forked from TrueCloudLab/frostfs-node
aarifullin
b60a51b862
* `FormFrostfsIDRequestProperties` gets user claim tags and group id and sets them as ape request properties. * Make tree, container and object service use the method. * Fix unit-tests. Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
36 lines
1.2 KiB
Go
36 lines
1.2 KiB
Go
package request
|
|
|
|
import (
|
|
"fmt"
|
|
"strconv"
|
|
"strings"
|
|
|
|
frostfsidcore "git.frostfs.info/TrueCloudLab/frostfs-node/pkg/core/frostfsid"
|
|
apechain "git.frostfs.info/TrueCloudLab/policy-engine/pkg/chain"
|
|
commonschema "git.frostfs.info/TrueCloudLab/policy-engine/schema/common"
|
|
"github.com/nspcc-dev/neo-go/pkg/crypto/keys"
|
|
)
|
|
|
|
// FormFrostfsIDRequestProperties forms frostfsid specific request properties like user-claim tags and group ID.
|
|
func FormFrostfsIDRequestProperties(frostFSIDClient frostfsidcore.SubjectProvider, pk *keys.PublicKey) (map[string]string, error) {
|
|
reqProps := make(map[string]string)
|
|
subj, err := frostFSIDClient.GetSubjectExtended(pk.GetScriptHash())
|
|
if err != nil {
|
|
if !strings.Contains(err.Error(), frostfsidcore.SubjectNotFoundErrorMessage) {
|
|
return nil, fmt.Errorf("get subject error: %w", err)
|
|
}
|
|
return reqProps, nil
|
|
}
|
|
for k, v := range subj.KV {
|
|
propertyKey := fmt.Sprintf(commonschema.PropertyKeyFormatFrostFSIDUserClaim, k)
|
|
reqProps[propertyKey] = v
|
|
}
|
|
|
|
groups := make([]string, len(subj.Groups))
|
|
for i, group := range subj.Groups {
|
|
groups[i] = strconv.FormatInt(group.ID, 10)
|
|
}
|
|
reqProps[commonschema.PropertyKeyFrostFSIDGroupID] = apechain.FormCondSliceContainsValue(groups)
|
|
|
|
return reqProps, nil
|
|
}
|