further simplify proxy config

Cargo.lock

@@ -3606,6 +3606,7 @@ dependencies = [
  "toml",
  "tracing",
  "tracing-subscriber",
+ "url",
 ]
 
 [[package]]

common/src/lib.rs

@@ -1,9 +1,7 @@
 use serde::{Deserialize, Serialize};
 
 #[derive(Debug, Clone, Deserialize, Serialize, Default)]
-pub struct GuiConfig {
-    #[serde(default)]
-    pub force_proxy: bool,
+pub struct ClientConfig {
     pub proxy_url: Option<String>,
     pub cert_hash: Option<Vec<u8>>,
 }

config.toml.example

@@ -1,8 +1,5 @@
+public_url = "https://127.0.0.1:4433"
 https_listen_address = "127.0.0.1:4433"
 http_listen_address = "127.0.0.1:8080"
 mumble_server_url = "[SERVER_URL_HERE]"
 gui_path = "target/dx/mumble-web2-gui/release/web/public"
-
-[gui]
-force_proxy = true
-proxy_url = "https://127.0.0.1:4433/proxy"

docker/proxy-config.toml

@@ -1,7 +1,4 @@
+public_url = "https://127.0.0.1:4433"
 https_listen_address = "127.0.0.1:4433"
 http_listen_address = "127.0.0.1:4400"
 mumble_server_url = "127.0.0.1:64738"
-
-[gui]
-force_proxy = true
-proxy_url = "https://127.0.0.1:4433/proxy"

gui/src/app.rs

@@ -3,7 +3,7 @@
 use base64::{display::Base64Display, prelude::BASE64_URL_SAFE};
 use dioxus::prelude::*;
 use mime_guess::Mime;
-use mumble_web2_common::GuiConfig;
+use mumble_web2_common::ClientConfig;
 use ordermap::OrderSet;
 use sir::{css, global_css};
 use std::collections::HashMap;
@@ -26,7 +26,7 @@ pub enum Command {
     Connect {
         address: String,
         username: String,
-        config: GuiConfig,
+        config: ClientConfig,
     },
     SendChat {
         markdown: String,
@@ -437,7 +437,7 @@ pub fn ChatView() -> Element {
 //},
 
 #[component]
-pub fn ControlView(config: Resource<GuiConfig>) -> Element {
+pub fn ControlView(config: Resource<ClientConfig>) -> Element {
     let net: Coroutine<Command> = use_coroutine_handle();
     let status = &STATE.status;
     let server = STATE.server.read();
@@ -705,7 +705,7 @@ pub fn ControlView(config: Resource<GuiConfig>) -> Element {
 }
 
 #[component]
-pub fn ServerView(config: Resource<GuiConfig>) -> Element {
+pub fn ServerView(config: Resource<ClientConfig>) -> Element {
     let net: Coroutine<Command> = use_coroutine_handle();
     let server = STATE.server.read();
     let Some(&UserState {
@@ -803,7 +803,7 @@ pub fn ServerView(config: Resource<GuiConfig>) -> Element {
 }
 
 #[component]
-pub fn LoginView(config: Resource<GuiConfig>) -> Element {
+pub fn LoginView(config: Resource<ClientConfig>) -> Element {
     let net: Coroutine<Command> = use_coroutine_handle();
 
     let mut address_input = use_signal(|| None::<String>);
@@ -931,7 +931,7 @@ pub fn app() -> Element {
     let config = use_resource(|| async move {
         match imp::load_config().await {
             Ok(config) => config,
-            Err(_) => GuiConfig::default(),
+            Err(_) => ClientConfig::default(),
         }
     });
 

gui/src/imp/desktop.rs

@@ -5,7 +5,7 @@ use dioxus::hooks::{UnboundedReceiver, UnboundedSender};
 use futures::io::{AsyncRead, AsyncWrite};
 use mumble_protocol::control::{ClientControlCodec, ControlPacket};
 use mumble_protocol::Serverbound;
-use mumble_web2_common::GuiConfig;
+use mumble_web2_common::ClientConfig;
 use std::net::ToSocketAddrs;
 use std::sync::Mutex;
 use std::{fmt, io, sync::Arc};
@@ -188,7 +188,7 @@ pub async fn network_connect(
     address: String,
     username: String,
     event_rx: &mut UnboundedReceiver<Command>,
-    gui_config: &GuiConfig,
+    gui_config: &ClientConfig,
 ) -> Result<(), Error> {
     info!("connecting");
 
@@ -228,7 +228,7 @@ pub fn load_username() -> Option<String> {
     return None;
 }
 
