use std::sync::{
Arc,
atomic::{AtomicBool, Ordering},
};
use buffa::EnumValue;
use connectrpc::{ConnectError, RequestContext, Response, Router, ServiceRequest, ServiceResult};
use polyc_proto::proto::polychrome::state::v1 as pb;
use polyc_state::{
ceremonies::{
CeremonyDirectory, CeremonyFact, CeremonyId, CeremonyPreflight, CeremonyRead,
CeremonyRecord, CeremonyWrite,
},
context::CallContext,
error::StateError,
id::{CommandId, NamespaceId},
versioned::{VersionedRead, VersionedTransact},
};
use crate::{
admission::{
AudienceBinding, PeerIdentity, check_audience_binding, check_call_context_version,
check_not_draining, check_transport_deadline, state_audience,
},
error::to_connect_error,
trace::adopt_caller_trace,
wire::{DeclaredCall, Kernel, declared_call},
};
use super::wire::{command_from_wire, expiration_to_wire, record_to_wire};
pub trait CeremonyAuthority: CeremonyRead + CeremonyWrite {
fn namespace(&self) -> &NamespaceId;
}
impl<V> CeremonyAuthority for CeremonyDirectory<V>
where
V: VersionedRead + VersionedTransact,
{
fn namespace(&self) -> &NamespaceId {
self.namespace()
}
}
pub struct CeremonySvc {
authority: Arc<dyn CeremonyAuthority>,
draining: Arc<AtomicBool>,
binding: Arc<AudienceBinding>,
}
impl CeremonySvc {
#[must_use]
pub const fn new(
authority: Arc<dyn CeremonyAuthority>,
draining: Arc<AtomicBool>,
binding: Arc<AudienceBinding>,
) -> Self {
Self {
authority,
draining,
binding,
}
}
#[must_use]
pub fn register_on(self, router: Router) -> Router {
use pb::StateCeremonyServiceExt as _;
Arc::new(self).register(router)
}
fn peer(ctx: &RequestContext) -> PeerIdentity {
PeerIdentity::from_verified_leaf(
ctx.peer_certs().and_then(<[_]>::first).map(|leaf| &**leaf),
)
}
fn admit(
&self,
ctx: &RequestContext,
context: impl Into<Option<pb::CallContext>>,
method: &'static str,
) -> Result<(CallContext, tracing::Span), ConnectError> {
check_not_draining(self.draining.load(Ordering::Relaxed))?;
let declared: DeclaredCall =
declared_call(context).map_err(|error| to_connect_error(&error))?;
let family = polyc_state::versioned::family();
check_call_context_version(declared.version).map_err(|error| to_connect_error(&error))?;
check_audience_binding(
&Self::peer(ctx),
&declared.audience,
&state_audience(),
&self.binding,
&family,
)
.map_err(|error| to_connect_error(&error))?;
check_transport_deadline(ctx.time_remaining(), &family)
.map_err(|error| to_connect_error(&error))?;
Ok((
declared.origin_relative_context(),
adopt_caller_trace(ctx.headers(), method),
))
}
fn namespace(&self, value: &str) -> Result<(), ConnectError> {
if value == self.authority.namespace().as_str() {
Ok(())
} else {
Err(to_connect_error(&StateError::Denied {
family: polyc_state::versioned::family(),
}))
}
}
}
#[allow(refining_impl_trait)]
impl pb::StateCeremonyService for CeremonySvc {
async fn transact(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::TransactCeremonyRequest>,
) -> ServiceResult<pb::TransactCeremonyReply> {
let message = request.to_owned_message();
let (context, span) = self.admit(&ctx, message.context, "TransactCeremony")?;
let _entered = span.enter();
let metadata = message
.metadata
.into_option()
.ok_or_else(|| malformed_connect("metadata", "ceremony command carries metadata"))?;
self.namespace(&metadata.namespace)?;
let operation = message.operation.into_option().ok_or_else(|| {
malformed_connect("operation", "ceremony command carries one operation")
})?;
let receipt = self
.authority
.transact(
command_from_wire(metadata, operation).map_err(|error| to_connect_error(&error))?,
&context,
)
.map_err(|error| to_connect_error(&error))?;
Response::ok(pb::TransactCeremonyReply {
