canic-core 0.35.7

Canic — a canister orchestration and management toolkit for the Internet Computer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

use crate::{
    dto::auth::AttestationKeySet,
    ops::{
        auth::AuthOps,
        rpc::RpcOps,
        runtime::{env::EnvOps, timer::TimerId},
    },
    protocol,
    workflow::{prelude::*, runtime::timer::TimerWorkflow},
};
use std::{cell::RefCell, time::Duration};

thread_local! {
    static TIMER: RefCell<Option<TimerId>> = const { RefCell::new(None) };
}

///
/// RoleAttestationKeyRefreshWorkflow
///

pub struct RoleAttestationKeyRefreshWorkflow;

impl RoleAttestationKeyRefreshWorkflow {
    // Start one root attestation-key refresh for non-root canisters.
    pub fn start() {
        let _ =
            TimerWorkflow::set_guarded(&TIMER, Duration::ZERO, "attestation_keys:init", async {
                Self::refresh_once().await;
                let _ = TimerWorkflow::clear_guarded(&TIMER);
            });
    }

    // Refresh the locally cached root attestation key set once.
    async fn refresh_once() {
        if EnvOps::is_root() {
            return;
        }

        let root_pid = match EnvOps::root_pid() {
            Ok(pid) => pid,
            Err(err) => {
                log!(
                    Topic::Auth,
                    Warn,
                    "attestation key refresh skipped: root pid unavailable: {err}"
                );
                return;
            }
        };

        match RpcOps::call_rpc_result::<AttestationKeySet>(
            root_pid,
            protocol::CANIC_ATTESTATION_KEY_SET,
            (),
        )
        .await
        {
            Ok(key_set) => {
                let count = key_set.keys.len();
                AuthOps::replace_attestation_key_set(key_set);
                log!(
                    Topic::Auth,
                    Info,
                    "attestation key refresh ok: keys={count}"
                );
            }
            Err(err) => {
                log!(Topic::Auth, Warn, "attestation key refresh failed: {err}");
            }
        }
    }
}