1283036e37
* add voucher service on storage node * config field tag syntax, go routines for requests * hook up voucher service in storagenode/peer.go * add voucher config to testplanet * add voucher config to testplanet * add voucher response status INVALID, ACCEPTED, REJECTED * add a test for vouchers service * handle no row from GetValid, test it * add trust pool to voucher service * use trusted list to get satellites * verify vouchers upon receipt * test VerifyVoucher
58 lines
1.5 KiB
Go
58 lines
1.5 KiB
Go
// Copyright (C) 2019 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package vouchers
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/golang/protobuf/ptypes"
|
|
"github.com/zeebo/errs"
|
|
|
|
"storj.io/storj/pkg/auth/signing"
|
|
"storj.io/storj/pkg/pb"
|
|
"storj.io/storj/pkg/storj"
|
|
)
|
|
|
|
var (
|
|
// ErrVerify is returned when voucher fields are not valid.
|
|
ErrVerify = errs.Class("verification")
|
|
)
|
|
|
|
// VerifyVoucher verifies that the signature and the information contained in a voucher are valid
|
|
func (service *Service) VerifyVoucher(ctx context.Context, satellite storj.NodeID, voucher *pb.Voucher) (err error) {
|
|
defer mon.Task()(&ctx)(&err)
|
|
|
|
if self := service.kademlia.Local().Id; voucher.StorageNodeId != self {
|
|
return ErrVerify.New("Storage node ID does not match expected: (%v) (%v)", voucher.StorageNodeId, self)
|
|
}
|
|
|
|
if voucher.SatelliteId != satellite {
|
|
return ErrVerify.New("Satellite ID does not match expected: (%v) (%v)", voucher.SatelliteId, satellite)
|
|
}
|
|
|
|
expiration, err := ptypes.Timestamp(voucher.GetExpiration())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if expiration.Before(time.Now().UTC()) {
|
|
return ErrVerify.New("Voucher is already expired")
|
|
}
|
|
|
|
signee, err := service.trust.GetSignee(ctx, voucher.SatelliteId)
|
|
if err != nil {
|
|
if err != context.Canceled {
|
|
return err
|
|
}
|
|
return ErrVerify.New("unable to get signee: %v", err) // TODO: report grpc status bad message
|
|
}
|
|
|
|
if err := signing.VerifyVoucher(ctx, signee, voucher); err != nil {
|
|
return ErrVerify.New("invalid voucher signature: %v", err) // TODO: report grpc bad message
|
|
}
|
|
|
|
return nil
|
|
}
|