || pend.sharerWs.readyState !== 1) {
|
||||||
|
return ws.send(JSON.stringify({ type: 'error', message: 'Invalid or expired code' }));
|
||||||
|
}
|
||||||
|
pendingShares.delete(pend.sharerWs.shareCode);
|
||||||
|
const sessionId = pend.sessionId;
|
||||||
|
ws.kind = 'viewer'; ws.sessionId = sessionId;
|
||||||
|
const agentName = agent.name || agent.email;
|
||||||
|
const machine = { id: null, name: 'Support session ' + pend.sharerWs.shareCode, team_id: agent.team_id };
|
||||||
|
const user = { id: agent.id, email: agent.email, team_id: agent.team_id };
|
||||||
|
liveSessions.set(sessionId, { agentWs: pend.sharerWs, viewerWs: ws, machine, user, ticket, agentName });
|
||||||
|
pend.sharerWs.sessionId = sessionId;
|
||||||
|
audit({ team_id: agent.team_id, user_id: agent.id, user_email: agent.email, machine_name: machine.name, action: 'code_session_requested', detail: (ticket ? 'Ticket ' + ticket : 'Direct session (no ticket)') + ' · agent ' + agentName });
|
||||||
|
pend.sharerWs.send(JSON.stringify({ type: 'share-request', sessionId, technician: agentName, ticket }));
|
||||||
|
ws.send(JSON.stringify({ type: 'code-pending', sessionId }));
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
// --- Relay WebRTC signaling between the two peers ---
|
||||||
|
case 'offer': case 'answer': case 'ice-candidate': {
|
||||||
|
const sess = liveSessions.get(m.sessionId || ws.sessionId);
|
||||||
|
if (!sess) return;
|
||||||
|
const peer = ws === sess.agentWs ? sess.viewerWs : sess.agentWs;
|
||||||
|
if (peer && peer.readyState === 1) peer.send(JSON.stringify(m));
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
case 'end-session': {
|
||||||
|
endSession(ws.sessionId, m.reason || null);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function endSession(sessionId, reason) {
|
||||||
|
const sess = liveSessions.get(sessionId);
|
||||||
|
if (!sess) return;
|
||||||
|
try { db.prepare('UPDATE sessions_log SET ended_at=? WHERE id=? AND ended_at IS NULL').run(now(), sessionId); } catch (e) {}
|
||||||
|
audit({ team_id: sess.machine.team_id, user_id: sess.user.id, user_email: sess.user.email, machine_id: sess.machine.id, machine_name: sess.machine.name, action: 'session_ended', detail: sess.ticket ? 'Ticket ' + sess.ticket : (sess.machine.id ? null : 'Direct session') });
|
||||||
|
[sess.agentWs, sess.viewerWs].forEach((p) => {
|
||||||
|
if (p && p.readyState === 1) p.send(JSON.stringify({ type: 'session-ended', sessionId, reason: reason || null }));
|
||||||
|
});
|
||||||
|
liveSessions.delete(sessionId);
|
||||||
|
}
|
||||||
|
|
||||||
|
function cleanup(ws) {
|
||||||
|
if (ws.kind === 'agent' && ws.machineId) onlineAgents.delete(ws.machineId);
|
||||||
|
if (ws.kind === 'sharer' && ws.shareCode) pendingShares.delete(ws.shareCode);
|
||||||
|
if (ws.sessionId) {
|
||||||
|
for (const [sid, sess] of liveSessions) {
|
||||||
|
if (sess.agentWs === ws || sess.viewerWs === ws) endSession(sid);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
server.listen(PORT, () => {
|
||||||
|
console.log(`HTTP on http://localhost:${PORT}`);
|
||||||
|
});
|
||||||
|
|
||||||
|
// HTTPS — required so other devices can share their screen (browsers block
|
||||||
|
// screen capture on non-secure origins). Uses cert.pem/key.pem if present.
