library/cpp/tvmauth/src/service_impl.h


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

#pragma once

#include <library/cpp/tvmauth/src/protos/ticket2.pb.h>
#include <library/cpp/tvmauth/src/protos/tvm_keys.pb.h>
#include <library/cpp/tvmauth/src/rw/keys.h>

#include <library/cpp/tvmauth/type.h>
#include <library/cpp/tvmauth/deprecated/service_context.h>

#include <library/cpp/charset/ci_string.h>
#include <library/cpp/string_utils/secret_string/secret_string.h>

#include <util/generic/maybe.h>

#include <string>

namespace NTvmAuth {
    using TServiceTicketImplPtr = THolder<TCheckedServiceTicket::TImpl>;
    class TCheckedServiceTicket::TImpl {
    public:
        explicit operator bool() const;

        TTvmId GetSrc() const;
        const TScopes& GetScopes() const;
        bool HasScope(TStringBuf scopeName) const;
        ETicketStatus GetStatus() const;
        time_t GetExpirationTime() const;

        TString DebugInfo() const;
        TMaybe<TUid> GetIssuerUid() const;

        void SetStatus(ETicketStatus status);

        /*!
     * Constructor for creation invalid ticket storing error status in TServiceContext
     * @param status
     * @param protobufTicket
     */
        TImpl(ETicketStatus status, ticket2::Ticket&& protobufTicket);

        static TServiceTicketImplPtr CreateTicketForTests(ETicketStatus status,
                                                          TTvmId src,
                                                          TMaybe<TUid> issuerUid);

    private:
        ETicketStatus Status_;
        ticket2::Ticket ProtobufTicket_;
        mutable TScopes CachedScopes_;
        mutable TString CachedDebugInfo_;
    };

    class TServiceContext::TImpl {
    public:
        TImpl(TStringBuf secretBase64, TTvmId selfTvmId, TStringBuf tvmKeysResponse);
        TImpl(TTvmId selfTvmId, TStringBuf tvmKeysResponse);
        TImpl(TStringBuf secretBase64);

        void ResetKeys(TStringBuf tvmKeysResponse);

        TServiceTicketImplPtr Check(TStringBuf ticketBody) const;
        TString SignCgiParamsForTvm(TStringBuf ts, TStringBuf dst, TStringBuf scopes = TStringBuf()) const;

        const NRw::TPublicKeys& GetKeys() const { // for tests
            return Keys_;
        }

    private:
        ETicketStatus CheckProtobufServiceTicket(const ticket2::Ticket& ticket) const;
        static TString ParseSecret(TStringBuf secretBase64);

        NRw::TPublicKeys Keys_;
        const NSecretString::TSecretString Secret_;
        const TTvmId SelfTvmId_ = 0;

        ::google::protobuf::LogSilencer LogSilencer_;
    };
}