diff options
author | Vitalii Gridnev <[email protected]> | 2022-02-10 16:47:23 +0300 |
---|---|---|
committer | Daniil Cherednik <[email protected]> | 2022-02-10 16:47:23 +0300 |
commit | 30ed3937ab02d1b3c4dec4d93fb86c683217d9be (patch) | |
tree | 40cf6aa8b6b8223a09b185010d80f212e28b74f0 /library/cpp/monlib/service/auth/tvm/auth.cpp | |
parent | 64de01e9a049f96a9e2d43aff48d10621ab47d81 (diff) |
Restoring authorship annotation for Vitalii Gridnev <[email protected]>. Commit 1 of 2.
Diffstat (limited to 'library/cpp/monlib/service/auth/tvm/auth.cpp')
-rw-r--r-- | library/cpp/monlib/service/auth/tvm/auth.cpp | 184 |
1 files changed, 92 insertions, 92 deletions
diff --git a/library/cpp/monlib/service/auth/tvm/auth.cpp b/library/cpp/monlib/service/auth/tvm/auth.cpp index e071c11ebc8..2a992adf508 100644 --- a/library/cpp/monlib/service/auth/tvm/auth.cpp +++ b/library/cpp/monlib/service/auth/tvm/auth.cpp @@ -1,93 +1,93 @@ -#include "auth.h" - -#include <util/generic/hash_set.h> - - -using namespace NTvmAuth; - - -namespace NMonitoring { -namespace { - template <class TTvmClientPtr = THolder<TTvmClient>> - class TTvmManager final: public ITvmManager { - public: - TTvmManager(NTvmApi::TClientSettings settings, TVector<TTvmId> clients, TLoggerPtr logger) - : AllowedClients_{clients.begin(), clients.end()} - , Tvm_(new TTvmClient{std::move(settings), std::move(logger)}) - { - } - - TTvmManager(NTvmTool::TClientSettings settings, TVector<TTvmId> clients, TLoggerPtr logger) - : AllowedClients_{clients.begin(), clients.end()} - , Tvm_(new TTvmClient{std::move(settings), std::move(logger)}) - { - } - - TTvmManager(TTvmClientPtr tvm, TVector<TTvmId> clients) - : AllowedClients_{clients.begin(), clients.end()} - , Tvm_(std::move(tvm)) - { - } - - bool IsAllowedClient(TTvmId clientId) override { - return AllowedClients_.contains(clientId); - } - +#include "auth.h" + +#include <util/generic/hash_set.h> + + +using namespace NTvmAuth; + + +namespace NMonitoring { +namespace { + template <class TTvmClientPtr = THolder<TTvmClient>> + class TTvmManager final: public ITvmManager { + public: + TTvmManager(NTvmApi::TClientSettings settings, TVector<TTvmId> clients, TLoggerPtr logger) + : AllowedClients_{clients.begin(), clients.end()} + , Tvm_(new TTvmClient{std::move(settings), std::move(logger)}) + { + } + + TTvmManager(NTvmTool::TClientSettings settings, TVector<TTvmId> clients, TLoggerPtr logger) + : AllowedClients_{clients.begin(), clients.end()} + , Tvm_(new TTvmClient{std::move(settings), std::move(logger)}) + { + } + + TTvmManager(TTvmClientPtr tvm, TVector<TTvmId> clients) + : AllowedClients_{clients.begin(), clients.end()} + , Tvm_(std::move(tvm)) + { + } + + bool IsAllowedClient(TTvmId clientId) override { + return AllowedClients_.contains(clientId); + } + TCheckedServiceTicket CheckServiceTicket(TStringBuf ticket) override { - return Tvm_->CheckServiceTicket(ticket); - } - - private: - THashSet<TTvmId> AllowedClients_; - TTvmClientPtr Tvm_; - }; - - class TTvmAuthProvider final: public IAuthProvider { - public: - TTvmAuthProvider(THolder<ITvmManager> manager) - : TvmManager_{std::move(manager)} - { - } - - TAuthResult Check(const IHttpRequest& req) override { - auto ticketHeader = req.GetHeaders().FindHeader("X-Ya-Service-Ticket"); - if (!ticketHeader) { - return TAuthResult::NoCredentials(); - } - - const auto ticket = TvmManager_->CheckServiceTicket(ticketHeader->Value()); - if (!ticket) { - return TAuthResult::Denied(); - } - - return TvmManager_->IsAllowedClient(ticket.GetSrc()) - ? TAuthResult::Ok() - : TAuthResult::Denied(); - } - - private: - THolder<ITvmManager> TvmManager_; - }; -} // namespace - -THolder<ITvmManager> CreateDefaultTvmManager(NTvmApi::TClientSettings settings, TVector<TTvmId> allowedClients, TLoggerPtr logger) { - return MakeHolder<TTvmManager<>>(std::move(settings), std::move(allowedClients), std::move(logger)); -} - -THolder<ITvmManager> CreateDefaultTvmManager(NTvmTool::TClientSettings settings, TVector<TTvmId> allowedClients, TLoggerPtr logger) { - return MakeHolder<TTvmManager<>>(std::move(settings), std::move(allowedClients), std::move(logger)); -} - -THolder<ITvmManager> CreateDefaultTvmManager(TAtomicSharedPtr<NTvmAuth::TTvmClient> client, TVector<TTvmId> allowedClients) { - return MakeHolder<TTvmManager<TAtomicSharedPtr<NTvmAuth::TTvmClient>>>(std::move(client), std::move(allowedClients)); -} - -THolder<ITvmManager> CreateDefaultTvmManager(std::shared_ptr<NTvmAuth::TTvmClient> client, TVector<TTvmId> allowedClients) { - return MakeHolder<TTvmManager<std::shared_ptr<NTvmAuth::TTvmClient>>>(std::move(client), std::move(allowedClients)); -} - -THolder<IAuthProvider> CreateTvmAuth(THolder<ITvmManager> manager) { - return MakeHolder<TTvmAuthProvider>(std::move(manager)); -} - -} // namespace NMonitoring + return Tvm_->CheckServiceTicket(ticket); + } + + private: + THashSet<TTvmId> AllowedClients_; + TTvmClientPtr Tvm_; + }; + + class TTvmAuthProvider final: public IAuthProvider { + public: + TTvmAuthProvider(THolder<ITvmManager> manager) + : TvmManager_{std::move(manager)} + { + } + + TAuthResult Check(const IHttpRequest& req) override { + auto ticketHeader = req.GetHeaders().FindHeader("X-Ya-Service-Ticket"); + if (!ticketHeader) { + return TAuthResult::NoCredentials(); + } + + const auto ticket = TvmManager_->CheckServiceTicket(ticketHeader->Value()); + if (!ticket) { + return TAuthResult::Denied(); + } + + return TvmManager_->IsAllowedClient(ticket.GetSrc()) + ? TAuthResult::Ok() + : TAuthResult::Denied(); + } + + private: + THolder<ITvmManager> TvmManager_; + }; +} // namespace + +THolder<ITvmManager> CreateDefaultTvmManager(NTvmApi::TClientSettings settings, TVector<TTvmId> allowedClients, TLoggerPtr logger) { + return MakeHolder<TTvmManager<>>(std::move(settings), std::move(allowedClients), std::move(logger)); +} + +THolder<ITvmManager> CreateDefaultTvmManager(NTvmTool::TClientSettings settings, TVector<TTvmId> allowedClients, TLoggerPtr logger) { + return MakeHolder<TTvmManager<>>(std::move(settings), std::move(allowedClients), std::move(logger)); +} + +THolder<ITvmManager> CreateDefaultTvmManager(TAtomicSharedPtr<NTvmAuth::TTvmClient> client, TVector<TTvmId> allowedClients) { + return MakeHolder<TTvmManager<TAtomicSharedPtr<NTvmAuth::TTvmClient>>>(std::move(client), std::move(allowedClients)); +} + +THolder<ITvmManager> CreateDefaultTvmManager(std::shared_ptr<NTvmAuth::TTvmClient> client, TVector<TTvmId> allowedClients) { + return MakeHolder<TTvmManager<std::shared_ptr<NTvmAuth::TTvmClient>>>(std::move(client), std::move(allowedClients)); +} + +THolder<IAuthProvider> CreateTvmAuth(THolder<ITvmManager> manager) { + return MakeHolder<TTvmAuthProvider>(std::move(manager)); +} + +} // namespace NMonitoring |