|
||||||
|
let httpsServer = null;
|
||||||
|
try {
|
||||||
|
const certPath = path.join(__dirname, 'cert.pem');
|
||||||
|
const keyPath = path.join(__dirname, 'key.pem');
|
||||||
|
if (fs.existsSync(certPath) && fs.existsSync(keyPath)) {
|
||||||
|
httpsServer = https.createServer(
|
||||||
|
{ cert: fs.readFileSync(certPath), key: fs.readFileSync(keyPath) },
|
||||||
|
(req, res) => server.emit('request', req, res)
|
||||||
|
);
|
||||||
|
const wssSecure = new WebSocketServer({ server: httpsServer, path: '/ws' });
|
||||||
|
wssSecure.on('connection', onConnection);
|
||||||
|
httpsServer.listen(HTTPS_PORT, () => {
|
||||||
|
console.log(`HTTPS on https://localhost:${HTTPS_PORT} (use this address from other devices)`);
|
||||||
|
console.log(` End user shares screen: https://<this-pc-ip>:${HTTPS_PORT}/share`);
|
||||||
|
console.log(` Technician connects: https://<this-pc-ip>:${HTTPS_PORT}/connect`);
|
||||||
|
});
|
||||||
|
} else {
|
||||||
|
console.log('(No cert.pem/key.pem found — HTTPS disabled. Other devices can view but not share their screen.)');
|
||||||
|
}
|
||||||
|
} catch (e) {
|
||||||
|
console.log('HTTPS failed to start:', e.message);
|
||||||
|
}
|
||||||
|
|
||||||
|
module.exports = { server };
|
||||||
@@ -0,0 +1,164 @@
|
|||||||
|
// End-to-end test of the backend platform.
|
||||||
|
// Exercises the full flow: register -> enable MFA -> login (2 steps) ->
|
||||||
|
// enroll machine -> agent comes online -> technician requests session ->
|
||||||
|
// consent -> signaling relay -> audit trail. No browser/Electron needed:
|
||||||
|
// the "agent" and "viewer" are raw WebSocket clients.
|
||||||
|
|
||||||
|
process.env.DB_PATH = '/tmp/ra-e2e.db';
|
||||||
|
const fs = require('fs');
|
||||||
|
for (const f of ['/tmp/ra-e2e.db', '/tmp/ra-e2e.db-wal', '/tmp/ra-e2e.db-shm']) { try { fs.unlinkSync(f); } catch {} }
|
||||||
|
|
||||||
|
const PORT = 8099;
|
||||||
|
process.env.PORT = PORT;
|
||||||
|
const { server } = require('../server');
|
||||||
|
const A = require('../auth');
|
||||||
|
const WebSocket = require('ws');
|
||||||
|
|
||||||
|
const BASE = `http://localhost:${PORT}`;
|
||||||
|
let passed = 0, failed = 0;
|
||||||
|
function check(name, cond) {
|
||||||
|
if (cond) { console.log(' ok -', name); passed++; }
|
||||||
|
else { console.log(' FAIL-', name); failed++; }
|
||||||
|
}
|
||||||
|
|
||||||
|
// minimal cookie-aware fetch
|
||||||
|
async function call(path, body, cookie) {
|
||||||
|
const r = await fetch(BASE + path, {
|
||||||
|
method: 'POST',
|
||||||
|
headers: { 'Content-Type': 'application/json', ...(cookie ? { Cookie: cookie } : {}) },
|
||||||
|
body: body ? JSON.stringify(body) : undefined,
|
||||||
|
});
|
||||||
|
const setCookie = r.headers.get('set-cookie');
|
||||||
|
const data = await r.json().catch(() => ({}));
|
||||||
|
return { status: r.status, data, cookie: setCookie ? setCookie.split(';')[0] : cookie };
|
||||||
|
}
|
||||||
|
async function get(path, cookie) {
|
||||||
|
const r = await fetch(BASE + path, { headers: cookie ? { Cookie: cookie } : {} });
|
||||||
|
return { status: r.status, data: await r.json().catch(() => ({})) };
|
||||||
|
}
|
||||||
|
const wait = (ms) => new Promise((r) => setTimeout(r, ms));
|
||||||
|
function wsClient() {
|
||||||
|
const ws = new WebSocket(`ws://localhost:${PORT}/ws`);
|
||||||
|
ws.q = [];
|
||||||
|
ws.on('message', (d) => ws.q.push(JSON.parse(d)));
|
