opnsense connections page ui improvements

.env.example

@@ -3,3 +3,6 @@ AUTH_DOMAIN=auth.lab.cazzzer.com
 AUTH_CLIENT_ID=
 AUTH_CLIENT_SECRET=
 AUTH_REDIRECT_URI=http://localhost:5173/auth/authentik/callback
+OPNSENSE_API_URL=https://opnsense.home
+OPNSENSE_API_KEY=
+OPNSENSE_API_SECRET=

bruno/bruno.json

@@ -0,0 +1,9 @@
+{
+  "version": "1",
+  "name": "vpgen",
+  "type": "collection",
+  "ignore": [
+    "node_modules",
+    ".git"
+  ]
+}

bruno/collection.bru

@@ -0,0 +1,8 @@
+auth {
+  mode: basic
+}
+
+auth:basic {
+  username: {{opnsense_key}}
+  password: {{opnsense_secret}}
+}

bruno/environments/dev.bru

@@ -0,0 +1,6 @@
+vars {
+  opnsense_key: 33NhXqaJwrWy1T4Qi60GK90RXJuS3PWIYwlwYPnQ8f5YPe/J1q/g6/l4bZ2/kJk71MFhwP+9mr+IiQPi
+}
+vars:secret [
+  opnsense_secret
+]

bruno/opnsense-api/Get Interfaces.bru

@@ -0,0 +1,28 @@
+meta {
+  name: Get Interfaces
+  type: http
+  seq: 2
+}
+
+post {
+  url: https://opnsense.home/api/wireguard/service/show
+  body: json
+  auth: inherit
+}
+
+headers {
+  Content-Type: application/json
+  Accept: application/json
+}
+
+body:json {
+  {
+    "current": 1,
+    "rowCount": 7,
+    "sort": {},
+    "searchPhrase": "",
+    "type": [
+      "interface"
+    ]
+  }
+}

bruno/opnsense-api/Get Peers.bru

@@ -0,0 +1,28 @@
+meta {
+  name: Get Peers
+  type: http
+  seq: 1
+}
+
+post {
+  url: https://opnsense.home/api/wireguard/service/show
+  body: json
+  auth: inherit
+}
+
+headers {
+  Content-Type: application/json
+  Accept: application/json
+}
+
+body:json {
+  {
+    "current": 1,
+    "rowCount": 7,
+    "sort": {},
+    "searchPhrase": "",
+    "type": [
+      "peer"
+    ]
+  }
+}

src/hooks.server.ts

@@ -34,6 +34,7 @@ const handleAuth: Handle = async ({ event, resolve }) => {
 const authRequired = new Set([
 	'/user',
 	'/connections',
+	'/api/connections',
 ]);
 const handleProtectedPaths: Handle = ({ event, resolve }) => {
 	if (authRequired.has(event.url.pathname) && !event.locals.user) {

src/lib/components/ui/checkbox/checkbox.svelte

@@ -0,0 +1,35 @@
+<script lang="ts">
+	import { Checkbox as CheckboxPrimitive } from "bits-ui";
+	import Check from "lucide-svelte/icons/check";
+	import Minus from "lucide-svelte/icons/minus";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = CheckboxPrimitive.Props;
+	type $$Events = CheckboxPrimitive.Events;
+
+	let className: $$Props["class"] = undefined;
+	export let checked: $$Props["checked"] = false;
+	export { className as class };
+</script>
+
+<CheckboxPrimitive.Root
+	class={cn(
+		"border-primary ring-offset-background focus-visible:ring-ring data-[state=checked]:bg-primary data-[state=checked]:text-primary-foreground peer box-content h-4 w-4 shrink-0 rounded-sm border focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50 data-[disabled=true]:cursor-not-allowed data-[disabled=true]:opacity-50",
+		className
+	)}
+	bind:checked
+	{...$$restProps}
+	on:click
+>
+	<CheckboxPrimitive.Indicator
+		class={cn("flex h-4 w-4 items-center justify-center text-current")}
+		let:isChecked
+		let:isIndeterminate
+	>
+		{#if isChecked}
+			<Check class="h-3.5 w-3.5" />
+		{:else if isIndeterminate}
+			<Minus class="h-3.5 w-3.5" />
+		{/if}
+	</CheckboxPrimitive.Indicator>
+</CheckboxPrimitive.Root>

