Todd Knight
33e7b4538e
* Possible api changes. * Worker API update. * Updating import alias name. * Moving session down a level as a member of the GetSessionResponse. * Marshal the auth flag into the GetSessionResponse proto instead of the session.
112 lines
3.7 KiB
Go
112 lines
3.7 KiB
Go
package workers
|
|
|
|
import (
|
|
"context"
|
|
"sync"
|
|
"time"
|
|
|
|
pb "github.com/hashicorp/boundary/internal/gen/controller/api/resources/sessions"
|
|
pbs "github.com/hashicorp/boundary/internal/gen/controller/servers/services"
|
|
"github.com/hashicorp/boundary/internal/kms"
|
|
"github.com/hashicorp/boundary/internal/servers/controller/common"
|
|
"github.com/hashicorp/boundary/internal/sessions"
|
|
"github.com/hashicorp/boundary/internal/types/resource"
|
|
"github.com/hashicorp/go-hclog"
|
|
"google.golang.org/grpc/codes"
|
|
"google.golang.org/grpc/status"
|
|
)
|
|
|
|
type workerServiceServer struct {
|
|
logger hclog.Logger
|
|
repoFn common.ServersRepoFactory
|
|
updateTimes *sync.Map
|
|
kms *kms.Kms
|
|
jobMap *sync.Map
|
|
jobCancelMap *sync.Map
|
|
}
|
|
|
|
func NewWorkerServiceServer(logger hclog.Logger, repoFn common.ServersRepoFactory, updateTimes *sync.Map, kms *kms.Kms, jobMap *sync.Map) *workerServiceServer {
|
|
return &workerServiceServer{
|
|
logger: logger,
|
|
repoFn: repoFn,
|
|
updateTimes: updateTimes,
|
|
kms: kms,
|
|
jobMap: jobMap,
|
|
jobCancelMap: new(sync.Map),
|
|
}
|
|
}
|
|
|
|
var _ pbs.SessionServiceServer = &workerServiceServer{}
|
|
var _ pbs.ServerCoordinationServiceServer = &workerServiceServer{}
|
|
|
|
func (ws *workerServiceServer) Status(ctx context.Context, req *pbs.StatusRequest) (*pbs.StatusResponse, error) {
|
|
ws.logger.Trace("got status request from worker", "name", req.Worker.Name, "address", req.Worker.Address, "jobs", req.GetJobs())
|
|
ws.updateTimes.Store(req.Worker.Name, time.Now())
|
|
repo, err := ws.repoFn()
|
|
if err != nil {
|
|
ws.logger.Error("error getting servers repo", "error", err)
|
|
return &pbs.StatusResponse{}, status.Errorf(codes.Internal, "Error aqcuiring repo to store worker status: %v", err)
|
|
}
|
|
req.Worker.Type = resource.Worker.String()
|
|
controllers, _, err := repo.UpsertServer(ctx, req.Worker)
|
|
if err != nil {
|
|
ws.logger.Error("error storing worker status", "error", err)
|
|
return &pbs.StatusResponse{}, status.Errorf(codes.Internal, "Error storing worker status: %v", err)
|
|
}
|
|
ret := &pbs.StatusResponse{
|
|
Controllers: controllers,
|
|
}
|
|
ws.jobCancelMap.Range(func(key, value interface{}) bool {
|
|
ret.JobsRequests = append(ret.JobsRequests, &pbs.JobChangeRequest{
|
|
Job: &pbs.Job{
|
|
JobId: key.(string),
|
|
Type: pbs.Job_JOBTYPE_SESSION,
|
|
},
|
|
RequestType: 0,
|
|
})
|
|
return true
|
|
})
|
|
for _, j := range ret.JobsRequests {
|
|
ws.jobCancelMap.Delete(j.GetJob().GetJobId())
|
|
}
|
|
return ret, nil
|
|
}
|
|
|
|
func (ws *workerServiceServer) GetSession(ctx context.Context, req *pbs.GetSessionRequest) (*pbs.GetSessionResponse, error) {
|
|
ws.logger.Trace("got validate session request from worker", "job_id", req.GetId())
|
|
|
|
// Look up the job info
|
|
storedSessionInfo, loaded := ws.jobMap.LoadAndDelete(req.GetId())
|
|
if !loaded {
|
|
return nil, status.Errorf(codes.PermissionDenied, "Unknown job ID: %v", req.GetId())
|
|
}
|
|
sessionInfo := storedSessionInfo.(*pb.Session)
|
|
|
|
wrapper, err := ws.kms.GetWrapper(ctx, sessionInfo.ScopeId, kms.KeyPurposeSessions)
|
|
if err != nil {
|
|
return nil, status.Errorf(codes.Internal, "Error getting sessions wrapper: %v", err)
|
|
}
|
|
|
|
// Derive the private key, which should match. Deriving on both ends allows
|
|
// us to not store it in the DB.
|
|
_, privKey, err := sessions.DeriveED25519Key(wrapper, sessionInfo.GetUserId(), req.GetId())
|
|
if err != nil {
|
|
return nil, status.Errorf(codes.Internal, "Error deriving session key: %v", err)
|
|
}
|
|
|
|
if sessionInfo.ExpirationTime.GetSeconds() > 0 {
|
|
timeDiff := time.Until(sessionInfo.GetExpirationTime().AsTime())
|
|
if timeDiff < 0 {
|
|
return nil, status.Errorf(codes.OutOfRange, "Session has already expired")
|
|
}
|
|
defer func() {
|
|
time.AfterFunc(timeDiff, func() {
|
|
ws.jobCancelMap.Store(req.GetId(), true)
|
|
})
|
|
}()
|
|
}
|
|
|
|
sessionInfo.PrivateKey = privKey
|
|
return &pbs.GetSessionResponse{Session: sessionInfo}, nil
|
|
}
|