||||||
|
return ws;
|
||||||
|
}
|
||||||
|
function nextMsg(ws, type, timeout = 3000) {
|
||||||
|
return new Promise((resolve, reject) => {
|
||||||
|
const start = Date.now();
|
||||||
|
(function poll() {
|
||||||
|
const i = ws.q.findIndex((m) => m.type === type);
|
||||||
|
if (i >= 0) return resolve(ws.q.splice(i, 1)[0]);
|
||||||
|
if (Date.now() - start > timeout) return reject(new Error('timeout waiting for ' + type));
|
||||||
|
setTimeout(poll, 20);
|
||||||
|
})();
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
(async () => {
|
||||||
|
await wait(300); // let server bind
|
||||||
|
console.log('E2E backend tests:');
|
||||||
|
|
||||||
|
// 1. Register
|
||||||
|
const email = 'tech@example.com';
|
||||||
|
const reg = await call('/api/register', { email, password: 'supersecret', teamName: 'Acme IT' });
|
||||||
|
check('register returns mfa setup', reg.status === 200 && reg.data.mfaSetup && reg.data.mfaSetup.secret);
|
||||||
|
const secret = reg.data.mfaSetup.secret;
|
||||||
|
|
||||||
|
// 2. Login before MFA enabled — allowed, mfaRequired=false
|
||||||
|
let login = await call('/api/login', { email, password: 'supersecret' });
|
||||||
|
check('login sets session cookie', !!login.cookie);
|
||||||
|
|
||||||
|
// 3. Enable MFA with a valid TOTP
|
||||||
|
const enable = await call('/api/mfa/enable', { email, code: A.totp(secret) });
|
||||||
|
check('mfa enable succeeds with valid code', enable.status === 200);
|
||||||
|
const badEnable = await call('/api/mfa/enable', { email, code: '000000' });
|
||||||
|
check('mfa enable rejects bad code', badEnable.status === 401);
|
||||||
|
|
||||||
|
// 4. Fresh login now requires MFA
|
||||||
|
login = await call('/api/login', { email, password: 'supersecret' });
|
||||||
|
check('login now flags mfaRequired', login.data.mfaRequired === true);
|
||||||
|
let cookie = login.cookie;
|
||||||
|
|
||||||
|
// 5. Protected route blocked until MFA passed
|
||||||
|
const meBlocked = await get('/api/me', cookie);
|
||||||
|
check('me blocked before mfa', meBlocked.status === 401);
|
||||||
|
|
||||||
|
// 6. Pass MFA
|
||||||
|
const mfa = await call('/api/login/mfa', { code: A.totp(secret) }, cookie);
|
||||||
|
check('login mfa step succeeds', mfa.status === 200);
|
||||||
|
const me = await get('/api/me', cookie);
|
||||||
|
check('me works after mfa, role=admin', me.status === 200 && me.data.role === 'admin');
|
||||||
|
|
||||||
|
// 7. Wrong password rejected
|
||||||
|
const badLogin = await call('/api/login', { email, password: 'wrong' });
|
||||||
|
check('wrong password rejected', badLogin.status === 401);
|
||||||
|
|
||||||
|
// 8. Enroll a machine (consent-required)
|
||||||
|
const mach = await call('/api/machines', { name: 'Dana-Laptop', unattended: false }, cookie);
|
||||||
|
check('machine enrolled, returns token', mach.status === 200 && mach.data.enrollToken);
|
||||||
|
const enrollToken = mach.data.enrollToken;
|
||||||
|
|
||||||
|
// 9. Agent comes online
|
||||||
|
const agent = wsClient();
|
||||||
|
await new Promise((r) => agent.on('open', r));
|
||||||
|
agent.send(JSON.stringify({ type: 'agent-hello', enrollToken }));
|
||||||
|
const reg2 = await nextMsg(agent, 'agent-registered');
|
||||||
|
check('agent registers via enroll token', reg2.name === 'Dana-Laptop');
|
||||||
|
|
||||||
|
// machine shows online in API
|
||||||
|
const machines = await get('/api/machines', cookie);
|
||||||