src/lib/components/ui/checkbox/index.ts

@@ -0,0 +1,6 @@
+import Root from "./checkbox.svelte";
+export {
+	Root,
+	//
+	Root as Checkbox,
+};

src/lib/components/ui/table/index.ts

@@ -0,0 +1,28 @@
+import Root from "./table.svelte";
+import Body from "./table-body.svelte";
+import Caption from "./table-caption.svelte";
+import Cell from "./table-cell.svelte";
+import Footer from "./table-footer.svelte";
+import Head from "./table-head.svelte";
+import Header from "./table-header.svelte";
+import Row from "./table-row.svelte";
+
+export {
+	Root,
+	Body,
+	Caption,
+	Cell,
+	Footer,
+	Head,
+	Header,
+	Row,
+	//
+	Root as Table,
+	Body as TableBody,
+	Caption as TableCaption,
+	Cell as TableCell,
+	Footer as TableFooter,
+	Head as TableHead,
+	Header as TableHeader,
+	Row as TableRow,
+};

src/lib/components/ui/table/table-body.svelte

@@ -0,0 +1,13 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLAttributes<HTMLTableSectionElement>;
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<tbody class={cn("[&_tr:last-child]:border-0", className)} {...$$restProps}>
+	<slot />
+</tbody>

src/lib/components/ui/table/table-caption.svelte

@@ -0,0 +1,13 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLAttributes<HTMLTableCaptionElement>;
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<caption class={cn("text-muted-foreground mt-4 text-sm", className)} {...$$restProps}>
+	<slot />
+</caption>

src/lib/components/ui/table/table-cell.svelte

@@ -0,0 +1,18 @@
+<script lang="ts">
+	import type { HTMLTdAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLTdAttributes;
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<td
+	class={cn("p-4 align-middle [&:has([role=checkbox])]:pr-0", className)}
+	{...$$restProps}
+	on:click
+	on:keydown
+>
+	<slot />
+</td>

src/lib/components/ui/table/table-footer.svelte

@@ -0,0 +1,13 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLAttributes<HTMLTableSectionElement>;
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<tfoot class={cn("bg-muted/50 text-primary-foreground font-medium", className)} {...$$restProps}>
+	<slot />
+</tfoot>

src/lib/components/ui/table/table-head.svelte

@@ -0,0 +1,19 @@
+<script lang="ts">
+	import type { HTMLThAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLThAttributes;
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<th
+	class={cn(
+		"text-muted-foreground h-12 px-4 text-left align-middle font-medium [&:has([role=checkbox])]:pr-0",
+		className
+	)}
+	{...$$restProps}
+>
+	<slot />
+</th>

src/lib/components/ui/table/table-header.svelte

@@ -0,0 +1,14 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLAttributes<HTMLTableSectionElement>;
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<!-- svelte-ignore a11y-no-noninteractive-element-interactions -->
+<thead class={cn("[&_tr]:border-b", className)} {...$$restProps} on:click on:keydown>
+	<slot />
+</thead>

src/lib/components/ui/table/table-row.svelte

@@ -0,0 +1,23 @@
+<script lang="ts">
+	import type { HTMLAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLAttributes<HTMLTableRowElement> & {
+		"data-state"?: unknown;
+	};
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<tr
+	class={cn(
+		"hover:bg-muted/50 data-[state=selected]:bg-muted border-b transition-colors",
+		className
+	)}
+	{...$$restProps}
+	on:click
+	on:keydown
+>
+	<slot />
+</tr>

src/lib/components/ui/table/table.svelte

@@ -0,0 +1,15 @@
+<script lang="ts">
+	import type { HTMLTableAttributes } from "svelte/elements";
+	import { cn } from "$lib/utils.js";
+
+	type $$Props = HTMLTableAttributes;
+
+	let className: $$Props["class"] = undefined;
+	export { className as class };
+</script>
+
+<div class="relative w-full overflow-auto">
+	<table class={cn("w-full caption-bottom text-sm", className)} {...$$restProps}>
+		<slot />
+	</table>
+</div>

