forked from TrueCloudLab/frostfs-api-go
4fa7360cd1
All sessions in NeoFS has limited in epochs lifetime. There is a need
to limit the lifetime of private session tokens.
This commmit:
* extends PrivateToken interface with Expired method;
* defines EpochLifetimeStore interface with RemoveExpired method
and embeds it to PrivateTokenStore interface;
* adds epoch value parameter to private token constructor.
64 lines
1.2 KiB
Go
64 lines
1.2 KiB
Go
package session
|
|
|
|
import (
|
|
"sync"
|
|
)
|
|
|
|
type mapTokenStore struct {
|
|
*sync.RWMutex
|
|
|
|
tokens map[TokenID]PrivateToken
|
|
}
|
|
|
|
// NewMapTokenStore creates new PrivateTokenStore instance.
|
|
//
|
|
// The elements of the instance are stored in the map.
|
|
func NewMapTokenStore() PrivateTokenStore {
|
|
return &mapTokenStore{
|
|
RWMutex: new(sync.RWMutex),
|
|
tokens: make(map[TokenID]PrivateToken),
|
|
}
|
|
}
|
|
|
|
// Store adds passed token to the map.
|
|
//
|
|
// Resulting error is always nil.
|
|
func (s *mapTokenStore) Store(id TokenID, token PrivateToken) error {
|
|
s.Lock()
|
|
s.tokens[id] = token
|
|
s.Unlock()
|
|
|
|
return nil
|
|
}
|
|
|
|
// Fetch returns the map element corresponding to the given key.
|
|
//
|
|
// Returns ErrPrivateTokenNotFound is there is no element in map.
|
|
func (s *mapTokenStore) Fetch(id TokenID) (PrivateToken, error) {
|
|
s.RLock()
|
|
defer s.RUnlock()
|
|
|
|
t, ok := s.tokens[id]
|
|
if !ok {
|
|
return nil, ErrPrivateTokenNotFound
|
|
}
|
|
|
|
return t, nil
|
|
}
|
|
|
|
// RemoveExpired removes all the map elements that are expired in the passed epoch.
|
|
//
|
|
// Resulting error is always nil.
|
|
func (s *mapTokenStore) RemoveExpired(epoch uint64) error {
|
|
s.Lock()
|
|
|
|
for key, token := range s.tokens {
|
|
if token.Expired(epoch) {
|
|
delete(s.tokens, key)
|
|
}
|
|
}
|
|
|
|
s.Unlock()
|
|
|
|
return nil
|
|
}
|