setup unifi wlans

2026-02-22 19:12:34 -06:00
parent 70284bc14e
commit 3c89f24189
66 changed files with 7393 additions and 110 deletions
@@ -0,0 +1,117 @@
+import { createRoute } from "../../../../modules/api-utils/createRoute";
+import { unifiSites } from "../../../../managers/unifiSites";
+import { apiResponse } from "../../../../modules/api-utils/apiResponse";
+import { ContentfulStatusCode } from "hono/utils/http-status";
+import { authMiddleware } from "../../../middleware/authorization";
+import { toWlanConfUpdate } from "../../../../modules/unifi-api/unifiTypes";
+import { z } from "zod";
+
+/* PATCH /v1/unifi/site/:id/wifi/:wlanId */
+export default createRoute(
+  "patch",
+  ["/site/:id/wifi/:wlanId"],
+  async (c) => {
+    const site = await unifiSites.fetch(c.req.param("id"));
+    const wlanId = c.req.param("wlanId");
+
+    const body = await c.req.json();
+    const schema = z
+      .object({
+        name: z.string().optional(),
+        passphrase: z.string().optional(),
+        enabled: z.boolean().optional(),
+        security: z.enum(["wpapsk", "wpaeap", "open", "osen"]).optional(),
+        wpaMode: z.enum(["wpa2", "wpa3", "wpa2wpa3"]).optional(),
+        wpaEnc: z.enum(["ccmp", "gcmp", "ccmp-gcmp"]).optional(),
+        hideSSID: z.boolean().optional(),
+        macFilterEnabled: z.boolean().optional(),
+        macFilterPolicy: z.enum(["allow", "deny"]).optional(),
+        isGuest: z.boolean().optional(),
+        l2Isolation: z.boolean().optional(),
+        fastRoamingEnabled: z.boolean().optional(),
+        bssTransition: z.boolean().optional(),
+        uapsdEnabled: z.boolean().optional(),
+        groupRekey: z.number().optional(),
+        dtimMode: z.enum(["default", "custom"]).optional(),
+        dtimNg: z.number().optional(),
+        dtimNa: z.number().optional(),
+        minrateNgEnabled: z.boolean().optional(),
+        minrateNaEnabled: z.boolean().optional(),
+        radiusDasEnabled: z.boolean().optional(),
+        radiusMacAuthEnabled: z.boolean().optional(),
+        pmfMode: z.enum(["disabled", "optional", "required"]).optional(),
+        band: z.enum(["both", "2g", "5g"]).optional(),
+        usergroupId: z.string().optional(),
+        proxyArp: z.boolean().optional(),
+        mcastenhanceEnabled: z.boolean().optional(),
+        macFilterList: z.array(z.string()).optional(),
+        no2ghzOui: z.boolean().optional(),
+        apGroupIds: z.array(z.string()).optional(),
+        apGroupMode: z.enum(["all", "groups", "devices"]).optional(),
+        deviceMacs: z.array(z.string()).optional(),
+      })
+      .strict();
+
+    const parsed = schema.parse(body);
+
+    // If deviceMacs is provided, manage the devices_ap_group:
+    // - If already in devices mode with a for_wlanconf group, update that group
+    // - Otherwise create a new for_wlanconf group and switch to devices mode
+    if (parsed.deviceMacs && parsed.deviceMacs.length > 0) {
+      const wlans = await unifiSites.getWlanConf(site.siteId);
+      const currentWlan = wlans.find((w) => w.id === wlanId);
+
+      let existingGroupId: string | undefined;
+      if (
+        currentWlan?.apGroupMode === "devices" &&
+        currentWlan.apGroupIds.length > 0
+      ) {
+        // Check if the current group is a for_wlanconf group we can update
+        const apGroups = await unifiSites.getApGroups(site.siteId);
+        const currentGroup = apGroups.find(
+          (g) => g.id === currentWlan.apGroupIds[0] && g.forWlanconf,
+        );
+        if (currentGroup) existingGroupId = currentGroup.id;
+      }
+
+      if (existingGroupId) {
+        // Update the existing for_wlanconf group's device list
+        await unifiSites.updateApGroup(
+          site.siteId,
+          existingGroupId,
+          parsed.deviceMacs,
+        );
+        parsed.apGroupMode = "devices";
+        parsed.apGroupIds = [existingGroupId];
+      } else {
+        // Create a new for_wlanconf group
+        const apGroup = await unifiSites.createApGroup(
+          site.siteId,
+          "devices_ap_group",
+          parsed.deviceMacs,
+          true, // for_wlanconf must be true for devices mode
+        );
+        parsed.apGroupMode = "devices";
+        parsed.apGroupIds = [apGroup.id];
+      }
+    }
+
+    // Remove deviceMacs before converting — it's not a UniFi field
+    const { deviceMacs: _, ...updateInput } = parsed;
+    const updates = toWlanConfUpdate(updateInput);
+
+    const result = await unifiSites.updateWlanConf(
+      site.siteId,
+      wlanId,
+      updates,
+    );
+    const response = apiResponse.successful(
+      "UniFi WiFi Network Updated Successfully!",
+      result,
+    );
+    return c.json(response, response.status as ContentfulStatusCode);
+  },
+  authMiddleware({
+    permissions: ["unifi.access", "unifi.site.wifi", "unifi.site.wifi.update"],
+  }),
+);