961e841bd7
errs.Class should not contain "error" in the name, since that causes a
lot of stutter in the error logs. As an example a log line could end up
looking like:
ERROR node stats service error: satellitedbs error: node stats database error: no rows
Whereas something like:
ERROR nodestats service: satellitedbs: nodestatsdb: no rows
Would contain all the necessary information without the stutter.
Change-Id: I7b7cb7e592ebab4bcfadc1eef11122584d2b20e0
77 lines
1.7 KiB
Go
77 lines
1.7 KiB
Go
// Copyright (C) 2019 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package authorization
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/zeebo/errs"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
// ErrService is the default error class for the authorization service.
|
|
var ErrService = errs.Class("authorization service")
|
|
|
|
// Service is the authorization service.
|
|
type Service struct {
|
|
log *zap.Logger
|
|
db *DB
|
|
}
|
|
|
|
// NewService creates a new authorization service.
|
|
func NewService(log *zap.Logger, db *DB) *Service {
|
|
return &Service{
|
|
log: log,
|
|
db: db,
|
|
}
|
|
}
|
|
|
|
// GetOrCreate will return an authorization for the given user ID.
|
|
func (service *Service) GetOrCreate(ctx context.Context, userID string) (_ *Token, err error) {
|
|
defer mon.Task()(&ctx)(&err)
|
|
|
|
if userID == "" {
|
|
msg := "missing user ID"
|
|
err = ErrService.New(msg)
|
|
return nil, err
|
|
}
|
|
|
|
existingGroup, err := service.db.Get(ctx, userID)
|
|
if err != nil && !ErrNotFound.Has(err) {
|
|
msg := "error getting authorizations"
|
|
err = ErrService.Wrap(err)
|
|
service.log.Error(msg, zap.Error(err))
|
|
return nil, err
|
|
}
|
|
|
|
if existingGroup != nil && len(existingGroup) > 0 {
|
|
for _, authorization := range existingGroup {
|
|
if authorization.Claim == nil {
|
|
return &authorization.Token, nil
|
|
}
|
|
}
|
|
}
|
|
|
|
createdGroup, err := service.db.Create(ctx, userID, 1)
|
|
if err != nil {
|
|
msg := "error creating authorization"
|
|
err = ErrService.Wrap(err)
|
|
service.log.Error(msg, zap.Error(err))
|
|
return nil, err
|
|
}
|
|
|
|
groupLen := len(createdGroup)
|
|
if groupLen != 1 {
|
|
clientMsg := "error creating authorization"
|
|
internalMsg := clientMsg + fmt.Sprintf("; expected 1, got %d", groupLen)
|
|
|
|
service.log.Error(internalMsg)
|
|
return nil, ErrEndpoint.New("%s", clientMsg)
|
|
}
|
|
|
|
authorization := createdGroup[0]
|
|
return &authorization.Token, nil
|
|
}
|