frostfs-node/pkg/innerring/processors/container
Leonard Lyubich 2f38fef31a [#589] ir/container: Verify session token lifetime
Session tokens have limited lifetime in NeoFS. Container processor should
verify lifetime of the incoming tokens.

Define `NetworkState` interface with `Epoch` method to get number of the
current epoch. Use Netmap contract client's wrapper as `NetworkState` of
Container `Processor`. Check values of token lifetime, and deny if:

  * NBF value is gt the current epoch;
  * IAT is gt the current epoch;
  * EXP is le the current epoch.

Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>
2021-06-09 10:17:49 +03:00
..
common.go [#589] ir/container: Verify session token lifetime 2021-06-09 10:17:49 +03:00
handlers.go [#505] ir/container: Implement simplified handling of SetEACL event 2021-05-25 16:35:52 +03:00
process_container.go [#525] ir/container: Check session verb and container ID 2021-05-31 11:53:06 +03:00
process_eacl.go [#525] ir/container: Check session verb and container ID 2021-05-31 11:53:06 +03:00
processor.go [#589] ir/container: Verify session token lifetime 2021-06-09 10:17:49 +03:00