forked from TrueCloudLab/frostfs-node
Airat Arifullin
0c2b6f3dac
* Refactor object and tree service - they should instantiate chain router cheking the bearer token. If there are no bearer token rules, then defaul chain router is used. * Fix unit-tests. Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
85 lines
2.3 KiB
Go
85 lines
2.3 KiB
Go
package main
|
|
|
|
import (
|
|
"time"
|
|
|
|
"git.frostfs.info/TrueCloudLab/frostfs-node/pkg/ape/chainbase"
|
|
"git.frostfs.info/TrueCloudLab/policy-engine/pkg/chain"
|
|
"git.frostfs.info/TrueCloudLab/policy-engine/pkg/engine"
|
|
"github.com/google/uuid"
|
|
"github.com/hashicorp/golang-lru/v2/expirable"
|
|
"github.com/nspcc-dev/neo-go/pkg/neorpc/result"
|
|
"github.com/nspcc-dev/neo-go/pkg/util"
|
|
)
|
|
|
|
type accessPolicyEngine struct {
|
|
localOverrideDatabase chainbase.LocalOverrideDatabase
|
|
|
|
morphChainStorage engine.MorphRuleChainStorageReader
|
|
}
|
|
|
|
var _ engine.MorphRuleChainStorageReader = (*morphAPEChainCache)(nil)
|
|
|
|
type morphAPEChainCacheKey struct {
|
|
name chain.Name
|
|
target engine.Target
|
|
}
|
|
|
|
type morphAPEChainCache struct {
|
|
source engine.MorphRuleChainStorageReader
|
|
cache *expirable.LRU[morphAPEChainCacheKey, []*chain.Chain]
|
|
}
|
|
|
|
func newMorphCache(source engine.MorphRuleChainStorageReader, size int, ttl time.Duration) engine.MorphRuleChainStorageReader {
|
|
return &morphAPEChainCache{
|
|
source: source,
|
|
cache: expirable.NewLRU(size, func(morphAPEChainCacheKey, []*chain.Chain) {}, ttl),
|
|
}
|
|
}
|
|
|
|
func (m *morphAPEChainCache) GetAdmin() (util.Uint160, error) {
|
|
return m.source.GetAdmin()
|
|
}
|
|
|
|
func (m *morphAPEChainCache) ListMorphRuleChains(name chain.Name, target engine.Target) ([]*chain.Chain, error) {
|
|
key := morphAPEChainCacheKey{name: name, target: target}
|
|
result, found := m.cache.Get(key)
|
|
if found {
|
|
return result, nil
|
|
}
|
|
|
|
result, err := m.source.ListMorphRuleChains(name, target)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
m.cache.Add(key, result)
|
|
return result, nil
|
|
}
|
|
|
|
func (m *morphAPEChainCache) ListTargetsIterator(targetType engine.TargetType) (uuid.UUID, result.Iterator, error) {
|
|
return m.source.ListTargetsIterator(targetType)
|
|
}
|
|
|
|
func newAccessPolicyEngine(
|
|
morphChainStorage engine.MorphRuleChainStorageReader,
|
|
localOverrideDatabase chainbase.LocalOverrideDatabase,
|
|
) *accessPolicyEngine {
|
|
return &accessPolicyEngine{
|
|
morphChainStorage: morphChainStorage,
|
|
|
|
localOverrideDatabase: localOverrideDatabase,
|
|
}
|
|
}
|
|
|
|
func (a *accessPolicyEngine) LocalStorage() engine.LocalOverrideStorage {
|
|
return a.localOverrideDatabase
|
|
}
|
|
|
|
func (a *accessPolicyEngine) MorphRuleChainStorage() engine.MorphRuleChainStorageReader {
|
|
return a.morphChainStorage
|
|
}
|
|
|
|
func (a *accessPolicyEngine) LocalOverrideDatabaseCore() chainbase.DatabaseCore {
|
|
return a.localOverrideDatabase
|
|
}
|