Split Operator and Management API into different Swagger files (#875)

* Split Operator and Management API into different Swagger files

Signed-off-by: Daniel Valdivia <18384552+dvaldivia@users.noreply.github.com>

* Linting

Signed-off-by: Daniel Valdivia <18384552+dvaldivia@users.noreply.github.com>

operatorapi/configure_operator.go

@@ -0,0 +1,174 @@
+// This file is safe to edit. Once it exists it will not be overwritten
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2021 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package operatorapi
+
+import (
+	"crypto/tls"
+	"net/http"
+
+	"github.com/minio/console/restapi"
+	"github.com/unrolled/secure"
+
+	"github.com/minio/console/pkg/auth"
+
+	"github.com/go-openapi/swag"
+
+	"github.com/go-openapi/errors"
+
+	"github.com/minio/console/models"
+	"github.com/minio/console/operatorapi/operations"
+)
+
+//go:generate swagger generate server --target ../../console --name Operator --spec ../swagger-operator.yml --server-package operatorapi --principal models.Principal --exclude-main
+
+var additionalServerFlags = struct {
+	CertsDir string `long:"certs-dir" description:"path to certs directory" env:"CONSOLE_CERTS_DIR"`
+}{}
+
+func configureFlags(api *operations.OperatorAPI) {
+	api.CommandLineOptionsGroups = []swag.CommandLineOptionsGroup{
+		{
+			ShortDescription: "additional server flags",
+			Options:          &additionalServerFlags,
+		},
+	}
+}
+
+func configureAPI(api *operations.OperatorAPI) http.Handler {
+
+	// Applies when the "x-token" header is set
+	api.KeyAuth = func(token string, scopes []string) (*models.Principal, error) {
+		// we are validating the session token by decrypting the claims inside, if the operation succeed that means the jwt
+		// was generated and signed by us in the first place
+		claims, err := auth.SessionTokenAuthenticate(token)
+		if err != nil {
+			api.Logger("Unable to validate the session token %s: %v", token, err)
+			return nil, errors.New(401, "incorrect api key auth")
+		}
+		return &models.Principal{
+			STSAccessKeyID:     claims.STSAccessKeyID,
+			Actions:            claims.Actions,
+			STSSecretAccessKey: claims.STSSecretAccessKey,
+			STSSessionToken:    claims.STSSessionToken,
+			AccountAccessKey:   claims.AccountAccessKey,
+		}, nil
+	}
+
+	// Register login handlers
+	registerLoginHandlers(api)
+	registerSessionHandlers(api)
+
+	// Operator Console
+	// Register tenant handlers
+	registerTenantHandlers(api)
+	// Register ResourceQuota handlers
+	registerResourceQuotaHandlers(api)
+	// Register Nodes' handlers
+	registerNodesHandlers(api)
+	// Register Parity' handlers
+	registerParityHandlers(api)
+
+	// Direct CSI handlers
+	registerDirectCSIHandlers(api)
+	// Volumes handlers
+	registerVolumesHandlers(api)
+	// Namespaces handlers
+	registerNamespaceHandlers(api)
+	// Subscription handlers
+	registerOperatorSubscriptionHandlers(api)
+
+	api.PreServerShutdown = func() {}
+
+	api.ServerShutdown = func() {}
+
+	return setupGlobalMiddleware(api.Serve(setupMiddlewares))
+}
+
+// The TLS configuration before HTTPS server starts.
+func configureTLS(tlsConfig *tls.Config) {
+	// Make all necessary changes to the TLS configuration here.
+}
+
+// As soon as server is initialized but not run yet, this function will be called.
+// If you need to modify a config, store server instance to stop it individually later, this is the place.
+// This function can be called multiple times, depending on the number of serving schemes.
+// scheme value will be set accordingly: "http", "https" or "unix".
+func configureServer(s *http.Server, scheme, addr string) {
+}
+
+// The middleware configuration is for the handler executors. These do not apply to the swagger.json document.
+// The middleware executes after routing but before authentication, binding and validation.
+func setupMiddlewares(handler http.Handler) http.Handler {
+	return handler
+}
+
+func AuthenticationMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		token, err := auth.GetTokenFromRequest(r)
+		if err != nil && err != auth.ErrNoAuthToken {
+			http.Error(w, err.Error(), http.StatusUnauthorized)
+			return
+		}
+		// All handlers handle appropriately to return errors
+		// based on their swagger rules, we do not need to
+		// additionally return error here, let the next ServeHTTPs
+		// handle it appropriately.
+		if token != "" {
+			r.Header.Add("Authorization", "Bearer "+token)
+		}
+		next.ServeHTTP(w, r)
+	})
+}
+
+// The middleware configuration happens before anything, this middleware also applies to serving the swagger.json document.
+// So this is a good place to plug in a panic handling middleware, logging and metrics.
+func setupGlobalMiddleware(handler http.Handler) http.Handler {
+	// handle cookie or authorization header for session
+	next := AuthenticationMiddleware(handler)
+	// serve static files
+	next = restapi.FileServerMiddleware(next)
+	// Secure middleware, this middleware wrap all the previous handlers and add
+	// HTTP security headers
+	secureOptions := secure.Options{
+		AllowedHosts:                    restapi.GetSecureAllowedHosts(),
+		AllowedHostsAreRegex:            restapi.GetSecureAllowedHostsAreRegex(),
+		HostsProxyHeaders:               restapi.GetSecureHostsProxyHeaders(),
+		SSLRedirect:                     restapi.GetTLSRedirect() == "on" && len(GlobalPublicCerts) > 0,
+		SSLHost:                         restapi.GetSecureTLSHost(),
+		STSSeconds:                      restapi.GetSecureSTSSeconds(),
+		STSIncludeSubdomains:            restapi.GetSecureSTSIncludeSubdomains(),
+		STSPreload:                      restapi.GetSecureSTSPreload(),
+		SSLTemporaryRedirect:            restapi.GetSecureTLSTemporaryRedirect(),
+		SSLHostFunc:                     nil,
+		ForceSTSHeader:                  restapi.GetSecureForceSTSHeader(),
+		FrameDeny:                       restapi.GetSecureFrameDeny(),
+		ContentTypeNosniff:              restapi.GetSecureContentTypeNonSniff(),
+		BrowserXssFilter:                restapi.GetSecureBrowserXSSFilter(),
+		ContentSecurityPolicy:           restapi.GetSecureContentSecurityPolicy(),
+		ContentSecurityPolicyReportOnly: restapi.GetSecureContentSecurityPolicyReportOnly(),
+		PublicKey:                       restapi.GetSecurePublicKey(),
+		ReferrerPolicy:                  restapi.GetSecureReferrerPolicy(),
+		FeaturePolicy:                   restapi.GetSecureFeaturePolicy(),
+		ExpectCTHeader:                  restapi.GetSecureExpectCTHeader(),
+		IsDevelopment:                   false,
+	}
+	secureMiddleware := secure.New(secureOptions)
+	return secureMiddleware.Handler(next)
+}