use std::fs::File;
use std::io::{self, Read};
use std::path::{Path, PathBuf};
use a7n_core::desk::{
DeskError, DeskState, MergeOutcome, member_signing_input, revocation_signing_input,
};
use a7n_platform::fs::write_user_only;
use a7n_proto::{
MachineId, limits,
v1::{Desk, DeskMember, DeskRevocation},
};
use prost::Message;
use rcgen::PublicKeyData;
use crate::identity::{self, Identity, IdentityError};
use crate::pin_store::{Entry, PinStore, PinStoreError};
#[cfg(test)]
mod tests;
#[derive(Debug, thiserror::Error)]
pub(crate) enum DeskStoreError {
#[error("desk file error: {0}")]
Io(#[from] io::Error),
#[error("desk file is not valid protobuf: {0}")]
Decode(#[from] prost::DecodeError),
#[error(transparent)]
Desk(#[from] DeskError),
#[error(transparent)]
Identity(#[from] IdentityError),
#[error(transparent)]
Pins(#[from] PinStoreError),
#[error("local desk edit was rejected")]
Rejected,
}
#[derive(Debug)]
pub(crate) struct DeskStore {
path: PathBuf,
state: DeskState,
}
impl DeskStore {
pub(crate) fn load(
path: &Path,
own_id: MachineId,
pins: &mut PinStore,
) -> Result<Self, DeskStoreError> {
let file = match File::open(path) {
Ok(file) => file,
Err(error) if error.kind() == io::ErrorKind::NotFound => {
return Ok(Self {
path: path.to_path_buf(),
state: DeskState::new(own_id),
});
}
Err(error) => return Err(error.into()),
};
let mut bytes = Vec::new();
file.take((limits::CONTROL_FRAME_MAX + 1) as u64)
.read_to_end(&mut bytes)?;
if bytes.len() > limits::CONTROL_FRAME_MAX {
return Err(DeskError::Capacity.into());
}
let desk = Desk::decode(bytes.as_slice())?;
let state = DeskState::restore(own_id, &desk)?;
let store = Self {
path: path.to_path_buf(),
state,
};
let mut outcome = MergeOutcome {
admitted: store.state.members().cloned().collect(),
..MergeOutcome::default()
};
for record in &desk.revocations {
let id = MachineId::try_from(record.id.as_slice()).map_err(DeskError::from)?;
if !store.state.members().any(|member| member.id() == id) {
outcome.revoked.push(id);
}
}
let revoked_count = outcome
.revoked
.iter()
.filter(|id| **id != own_id && pins.contains_key(id))
.count();
let result = Self::apply(pins, &outcome, own_id);
if revoked_count > 0 {
crate::log::event!("kind=pin_revoked_on_load count={revoked_count}");
}
result?;
Ok(store)
}
pub(crate) fn to_desk(&self) -> Desk {
self.state.to_desk()
}
pub(crate) fn merge(
&mut self,
identity: &Identity,
pins: &mut PinStore,
incoming: &Desk,
) -> Result<MergeOutcome, DeskStoreError> {
let (staged, outcome) = self.prepare(identity, pins, incoming)?;
self.persist(staged)?;
Self::apply(pins, &outcome, identity.machine_id)?;
Ok(outcome)
}
fn prepare(
&self,
identity: &Identity,
pins: &PinStore,
incoming: &Desk,
) -> Result<(DeskState, MergeOutcome), DeskStoreError> {
let mut staged = self.state.clone();
let own_spki = identity.key.subject_public_key_info();
let outcome = staged.merge(
incoming,
&|id| id == identity.machine_id || pins.get(&id).is_some(),
|id, message, signature| {
let spki = if id == identity.machine_id {
Some(own_spki.as_slice())
} else {
pins.get(&id).and_then(|entry| entry.spki_der.as_deref())
};
spki.is_some_and(|spki| identity::verify(spki, message, signature))
},
);
if outcome.capacity_reached {
return Err(DeskError::Capacity.into());
}
Ok((staged, outcome))
}
fn persist(&mut self, staged: DeskState) -> Result<(), DeskStoreError> {
let bytes = staged.to_desk().encode_to_vec();
if bytes.len() > limits::CONTROL_FRAME_MAX {
return Err(DeskError::Capacity.into());
}
write_user_only(&self.path, &bytes)?;
self.state = staged;
Ok(())
}
pub(crate) fn apply(
pins: &mut PinStore,
outcome: &MergeOutcome,
own_id: MachineId,
) -> Result<(), PinStoreError> {
for id in outcome.revoked.iter().filter(|id| **id != own_id) {
pins.remove(id);
}
let mut staged = pins.clone();
for member in outcome
.admitted
.iter()
.filter(|member| member.id() != own_id)
{
store_member(&mut staged, member);
}
staged.save()?;
*pins = staged;
Ok(())
}
pub(crate) fn admit(
&mut self,
identity: &Identity,
pins: &mut PinStore,
entry: &Entry,
now: u64,
) -> Result<DeskMember, DeskStoreError> {
if entry.machine_id == identity.machine_id {
return Err(DeskStoreError::Rejected);
}
let input = member_signing_input(
entry.machine_id,
entry.pin,
&entry.name,
identity.machine_id,
now,
)?;
let member = DeskMember {
id: entry.machine_id.as_bytes().to_vec(),
pin: entry.pin.as_bytes().to_vec(),
name: entry.name.clone(),
introduced_by: identity.machine_id.as_bytes().to_vec(),
added_at: now,
signature: identity::sign(identity, &input)?,
};
let (staged, outcome) = self.prepare(
identity,
pins,
&Desk {
members: vec![member.clone()],
revocations: Vec::new(),
},
)?;
if !staged
.members()
.any(|active| DeskMember::from(active) == member)
{
return Err(DeskStoreError::Rejected);
}
self.persist(staged)?;
let mut staged_pins = pins.clone();
staged_pins.add(entry.clone());
Self::apply(&mut staged_pins, &outcome, identity.machine_id)?;
*pins = staged_pins;
Ok(member)
}
pub(crate) fn revoke(
&mut self,
identity: &Identity,
pins: &mut PinStore,
id: MachineId,
now: u64,
) -> Result<DeskRevocation, DeskStoreError> {
let input = revocation_signing_input(id, identity.machine_id, now);
let revocation = DeskRevocation {
id: id.as_bytes().to_vec(),
revoked_by: identity.machine_id.as_bytes().to_vec(),
revoked_at: now,
signature: identity::sign(identity, &input)?,
};
let (staged, outcome) = self.prepare(
identity,
pins,
&Desk {
members: Vec::new(),
revocations: vec![revocation.clone()],
},
)?;
if !staged
.to_desk()
.revocations
.iter()
.any(|stored| stored == &revocation)
{
return Err(DeskStoreError::Rejected);
}
self.persist(staged)?;
Self::apply(pins, &outcome, identity.machine_id)?;
Ok(revocation)
}
}
fn store_member(pins: &mut PinStore, member: &a7n_core::desk::Member) {
let previous = pins
.get(&member.id())
.filter(|entry| entry.pin == member.pin());
let spki_der = previous.and_then(|entry| entry.spki_der.clone());
let hw_addr = previous.and_then(|entry| entry.hw_addr);
let screen_mm = previous.and_then(|entry| entry.screen_mm);
pins.add(Entry {
machine_id: member.id(),
pin: member.pin(),
name: member.name().to_owned(),
spki_der,
hw_addr,
screen_mm,
});
}