Validate AllowedIPs from user input

handler/response.go

@@ -0,0 +1,6 @@
+package handler
+
+type jsonHTTPResponse struct {
+	Status  bool   `json:"status"`
+	Message string `json:"message"`
+}

handler/routes.go

@@ -1,19 +1,19 @@
 package handler
 
 import (
-	"encoding/json"
 	"encoding/base64"
+	"encoding/json"
 	"net/http"
 	"time"
 
 	"github.com/labstack/echo/v4"
+	"github.com/labstack/gommon/log"
 	"github.com/ngoduykhanh/wireguard-ui/model"
 	"github.com/ngoduykhanh/wireguard-ui/util"
-	"github.com/sdomino/scribble"
-	"github.com/labstack/gommon/log"
 	"github.com/rs/xid"
-	"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
+	"github.com/sdomino/scribble"
 	"github.com/skip2/go-qrcode"
+	"golang.zx2c4.com/wireguard/wgctrl/wgtypes"
 )
 
 // Home handler
@@ -66,6 +66,12 @@ func NewClient() echo.HandlerFunc {
 		client := new(model.Client)
 		c.Bind(client)
 
+		// validate the input AllowedIPs
+		if util.ValidateAllowedIPs(client.AllowedIPs) == false {
+			log.Warn("Invalid Allowed IPs input from user: %v", client.AllowedIPs)
+			return c.JSON(http.StatusBadRequest, jsonHTTPResponse{false, "Allowed IPs must be in CIDR format"})
+		}
+
 		// gen ID
 		guid := xid.New()
 		client.ID = guid.String()
@@ -80,11 +86,12 @@ func NewClient() echo.HandlerFunc {
 		client.CreatedAt = time.Now().UTC()
 		client.UpdatedAt = client.CreatedAt
 
-		// write to the database
+		// write client to the database
 		dir := "./db"
 		db, err := scribble.New(dir, nil)
 		if err != nil {
 			log.Error("Cannot initialize the database: ", err)
+			return c.JSON(http.StatusInternalServerError, jsonHTTPResponse{false, "Cannot access database"})
 		}
 		db.Write("clients", client.ID, client)
 		log.Infof("Created wireguard client: %v", client)
@@ -99,19 +106,19 @@ func RemoveClient() echo.HandlerFunc {
 		client := new(model.Client)
 		c.Bind(client)
 
-		// delete from database
+		// delete client from database
 		dir := "./db"
 		db, err := scribble.New(dir, nil)
 		if err != nil {
 			log.Error("Cannot initialize the database: ", err)
+			return c.JSON(http.StatusInternalServerError, jsonHTTPResponse{false, "Cannot access database"})
 		}
-
 		if err := db.Delete("clients", client.ID); err != nil {
 			log.Error("Cannot delete wireguard client: ", err)
+			return c.JSON(http.StatusInternalServerError, jsonHTTPResponse{false, "Cannot delete client from database"})
 		}
 
 		log.Infof("Removed wireguard client: %v", client)
-
-		return c.JSON(http.StatusOK, "Client removed!")
+		return c.JSON(http.StatusOK, jsonHTTPResponse{true, "Client removed"})
 	}
 }

templates/base.html

@@ -246,6 +246,10 @@
                     $('#modal_new_client').modal('hide');
                     toastr.success('Created new client successfully');
                     // TODO: trigger reloading the dashboard
+                },
+                error: function(jqXHR, exception) {
+                    var responseJson = jQuery.parseJSON(jqXHR.responseText);
+                    toastr.error(responseJson['message']);
                 }
             });
         }

templates/home.html

@@ -105,6 +105,10 @@ Dashboard
                         $('#modal_remove_client').modal('hide');
                         toastr.success('Removed client successfully');
                         // TODO: trigger reloading the dashboard
+                    },
+                    error: function(jqXHR, exception) {
+                        var responseJson = jQuery.parseJSON(jqXHR.responseText);
+                        toastr.error(responseJson['message']);
                     }
                 });
             });

util/util.go

@@ -2,6 +2,7 @@ package util
 
 import (
 	"fmt"
+	"net"
 	"strings"
 
 	"github.com/ngoduykhanh/wireguard-ui/model"
@@ -38,3 +39,22 @@ func BuildClientConfig(client model.Client) string {
 
 	return strConfig
 }
+
+// ValidateCIDR to validate an network CIDR
+func ValidateCIDR(cidr string) bool {
+	_, _, err := net.ParseCIDR(cidr)
+	if err != nil {
+		return false
+	}
+	return true
+}
+
+// ValidateAllowedIPs to validate allowed ip addresses in CIDR format.
+func ValidateAllowedIPs(cidrs []string) bool {
+	for _, cidr := range cidrs {
+		if ValidateCIDR(cidr) == false {
+			return false
+		}
+	}
+	return true
+}