[acme db interface] wip

acme/api/linker.go

@@ -0,0 +1,164 @@
+package api
+
+import (
+	"context"
+	"fmt"
+	"net/url"
+
+	"github.com/smallstep/certificates/acme"
+)
+
+// NewLinker returns a new Directory type.
+func NewLinker(dns, prefix string) *Linker {
+	return &Linker{Prefix: prefix, DNS: dns}
+}
+
+// Linker generates ACME links.
+type Linker struct {
+	Prefix string
+	DNS    string
+}
+
+// GetLink is a helper for GetLinkExplicit
+func (l *Linker) GetLink(ctx context.Context, typ LinkType, abs bool, inputs ...string) string {
+	var provName string
+	if p, err := provisionerFromContext(ctx); err == nil && p != nil {
+		provName = p.GetName()
+	}
+	return l.GetLinkExplicit(typ, provName, abs, baseURLFromContext(ctx), inputs...)
+}
+
+// GetLinkExplicit returns an absolute or partial path to the given resource and a base
+// URL dynamically obtained from the request for which the link is being
+// calculated.
+func (l *Linker) GetLinkExplicit(typ LinkType, provisionerName string, abs bool, baseURL *url.URL, inputs ...string) string {
+	var link string
+	switch typ {
+	case NewNonceLinkType, NewAccountLinkType, NewOrderLinkType, NewAuthzLinkType, DirectoryLinkType, KeyChangeLinkType, RevokeCertLinkType:
+		link = fmt.Sprintf("/%s/%s", provisionerName, typ)
+	case AccountLinkType, OrderLinkType, AuthzLinkType, CertificateLinkType:
+		link = fmt.Sprintf("/%s/%s/%s", provisionerName, typ, inputs[0])
+	case ChallengeLinkType:
+		link = fmt.Sprintf("/%s/%s/%s/%s", provisionerName, typ, inputs[0], inputs[1])
+	case OrdersByAccountLinkType:
+		link = fmt.Sprintf("/%s/%s/%s/orders", provisionerName, AccountLinkType, inputs[0])
+	case FinalizeLinkType:
+		link = fmt.Sprintf("/%s/%s/%s/finalize", provisionerName, OrderLinkType, inputs[0])
+	}
+
+	if abs {
+		// Copy the baseURL value from the pointer. https://github.com/golang/go/issues/38351
+		u := url.URL{}
+		if baseURL != nil {
+			u = *baseURL
+		}
+
+		// If no Scheme is set, then default to https.
+		if u.Scheme == "" {
+			u.Scheme = "https"
+		}
+
+		// If no Host is set, then use the default (first DNS attr in the ca.json).
+		if u.Host == "" {
+			u.Host = l.DNS
+		}
+
+		u.Path = l.Prefix + link
+		return u.String()
+	}
+	return link
+}
+
+// LinkType captures the link type.
+type LinkType int
+
+const (
+	// NewNonceLinkType new-nonce
+	NewNonceLinkType LinkType = iota
+	// NewAccountLinkType new-account
+	NewAccountLinkType
+	// AccountLinkType account
+	AccountLinkType
+	// OrderLinkType order
+	OrderLinkType
+	// NewOrderLinkType new-order
+	NewOrderLinkType
+	// OrdersByAccountLinkType list of orders owned by account
+	OrdersByAccountLinkType
+	// FinalizeLinkType finalize order
+	FinalizeLinkType
+	// NewAuthzLinkType authz
+	NewAuthzLinkType
+	// AuthzLinkType new-authz
+	AuthzLinkType
+	// ChallengeLinkType challenge
+	ChallengeLinkType
+	// CertificateLinkType certificate
+	CertificateLinkType
+	// DirectoryLinkType directory
+	DirectoryLinkType
+	// RevokeCertLinkType revoke certificate
+	RevokeCertLinkType
+	// KeyChangeLinkType key rollover
+	KeyChangeLinkType
+)
+
+func (l LinkType) String() string {
+	switch l {
+	case NewNonceLinkType:
+		return "new-nonce"
+	case NewAccountLinkType:
+		return "new-account"
+	case AccountLinkType:
+		return "account"
+	case NewOrderLinkType:
+		return "new-order"
+	case OrderLinkType:
+		return "order"
+	case NewAuthzLinkType:
+		return "new-authz"
+	case AuthzLinkType:
+		return "authz"
+	case ChallengeLinkType:
+		return "challenge"
+	case CertificateLinkType:
+		return "certificate"
+	case DirectoryLinkType:
+		return "directory"
+	case RevokeCertLinkType:
+		return "revoke-cert"
+	case KeyChangeLinkType:
+		return "key-change"
+	default:
+		return fmt.Sprintf("unexpected LinkType '%d'", int(l))
+	}
+}
+
+// LinkOrder sets the ACME links required by an ACME order.
+func (l *Linker) LinkOrder(ctx context.Context, o *acme.Order) {
+	o.azURLs = make([]string, len(o.AuthorizationIDs))
+	for i, azID := range o.AutohrizationIDs {
+		o.azURLs[i] = l.GetLink(ctx, AuthzLinkType, true, azID)
+	}
+	o.FinalizeURL = l.GetLink(ctx, FinalizeLinkType, true, o.ID)
+	if o.CertificateID != "" {
+		o.CertificateURL = l.GetLink(ctx, CertificateLinkType, true, o.CertificateID)
+	}
+}
+
+// LinkAccount sets the ACME links required by an ACME account.
+func (l *Linker) LinkAccount(ctx context.Context, acc *acme.Account) {
+	a.Orders = l.GetLink(ctx, OrdersByAccountLinkType, true, acc.ID)
+}
+
+// LinkChallenge sets the ACME links required by an ACME account.
+func (l *Linker) LinkChallenge(ctx context.Context, ch *acme.Challenge) {
+	a.URL = l.GetLink(ctx, ChallengeLinkType, true, ch.AuthzID, ch.ID)
+}
+
+// LinkAuthorization sets the ACME links required by an ACME account.
+func (l *Linker) LinkAuthorization(ctx context.Context, az *acme.Authorization) {
+	for _, ch := range az.Challenges {
+		l.LinkChallenge(ctx, ch)
+	}
+}