xfer: Don't attempt to parse a JSON response when there is no data

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Call the API callback on uploads, too

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: Refactor storing authentication credentials

The config object will be removed once we have finished initializing the
other objects. Therefore we will have to copy the credentials somewhere
else before.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: client: Always load client.conf

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: Read credentials from the configuration file (for now)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Remove unused string extraction function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Create separate timers for access/refresh token refresh

These are also now only initialized when we actually need them. That
helps us to deal with all those status changes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

httpclient: Remove launch protection without transfers

We need this so that we can lazy-initialize the client.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Call the auth callback when we need authentication

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: Create a dummy authentication function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Call the ready callback once we are successfully authenticated

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: auth: Use the new ready callback

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: Use the new ready function to start the uploads

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Call an init function whenever the event loop starts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Add a ready callback

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Implement asynchronous uploads

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

progress: Allow restart by keeping the state up to date

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Log an error when we want to use authentication without being authenticated

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Remove keytab

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Move the callback into the auth struct

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Move the tokens into the auth struct

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Fire a timer just before the access token expires

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Move the authentication timer from the daemon

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Use the event loop from the HTTP client

The HTTP client needs to have more control so that it can automatically
terminate the event loop when it is done.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Remove the authentication framework

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Hold a reference to the event loop

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: Return auth result in exit code

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Actually call the authentication callback

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Make user authentication asynchronous

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Implement an API response callback

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Add a convenience function to run the standalone client

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Add an authentication callback

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Bring back an own HTTP client instance

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

configure: Drop dependency on libkrb5

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Remove Kerberos authentication

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

json: Actually jump to the error block if JSON could not be parsed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

client: Rename the build service to client

This is simply to have way shorter function names, because things have
started to become a little bit ridiculous. No functional changes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Format transfer times in milliseconds

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jenkins: Explicitely install autopoint on Debian-based distros

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jenkins: Explicitely install Gettext on all distros

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

configure: Explicitely configure Gettext

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Send all other API requests with a JSON payload

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

json: Add function to add a boolean value

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Remove all dependencies to Kerberos

We will no longer use this for the API authentication.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Automatically refresh the access token on expiry

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Accept a JSON request object to send as payload for API requests

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Implement uploads using the new API

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Send the appropriate content type header is sending JSON

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Implement authentication using the access token

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

json: Align creating new JSON objects with other interfaces

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Add a function to add a JSON request body

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

JWT: Make the functions context-free

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

json: Cleanup the JSON parsing interfaces

We should not always require the context to have some basic logging.
Instead we can return the error as a string.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

json: Use the new string serialization function everywhere

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

json: Add a function to convert JSON to string

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

base64: No longer require the input length

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Decode expiry times from access/refresh tokens

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

JWT: Normalize base64 data before decoding

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

base64: Add function to normalize non-standard base64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jwt: Add some simple functions to parse JWTs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

base64: Allow specifying the length of the input buffer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cli: Add a command to test user authentication against the API

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Add a function to authenticate a user against the API

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buildservice: Tell the API that we would like to receive JSON

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Add a function to send a custom POST payload

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Add a function to set custom headers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Add a function to URL escape any strings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Pass any numeric values as long

cURL now complains if the value is not long.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

readme: update bug report url

Signed-off-by: Rico Hoppe <rico.hoppe@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Fix logic error in reading WebSocket messages

After the message was read we never cleared the buffer which resulted
that on every message, the callback was called with the entire buffer.
Usually that meant that only the first JSON message was parsed and
handled. Again and again and again...

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Remove recursive function call

I am not sure why I am suddenly scared of this, but there have been some
security-relevant issues where this could exhaust the stack.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Use our own string comparison macro

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Send the IDs of all running jobs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jobs: Stream logs as base64-encoded data

There should not be anything else but ASCII or Unicode characters here,
but we can never be too sure. Therefore we will encode all data as
base64 to keep the protocol somewhat extensible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

base64: Replace the encoder/decoder with low-level functions

The BIO interface is large and very well suited to encode larger
messages. However, we only have very small messages to encode and
therefore will spend a long time on setting up and destroying the BIO
interface all of the time.

These low-level functions are a lot faster and easier to set up.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

buffer: Rename fields again

I even confused myself here because length is actually not the length of
the buffer that I wanted. It is what has been allocated. That is however
nothing that we need to access at any time. Therefore the fields have
been renamed to be a little bit more intuitive again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Replace the send buffer with our own buffer implementation

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Use our own buffer implementation for the receive buffer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

packager: Fix return codes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

build: Log a better message when a build has been interrupted

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfer: Clear the overflow buffer after the segment could be sent

This is a stub and I will replace the send and receive buffers with our
own buffer implementation.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Store Kerberos credentials in memory

I think I am starting to become confused. At least in trixie and
bookworm-backports, we seem to be linking against MIT. This seems to
work now on my machine. Let's hope this is a general thing.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Completely destroy the Kerberos credentials cache on update

This is required because on Debian, cURL is linked against Heimdal which
does not seem to be able to skip any deleted tickets in the file.
Instead it always uses the first ticket which would eventually have
expired. Therefore we destroy the entire cache and write it again so
Heimdal cannot get confused.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jenkins: Ensure we have gawk available on Fedora

Fedora 42 does not seem to install this by default any more, but our
configure script wants to use it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jenkins: Always install all updates before trying to install any packages

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jenkins: Ensure the keyring is up to date on Archlinux

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dist: Remove the old solution to pass the filename

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

archive: Add function to fetch the desired filename

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

tests: Add tests for dist()

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python: Make dist() work again

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

file: Don't try to resolve paths relative to Pakfire in stub mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pwd: Don't permit any UID/GID lookups in stub mode

This is simply not supported because we don't have a file system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

packager: Don't use an invalid pointer to a freed JSON object

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

archive write: Fetch length of serialized JSON string from libjson-c

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

job: Always stream logs

This was too fragile before and I think we should be able to afford the
stupid traffic...

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

jobs: Use function to check if a flag is set

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Retry authentication if we could not reach the KDC

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Remove any previous credentials

Otherwise krb5 will append all credentials, but Heimdal only seems to
read the first (eventually) expired ticket.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

daemon: Make Kerberos refresh time easier to understand

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

util: Return converted timestamps as long

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>