lorentz
a4242b81be
Duo API Client (lib/services/duo-client.ts): - HMAC-SHA1 request signing, GET/POST, automatic pagination - Rate-limit handling (429 + Retry-After), configurable timeout - Accounts API: listAccounts() via POST /accounts/v1/account/list - Admin API: getUsers, getPhones, getGroups, getIntegrations, getAuthLogs - Child account access: parent creds signed against child api_hostname + account_id - Factory helpers: getDuoAccountsClient(), getDuoAdminClient() Database (migration 058): - 6 tables: duo_accounts, duo_users, duo_phones, duo_auth_logs, duo_groups, duo_integrations - All with proper FKs, indexes, JSONB fields for capabilities/location/groups Sync Service (lib/services/duo-sync-service.ts): - syncAll(): accounts → per-child data + auth logs → parent account → company matching - Sequential child processing to respect rate limits - Incremental auth logs (mintime = last synced timestamp, default 30 days) - Company matching: exact → case-insensitive containment (30/32 = 94% matched) - Non-blocking with sync ID tracking API Routes: - POST/GET /api/duo/sync — trigger sync / check status - GET /api/duo/accounts — list all accounts with stats + matched company - GET /api/duo/accounts/[id]/users — users for a specific account - POST /api/openclaw/sync/duo — OpenClaw trigger with API key auth Results: 33 accounts, 832 users, 925 phones, 5927 auth logs, 46 groups, 78 integrations
29 lines
984 B
TypeScript
29 lines
984 B
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { validateOpenClawKey } from '@/lib/utils/openclaw-auth';
|
|
import { duoSyncService } from '@/lib/services/duo-sync-service';
|
|
|
|
export async function POST(request: NextRequest) {
|
|
const authError = validateOpenClawKey(request);
|
|
if (authError) return authError;
|
|
|
|
try {
|
|
if (duoSyncService.isSyncInProgress()) {
|
|
return NextResponse.json(
|
|
{ message: 'Duo sync already in progress', syncId: duoSyncService.getCurrentSyncId() },
|
|
{ status: 409 },
|
|
);
|
|
}
|
|
|
|
duoSyncService.syncAll('openclaw').catch(err => {
|
|
console.error('[DuoSync] Background sync error (openclaw):', err);
|
|
});
|
|
|
|
return NextResponse.json({
|
|
message: 'Duo sync started',
|
|
syncId: duoSyncService.getCurrentSyncId(),
|
|
});
|
|
} catch (error: any) {
|
|
console.error('[DuoSync] Error starting sync via OpenClaw:', error);
|
|
return NextResponse.json({ error: error.message }, { status: 500 });
|
|
}
|
|
}
|