solidb 1.0.1

A lightweight, high-performance structured database server written in Rust.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149

use super::system::AppState;
use crate::error::DbError;
use crate::server::authorization::{AuthorizationService, PermissionAction};
use crate::sync::{LogEntry, Operation};
use axum::{
    extract::{Extension, Path, State},
    http::StatusCode,
    response::Json,
};
use serde::{Deserialize, Serialize};

#[derive(Debug, Deserialize)]
pub struct CreateDatabaseRequest {
    pub name: String,
}

#[derive(Debug, Serialize)]
pub struct CreateDatabaseResponse {
    pub name: String,
    pub status: String,
}

#[derive(Debug, Serialize)]
pub struct ListDatabasesResponse {
    pub databases: Vec<String>,
}

pub async fn create_database(
    State(state): State<AppState>,
    Extension(claims): Extension<crate::server::auth::Claims>,
    Json(req): Json<CreateDatabaseRequest>,
) -> Result<Json<CreateDatabaseResponse>, DbError> {
    if req.name.is_empty() {
        return Err(DbError::BadRequest(
            "Database name cannot be empty".to_string(),
        ));
    }
    AuthorizationService::check_permission(&claims, &state, PermissionAction::Admin, None).await?;
    state.storage.create_database(req.name.clone())?;

    // Record to replication log
    // Record to replication log
    if let Some(ref log) = state.replication_log {
        let entry = LogEntry {
            sequence: 0,
            node_id: "".to_string(),
            database: req.name.clone(),
            collection: "".to_string(),
            operation: Operation::CreateDatabase,
            key: "".to_string(),
            data: None,
            timestamp: chrono::Utc::now().timestamp_millis() as u64,
            origin_sequence: None,
        };
        let _ = log.append(entry);
    }

    // Auto-create system collections for the new database.
    // _slow_queries is pre-created to avoid a race where concurrent slow-query
    // log tasks attempt to create it simultaneously on first use.
    if let Ok(db) = state.storage.get_database(&req.name) {
        for system_coll in ["_scripts", "_slow_queries"] {
            if db.create_collection(system_coll.to_string(), None).is_ok() {
                if let Some(ref log) = state.replication_log {
                    let metadata = serde_json::json!({
                        "type": "document",
                        "shardConfig": None::<serde_json::Value>
                    });

                    let entry = LogEntry {
                        sequence: 0,
                        node_id: "".to_string(),
                        database: req.name.clone(),
                        collection: system_coll.to_string(),
                        operation: Operation::CreateCollection,
                        key: "".to_string(),
                        data: serde_json::to_vec(&metadata).ok(),
                        timestamp: chrono::Utc::now().timestamp_millis() as u64,
                        origin_sequence: None,
                    };
                    let _ = log.append(entry);
                }
            }
        }
    }

    Ok(Json(CreateDatabaseResponse {
        name: req.name,
        status: "created".to_string(),
    }))
}

pub async fn list_databases(
    State(state): State<AppState>,
    Extension(claims): Extension<crate::server::auth::Claims>,
) -> Json<ListDatabasesResponse> {
    // Only list databases the caller can at least read, so a low-privilege
    // or db-scoped principal can't enumerate every database on the server.
    let permissions = AuthorizationService::get_effective_permissions(&claims, &state)
        .await
        .unwrap_or_default();
    let scoped = claims.scoped_databases.as_deref();
    let databases = state
        .storage
        .list_databases()
        .into_iter()
        .filter(|db| {
            AuthorizationService::check_permission_raw(
                &permissions,
                PermissionAction::Read,
                Some(db),
                scoped,
            )
            .is_ok()
        })
        .collect();
    Json(ListDatabasesResponse { databases })
}

pub async fn delete_database(
    State(state): State<AppState>,
    Extension(claims): Extension<crate::server::auth::Claims>,
    Path(name): Path<String>,
) -> Result<StatusCode, DbError> {
    // Pass the target database so db-scoped admin keys can only delete
    // databases inside their scope.
    AuthorizationService::check_permission(&claims, &state, PermissionAction::Admin, Some(&name))
        .await?;
    state.storage.delete_database(&name)?;

    // Record to replication log
    // Record to replication log
    if let Some(ref log) = state.replication_log {
        let entry = LogEntry {
            sequence: 0,
            node_id: "".to_string(),
            database: name.clone(),
            collection: "".to_string(),
            operation: Operation::DeleteDatabase,
            key: "".to_string(),
            data: None,
            timestamp: chrono::Utc::now().timestamp_millis() as u64,
            origin_sequence: None,
        };
        let _ = log.append(entry);
    }

    Ok(StatusCode::NO_CONTENT)
}