feat(sol): UDP + HTTP listener

server/api.go

@@ -0,0 +1,91 @@
+package server
+
+import (
+	"fmt"
+	"net/http"
+	"time"
+
+	"wol-sol-agent/auth"
+	"wol-sol-agent/system"
+
+	"git.secnex.io/secnex/masterlog"
+)
+
+// APIServer handles HTTP API requests
+type APIServer struct {
+	port          int
+	authenticator *auth.Authenticator
+}
+
+// NewAPIServer creates a new API server
+func NewAPIServer(port int, authenticator *auth.Authenticator) *APIServer {
+	return &APIServer{
+		port:          port,
+		authenticator: authenticator,
+	}
+}
+
+// Start starts the API server
+func (s *APIServer) Start(done chan bool) {
+	mux := http.NewServeMux()
+	mux.HandleFunc("/shutdown", s.handleShutdown)
+
+	server := &http.Server{
+		Addr:    fmt.Sprintf(":%d", s.port),
+		Handler: mux,
+	}
+
+	masterlog.Info("API server listening on port", map[string]interface{}{
+		"port": s.port,
+	})
+
+	// Start server in goroutine
+	go func() {
+		if err := server.ListenAndServe(); err != nil && err != http.ErrServerClosed {
+			masterlog.Error("API server error", map[string]interface{}{
+				"error": err,
+			})
+		}
+	}()
+
+	// Wait for shutdown signal
+	<-done
+	server.Close()
+}
+
+func (s *APIServer) handleShutdown(w http.ResponseWriter, r *http.Request) {
+	// Check authentication
+	username, password, ok := r.BasicAuth()
+	if !ok {
+		w.Header().Set("WWW-Authenticate", `Basic realm="SOL Agent"`)
+		http.Error(w, "Unauthorized", http.StatusUnauthorized)
+		masterlog.Error("Unauthorized API request", map[string]interface{}{
+			"address": r.RemoteAddr,
+			"error":   "no auth",
+		})
+		return
+	}
+
+	// Verify credentials
+	if !s.authenticator.Verify(username, password) {
+		w.Header().Set("WWW-Authenticate", `Basic realm="SOL Agent"`)
+		http.Error(w, "Unauthorized", http.StatusUnauthorized)
+		masterlog.Error("Unauthorized API request", map[string]interface{}{
+			"address": r.RemoteAddr,
+			"error":   "invalid credentials",
+		})
+		return
+	}
+
+	masterlog.Info("Authenticated shutdown request", map[string]interface{}{
+		"address": r.RemoteAddr,
+	})
+	w.WriteHeader(http.StatusOK)
+	fmt.Fprintf(w, "Shutting down system...\n")
+
+	// Shutdown in a goroutine to allow response to be sent
+	go func() {
+		time.Sleep(500 * time.Millisecond)
+		system.Shutdown()
+	}()
+}