1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
package componentcore
import (
"context"
"errors"
"strings"
"github.com/johnandersen777/socialweb-computer-kcp/internal/component"
"github.com/johnandersen777/socialweb-computer-kcp/internal/credentials"
"github.com/johnandersen777/socialweb-computer-kcp/internal/kcplibs/impl/kcpstore"
"github.com/johnandersen777/socialweb-computer-kcp/internal/marketidentity/atproto"
"github.com/johnandersen777/socialweb-computer-kcp/internal/vault/openbao"
commonv1 "github.com/johnandersen777/socialweb-computer-kcp/api/common/v1alpha1"
)
type identityVaultStore struct {
resolver *credentials.Resolver
}
func newIdentityVaultStore(store *kcpstore.Store, workspace, client, server string) (*identityVaultStore, error) {
if strings.TrimSpace(client) == "" || strings.TrimSpace(server) == "" {
return nil, errors.New("componentcore: the identity vault needs a credential client and server")
}
if store == nil {
return nil, errors.New("componentcore: the identity vault needs the kcp store")
}
resolver, err := credentials.NewKCPResolver(store, workspace, client, server)
if err != nil {
return nil, err
}
return &identityVaultStore{resolver: resolver}, nil
}
func (s *identityVaultStore) ref(ref commonv1.SecretRef) component.CredentialRef {
return credentialRef(ref)
}
func (s *identityVaultStore) Get(ctx context.Context, ref commonv1.SecretRef) (map[string]any, error) {
credential, err := s.resolver.Resolve(ctx, s.ref(ref))
if err != nil {
if errors.Is(err, openbao.ErrNotFound) {
return nil, atproto.ErrSecretNotFound
}
return nil, err
}
return credential.Data, nil
}
func (s *identityVaultStore) Put(ctx context.Context, ref commonv1.SecretRef, data map[string]any) error {
return s.resolver.WriteCredential(ctx, s.ref(ref), data)
}
func (s *identityVaultStore) Delete(ctx context.Context, ref commonv1.SecretRef) error {
return s.resolver.DeleteCredential(ctx, s.ref(ref))
}