-pub async fn load_config() -> color_eyre::Result<GuiConfig> {
+pub async fn load_config() -> color_eyre::Result<ClientConfig> {
     color_eyre::eyre::bail!(
         "there is no config on desktop because desktops cannot be configured as they are tables"
     )

gui/src/imp/web.rs

@@ -7,7 +7,7 @@ use gloo_timers::future::TimeoutFuture;
 use mumble_protocol::control::{ClientControlCodec, ControlPacket};
 use mumble_protocol::voice::{VoicePacket, VoicePacketPayload};
 use mumble_protocol::Serverbound;
-use mumble_web2_common::GuiConfig;
+use mumble_web2_common::ClientConfig;
 use reqwest::Url;
 use std::time::Duration;
 use tracing::level_filters::LevelFilter;
@@ -178,8 +178,8 @@ impl AudioPlayer {
 // Borrowed from
 // https://github.com/security-union/videocall-rs/blob/main/videocall-client/src/decode/config.rs#L6
 fn configure_audio_context() -> AudioContext {
-    let mut audio_context_options = AudioContextOptions::new();
-    audio_context_options.sample_rate(48000 as f32);
+    let audio_context_options = AudioContextOptions::new();
+    audio_context_options.set_sample_rate(48000 as f32);
     let audio_context = AudioContext::new_with_context_options(&audio_context_options).unwrap();
     audio_context
 }
@@ -198,12 +198,14 @@ async fn run_encoder_worklet(
     audio_context: &AudioContext,
     mut each: impl FnMut(Vec<u8>) + 'static,
 ) -> Result<AudioWorkletNode, Error> {
+    let constraints = MediaStreamConstraints::new();
+    constraints.set_audio(&JsValue::TRUE);
     let stream = window()
         .unwrap()
         .navigator()
         .media_devices()
         .ey()?
-        .get_user_media_with_constraints(MediaStreamConstraints::new().audio(&JsValue::TRUE))
+        .get_user_media_with_constraints(&constraints)
         .ey()?
         .into_future()
         .await
@@ -309,7 +311,7 @@ pub async fn network_connect(
     address: String,
     username: String,
     event_rx: &mut UnboundedReceiver<Command>,
-    gui_config: &GuiConfig,
+    gui_config: &ClientConfig,
 ) -> Result<(), Error> {
     info!("connecting");
 
@@ -388,7 +390,7 @@ pub fn load_username() -> Option<String> {
         .ok()?
 }
 
-pub async fn load_config() -> color_eyre::Result<GuiConfig> {
+pub async fn load_config() -> color_eyre::Result<ClientConfig> {
     let config_url = match option_env!("MUMBLE_WEB2_GUI_CONFIG_URL") {
         Some(url) => Url::parse(url)?,
         None => {
@@ -399,7 +401,10 @@ pub async fn load_config() -> color_eyre::Result<GuiConfig> {
     };
     info!("loading config from {}", config_url);
 
-    let config = reqwest::get(config_url).await?.json::<GuiConfig>().await?;
+    let config = reqwest::get(config_url)
+        .await?
+        .json::<ClientConfig>()
+        .await?;
 
     Ok(config)
 }

gui/src/lib.rs

@@ -20,7 +20,7 @@ use mumble_protocol::voice::VoicePacket;
 use mumble_protocol::voice::VoicePacketPayload;
 use mumble_protocol::Clientbound;
 use mumble_protocol::Serverbound;
-use mumble_web2_common::GuiConfig;
+use mumble_web2_common::ClientConfig;
 use once_cell::sync::Lazy;
 use std::collections::hash_map::Entry;
 use std::collections::HashMap;

proxy/Cargo.toml

@@ -4,16 +4,16 @@ version = "0.1.0"
 edition = "2021"
 
 [dependencies]
-color-eyre = "0.6.3"
-serde = { version = "1.0.214", features = ["derive"] }
-serde_json = "1.0.132"
-tokio = { version = "1.37.0", features = ["full"] }
-tokio-rustls = "^0.26"
-toml = "0.8.19"
-tracing = { version = "0.1.40", features = ["async-await"] }
-tracing-subscriber = { version = "0.3.18", features = ["env-filter"] }
+color-eyre = "^0.6"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+tokio = { version = "^1.37", features = ["full"] }
+tokio-rustls = "0.26"
+toml = "0.8"
+tracing = { version = "^0.1.40", features = ["async-await"] }
+tracing-subscriber = { version = "^0.3.18", features = ["env-filter"] }
 mumble-web2-common = { workspace = true }
-salvo = { version = "0.74.2", features = [
+salvo = { version = "^0.74.2", features = [
   "quinn",
   "eyre",
   "rustls",
@@ -22,8 +22,9 @@ salvo = { version = "0.74.2", features = [
   "craft",
   "cors",
 ] }
-once_cell = "1.20.2"
+once_cell = "^1.20"
 rustls = { version = "^0.23", features = ["aws_lc_rs"] }
-rcgen = "0.13.2"
-hmac-sha256 = "1.1.8"
+rcgen = "^0.13.2"
+hmac-sha256 = "^1.1.8"
 time = "0.3"
+url = "2"

