open-vault/vault/token_store_util_common.go

package vault

import (
	"context"
	"encoding/json"
	"fmt"

	"github.com/hashicorp/vault/sdk/logical"
)

const sscGenCounterPath string = "core/sscGenCounter/"

type SSCTokenGenerationCounter struct {
	Counter int
}

func (ts *TokenStore) GetSSCTokensGenerationCounter() int {
	return ts.sscTokensGenerationCounter.Counter
}

func (ts *TokenStore) loadSSCTokensGenerationCounter(ctx context.Context) error {
	sscTokensGenerationCounterStorageVal, err := ts.core.barrier.Get(ctx, sscGenCounterPath)
	if err != nil {
		return fmt.Errorf("unable to retrieve SSCTokenGenerationCounter from storage: err %w", err)
	}
	if sscTokensGenerationCounterStorageVal == nil {
		ts.logger.Trace("no token generation counter found in storage")
		ts.sscTokensGenerationCounter = SSCTokenGenerationCounter{Counter: 0}
		return nil
	}
	var sscTokensGenerationCounter SSCTokenGenerationCounter
	err = json.Unmarshal(sscTokensGenerationCounterStorageVal.Value, &sscTokensGenerationCounter)
	if err != nil {
		return fmt.Errorf("malformed token generation counter found in storage: err %w", err)
	}
	ts.sscTokensGenerationCounter = sscTokensGenerationCounter
	return nil
}

func (ts *TokenStore) UpdateSSCTokensGenerationCounter(ctx context.Context) error {
	ts.sscTokensGenerationCounter.Counter += 1
	if ts.sscTokensGenerationCounter.Counter <= 0 {
		// Don't store the 0 value
		ts.logger.Warn("attempt to store non-positive token generation counter was ignored",
			"sscTokensGenerationCounter", ts.sscTokensGenerationCounter.Counter)
	}
	marshalledCtr, err := json.Marshal(ts.sscTokensGenerationCounter)
	if err != nil {
		return err
	}
	err = ts.core.barrier.Put(ctx, &logical.StorageEntry{
		Key:   sscGenCounterPath,
		Value: marshalledCtr,
	})
	if err != nil {
		return err
	}
	return nil
}