Something went wrong. Try again.
This repository has no description
Something went wrong. Try again.
3.2 kB · 94 lines
Go
1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495package statedb
import ( "errors" "fmt"
"github.com/streamplace/oatproxy/pkg/oatproxy" "gorm.io/gorm")
func (state *StatefulDB) CreateOAuthSession(id string, session *oatproxy.OAuthSession) error { return state.DB.Create(session).Error}
func (state *StatefulDB) LoadOAuthSession(id string) (*oatproxy.OAuthSession, error) { var session oatproxy.OAuthSession if err := state.DB.Where("downstream_dpop_jkt = ?", id).First(&session).Error; err != nil { if errors.Is(err, gorm.ErrRecordNotFound) { return nil, nil } return nil, err } if session.Status() != oatproxy.OAuthSessionStateReady && session.Status() != oatproxy.OAuthSessionStateReadyUpstream { return &session, nil } // A delegated session is bound to the station, not the user's actual PDS. // The real PDS remains authoritative in the indexed repo. if state.CLI != nil && state.CLI.UpstreamStation != "" { return &session, nil } r, err := state.model.GetRepo(session.DID) if err != nil { return nil, fmt.Errorf("failed to get repo: %w", err) } if r == nil { // Login is persisted before the asynchronous initial repo sync. return &session, nil } if r.PDS != session.PDSUrl { return nil, fmt.Errorf("pds mismatch (old: %s, new: %s): please log in again", session.PDSUrl, r.PDS) } return &session, nil}
func (state *StatefulDB) UpdateOAuthSession(id string, session *oatproxy.OAuthSession) error { res := state.DB.Model(&oatproxy.OAuthSession{}).Where("downstream_dpop_jkt = ?", id).Updates(session) if res.Error != nil { return res.Error } if res.RowsAffected == 0 { return errors.New("no rows affected") } return nil}
func (state *StatefulDB) ListOAuthSessions() ([]oatproxy.OAuthSession, error) { var sessions []oatproxy.OAuthSession if err := state.DB.Find(&sessions).Error; err != nil { return nil, err } return sessions, nil}
func (state *StatefulDB) GetSessionByDID(did string) (*oatproxy.OAuthSession, error) { var session oatproxy.OAuthSession if err := state.DB.Where("repo_did = ? AND revoked_at IS NULL", did).Order("updated_at DESC").First(&session).Error; err != nil { return nil, err } return &session, nil}
// ErrNoSessionWithScope means the user has valid sessions, but none of them// was granted the required scope — i.e. they declined those permissions on// every device they're logged in on.var ErrNoSessionWithScope = errors.New("no session with required scope")
// GetSessionByDIDWithScope returns the most recently used valid session for// the DID that was granted every scope value in scope (space-separated).// Sessions from before scope tracking count as full grants.func (state *StatefulDB) GetSessionByDIDWithScope(did string, scope string) (*oatproxy.OAuthSession, error) { var sessions []oatproxy.OAuthSession if err := state.DB.Where("repo_did = ? AND revoked_at IS NULL", did).Order("updated_at DESC").Find(&sessions).Error; err != nil { return nil, err } if len(sessions) == 0 { return nil, gorm.ErrRecordNotFound } for i := range sessions { if sessions[i].HasScope(scope) { return &sessions[i], nil } } return nil, fmt.Errorf("%w: did=%s scope=%s", ErrNoSessionWithScope, did, scope)}