little-durable-objects 0.1.14

mod actor;

use serde::{Deserialize, Serialize};
use std::fmt;

use anyhow::{Result, ensure};

pub(crate) use self::actor::{ActorExecutionAdmission, ActorExecutionLocks};

#[derive(Clone, Debug, PartialEq, Eq, Hash, Serialize, Deserialize)]
pub struct ActorStorageKey(String);

impl ActorStorageKey {
    pub fn new<S>(id: S) -> Self
    where
        S: Into<String>,
    {
        Self(id.into())
    }

    pub fn as_str(&self) -> &str {
        &self.0
    }

    pub fn validate(&self) -> Result<()> {
        ensure!(!self.0.is_empty(), "actor storage key must not be empty");
        ensure!(
            self.0.len() <= 255,
            "actor storage key must be at most 255 bytes"
        );
        ensure!(
            self.0 != "." && self.0 != "..",
            "actor storage key must not be a relative path component"
        );
        ensure!(
            !self
                .0
                .chars()
                .any(|character| character == '/' || character == '\\' || character.is_control()),
            "actor storage key must not contain path separators or control characters"
        );

        Ok(())
    }
}

impl fmt::Display for ActorStorageKey {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        f.write_str(&self.0)
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn accepts_a_single_safe_storage_component() {
        ActorStorageKey::new("tenant_1.session-123")
            .validate()
            .expect("valid actor storage key");
    }

    #[test]
    fn rejects_ids_that_can_escape_or_reshape_storage_paths() {
        for id in [
            "",
            ".",
            "..",
            "../other",
            "nested/object",
            "windows\\path",
            "bad\0id",
        ] {
            ActorStorageKey::new(id)
                .validate()
                .expect_err("unsafe actor storage key");
        }
    }
}