Leonard Lyubich 96ddb868bc [#31 ] service: Change BearerTokenMsg.Info.ACLRules field type

It was originally planned to transport extended ACL table in binary form.
However, from time on, it was decided to abandon this approach in favor of
the declared message structure (acl.EACLTable). In this regard, this commit
changes the type and name of the binary BearerTokenMsg.Info.ACLRules field
to EACLTable.

Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>

2020-08-06 23:51:51 +03:00

7.7 KiB

Raw Blame History

Protocol Documentation

service/meta.proto
- Messages
  - RequestMetaHeader
  - RequestMetaHeader.XHeader
service/verify.proto
- Messages
Scalar Value Types

Top

service/meta.proto

Message RequestMetaHeader

RequestMetaHeader contains information about request meta headers.

Field	Type	Label	Description
TTL	uint32		Carries maximum number of nodes in the request route.
XHeaders	RequestMetaHeader.XHeader	repeated	Carries request X-Headers.

Message RequestMetaHeader.XHeader

Field	Type	Label	Description
Key	string		Carries key to the X-Header.
Value	string		Carries value of the X-Header.

Top

service/verify.proto

Message BearerTokenMsg

BearerTokenMsg carries information about request ACL rules with limited lifetime

Field	Type	Description
TokenInfo	BearerTokenMsg.Info	TokenInfo is a grouped information about token
OwnerKey	bytes	OwnerKey is a public key of the token owner
Signature	bytes	Signature is a signature of token information

Message BearerTokenMsg.Info

Field	Type	Description
EACLTable	acl.EACLTable	EACLTable carries table of extended ACL rules.
OwnerID	refs.OwnerID	OwnerID carries identifier of the token owner.
ValidUntil	uint64	ValidUntil carries a last epoch of token lifetime

Message RequestVerificationHeader

RequestVerificationHeader is a set of signatures of every NeoFS Node that processed request.

Field	Type	Label	Description
Signatures	RequestVerificationHeader.Signature	repeated	Signatures is a set of signatures of every passed NeoFS Node
Token	Token		Token is a token of the session within which the request is sent
Bearer	BearerTokenMsg		Bearer is a Bearer token of the request

Message RequestVerificationHeader.Signature

Field	Type	Label	Description
Key	bytes		Key is compressed public key used for signature.
Sign	bytes		Sign is signature of the request or session key.

Message Token

User token granting rights for object manipulation

Field	Type	Label	Description
TokenInfo	Token.Info		TokenInfo is a grouped information about token
Signature	bytes		Signature is a signature of session token information

Message Token.Info

Field	Type	Description
ID	bytes	ID is a token identifier. valid UUIDv4 represented in bytes
OwnerID	refs.OwnerID	OwnerID carries identifier of the manipulation object owner.
verb	Token.Info.Verb	Verb is a type of request for which the token is issued
Address	refs.Address	Address is an object address for which token is issued
Lifetime	TokenLifetime	Lifetime is a lifetime of the session
SessionKey	bytes	SessionKey is a public key of session key
OwnerKey	bytes	OwnerKey is a public key of the token owner

Message TokenLifetime

TokenLifetime carries a group of lifetime parameters of the token

Field	Type	Label	Description
Created	uint64		Created carries an initial epoch of token lifetime
ValidUntil	uint64		ValidUntil carries a last epoch of token lifetime

Token.Info.Verb

Verb is an enumeration of session request types

Name	Number	Description
Put	0	Put refers to object.Put RPC call
Get	1	Get refers to object.Get RPC call
Head	2	Head refers to object.Head RPC call
Search	3	Search refers to object.Search RPC call
Delete	4	Delete refers to object.Delete RPC call
Range	5	Range refers to object.GetRange RPC call
RangeHash	6	RangeHash refers to object.GetRangeHash RPC call

Scalar Value Types

.proto Type	Notes	C++ Type	Java Type	Python Type
double		double	double	float
float		float	float	float
int32	Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint32 instead.	int32	int	int
int64	Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint64 instead.	int64	long	int/long
uint32	Uses variable-length encoding.	uint32	int	int/long
uint64	Uses variable-length encoding.	uint64	long	int/long
sint32	Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int32s.	int32	int	int
sint64	Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int64s.	int64	long	int/long
fixed32	Always four bytes. More efficient than uint32 if values are often greater than 2^28.	uint32	int	int
fixed64	Always eight bytes. More efficient than uint64 if values are often greater than 2^56.	uint64	long	int/long
sfixed32	Always four bytes.	int32	int	int
sfixed64	Always eight bytes.	int64	long	int/long
bool		bool	boolean	boolean
string	A string must always contain UTF-8 encoded or 7-bit ASCII text.	string	String	str/unicode
bytes	May contain any arbitrary sequence of bytes.	string	ByteString	str

7.7 KiB Raw Blame History