proxy/src/main.rs

@@ -1,6 +1,5 @@
 use color_eyre::eyre::{anyhow, bail, Context, Result};
-use mumble_web2_common::GuiConfig;
-use once_cell::sync::OnceCell;
+use mumble_web2_common::ClientConfig;
 use salvo::conn::rustls::{Keycert, RustlsConfig};
 use salvo::cors::{AllowOrigin, Cors};
 use salvo::logging::Logger;
@@ -9,14 +8,14 @@ use salvo::proto::quic::BidiStream;
 use serde::{Deserialize, Serialize};
 use std::net::{SocketAddr, ToSocketAddrs};
 use std::path::PathBuf;
-use std::sync::{Arc, Mutex};
+use std::sync::Arc;
 use tokio::fs;
 use tokio::io::{AsyncRead, AsyncReadExt, AsyncWrite, AsyncWriteExt};
 use tokio::net::TcpStream;
 use tokio::pin;
 use tokio_rustls::rustls::client::danger::{HandshakeSignatureValid, ServerCertVerifier};
 use tokio_rustls::rustls::pki_types::{CertificateDer, ServerName, UnixTime};
-use tokio_rustls::rustls::{ClientConfig, DigitallySignedStruct};
+use tokio_rustls::rustls::{ClientConfig as RlsClientConfig, DigitallySignedStruct};
 use tokio_rustls::{rustls, TlsConnector};
 use tracing::info;
 use tracing::info_span;
@@ -24,6 +23,7 @@ use tracing::Instrument;
 use tracing::{error, instrument};
 use tracing_subscriber::filter::LevelFilter;
 use tracing_subscriber::EnvFilter;
+use url::Url;
 
 fn default_cert_alt_names() -> Vec<String> {
     vec!["localhost".into()]
@@ -31,6 +31,7 @@ fn default_cert_alt_names() -> Vec<String> {
 
 #[derive(Debug, Deserialize, Serialize)]
 struct Config {
+    public_url: Url,
     https_listen_address: SocketAddr,
     http_listen_address: Option<SocketAddr>,
     cert_path: Option<PathBuf>,
@@ -40,12 +41,9 @@ struct Config {
     mumble_server_url: String,
     mumble_server_address: Option<SocketAddr>,
     gui_path: Option<PathBuf>,
-    gui: Mutex<GuiConfig>,
 }
 
-static CONFIG: OnceCell<Config> = OnceCell::new();
-
-fn init_config() -> Result<()> {
+fn init_config() -> Result<Config> {
     let mut config: Config = toml::from_str(
         &std::fs::read_to_string("./config.toml")
             .context("reading config.toml (try making a copy of config.toml.example)")?,
@@ -63,24 +61,22 @@ fn init_config() -> Result<()> {
             config.mumble_server_url
         ))?;
     config.mumble_server_address = Some(mumble_server_addr);
-    CONFIG
-        .set(config)
-        .map_err(|_| anyhow!("config already initialized"))?;
-    Ok(())
+    Ok(config)
 }
 
 #[tokio::main]
 async fn main() -> Result<()> {
     init_logging();
-    init_config()?;
-    let config = CONFIG.get().unwrap();
-    info!("config\n{}", toml::to_string_pretty(&config)?);
+    let server_config = Arc::new(init_config()?);
+    info!("config:\n{}", toml::to_string_pretty(&*server_config)?);
 
     rustls::crypto::aws_lc_rs::default_provider()
         .install_default()
         .map_err(|e| anyhow!("could not install crypto provider {e:?}"))?;
 
-    let (cert, key) = match (&config.cert_path, &config.key_path) {
+    let mut client_config = ClientConfig::default();
+    client_config.proxy_url = Some(server_config.public_url.join("proxy")?.to_string());
+    let (cert, key) = match (&server_config.cert_path, &server_config.key_path) {
         (None, None) => {
             info!("generating self-signed cert");
 
@@ -88,17 +84,15 @@ async fn main() -> Result<()> {
             let mut dname = rcgen::DistinguishedName::new();
             dname.push(rcgen::DnType::CommonName, "mumble-web self-signed");
             let key_pair = rcgen::KeyPair::generate_for(&rcgen::PKCS_ECDSA_P256_SHA256)?;
-            let mut cert_params = rcgen::CertificateParams::new(config.cert_alt_names.clone())?;
+            let mut cert_params =
+                rcgen::CertificateParams::new(server_config.cert_alt_names.clone())?;
             cert_params.distinguished_name = dname;
             cert_params.not_before = time::OffsetDateTime::now_utc();
             cert_params.not_after = cert_params.not_before + time::Duration::days(12);
             let cert = cert_params.self_signed(&key_pair)?;
 
             let hash = hmac_sha256::Hash::hash(cert.der().as_ref());
-            {
-                let mut gui_config = config.gui.lock().unwrap();
-                gui_config.cert_hash = Some(hash.into());
-            }
+            client_config.cert_hash = Some(hash.into());
 
