use std::collections::HashMap;
use reifydb_catalog::{drop_expired_tokens, drop_token, drop_tokens_by_identity, find_token_by_value};
use reifydb_core::interface::{auth::AuthStep, catalog::token::Token};
use reifydb_transaction::transaction::Transaction;
use reifydb_value::value::{datetime::DateTime, identity::IdentityId};
use super::AuthService;
impl AuthService {
pub fn validate_token(&self, token: &str) -> Option<Token> {
let mut txn = self.engine.begin_query().ok()?;
if let Ok(Some(def)) = find_token_by_value(&mut Transaction::Query(&mut txn), token) {
if let Some(expires_at) = def.expires_at
&& expires_at < self.now().ok()?
{
return None;
}
return Some(def);
}
self.validate_catalog_token(token)
}
fn validate_catalog_token(&self, token: &str) -> Option<Token> {
let provider = self.auth_registry.get("token")?;
let mut txn = self.engine.begin_query().ok()?;
let catalog = self.engine.catalog();
let auths = catalog.list_authentications_by_method(&mut Transaction::Query(&mut txn), "token").ok()?;
let creds = HashMap::from([("token".to_string(), token.to_string())]);
for auth in auths {
if let Ok(AuthStep::Authenticated) = provider.authenticate(&auth.properties, &creds)
&& let Ok(Some(ident)) =
catalog.find_identity(&mut Transaction::Query(&mut txn), auth.identity)
&& ident.enabled
{
return Some(Token {
id: 0,
token: token.to_string(),
identity: ident.id,
expires_at: None,
created_at: DateTime::default(),
});
}
}
None
}
pub fn revoke_token(&self, token: &str) -> bool {
let mut txn = match self.engine.begin_query() {
Ok(txn) => txn,
Err(_) => return false,
};
let def = match find_token_by_value(&mut Transaction::Query(&mut txn), token) {
Ok(Some(def)) => def,
_ => return false,
};
drop(txn);
let mut admin = match self.engine.begin_admin() {
Ok(a) => a,
Err(_) => return false,
};
if drop_token(&mut admin, def.id).is_err() {
return false;
}
admin.commit().is_ok()
}
pub fn revoke_all(&self, identity: IdentityId) {
if let Ok(mut admin) = self.engine.begin_admin()
&& drop_tokens_by_identity(&mut admin, identity).is_ok()
{
let _ = admin.commit();
}
}
pub fn cleanup_expired(&self) {
if let (Ok(mut admin), Ok(now)) = (self.engine.begin_admin(), self.now())
&& drop_expired_tokens(&mut admin, now).is_ok()
{
let _ = admin.commit();
}
self.challenges.cleanup_expired();
}
}