|
check('machine reports online', machines.data[0].online === true);
|
||||||
|
|
||||||
|
// 10. Technician (viewer) requests a session — needs cookie on the WS upgrade
|
||||||
|
const viewer = new WebSocket(`ws://localhost:${PORT}/ws`, { headers: { Cookie: cookie } });
|
||||||
|
viewer.q = []; viewer.on('message', (d) => viewer.q.push(JSON.parse(d)));
|
||||||
|
await new Promise((r) => viewer.on('open', r));
|
||||||
|
viewer.send(JSON.stringify({ type: 'viewer-connect', machineId: machines.data[0].id }));
|
||||||
|
const pending = await nextMsg(viewer, 'session-pending');
|
||||||
|
check('viewer gets session-pending', !!pending.sessionId);
|
||||||
|
|
||||||
|
// 11. Agent receives the consent request
|
||||||
|
const reqMsg = await nextMsg(agent, 'session-request');
|
||||||
|
check('agent receives session-request with technician email', reqMsg.technician === email);
|
||||||
|
|
||||||
|
// 12. Agent grants consent -> both sides proceed
|
||||||
|
agent.send(JSON.stringify({ type: 'consent', sessionId: reqMsg.sessionId, granted: true }));
|
||||||
|
const ready = await nextMsg(viewer, 'session-ready');
|
||||||
|
const startStream = await nextMsg(agent, 'start-stream');
|
||||||
|
check('consent grant -> viewer session-ready', !!ready);
|
||||||
|
check('consent grant -> agent start-stream', !!startStream);
|
||||||
|
|
||||||
|
// 13. Signaling relay: agent offer reaches viewer; viewer answer reaches agent
|
||||||
|
agent.send(JSON.stringify({ type: 'offer', sessionId: reqMsg.sessionId, sdp: { fake: 'offer' } }));
|
||||||
|
const relayedOffer = await nextMsg(viewer, 'offer');
|
||||||
|
check('offer relayed agent->viewer', relayedOffer.sdp.fake === 'offer');
|
||||||
|
viewer.send(JSON.stringify({ type: 'answer', sessionId: reqMsg.sessionId, sdp: { fake: 'answer' } }));
|
||||||
|
const relayedAnswer = await nextMsg(agent, 'answer');
|
||||||
|
check('answer relayed viewer->agent', relayedAnswer.sdp.fake === 'answer');
|
||||||
|
|
||||||
|
// 14. End session
|
||||||
|
viewer.send(JSON.stringify({ type: 'end-session', sessionId: reqMsg.sessionId }));
|
||||||
|
await nextMsg(agent, 'session-ended');
|
||||||
|
check('session-ended delivered to agent', true);
|
||||||
|
|
||||||
|
// 15. Audit log captured the full flow
|
||||||
|
const audit = await get('/api/audit', cookie);
|
||||||
|
const actions = audit.data.map((a) => a.action);
|
||||||
|
for (const a of ['user_registered', 'login', 'machine_enrolled', 'session_requested', 'consent_granted', 'session_ended']) {
|
||||||
|
check(`audit contains "${a}"`, actions.includes(a));
|
||||||
|
}
|
||||||
|
|
||||||
|
// 16. Denial path
|
||||||
|
viewer.send(JSON.stringify({ type: 'viewer-connect', machineId: machines.data[0].id }));
|
||||||
|
const pending2 = await nextMsg(viewer, 'session-pending');
|
||||||
|
const req2 = await nextMsg(agent, 'session-request');
|
||||||
|
agent.send(JSON.stringify({ type: 'consent', sessionId: req2.sessionId, granted: false }));
|
||||||
|
const denied = await nextMsg(viewer, 'session-denied');
|
||||||
|
check('consent denial -> viewer session-denied', !!denied);
|
||||||
|
|
||||||
|
agent.close(); viewer.close();
|
||||||
|
console.log(`\n${passed} passed, ${failed} failed.`);
|
||||||
|
server.close();
|
||||||
|
process.exit(failed ? 1 : 0);
|
||||||
|
})().catch((e) => { console.error('E2E ERROR:', e); process.exit(1); });
|
||||||
Reference in New Issue
Block a user