WildDragonLLC/dragonflight
1
0
Fork 0
Code Issues 32 Pull requests 1 Projects Releases Packages Wiki Activity Actions

fix(node-agent): import crypto — auth was ALWAYS failing on remote nodes

Browse source 
THE root cause of 'container view only shows the primary': checkAgentAuth used
crypto.timingSafeEqual but 'crypto' was never imported (ES module). The call
threw ReferenceError, the try/catch swallowed it, _bearerEq returned false, so
EVERY bearer-token check on a node-agent failed. The primary's own containers
showed only because the local node-agent has no NODE_TOKEN (auth skipped).

Adding 'import crypto from crypto' makes token comparison work, so the primary
mam-api can now read containers + logs from every node.
This commit is contained in:
Zac Gaetano 2026-06-04 05:21:33 +00:00
parent 4ad145f00a
commit 1348db8f33
1 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
services/node-agent/index.js
View file

@ -1,6 +1,7 @@
import http from 'http'; import http from 'http';
import os from 'os'; import os from 'os';
import fs from 'fs'; import fs from 'fs';
import crypto from 'crypto';
import { spawn } from 'child_process'; import { spawn } from 'child_process';
const MAM_API_URL = (process.env.MAM_API_URL || 'http://localhost:3000').replace(/\/$/, ''); const MAM_API_URL = (process.env.MAM_API_URL || 'http://localhost:3000').replace(/\/$/, '');
@ -961,12 +962,7 @@ function checkAgentAuth(req) {
const m = /^Bearer\s+(.+)$/i.exec(hdr); const m = /^Bearer\s+(.+)$/i.exec(hdr);
if (!m) return false; if (!m) return false;
const token = m[1]; const token = m[1];
const okNode = _bearerEq(token, NODE_TOKEN); return _bearerEq(token, NODE_TOKEN) || _bearerEq(token, CLUSTER_READ_TOKEN);
const okShared = _bearerEq(token, CLUSTER_READ_TOKEN);
if (!okNode && !okShared) {
console.warn(`[auth] reject: tok=${token.slice(0,6)}..${token.slice(-6)} CRT=${CLUSTER_READ_TOKEN.slice(0,6)}..${CLUSTER_READ_TOKEN.slice(-6)} match=${token===CLUSTER_READ_TOKEN}`);
}
return okNode || okShared;
} }
// ── Driver/SDK install ──────────────────────────────────────────────────── // ── Driver/SDK install ────────────────────────────────────────────────────