mirror of
https://github.com/harness/drone.git
synced 2025-05-07 02:42:19 +08:00

This change adds the following: - Space UID + Custom harness validation (accountId for top level space, harness identifier for child spaces) - Repo UID + Custom harness validation (harness identifier) - Store Unique casing of space / repo path and add Path.ValueUnique (with Unique index) to allow for application layer controlling the case sensitivity (case insensitive standalone vs partially case sensitive harness) - Token UID (unique index over ownertype + ownerID + tokenUID) - Add DisplayName for principals (replaces Name to avoid confustion) - Store Unique casing of principal UID and add Principal.ValueUnique (with unique index) to allow for application layer, per principal type control of case sensitivity (required in embedded mode) - Generate serviceAccount UID (+Email) Randomly (sa-{space|repo}-{ID}-{random}) - Allows to have a unique UID across all principals while reducing likelyhood of overlaps with users + avoid overlap across spaces / repos. - Sync casing of space names (accountId orgId projectId) when creating spaces on the fly (to ensure case sensitivity of - harness code) or use the existing space to update casing. - Update serviceaccount client to match updated NG Manager API - in embedded mode create spaces for harness resources owning the service account
78 lines
2.4 KiB
Go
78 lines
2.4 KiB
Go
// Copyright 2022 Harness Inc. All rights reserved.
|
|
// Use of this source code is governed by the Polyform Free Trial License
|
|
// that can be found in the LICENSE.md file for this repository.
|
|
|
|
package database
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/harness/gitness/internal/store"
|
|
"github.com/harness/gitness/internal/store/database/mutex"
|
|
"github.com/harness/gitness/types"
|
|
"github.com/harness/gitness/types/enum"
|
|
)
|
|
|
|
var _ store.TokenStore = (*TokenStoreSync)(nil)
|
|
|
|
// NewTokenStoreSync returns a new TokenStoreSync.
|
|
func NewTokenStoreSync(store *TokenStore) *TokenStoreSync {
|
|
return &TokenStoreSync{base: store}
|
|
}
|
|
|
|
// TokenStoreSync synronizes read and write access to the
|
|
// token store. This prevents race conditions when the database
|
|
// type is sqlite3.
|
|
type TokenStoreSync struct{ base *TokenStore }
|
|
|
|
// Find finds the token by id.
|
|
func (s *TokenStoreSync) Find(ctx context.Context, id int64) (*types.Token, error) {
|
|
mutex.RLock()
|
|
defer mutex.RUnlock()
|
|
return s.base.Find(ctx, id)
|
|
}
|
|
|
|
// Find finds the token by principalId and tokenUID.
|
|
func (s *TokenStoreSync) FindByUID(ctx context.Context, principalID int64, tokenUID string) (*types.Token, error) {
|
|
mutex.RLock()
|
|
defer mutex.RUnlock()
|
|
return s.base.FindByUID(ctx, principalID, tokenUID)
|
|
}
|
|
|
|
// Create saves the token details.
|
|
func (s *TokenStoreSync) Create(ctx context.Context, token *types.Token) error {
|
|
mutex.Lock()
|
|
defer mutex.Unlock()
|
|
return s.base.Create(ctx, token)
|
|
}
|
|
|
|
// Delete deletes the token with the given id.
|
|
func (s *TokenStoreSync) Delete(ctx context.Context, id int64) error {
|
|
mutex.Lock()
|
|
defer mutex.Unlock()
|
|
return s.base.Delete(ctx, id)
|
|
}
|
|
|
|
// DeleteForPrincipal deletes all tokens for a specific principal.
|
|
func (s *TokenStoreSync) DeleteForPrincipal(ctx context.Context, principalID int64) error {
|
|
mutex.Lock()
|
|
defer mutex.Unlock()
|
|
return s.base.DeleteForPrincipal(ctx, principalID)
|
|
}
|
|
|
|
// Count returns a count of tokens of a specifc type for a specific principal.
|
|
func (s *TokenStoreSync) Count(ctx context.Context, principalID int64,
|
|
tokenType enum.TokenType) (int64, error) {
|
|
mutex.Lock()
|
|
defer mutex.Unlock()
|
|
return s.base.Count(ctx, principalID, tokenType)
|
|
}
|
|
|
|
// List returns a list of tokens of a specific type for a specific principal.
|
|
func (s *TokenStoreSync) List(ctx context.Context, principalID int64,
|
|
tokenType enum.TokenType) ([]*types.Token, error) {
|
|
mutex.RLock()
|
|
defer mutex.RUnlock()
|
|
return s.base.List(ctx, principalID, tokenType)
|
|
}
|