             (cert.pem().into(), key_pair.serialize_pem().into())
         }
@@ -118,16 +112,22 @@ async fn main() -> Result<()> {
     };
     let rustls_config = RustlsConfig::new(Keycert::new().cert(cert.as_slice()).key(key.as_slice()));
 
+    info!(
+        "client config:\n{}",
+        toml::to_string_pretty(&client_config)?
+    );
+
     let config_craft = ConfigCraft {
-        client_config: config.gui.lock().unwrap().clone(),
+        server_config: server_config.clone(),
+        client_config,
     };
 
     // Server routing
     let mut router = Router::new()
-        .push(Router::with_path("/proxy").goal(connect_proxy))
+        .push(Router::with_path("/proxy").goal(config_craft.connect_proxy()))
         .push(Router::with_path("/config").get(config_craft.get_config()))
         .hoop(Logger::new());
-    if let Some(gui_path) = config.gui_path.clone() {
+    if let Some(gui_path) = server_config.gui_path.clone() {
         router =
             router.push(Router::with_path("/").get(StaticFile::new(gui_path.join("index.html"))));
         router = router.push(Router::with_path("/<*+rest>").get(StaticDir::new(gui_path)));
@@ -138,10 +138,10 @@ async fn main() -> Result<()> {
     let service = Service::new(router).hoop(cors);
 
     // Create http listeners
-    let http_listener = config.http_listen_address.map(TcpListener::new);
+    let http_listener = server_config.http_listen_address.map(TcpListener::new);
     let https_listener =
-        TcpListener::new(config.https_listen_address).rustls(rustls_config.clone());
-    let http3_listener = QuinnListener::new(rustls_config, config.https_listen_address);
+        TcpListener::new(server_config.https_listen_address).rustls(rustls_config.clone());
+    let http3_listener = QuinnListener::new(rustls_config, server_config.https_listen_address);
 
     // Start server
     match (http_listener, https_listener, http3_listener) {
@@ -160,22 +160,21 @@ async fn main() -> Result<()> {
 
 #[derive(Clone)]
 pub struct ConfigCraft {
-    client_config: GuiConfig,
+    server_config: Arc<Config>,
+    client_config: ClientConfig,
 }
 
 #[craft]
 impl ConfigCraft {
     #[craft(handler)]
-    async fn get_config(&self) -> Json<GuiConfig> {
+    async fn get_config(&self) -> Json<ClientConfig> {
         Json(self.client_config.clone())
     }
-}
 
-#[handler]
-#[instrument]
-async fn connect_proxy(req: &mut Request, res: &mut Response) {
+    #[craft(handler)]
+    async fn connect_proxy(&self, req: &mut Request, res: &mut Response) {
         info!("received proxy request");
-    let mumble_server_address = CONFIG.get().unwrap().mumble_server_address.unwrap();
+        let mumble_server_address = self.server_config.mumble_server_address.unwrap();
 
         let wt = match req.web_transport_mut().await {
             Ok(wt) => wt,
@@ -209,21 +208,10 @@ async fn connect_proxy(req: &mut Request, res: &mut Response) {
             }
         };
 
-    /*
-    let id = wt.session_id();
-    let bi = match wt.open_bi(id).await {
-        Ok(bi) => bi,
-        Err(err) => {
-            res.status_code(StatusCode::BAD_REQUEST);
-            res.render(format!("could not open bidirectional stream: {err:?}"));
-            return;
-        }
-    };
-    */
-
         let (outgoing, incoming) = bi.split();
         let res = tokio::spawn(async move {
-        if let Err(error) = connect_proxy_impl(mumble_server_address, incoming, outgoing).await {
+            if let Err(error) = connect_proxy_impl(mumble_server_address, incoming, outgoing).await
+            {
                 error!("error connecting proxy {error:?}")
             }
         })
@@ -232,6 +220,7 @@ async fn connect_proxy(req: &mut Request, res: &mut Response) {
             error!("crash in connected proxy {err:?}");
         }
     }
+}
 
 #[instrument(skip(incoming, outgoing))]
 async fn connect_proxy_impl(
@@ -241,7 +230,7 @@ async fn connect_proxy_impl(
 ) -> Result<()> {
     info!("connecting to Mumble server...");
 
-    let config = ClientConfig::builder()
+    let config = RlsClientConfig::builder()
         .dangerous()
         .with_custom_certificate_verifier(Arc::new(NoCertificateVerification))
         .with_no_client_auth();