drone/internal/store/database/token_sync.go
Johannes Batzill 3ba0f75c8d Introduce UIDs for Space / Repo / Tokens, Add Custom Harness Validation, ... (#57)
This change adds the following:
- Space UID + Custom harness validation (accountId for top level space, harness identifier for child spaces)
- Repo UID + Custom harness validation (harness identifier)
- Store Unique casing of space / repo path and add Path.ValueUnique (with Unique index) to allow for application layer controlling the case sensitivity (case insensitive standalone vs partially case sensitive harness)
- Token UID (unique index over ownertype + ownerID + tokenUID)
- Add DisplayName for principals (replaces Name to avoid confustion)
- Store Unique casing of principal UID and add Principal.ValueUnique (with unique index) to allow for application layer, per principal type control of case sensitivity (required in embedded mode)
- Generate serviceAccount UID (+Email) Randomly (sa-{space|repo}-{ID}-{random}) - Allows to have a unique UID across all principals while reducing likelyhood of overlaps with users + avoid overlap across spaces / repos.
- Sync casing of space names (accountId orgId projectId) when creating spaces on the fly (to ensure case sensitivity of - harness code) or use the existing space to update casing.
- Update serviceaccount client to match updated NG Manager API
- in embedded mode create spaces for harness resources owning the service account
2022-11-06 23:14:47 -08:00

78 lines
2.4 KiB
Go

// Copyright 2022 Harness Inc. All rights reserved.
// Use of this source code is governed by the Polyform Free Trial License
// that can be found in the LICENSE.md file for this repository.
package database
import (
"context"
"github.com/harness/gitness/internal/store"
"github.com/harness/gitness/internal/store/database/mutex"
"github.com/harness/gitness/types"
"github.com/harness/gitness/types/enum"
)
var _ store.TokenStore = (*TokenStoreSync)(nil)
// NewTokenStoreSync returns a new TokenStoreSync.
func NewTokenStoreSync(store *TokenStore) *TokenStoreSync {
return &TokenStoreSync{base: store}
}
// TokenStoreSync synronizes read and write access to the
// token store. This prevents race conditions when the database
// type is sqlite3.
type TokenStoreSync struct{ base *TokenStore }
// Find finds the token by id.
func (s *TokenStoreSync) Find(ctx context.Context, id int64) (*types.Token, error) {
mutex.RLock()
defer mutex.RUnlock()
return s.base.Find(ctx, id)
}
// Find finds the token by principalId and tokenUID.
func (s *TokenStoreSync) FindByUID(ctx context.Context, principalID int64, tokenUID string) (*types.Token, error) {
mutex.RLock()
defer mutex.RUnlock()
return s.base.FindByUID(ctx, principalID, tokenUID)
}
// Create saves the token details.
func (s *TokenStoreSync) Create(ctx context.Context, token *types.Token) error {
mutex.Lock()
defer mutex.Unlock()
return s.base.Create(ctx, token)
}
// Delete deletes the token with the given id.
func (s *TokenStoreSync) Delete(ctx context.Context, id int64) error {
mutex.Lock()
defer mutex.Unlock()
return s.base.Delete(ctx, id)
}
// DeleteForPrincipal deletes all tokens for a specific principal.
func (s *TokenStoreSync) DeleteForPrincipal(ctx context.Context, principalID int64) error {
mutex.Lock()
defer mutex.Unlock()
return s.base.DeleteForPrincipal(ctx, principalID)
}
// Count returns a count of tokens of a specifc type for a specific principal.
func (s *TokenStoreSync) Count(ctx context.Context, principalID int64,
tokenType enum.TokenType) (int64, error) {
mutex.Lock()
defer mutex.Unlock()
return s.base.Count(ctx, principalID, tokenType)
}
// List returns a list of tokens of a specific type for a specific principal.
func (s *TokenStoreSync) List(ctx context.Context, principalID int64,
tokenType enum.TokenType) ([]*types.Token, error) {
mutex.RLock()
defer mutex.RUnlock()
return s.base.List(ctx, principalID, tokenType)
}