use std::{
future::Future,
sync::{
Arc,
atomic::{AtomicBool, Ordering},
},
};
use connectrpc::{ConnectError, RequestContext, Response, Router, ServiceRequest, ServiceResult};
use polyc_proto::proto::polychrome::state::v1 as pb;
use polyc_state::{
administration::{AdministrationDirectory, AdministrationRead, AdministrationWrite},
context::CallContext,
error::StateError,
id::{CommandId, NamespaceId},
versioned::{VersionedRead, VersionedTransact, authority::PersonaId},
};
use crate::{
admission::{
AudienceBinding, PeerIdentity, check_audience_binding, check_call_context_version,
check_not_draining, check_transport_deadline, slot_wait, state_audience,
},
blocking,
error::to_connect_error,
trace::adopt_caller_trace,
wire::{DeclaredCall, Kernel, declared_call},
};
use super::wire::{command_from_wire, roster_to_wire, settings_to_wire, status_to_wire};
pub trait AdministrationAuthority: AdministrationRead + AdministrationWrite {
fn namespace(&self) -> &NamespaceId;
}
impl<V> AdministrationAuthority for AdministrationDirectory<V>
where
V: VersionedRead + VersionedTransact,
{
fn namespace(&self) -> &NamespaceId {
self.namespace()
}
}
pub struct AdministrationSvc {
authority: Arc<dyn AdministrationAuthority>,
draining: Arc<AtomicBool>,
binding: Arc<AudienceBinding>,
}
impl AdministrationSvc {
#[must_use]
pub const fn new(
authority: Arc<dyn AdministrationAuthority>,
draining: Arc<AtomicBool>,
binding: Arc<AudienceBinding>,
) -> Self {
Self {
authority,
draining,
binding,
}
}
#[must_use]
pub fn register_on(self, router: Router) -> Router {
use pb::StateAdministrationServiceExt as _;
Arc::new(self).register(router)
}
fn peer(ctx: &RequestContext) -> PeerIdentity {
PeerIdentity::from_verified_leaf(
ctx.peer_certs().and_then(<[_]>::first).map(|leaf| &**leaf),
)
}
fn admit(
&self,
ctx: &RequestContext,
context: impl Into<Option<pb::CallContext>>,
method: &'static str,
) -> Result<(CallContext, tracing::Span, std::time::Duration), ConnectError> {
check_not_draining(self.draining.load(Ordering::Relaxed))?;
let declared: DeclaredCall =
declared_call(context).map_err(|error| to_connect_error(&error))?;
let family = polyc_state::versioned::family();
check_call_context_version(declared.version).map_err(|error| to_connect_error(&error))?;
check_audience_binding(
&Self::peer(ctx),
&declared.audience,
&state_audience(),
&self.binding,
&family,
)
.map_err(|error| to_connect_error(&error))?;
check_transport_deadline(ctx.time_remaining(), &family)
.map_err(|error| to_connect_error(&error))?;
Ok((
declared.origin_relative_context(),
adopt_caller_trace(ctx.headers(), method),
slot_wait(ctx.time_remaining(), &declared),
))
}
fn namespace(&self, value: &str) -> Result<(), ConnectError> {
if value == self.authority.namespace().as_str() {
Ok(())
} else {
Err(to_connect_error(&StateError::Denied {
family: polyc_state::versioned::family(),
}))
}
}
}
#[allow(refining_impl_trait)]
impl pb::StateAdministrationService for AdministrationSvc {
fn transact(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::TransactAdministrationRequest>,
) -> impl Future<Output = ServiceResult<pb::TransactAdministrationReply>> {
let message = request.to_owned_message();
async move {
let (context, span, wait) =
self.admit(&ctx, message.context, "TransactAdministration")?;
let metadata = message.metadata.into_option().ok_or_else(|| {
to_connect_error(&StateError::Malformed {
field: "metadata".into(),
reason: "administration command carries metadata".into(),
})
})?;
self.namespace(&metadata.namespace)?;
let operation = message.operation.into_option().ok_or_else(|| {
to_connect_error(&StateError::Malformed {
field: "operation".into(),
reason: "administration command carries one operation".into(),
})
})?;
let command =
command_from_wire(metadata, operation).map_err(|error| to_connect_error(&error))?;
let authority = Arc::clone(&self.authority);