receipt: buffa::MessageField::some(pb::Receipt::from(Kernel(&receipt))),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
async fn inspect(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::InspectCeremonyRequest>,
) -> ServiceResult<pb::InspectCeremonyReply> {
let message = request.to_owned_message();
let (context, span) = self.admit(&ctx, message.context, "InspectCeremony")?;
let _entered = span.enter();
self.namespace(&message.namespace)?;
let preflight = self
.authority
.inspect(
&CeremonyId::new(message.ceremony_id),
message.now_ms,
&context,
)
.map_err(|error| to_connect_error(&error))?;
let (class, record, snapshot_revision, entry_revision) = match preflight {
CeremonyPreflight::Unknown(fact) => (
pb::CeremonyPreflightClass::Unknown,
None,
fact.snapshot_revision().get(),
fact.entry_revision()
.map(polyc_state::revision::Revision::get),
),
CeremonyPreflight::Active(fact) => fact_parts(pb::CeremonyPreflightClass::Active, fact),
CeremonyPreflight::Claimed(fact) => {
fact_parts(pb::CeremonyPreflightClass::Claimed, fact)
}
CeremonyPreflight::Spent(fact) => fact_parts(pb::CeremonyPreflightClass::Spent, fact),
CeremonyPreflight::Expired(fact) => {
fact_parts(pb::CeremonyPreflightClass::Expired, fact)
}
};
Response::ok(pb::InspectCeremonyReply {
classification: EnumValue::Known(class),
record: record.into(),
snapshot_revision,
entry_revision,
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
async fn get_expiration_shard(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::GetCeremonyExpirationShardRequest>,
) -> ServiceResult<pb::GetCeremonyExpirationShardReply> {
let message = request.to_owned_message();
let (context, span) = self.admit(&ctx, message.context, "GetCeremonyExpirationShard")?;
let _entered = span.enter();
self.namespace(&message.namespace)?;
let shard = u16::try_from(message.shard)
.map_err(|_| malformed_connect("shard", "expiry shard fits u16"))?;
let fact = self
.authority
.expiration_shard(shard, &context)
.map_err(|error| to_connect_error(&error))?;
Response::ok(pb::GetCeremonyExpirationShardReply {
expiration: buffa::MessageField::some(expiration_to_wire(fact.value())),
snapshot_revision: fact.snapshot_revision().get(),
entry_revision: fact
.entry_revision()
.map(polyc_state::revision::Revision::get),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
async fn get_receipt(
&self,
ctx: RequestContext,
request: ServiceRequest<'_, pb::GetCeremonyReceiptRequest>,
) -> ServiceResult<pb::GetCeremonyReceiptReply> {
let message = request.to_owned_message();
let (_context, span) = self.admit(&ctx, message.context, "GetCeremonyReceipt")?;
let _entered = span.enter();
self.namespace(&message.namespace)?;
let receipt = self
.authority
.committed_receipt(
&NamespaceId::new(message.namespace),
&CommandId::new(message.command_id),
)
.map_err(|error| to_connect_error(&error))?;
Response::ok(pb::GetCeremonyReceiptReply {
receipt: receipt
.as_ref()
.map_or_else(buffa::MessageField::none, |value| {
buffa::MessageField::some(pb::Receipt::from(Kernel(value)))
}),
__buffa_unknown_fields: buffa::UnknownFields::default(),
})
}
}
fn fact_parts(
class: pb::CeremonyPreflightClass,
fact: CeremonyFact<CeremonyRecord>,
) -> (
pb::CeremonyPreflightClass,
Option<pb::StateCeremonyRecord>,
u64,
Option<u64>,
) {
let snapshot = fact.snapshot_revision().get();
let entry = fact
.entry_revision()
.map(polyc_state::revision::Revision::get);
let record = Some(record_to_wire(&fact.into_value()));
(class, record, snapshot, entry)
}
fn malformed_connect(field: &str, reason: &str) -> ConnectError {
to_connect_error(&StateError::Malformed {
field: field.into(),
reason: reason.into(),
})
}