src/lib/opnsense/wg.ts

@@ -0,0 +1,56 @@
+export interface PeerRow {
+	if: string;
+	type: "peer";
+	'public-key': string;
+	endpoint: string;
+	'allowed-ips': string;
+	'latest-handshake': number;
+	'transfer-rx': number;
+	'transfer-tx': number;
+	'persistent-keepalive': string;
+	name: string;
+	ifname: string;
+}
+
+export interface OpnsenseWgPeers {
+	total: number;
+	rowCount: number;
+	current: number;
+	rows: PeerRow[];
+}
+
+// Sample request to OPNsense WireGuard API
+// const url = 'https://opnsense.home/api/wireguard/service/show';
+// const options = {
+//   method: 'POST',
+//   headers: {
+//     Authorization: 'Basic ...',
+//     'Content-Type': 'application/json',
+//     Accept: 'application/json',
+//     'content-type': 'application/json'
+//   },
+//   body: '{"current":1,"rowCount":7,"sort":{},"searchPhrase":"","type":["peer"]}'
+// };
+
+
+// Sample response from OPNsense WireGuard API
+// {
+//   "total": 17,
+//     "rowCount": 7,
+//     "current": 1,
+//     "rows": [
+//   {
+//     "if": "wg0",
+//     "type": "peer",
+//     "public-key": "iJa5JmJbMHNlbEluNwoB2Q8LyrPAfb7S/mluanMcI08=",
+//     "endpoint": "10.17.20.107:42516",
+//     "allowed-ips": "2600:1700:115f:300d:0:6:3:0/112,10.6.0.3/32",
+//     "latest-handshake": 1729319339,
+//     "transfer-rx": 1052194743,
+//     "transfer-tx": 25203263456,
+//     "persistent-keepalive": "off",
+//     "name": "Yura-TPX13",
+//     "ifname": "wg0"
+//   }
+// ]
+// }

src/routes/+layout.svelte

@@ -5,16 +5,20 @@
 
 	const { data, children } = $props();
 	const { user } = data;
+
+	function getNavClass(path: string) {
+		return cn("hover:text-foreground/80 transition-colors",
+			$page.url.pathname === path ? "text-foreground" : "text-foreground/60");
+	}
 </script>
 
 <header class="p-4 sm:flex">
 	<span class=" mr-6 font-bold sm:inline-block">My App</span>
 	<nav class="flex items-center gap-6 text-sm">
-		<a href="/" class={cn("hover:text-foreground/80 transition-colors",
-				$page.url.pathname === "/" ? "text-foreground" : "text-foreground/60")}>Home</a>
+		<a href="/" class={getNavClass("/")}>Home</a>
 		{#if user}
-			<a href="/user" class={cn("hover:text-foreground/80 transition-colors",
-				$page.url.pathname === "/user" ? "text-foreground" : "text-foreground/60")}>Profile</a>
+			<a href="/user" class={getNavClass("/user")}>Profile</a>
+			<a href="/connections" class={getNavClass("/connections")}>Connections</a>
 		{/if}
 	</nav>
 </header>

src/routes/api/connections/+server.ts

@@ -0,0 +1,32 @@
+import { error } from '@sveltejs/kit';
+import type { RequestHandler } from './$types';
+import { env } from '$env/dynamic/private';
+import type { OpnsenseWgPeers } from '$lib/opnsense/wg';
+
+export const GET: RequestHandler = async ({ url }) => {
+	const apiUrl = `${env.OPNSENSE_API_URL}/api/wireguard/service/show`;
+	const options: RequestInit = {
+		method: 'POST',
+		headers: {
+			Authorization: `Basic ${Buffer.from(`${env.OPNSENSE_API_KEY}:${env.OPNSENSE_API_SECRET}`).toString('base64')}`,
+			Accept: 'application/json',
+			'Content-Type': 'application/json',
+		},
+		body: JSON.stringify({
+			"current": 1,
+			// "rowCount": 7,
+			"sort": {},
+			"searchPhrase": "",
+			"type": ["peer"],
+		}),
+	};
+	console.log("Fetching peers from OPNsense WireGuard API: ", apiUrl, options)
+
+	const res = await fetch(apiUrl, options);
+	const peers = await res.json() as OpnsenseWgPeers;
+
+	if (!peers) {
+		error(500, "Error getting info from OPNsense API");
+	}
+	return new Response(JSON.stringify(peers));
+};