let receipt =
blocking::mutation(span, polyc_state::versioned::family(), wait, move || {
authority.transact(command, &context)
})
.await?;
Response::ok(pb::TransactAdministrationReply {
receipt: buffa::MessageField::some(pb::Receipt::from(Kernel(&receipt))),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
}
fn get_status(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::GetAdministrationStatusRequest>,
) -> impl Future<Output = ServiceResult<pb::GetAdministrationStatusReply>> {
let message = request.to_owned_message();
async move {
let (context, span, wait) =
self.admit(&ctx, message.context, "GetAdministrationStatus")?;
self.namespace(&message.namespace)?;
let persona = PersonaId::new(message.persona);
let authority = Arc::clone(&self.authority);
let fact = blocking::read(span, polyc_state::versioned::family(), wait, move || {
authority.status(&persona, &context)
})
.await?;
Response::ok(pb::GetAdministrationStatusReply {
status: buffa::MessageField::some(status_to_wire(fact.value())),
snapshot_revision: fact.snapshot_revision().get(),
entry_revision: fact
.entry_revision()
.map(polyc_state::revision::Revision::get),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
}
fn get_roster(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::GetAdministrationRosterRequest>,
) -> impl Future<Output = ServiceResult<pb::GetAdministrationRosterReply>> {
let message = request.to_owned_message();
async move {
let (context, span, wait) =
self.admit(&ctx, message.context, "GetAdministrationRoster")?;
self.namespace(&message.namespace)?;
let authority = Arc::clone(&self.authority);
let fact = blocking::read(span, polyc_state::versioned::family(), wait, move || {
authority.roster(&context)
})
.await?;
Response::ok(pb::GetAdministrationRosterReply {
roster: buffa::MessageField::some(roster_to_wire(fact.value())),
snapshot_revision: fact.snapshot_revision().get(),
entry_revision: fact
.entry_revision()
.map(polyc_state::revision::Revision::get),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
}
fn get_settings(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::GetAdministrationSettingsRequest>,
) -> impl Future<Output = ServiceResult<pb::GetAdministrationSettingsReply>> {
let message = request.to_owned_message();
async move {
let (context, span, wait) =
self.admit(&ctx, message.context, "GetAdministrationSettings")?;
self.namespace(&message.namespace)?;
let authority = Arc::clone(&self.authority);
let fact = blocking::read(span, polyc_state::versioned::family(), wait, move || {
authority.settings(&context)
})
.await?;
Response::ok(pb::GetAdministrationSettingsReply {
settings: fact
.value()
.as_ref()
.map_or_else(buffa::MessageField::none, |value| {
buffa::MessageField::some(settings_to_wire(value))
}),
snapshot_revision: fact.snapshot_revision().get(),
entry_revision: fact
.entry_revision()
.map(polyc_state::revision::Revision::get),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
}
fn get_receipt(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::GetAdministrationReceiptRequest>,
) -> impl Future<Output = ServiceResult<pb::GetAdministrationReceiptReply>> {
let message = request.to_owned_message();
async move {
let (_context, span, wait) =
self.admit(&ctx, message.context, "GetAdministrationReceipt")?;
self.namespace(&message.namespace)?;
let namespace = NamespaceId::new(message.namespace);
let command_id = CommandId::new(message.command_id);
let authority = Arc::clone(&self.authority);
let receipt = blocking::read(span, polyc_state::versioned::family(), wait, move || {
authority.committed_receipt(&namespace, &command_id)
})
.await?;
Response::ok(pb::GetAdministrationReceiptReply {
receipt: receipt
.as_ref()
.map_or_else(buffa::MessageField::none, |value| {
buffa::MessageField::some(pb::Receipt::from(Kernel(value)))
}),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
}
}