36e9d5b0b3
An SSH jump host that authenticates users against the shared LDAP directory, authorizes them from the SSO Manager's inventory graph, and bridges them to downstream hosts — auditing everything. - Username-grammar routing (uid_-_target@jump) + interactive TUI picker - Inbound LDAP auth (publickey / password with off|local|all policy) - Directory-driven access (LDAP groups x /api/discovery/resources?group=) - Per-user key injection into sshPublicKey, connects downstream as the user - Shell / exec / SFTP-subsystem bridging (WinSCP works) - Web UI + HTTP API (:3002) for audit + metrics; LDAP-admin gated - Packaged like proxy: ops/install.sh + systemd, all-in-one Docker, compose - Tests: 23 unit + 3 integration (node --test), all green Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
25 lines
502 B
JavaScript
25 lines
502 B
JavaScript
'use strict';
|
|
|
|
// In-memory registry of live SSH sessions — feeds GET /api/sessions and the
|
|
// maxSessions cap. Ephemeral by design (a restart drops every bridge anyway).
|
|
|
|
const sessions = new Map(); // id -> descriptor
|
|
|
|
function add(id, desc) {
|
|
sessions.set(id, { id, startedAt: Date.now(), ...desc });
|
|
}
|
|
|
|
function remove(id) {
|
|
sessions.delete(id);
|
|
}
|
|
|
|
function list() {
|
|
return [...sessions.values()];
|
|
}
|
|
|
|
function count() {
|
|
return sessions.size;
|
|
}
|
|
|
|
module.exports = { add, remove, list, count };
|