sos_server/

backend.rs

use super::{Error, Result};
use sos_backend::BackendTarget;
use sos_core::{device::DevicePublicKey, AccountId, Paths};
use sos_database::{async_sqlite::Client, entity::AccountEntity};
use sos_server_storage::{ServerAccountStorage, ServerStorage};
use sos_signer::ed25519::{self, Verifier, VerifyingKey};
use sos_sync::{CreateSet, ForceMerge, MergeOutcome, SyncStorage, UpdateSet};
use sos_vfs as vfs;
use std::{collections::HashMap, sync::Arc};
use tokio::sync::RwLock;

/// Individual account.
pub type ServerAccount = Arc<RwLock<ServerStorage>>;

/// Collection of backend accounts.
pub type Accounts = Arc<RwLock<HashMap<AccountId, ServerAccount>>>;

fn into_device_verifying_key(
    value: &DevicePublicKey,
) -> Result<VerifyingKey> {
    let bytes: [u8; 32] = value.as_ref().try_into()?;
    Ok(VerifyingKey::from_bytes(&bytes)?)
}

/// Backend for a server.
pub struct Backend {
    paths: Paths,
    accounts: Accounts,
    target: BackendTarget,
}

impl Backend {
    /// Create a new server backend.
    pub fn new(paths: Paths, target: BackendTarget) -> Self {
        Self {
            paths,
            accounts: Arc::new(RwLock::new(Default::default())),
            target,
        }
    }

    /// Storage paths.
    pub fn paths(&self) -> &Paths {
        &self.paths
    }

    /// Get the accounts.
    pub fn accounts(&self) -> Accounts {
        Arc::clone(&self.accounts)
    }

    /// Read accounts and event logs into memory.
    pub(crate) async fn load_accounts(&mut self) -> Result<()> {
        if !vfs::metadata(self.paths.documents_dir()).await?.is_dir() {
            return Err(Error::NotDirectory(
                self.paths.documents_dir().to_owned(),
            ));
        }

        let target = self.target.clone();
        match target {
            BackendTarget::FileSystem(_) => self.load_fs_accounts().await,
            BackendTarget::Database(client) => {
                self.load_db_accounts(client).await
            }
        }
    }

    pub(crate) async fn load_fs_accounts(&mut self) -> Result<()> {
        Paths::scaffold(Some(self.paths.documents_dir().to_owned())).await?;

        tracing::debug!(
            directory = %self.paths.documents_dir().display(),
            "server_backend::load_fs_accounts");

        if !vfs::try_exists(self.paths.local_dir()).await? {
            vfs::create_dir(self.paths.local_dir()).await?;
        }

        let mut dir = vfs::read_dir(self.paths.local_dir()).await?;
        while let Some(entry) = dir.next_entry().await? {
            let path = entry.path();
            if vfs::metadata(&path).await?.is_dir() {
                if let Some(name) = path.file_stem() {
                    if let Ok(account_id) =
                        name.to_string_lossy().parse::<AccountId>()
                    {
                        tracing::debug!(
                            account_id = %account_id,
                            "server_backend::load_fs_accounts",
                        );

                        let account = ServerStorage::new(
                            &self.paths,
                            &account_id,
                            self.target.clone(),
                        )
                        .await?;

                        let mut accounts = self.accounts.write().await;
                        accounts.insert(
                            account_id,
                            Arc::new(RwLock::new(account)),
                        );
                    }
                }
            }
        }

        Ok(())
    }

    pub(crate) async fn load_db_accounts(
        &mut self,
        client: Client,
    ) -> Result<()> {
        tracing::debug!(
          directory = %self.paths.documents_dir().display(),
          "server_backend::load_db_accounts");

        let accounts = AccountEntity::list_all_accounts(&client).await?;

        for account in accounts {
            let account_id = *account.identity.account_id();
            let account = ServerStorage::new(
                &self.paths,
                &account_id,
                self.target.clone(),
            )
            .await?;

            let mut accounts = self.accounts.write().await;
            accounts.insert(account_id, Arc::new(RwLock::new(account)));
        }

        Ok(())
    }

    /// Create an account.
    pub async fn create_account(
        &mut self,
        account_id: &AccountId,
        account_data: CreateSet,
    ) -> Result<()> {
        {
            let accounts = self.accounts.read().await;
            let account = accounts.get(account_id);
            if account.is_some() {
                return Err(Error::AccountExists(*account_id));
            }
        }

        tracing::debug!(
            account_id = %account_id,
            "server_backend::create_account",
        );

        let paths = self.paths.with_account_id(account_id);

        let account = ServerStorage::create_account(
            &paths,
            account_id,
            self.target.clone(),
            &account_data,
        )
        .await?;

        let mut accounts = self.accounts.write().await;
        accounts
            .entry(*account_id)
            .or_insert(Arc::new(RwLock::new(account)));

        Ok(())
    }

    /// Delete an account.
    pub async fn delete_account(
        &mut self,
        account_id: &AccountId,
    ) -> Result<()> {
        tracing::debug!(
            account_id = %account_id,
            "server_backend::delete_account");

        let mut accounts = self.accounts.write().await;
        // Remove from storage
        {
            let account = accounts
                .get_mut(account_id)
                .ok_or(Error::NoAccount(*account_id))?;

            let mut account = account.write().await;
            account.delete_account().await?;
        }

        // Clean in-memory reference
        accounts.remove(account_id);

        Ok(())
    }

    /// Update an account.
    pub async fn update_account(
        &mut self,
        account_id: &AccountId,
        account_data: UpdateSet,
    ) -> Result<MergeOutcome> {
        tracing::debug!(
            account_id = %account_id, 
            "server_backend::update_account");

        let mut outcome = MergeOutcome::default();

        let mut accounts = self.accounts.write().await;
        let account = accounts
            .get_mut(account_id)
            .ok_or(Error::NoAccount(*account_id))?;

        let mut account = account.write().await;
        account
            .force_merge_update(account_data, &mut outcome)
            .await?;
        Ok(outcome)
    }

    /// Fetch an existing account.
    pub async fn fetch_account(
        &self,
        account_id: &AccountId,
    ) -> Result<CreateSet> {
        tracing::debug!(
            account_id = %account_id,
            "server_backend::fetch_account",
        );

        let accounts = self.accounts.read().await;
        let account = accounts
            .get(account_id)
            .ok_or(Error::NoAccount(*account_id))?;

        let reader = account.read().await;
        let change_set = reader.change_set().await?;

        Ok(change_set)
    }

    /// Verify a device is allowed to access an account.
    pub(crate) async fn verify_device(
        &self,
        account_id: &AccountId,
        device_signature: &ed25519::Signature,
        message_body: &[u8],
    ) -> Result<()> {
        let accounts = self.accounts.read().await;
        if let Some(account) = accounts.get(account_id) {
            let reader = account.read().await;
            let account_devices = reader.list_device_keys();
            for device_key in account_devices {
                let verifying_key = into_device_verifying_key(device_key)?;
                if verifying_key
                    .verify(message_body, device_signature)
                    .is_ok()
                {
                    return Ok(());
                }
            }
            Err(Error::Forbidden)
        } else {
            Ok(())
        }
    }

    /// Determine if an account exists.
    pub async fn account_exists(
        &self,
        account_id: &AccountId,
    ) -> Result<bool> {
        let accounts = self.accounts.read().await;
        Ok(accounts.get(account_id).is_some())
    }
}