961e841bd7
errs.Class should not contain "error" in the name, since that causes a
lot of stutter in the error logs. As an example a log line could end up
looking like:
ERROR node stats service error: satellitedbs error: node stats database error: no rows
Whereas something like:
ERROR nodestats service: satellitedbs: nodestatsdb: no rows
Would contain all the necessary information without the stutter.
Change-Id: I7b7cb7e592ebab4bcfadc1eef11122584d2b20e0
67 lines
1.5 KiB
Go
67 lines
1.5 KiB
Go
// Copyright (C) 2020 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package apikeys
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/spacemonkeygo/monkit/v3"
|
|
"github.com/zeebo/errs"
|
|
|
|
"storj.io/storj/private/multinodeauth"
|
|
)
|
|
|
|
var (
|
|
// ErrService defines secret service error.
|
|
ErrService = errs.Class("secret service")
|
|
|
|
mon = monkit.Package()
|
|
)
|
|
|
|
// Service responsible for operations with storagenode's uniq secret.
|
|
//
|
|
// architecture: Service
|
|
type Service struct {
|
|
store DB
|
|
}
|
|
|
|
// NewService is a constructor for service.
|
|
func NewService(db DB) *Service {
|
|
return &Service{store: db}
|
|
}
|
|
|
|
// Issue generates new api key and stores it into db.
|
|
func (service *Service) Issue(ctx context.Context) (apiKey APIKey, err error) {
|
|
defer mon.Task()(&ctx)(&err)
|
|
secret, err := multinodeauth.NewSecret()
|
|
if err != nil {
|
|
return APIKey{}, ErrService.Wrap(err)
|
|
}
|
|
|
|
apiKey.Secret = secret
|
|
apiKey.CreatedAt = time.Now()
|
|
|
|
err = service.store.Store(ctx, apiKey)
|
|
if err != nil {
|
|
return APIKey{}, ErrService.Wrap(err)
|
|
}
|
|
|
|
return apiKey, nil
|
|
}
|
|
|
|
// Check returns error if api key does not exists.
|
|
func (service *Service) Check(ctx context.Context, secret multinodeauth.Secret) (err error) {
|
|
defer mon.Task()(&ctx)(&err)
|
|
|
|
return service.store.Check(ctx, secret)
|
|
}
|
|
|
|
// Remove revokes apikey, deletes it from db.
|
|
func (service *Service) Remove(ctx context.Context, secret multinodeauth.Secret) (err error) {
|
|
defer mon.Task()(&ctx)(&err)
|
|
|
|
return ErrService.Wrap(service.store.Revoke(ctx, secret))
|
|
}
|