1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
package marketidentity
import (
"cmp"
"context"
"fmt"
"strings"
"k8s.io/apimachinery/pkg/runtime/schema"
commonv1 "github.com/johnandersen777/socialweb-computer-kcp/api/common/v1alpha1"
"github.com/johnandersen777/socialweb-computer-kcp/api/v1alpha1"
"github.com/johnandersen777/socialweb-computer-kcp/internal/bus"
"github.com/johnandersen777/socialweb-computer-kcp/internal/contract/pds"
"github.com/johnandersen777/socialweb-computer-kcp/internal/contract/vault"
"github.com/johnandersen777/socialweb-computer-kcp/internal/marketidentity/atproto"
"github.com/johnandersen777/socialweb-computer-kcp/internal/pds/identity"
)
var GroupKind = schema.GroupKind{Group: v1alpha1.GroupName, Kind: "MarketIdentity"}
func (c *Controller) Provide(b *bus.Bus) {
bus.Provide(b, GroupKind, pds.CapabilitySession, func(ctx context.Context, to commonv1.ObjectRef, scope []string) (pds.Authenticator, error) {
return c.authenticator(ctx, to, scope)
})
bus.Provide(b, GroupKind, pds.CapabilityServiceAuth, func(ctx context.Context, to commonv1.ObjectRef, scope []string) (pds.ServiceAuth, error) {
return c.authenticator(ctx, to, scope)
})
}
func (c *Controller) authenticator(ctx context.Context, to commonv1.ObjectRef, scope []string) (*identity.Authenticator, error) {
did, err := pds.AccountDID(scope)
if err != nil {
return nil, err
}
entry, ok := c.identities.Get(to.Workspace, to.Name)
if !ok || entry.identity == nil {
return nil, fmt.Errorf("%w: the MarketIdentity %s is not reconciled by this core", pds.ErrNotFound, to.String())
}
if held := strings.TrimSpace(entry.identity.Status.Did); held != did {
return nil, fmt.Errorf("pds: the MarketIdentity %s signs for %q, not %s", to.String(), held, did)
}
auth, err := c.accounts.Authenticator(ctx, to.Workspace, entry.identity)
if err != nil {
return nil, fmt.Errorf("%w: the session of the MarketIdentity %s: %v", pds.ErrNotFound, to.String(), err)
}
return auth, nil
}
var vaultKind = schema.GroupKind{Group: v1alpha1.GroupName, Kind: "Vault"}
func sessions(b *bus.Bus) atproto.SessionsFunc {
return func(ctx context.Context, workspace string, id *v1alpha1.MarketIdentity) (vault.AtprotoSessions, error) {
ref := id.Spec.SessionRef
if ref == nil || ref.Vault == nil {
return nil, fmt.Errorf("marketidentity: the MarketIdentity %s/%s names no session vault", workspace, id.Name)
}
to := *ref.Vault
to.Group = cmp.Or(strings.TrimSpace(to.Group), vaultKind.Group)
to.Kind = cmp.Or(strings.TrimSpace(to.Kind), vaultKind.Kind)
to.Workspace = to.InWorkspace(workspace)
scope := strings.Trim(strings.TrimSpace(ref.Mount), "/") + "/" + strings.Trim(strings.TrimSpace(ref.Path), "/")
return bus.Resolve[vault.AtprotoSessions](ctx, b, Self(workspace, id.Name), to,
bus.Capability{Name: vault.CapabilityAtprotoSession, Scope: []string{scope}})
}
}
