Timothy Messier
2cc58ff901
This change removes the hard-coded credential purpose for the Credential Libraries. It also moves the logic of creating CredentialLibraries from CredentialSources out of the repository and into the targets.Service. This refactor will allow for additional credential purposes to be supported in both the service and the repository.
112 lines
3.2 KiB
Go
112 lines
3.2 KiB
Go
package target
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/hashicorp/boundary/internal/credential"
|
|
"github.com/hashicorp/boundary/internal/errors"
|
|
"github.com/hashicorp/boundary/internal/oplog"
|
|
"github.com/hashicorp/boundary/internal/target/store"
|
|
"google.golang.org/protobuf/proto"
|
|
)
|
|
|
|
var _ CredentialSource = (*TargetLibrary)(nil)
|
|
|
|
// A CredentialLibrary is a CredentialSource that represents the relationship
|
|
// between a target and a credential library.
|
|
type CredentialLibrary struct {
|
|
*store.CredentialLibrary
|
|
tableName string `gorm:"-"`
|
|
}
|
|
|
|
// NewCredentialLibrary creates a new in memory CredentialLibrary
|
|
// representing the relationship between targetId and credentialLibraryId.
|
|
func NewCredentialLibrary(targetId, credentialLibraryId string, purpose credential.Purpose) (*CredentialLibrary, error) {
|
|
const op = "target.NewCredentialLibrary"
|
|
if targetId == "" {
|
|
return nil, errors.NewDeprecated(errors.InvalidParameter, op, "no target id")
|
|
}
|
|
if credentialLibraryId == "" {
|
|
return nil, errors.NewDeprecated(errors.InvalidParameter, op, "no credential library id")
|
|
}
|
|
|
|
t := &CredentialLibrary{
|
|
CredentialLibrary: &store.CredentialLibrary{
|
|
TargetId: targetId,
|
|
CredentialLibraryId: credentialLibraryId,
|
|
CredentialPurpose: string(purpose),
|
|
},
|
|
}
|
|
return t, nil
|
|
}
|
|
|
|
func allocCredentialLibrary() *CredentialLibrary {
|
|
return &CredentialLibrary{
|
|
CredentialLibrary: &store.CredentialLibrary{},
|
|
}
|
|
}
|
|
|
|
func (t *CredentialLibrary) clone() *CredentialLibrary {
|
|
cp := proto.Clone(t.CredentialLibrary)
|
|
return &CredentialLibrary{
|
|
CredentialLibrary: cp.(*store.CredentialLibrary),
|
|
}
|
|
}
|
|
|
|
// TableName returns the table name.
|
|
func (t *CredentialLibrary) TableName() string {
|
|
if t.tableName != "" {
|
|
return t.tableName
|
|
}
|
|
return "target_credential_library"
|
|
}
|
|
|
|
// SetTableName sets the table name.
|
|
func (t *CredentialLibrary) SetTableName(n string) {
|
|
t.tableName = n
|
|
}
|
|
|
|
func (t *CredentialLibrary) oplog(op oplog.OpType) oplog.Metadata {
|
|
metadata := oplog.Metadata{
|
|
"resource-public-id": []string{fmt.Sprintf("%s:%s:%s", t.TargetId, t.CredentialLibraryId, t.CredentialPurpose)},
|
|
"resource-type": []string{"target-credential-library"},
|
|
"op-type": []string{op.String()},
|
|
}
|
|
return metadata
|
|
}
|
|
|
|
// A TargetLibrary represents the relationship between a target and a
|
|
// credential library and includes the id of the credential store that the
|
|
// library is a part of and the library's name and description.
|
|
//
|
|
// It implements the target.CredentialSource interface.
|
|
type TargetLibrary struct {
|
|
*store.CredentialLibrary
|
|
StoreId string
|
|
}
|
|
|
|
// TableName returns the tablename to override the default gorm table name
|
|
func (ts *TargetLibrary) TableName() string {
|
|
return "target_library"
|
|
}
|
|
|
|
// Id returns the ID of the library
|
|
func (ts *TargetLibrary) Id() string {
|
|
return ts.CredentialLibraryId
|
|
}
|
|
|
|
// CredentialStoreId returns the ID of the store containing the library
|
|
func (ts *TargetLibrary) CredentialStoreId() string {
|
|
return ts.StoreId
|
|
}
|
|
|
|
// CredentialPurpose returns the purpose of the credential
|
|
func (ts *TargetLibrary) CredentialPurpose() credential.Purpose {
|
|
return credential.Purpose(ts.GetCredentialPurpose())
|
|
}
|
|
|
|
// TargetId returns the target linked to this credential source
|
|
func (ts *TargetLibrary) TargetId() string {
|
|
return ts.GetTargetId()
|
|
}
|