97 lines
2.1 KiB
Go
97 lines
2.1 KiB
Go
package api
|
|
|
|
import (
|
|
"context"
|
|
"reflect"
|
|
|
|
"golang.org/x/xerrors"
|
|
)
|
|
|
|
type permKey int
|
|
|
|
var permCtxKey permKey
|
|
|
|
const (
|
|
// When changing these, update docs/API.md too
|
|
|
|
PermRead = "read" // default
|
|
PermWrite = "write"
|
|
PermSign = "sign" // Use wallet keys for signing
|
|
PermAdmin = "admin" // Manage permissions
|
|
)
|
|
|
|
var AllPermissions = []string{PermRead, PermWrite, PermSign, PermAdmin}
|
|
var defaultPerms = []string{PermRead}
|
|
|
|
func WithPerm(ctx context.Context, perms []string) context.Context {
|
|
return context.WithValue(ctx, permCtxKey, perms)
|
|
}
|
|
|
|
func PermissionedStorMinerAPI(a StorageMiner) StorageMiner {
|
|
var out StorageMinerStruct
|
|
permissionedAny(a, &out.Internal)
|
|
permissionedAny(a, &out.CommonStruct.Internal)
|
|
return &out
|
|
}
|
|
|
|
func PermissionedFullAPI(a FullNode) FullNode {
|
|
var out FullNodeStruct
|
|
permissionedAny(a, &out.Internal)
|
|
permissionedAny(a, &out.CommonStruct.Internal)
|
|
return &out
|
|
}
|
|
|
|
func permissionedAny(in interface{}, out interface{}) {
|
|
rint := reflect.ValueOf(out).Elem()
|
|
ra := reflect.ValueOf(in)
|
|
|
|
for f := 0; f < rint.NumField(); f++ {
|
|
field := rint.Type().Field(f)
|
|
requiredPerm := field.Tag.Get("perm")
|
|
if requiredPerm == "" {
|
|
panic("missing 'perm' tag on " + field.Name)
|
|
}
|
|
|
|
// Validate perm tag
|
|
ok := false
|
|
for _, perm := range AllPermissions {
|
|
if requiredPerm == perm {
|
|
ok = true
|
|
break
|
|
}
|
|
}
|
|
if !ok {
|
|
panic("unknown 'perm' tag on " + field.Name)
|
|
}
|
|
|
|
fn := ra.MethodByName(field.Name)
|
|
|
|
rint.Field(f).Set(reflect.MakeFunc(field.Type, func(args []reflect.Value) (results []reflect.Value) {
|
|
ctx := args[0].Interface().(context.Context)
|
|
callerPerms, ok := ctx.Value(permCtxKey).([]string)
|
|
if !ok {
|
|
callerPerms = defaultPerms
|
|
}
|
|
|
|
for _, callerPerm := range callerPerms {
|
|
if callerPerm == requiredPerm {
|
|
return fn.Call(args)
|
|
}
|
|
}
|
|
|
|
err := xerrors.Errorf("missing permission to invoke '%s' (need '%s')", field.Name, requiredPerm)
|
|
rerr := reflect.ValueOf(&err).Elem()
|
|
|
|
if field.Type.NumOut() == 2 {
|
|
return []reflect.Value{
|
|
reflect.Zero(field.Type.Out(0)),
|
|
rerr,
|
|
}
|
|
} else {
|
|
return []reflect.Value{rerr}
|
|
}
|
|
}))
|
|
|
|
}
|
|
}
|