From 63d979b941b238dcd4263dfdb7ecfd1d4375f4ce Mon Sep 17 00:00:00 2001
From: Julien Escario <julien.escario@altinea.fr>
Date: Mon, 3 May 2021 17:50:42 +0200
Subject: [PATCH] Renamed script Added args parsing (based on acme.sh) Changed
 by using arg forpubkey instead of URL
 (https://github.com/h44z/wg-portal/commit/d794f807ad09d1505cdfd3437f7100d869c95d4f)
 Added TODO

---
 wireguard/peer_install.sh          |  28 -------
 wireguard/wgportal_peer_install.sh | 117 +++++++++++++++++++++++++++++
 2 files changed, 117 insertions(+), 28 deletions(-)
 delete mode 100755 wireguard/peer_install.sh
 create mode 100755 wireguard/wgportal_peer_install.sh

diff --git a/wireguard/peer_install.sh b/wireguard/peer_install.sh
deleted file mode 100755
index f9cfb68..0000000
--- a/wireguard/peer_install.sh
+++ /dev/null
@@ -1,28 +0,0 @@
-#!/bin/sh
-
-WGPORTAL_URL=http://185.123.84.125:8123/
-WG_CONFFILE=/etc/wireguard/wg0.conf
-
-trap 'stty echo' INT
-
-if [ -f "$WG_CONFFILE" -a $OVERWRITE -ne 1 ]; then
-  printf "Wireguard config file already exists\n"
-  printf "Exiting now to prevent overrid of your actual parameters\n"
-  exit 1;
-fi
-
-printf "Username: "
-IFS= read -r username
-
-printf "Password: "
-stty -echo
-IFS= read -r password
-stty echo
-printf "\n"
-
-HTTP_STATUS=$(curl -w "%{http_code}" -s -o $WG_CONFFILE --user $username:$password -X GET $WGPORTAL_URL"api/v1/provisioning/peer/mqQiS1kYWDoXlvhucqMIGkBeUjy7yppZ0eLLENsM5UU%3D" -H  "accept: text/plain")
-res=$?
-if test "$res" != "0"; then
-   echo "the curl command failed with: $res"
-fi
-
diff --git a/wireguard/wgportal_peer_install.sh b/wireguard/wgportal_peer_install.sh
new file mode 100755
index 0000000..c223a85
--- /dev/null
+++ b/wireguard/wgportal_peer_install.sh
@@ -0,0 +1,117 @@
+#!/bin/sh
+
+# TODO :
+# - add root user detection
+# - verify curl output to prevent overwriting config file with an HTTP answer
+
+_usage() {
+  printf "Usage: %s [options...] <url>\n" "$0"
+}
+
+_version() {
+  printf "%s version pre-alpha 0.1 (yes we're very cautious)\n" "$0"
+  printf "USE AT YOUR OWN RISK and read the code before\n"
+}
+
+_startswith() {
+  _str="$1"
+  _sub="$2"
+  echo "$_str" | grep "^$_sub" >/dev/null 2>&1
+}
+
+_download() {
+  [ -z "$WGPORTAL_URL" ] && printf "Please set wg-portal URL (see help)\n" && return 1
+  [ -z "$WG_CONFFILE" ] && WG_CONFFILE=/etc/wireguard/wg0.conf
+
+  trap 'stty echo; exit 99;' INT
+
+  if [ -f $WG_CONFFILE -a "$OVERWRITE" != "on" ]; then
+    printf "WARNING : Wireguard config file already exists\n"
+    printf "Exiting now to prevent overrid of your actual parameters\n"
+    printf "You can force config overwriting with :\n"
+    printf "OVERWRITE=on %s %s\n" "$0" "$_ARGS"
+    exit 1;
+  fi
+
+  printf "Username: "
+  IFS= read -r username
+
+  printf "Password: "
+  stty -echo
+  IFS= read -r password
+  stty echo
+  printf "\n"
+
+  printf "Peer public key: "
+  IFS= read -r wgpubkey
+  printf "\n"
+
+  HTTP_STATUS=$(curl -w "%{http_code}" -G -s -o $WG_CONFFILE --user $username:$password --data-urlencode "pkey=$wgpubkey" -X GET $WGPORTAL_URL"api/v1/provisioning/peer" -H  "accept: text/plain")
+  res=$?
+  if [ "$res" != "0" ]; then
+    echo "the curl command failed with: $res"
+  fi
+
+  [ $HTTP_STATUS -ne 200 ] &&  printf "Curl returned HTTP code %s\n" "$HTTP_STATUS" && exit 1
+
+  printf "WG config successfully download at %s\n" "$WG_CONFFILE"
+}
+
+_install() {
+  printf "install : This command does nothing ... yet (TDB)\n"
+}
+
+_process() {
+  while [ ${#} -gt 0 ]; do
+    case "${1}" in
+      --help | -h)
+        _usage
+        return
+        ;;
+      --version | -v)
+        _version
+        return
+        ;;
+      --download | -d)
+        _CMD="download"
+        ;;
+      --url | -u)
+        WGPORTAL_URL="$2"
+        shift
+        ;;
+      --filename | -f)
+        WG_CONFFILE="$2"
+        shift
+        ;;
+      --install | -i)
+        _CMD="install"
+        ;;
+      *)
+        printf "Unknown parameter : %s\n" "$1"
+        return 1
+        ;;
+    esac
+
+    shift 1
+  done
+  case "${_CMD}" in
+    download)
+      _download
+      ;;
+    install)
+      _install
+      ;;
+    *)
+    if [ "$_CMD" ]; then
+      printf "Invalid command: %s\n" "$_CMD"
+    fi
+  esac
+}
+
+main() {
+  [ -z "$1" ] && _usage && return
+  if _startswith "$1" '-'; then _process "$@"; else "$@"; fi
+}
+
+_ARGS="$*"
+main "$@"