src/routes/connections/+page.svelte

@@ -0,0 +1,79 @@
+<script lang="ts">
+	import type { PageData } from './$types';
+	import { invalidate } from '$app/navigation';
+	import { onMount } from 'svelte';
+	import * as Table from '$lib/components/ui/table';
+	import { Checkbox } from '$lib/components/ui/checkbox';
+	import { Label } from '$lib/components/ui/label';
+
+	const { data }: { data: PageData } = $props();
+	let showOnlyActive = $state(false);
+	const peerRows = $derived(data.peers.rows.filter((peer) => showOnlyActive ? peer['latest-handshake'] : true));
+
+	onMount(() => {
+		// refresh every 5 seconds
+		setInterval(() => {
+			console.log('Refreshing connections');
+			invalidate('/api/connections');
+		}, 5000);
+	});
+
+	function getSize(size: number) {
+		let sizes = ['Bytes', 'KiB', 'MiB', 'GiB',
+			'TiB', 'PiB', 'EiB', 'ZiB', 'YiB'];
+
+		for (let i = 1; i < sizes.length; i++) {
+			if (size < Math.pow(1024, i))
+				return (Math.round((size / Math.pow(
+					1024, i - 1)) * 100) / 100) + ' ' + sizes[i - 1];
+		}
+		return size;
+	}
+</script>
+
+<svelte:head>
+	<title>Connections</title>
+</svelte:head>
+
+<Checkbox id="showOnlyActive" bind:checked={showOnlyActive} />
+<Label for="showOnlyActive">Show only active connections</Label>
+
+{#if peerRows.length === 0}
+	<p>No active connections</p>
+
+{:else}
+	<Table.Root class="bg-accent rounded-xl">
+		<Table.Header>
+			<Table.Head>Name</Table.Head>
+			<Table.Head>Public Key</Table.Head>
+			<Table.Head>Endpoint</Table.Head>
+			<Table.Head>Allowed IPs</Table.Head>
+			<Table.Head>Latest Handshake</Table.Head>
+			<Table.Head>RX</Table.Head>
+			<Table.Head>TX</Table.Head>
+			<Table.Head>Persistent Keepalive</Table.Head>
+			<Table.Head>Interface Name</Table.Head>
+		</Table.Header>
+		<Table.Body>
+			{#each peerRows as peer}
+				<Table.Row class="border-y-2 border-background">
+					<Table.Cell>{peer.name}</Table.Cell>
+					<Table.Cell>{peer['public-key'].substring(0, 10)}</Table.Cell>
+					<Table.Cell>{peer.endpoint}</Table.Cell>
+					<Table.Cell>{peer['allowed-ips']}</Table.Cell>
+					{#if peer['latest-handshake']}
+						<Table.Cell>{new Date(peer['latest-handshake'] * 1000).toLocaleString()}</Table.Cell>
+						<Table.Cell>{getSize(peer['transfer-rx'])}</Table.Cell>
+						<Table.Cell>{getSize(peer['transfer-tx'])}</Table.Cell>
+					{:else}
+						<Table.Cell>Never</Table.Cell>
+						<Table.Cell>--</Table.Cell>
+						<Table.Cell>--</Table.Cell>
+					{/if}
+					<Table.Cell>{peer['persistent-keepalive']}</Table.Cell>
+					<Table.Cell>{peer.ifname}</Table.Cell>
+				</Table.Row>
+			{/each}
+		</Table.Body>
+	</Table.Root>
+{/if}

src/routes/connections/+page.ts

@@ -0,0 +1,9 @@
+import type { PageLoad } from './$types';
+import type { OpnsenseWgPeers } from '$lib/opnsense/wg';
+
+export const load: PageLoad = async ({ fetch, params }) => {
+	const res = await fetch('/api/connections');
+	const peers = await res.json() as OpnsenseWgPeers;
+
+	return { peers };
+};