<?phpnamespace App\Model;/** * How to reach one server (what the Add New Server dialog asks), saved in var/servers.json like XenCenter's saved servers. * Methods: demo (the pool in memory), http (XAPI on port 80: a socket, or in the browser the JumPHP runtime / the server's bridge), * https (port 443, desktop), ssh (an SSH tunnel to the host's own XAPI: `ssh -W 127.0.0.1:80`). */final class ServerProfile{ /** the password as var/servers.json keeps it: sealed by the Keyring ('' when not remembered) */ public string $secret = ''; public const METHODS = ['http' => 'HTTP (port 80)', 'https' => 'HTTPS (port 443, desktop)', 'ssh' => 'SSH tunnel to the host', 'demo' => 'Demo pool (no server)']; public function __construct( public string $host, public string $user = 'root', public string $password = '', public string $method = 'http', public int $port = 0, public bool $remember = false, public string $sshUser = 'root', public int $sshPort = 22, public string $sshKey = '', public string $friendlyName = '', /** @var array<string, string> host uuid => the address the user reaches it at (a pool behind a VPN / NAT): Connection Addresses… */ public array $hostAddresses = [], ) { } public static function demo(): self { return new self('xcp-demo.local', \App\Xapi\FakeXapi::USER, \App\Xapi\FakeXapi::PASSWORD, 'demo', 0, true, 'root', 22, '', 'Demo pool'); } /** Another demo server: a standalone host of its own (FakeXapi builds one for any address but the demo pool's), e.g. 'xcp-demo-2.local' = xcp-ng-03. */ public static function demoServer(string $address = 'xcp-demo-2.local'): self { return new self($address, \App\Xapi\FakeXapi::USER, \App\Xapi\FakeXapi::PASSWORD, 'demo', 0, true); } public function port(): int { return $this->port > 0 ? $this->port : ($this->method === 'https' ? 443 : 80); } public function key(): string { return $this->method . '://' . strtolower($this->host) . ':' . $this->port(); } /** @return array<string, mixed> what is saved: the password only when "remember" is ticked, and then sealed (never in clear) */ public function toArray(?Keyring $keyring = null): array { if (!$this->remember) { $this->secret = ''; } elseif ($this->password !== '' && ($sealed = $keyring?->seal($this->password)) !== null) { $this->secret = $sealed; // locked by a master password not given yet: the one sealed before is kept } return ['host' => $this->host, 'user' => $this->user, 'secret' => $this->secret, 'method' => $this->method, 'port' => $this->port, 'remember' => $this->remember, 'sshUser' => $this->sshUser, 'sshPort' => $this->sshPort, 'sshKey' => $this->sshKey, 'friendlyName' => $this->friendlyName, 'hostAddresses' => $this->hostAddresses]; } /** @param array<string, mixed> $a */ public static function fromArray(array $a): self { // 'password': a clear one of an older version (Keyring::restore() writes it again sealed) $profile = new self((string)($a['host'] ?? ''), (string)($a['user'] ?? 'root'), (string)($a['password'] ?? ''), (string)($a['method'] ?? 'http'), (int)($a['port'] ?? 0), (bool)($a['remember'] ?? false), (string)($a['sshUser'] ?? 'root'), (int)($a['sshPort'] ?? 22), (string)($a['sshKey'] ?? ''), (string)($a['friendlyName'] ?? ''), array_map('strval', array_filter((array)($a['hostAddresses'] ?? []), fn ($v) => is_scalar($v) && trim((string)$v) !== ''))); $profile->secret = (string)($a['secret'] ?? ''); return $profile; }}