1fdf08b149
Adds the option of a write-through cache, backed by boltdb Co-authored-by: Theron Voran <tvoran@users.noreply.github.com> Co-authored-by: Jason O'Donnell <2160810+jasonodonnell@users.noreply.github.com> Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
151 lines
3.8 KiB
Go
151 lines
3.8 KiB
Go
package cachememdb
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
// Index holds the response to be cached along with multiple other values that
|
|
// serve as pointers to refer back to this index.
|
|
type Index struct {
|
|
// ID is a value that uniquely represents the request held by this
|
|
// index. This is computed by serializing and hashing the response object.
|
|
// Required: true, Unique: true
|
|
ID string
|
|
|
|
// Token is the token that fetched the response held by this index
|
|
// Required: true, Unique: true
|
|
Token string
|
|
|
|
// TokenParent is the parent token of the token held by this index
|
|
// Required: false, Unique: false
|
|
TokenParent string
|
|
|
|
// TokenAccessor is the accessor of the token being cached in this index
|
|
// Required: true, Unique: true
|
|
TokenAccessor string
|
|
|
|
// Namespace is the namespace that was provided in the request path as the
|
|
// Vault namespace to query
|
|
Namespace string
|
|
|
|
// RequestPath is the path of the request that resulted in the response
|
|
// held by this index.
|
|
// Required: true, Unique: false
|
|
RequestPath string
|
|
|
|
// Lease is the identifier of the lease in Vault, that belongs to the
|
|
// response held by this index.
|
|
// Required: false, Unique: true
|
|
Lease string
|
|
|
|
// LeaseToken is the identifier of the token that created the lease held by
|
|
// this index.
|
|
// Required: false, Unique: false
|
|
LeaseToken string
|
|
|
|
// Response is the serialized response object that the agent is caching.
|
|
Response []byte
|
|
|
|
// RenewCtxInfo holds the context and the corresponding cancel func for the
|
|
// goroutine that manages the renewal of the secret belonging to the
|
|
// response in this index.
|
|
RenewCtxInfo *ContextInfo
|
|
|
|
// RequestMethod is the HTTP method of the request
|
|
RequestMethod string
|
|
|
|
// RequestToken is the token used in the request
|
|
RequestToken string
|
|
|
|
// RequestHeader is the header used in the request
|
|
RequestHeader http.Header
|
|
|
|
// LastRenewed is the timestamp of last renewal
|
|
LastRenewed time.Time
|
|
|
|
// Type is the index type (token, auth-lease, secret-lease)
|
|
Type string
|
|
}
|
|
|
|
type IndexName uint32
|
|
|
|
const (
|
|
// IndexNameID is the ID of the index constructed from the serialized request.
|
|
IndexNameID = "id"
|
|
|
|
// IndexNameLease is the lease of the index.
|
|
IndexNameLease = "lease"
|
|
|
|
// IndexNameRequestPath is the request path of the index.
|
|
IndexNameRequestPath = "request_path"
|
|
|
|
// IndexNameToken is the token of the index.
|
|
IndexNameToken = "token"
|
|
|
|
// IndexNameTokenAccessor is the token accessor of the index.
|
|
IndexNameTokenAccessor = "token_accessor"
|
|
|
|
// IndexNameTokenParent is the token parent of the index.
|
|
IndexNameTokenParent = "token_parent"
|
|
|
|
// IndexNameLeaseToken is the token that created the lease.
|
|
IndexNameLeaseToken = "lease_token"
|
|
)
|
|
|
|
func validIndexName(indexName string) bool {
|
|
switch indexName {
|
|
case "id":
|
|
case "lease":
|
|
case "request_path":
|
|
case "token":
|
|
case "token_accessor":
|
|
case "token_parent":
|
|
case "lease_token":
|
|
default:
|
|
return false
|
|
}
|
|
return true
|
|
}
|
|
|
|
type ContextInfo struct {
|
|
Ctx context.Context
|
|
CancelFunc context.CancelFunc
|
|
DoneCh chan struct{}
|
|
}
|
|
|
|
func NewContextInfo(ctx context.Context) *ContextInfo {
|
|
if ctx == nil {
|
|
return nil
|
|
}
|
|
|
|
ctxInfo := new(ContextInfo)
|
|
ctxInfo.Ctx, ctxInfo.CancelFunc = context.WithCancel(ctx)
|
|
ctxInfo.DoneCh = make(chan struct{})
|
|
return ctxInfo
|
|
}
|
|
|
|
// Serialize returns a json marshal'ed Index object, without the RenewCtxInfo
|
|
func (i Index) Serialize() ([]byte, error) {
|
|
i.RenewCtxInfo = nil
|
|
|
|
indexBytes, err := json.Marshal(i)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return indexBytes, nil
|
|
}
|
|
|
|
// Deserialize converts json bytes to an Index object
|
|
// Note: RenewCtxInfo will need to be reconstructed elsewhere.
|
|
func Deserialize(indexBytes []byte) (*Index, error) {
|
|
index := new(Index)
|
|
if err := json.Unmarshal(indexBytes, index); err != nil {
|
|
return nil, err
|
|
}
|
|
return index, nil
|
|
}
|