Implement afb_req_has_permission
[src/app-framework-binder.git] / src / afb-xreq.c
index 80fa963..3535ce5 100644 (file)
@@ -31,7 +31,7 @@
 #include "afb-xreq.h"
 #include "afb-evt.h"
 #include "afb-msg-json.h"
-#include "afb-subcall.h"
+#include "afb-cred.h"
 #include "afb-hook.h"
 #include "afb-api.h"
 #include "afb-apiset.h"
 
 /******************************************************************************/
 
+static inline void xreq_addref(struct afb_xreq *xreq)
+{
+       __atomic_add_fetch(&xreq->refcount, 1, __ATOMIC_RELAXED);
+}
+
+static inline void xreq_unref(struct afb_xreq *xreq)
+{
+       if (!__atomic_sub_fetch(&xreq->refcount, 1, __ATOMIC_RELAXED)) {
+               if (!xreq->replied)
+                       afb_xreq_fail(xreq, "error", "no reply");
+               if (xreq->hookflags)
+                       afb_hook_xreq_end(xreq);
+               xreq->queryitf->unref(xreq);
+       }
+}
+
+/******************************************************************************/
+
+extern const struct afb_req_itf xreq_itf;
+extern const struct afb_req_itf xreq_hooked_itf;
+
+static inline struct afb_req to_req(struct afb_xreq *xreq)
+{
+       return (struct afb_req){ .itf = xreq->hookflags ? &xreq_hooked_itf : &xreq_itf, .closure = xreq };
+}
+
+/******************************************************************************/
+
+struct subcall
+{
+       struct afb_xreq xreq;
+       struct afb_xreq *caller;
+       void (*callback)(void*, int, struct json_object*);
+       void *closure;
+       union {
+               struct {
+                       struct jobloop *jobloop;
+                       struct json_object *result;
+                       int status;
+               };
+               struct {
+                       union {
+                               void (*callback)(void*, int, struct json_object*);
+                               void (*callback2)(void*, int, struct json_object*, struct afb_req);
+                       };
+                       void *closure;
+               } hooked;
+       };
+};
+
+static int subcall_subscribe(struct afb_xreq *xreq, struct afb_event event)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       return afb_xreq_subscribe(subcall->caller, event);
+}
+
+static int subcall_unsubscribe(struct afb_xreq *xreq, struct afb_event event)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       return afb_xreq_unsubscribe(subcall->caller, event);
+}
+
+static void subcall_reply(struct afb_xreq *xreq, int status, struct json_object *obj)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       if (subcall->callback)
+               subcall->callback(subcall->closure, status, obj);
+       json_object_put(obj);
+}
+
+static void subcall_destroy(struct afb_xreq *xreq)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       json_object_put(subcall->xreq.json);
+       afb_cred_unref(subcall->xreq.cred);
+       xreq_unref(subcall->caller);
+       free(subcall);
+}
+
+const struct afb_xreq_query_itf afb_xreq_subcall_itf = {
+       .reply = subcall_reply,
+       .unref = subcall_destroy,
+       .subscribe = subcall_subscribe,
+       .unsubscribe = subcall_unsubscribe
+};
+
+static struct subcall *subcall_alloc(
+               struct afb_xreq *caller,
+               const char *api,
+               const char *verb,
+               struct json_object *args
+)
+{
+       struct subcall *subcall;
+       size_t lenapi, lenverb;
+       char *copy;
+
+       lenapi = 1 + strlen(api);
+       lenverb = 1 + strlen(verb);
+       subcall = malloc(lenapi + lenverb + sizeof *subcall);
+       if (!subcall)
+               ERROR("out of memory");
+       else {
+               copy = (char*)&subcall[1];
+               memcpy(copy, api, lenapi);
+               api = copy;
+               copy = &copy[lenapi];
+               memcpy(copy, verb, lenverb);
+               verb = copy;
+
+               afb_xreq_init(&subcall->xreq, &afb_xreq_subcall_itf);
+               afb_context_subinit(&subcall->xreq.context, &caller->context);
+               subcall->xreq.cred = afb_cred_addref(caller->cred);
+               subcall->xreq.json = args;
+               subcall->xreq.api = api;
+               subcall->xreq.verb = verb;
+               subcall->caller = caller;
+               xreq_addref(caller);
+       }
+       return subcall;
+}
+
+static void subcall_process(struct subcall *subcall)
+{
+       if (subcall->caller->queryitf->subcall) {
+               subcall->caller->queryitf->subcall(
+                       subcall->caller, subcall->xreq.api, subcall->xreq.verb,
+                       subcall->xreq.json, subcall->callback, subcall->closure);
+               xreq_unref(&subcall->xreq);
+       } else
+               afb_xreq_process(&subcall->xreq, subcall->caller->apiset);
+}
+
+static void subcall_sync_leave(struct subcall *subcall)
+{
+       struct jobloop *jobloop = __atomic_exchange_n(&subcall->jobloop, NULL, __ATOMIC_RELAXED);
+       if (jobloop)
+               jobs_leave(jobloop);
+}
+
+static void subcall_sync_reply(void *closure, int status, struct json_object *obj)
+{
+       struct subcall *subcall = closure;
+
+       subcall->status = status;
+       subcall->result = json_object_get(obj);
+       subcall_sync_leave(subcall);
+}
+
+static void subcall_sync_enter(int signum, void *closure, struct jobloop *jobloop)
+{
+       struct subcall *subcall = closure;
+
+       if (!signum) {
+               subcall->jobloop = jobloop;
+               subcall_process(subcall);
+       } else {
+               subcall->status = -1;
+               subcall_sync_leave(subcall);
+       }
+}
+
+/******************************************************************************/
+
 static void vinfo(void *first, void *second, const char *fmt, va_list args, void (*fun)(void*,void*,const char*))
 {
        char *info;
@@ -109,7 +277,7 @@ static void xreq_fail_cb(void *closure, const char *status, const char *info)
                if (xreq->queryitf->fail)
                        xreq->queryitf->fail(xreq, status, info);
                else
-                       xreq->queryitf->reply(xreq, 1, afb_msg_json_reply_error(status, info, &xreq->context, NULL));
+                       xreq->queryitf->reply(xreq, -1, afb_msg_json_reply_error(status, info, &xreq->context, NULL));
        }
 }
 
@@ -138,15 +306,13 @@ static void xreq_context_set_cb(void *closure, void *value, void (*free_value)(v
 static void xreq_addref_cb(void *closure)
 {
        struct afb_xreq *xreq = closure;
-       __atomic_add_fetch(&xreq->refcount, 1, __ATOMIC_RELAXED);
+       xreq_addref(xreq);
 }
 
 static void xreq_unref_cb(void *closure)
 {
        struct afb_xreq *xreq = closure;
-       if (!__atomic_sub_fetch(&xreq->refcount, 1, __ATOMIC_RELAXED)) {
-               xreq->queryitf->unref(xreq);
-       }
+       xreq_unref(xreq);
 }
 
 static void xreq_session_close_cb(void *closure)
@@ -198,79 +364,76 @@ int afb_xreq_unsubscribe(struct afb_xreq *xreq, struct afb_event event)
 static void xreq_subcall_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*), void *cb_closure)
 {
        struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
 
-       if (xreq->queryitf->subcall) {
-               xreq->queryitf->subcall(xreq, api, verb, args, callback, cb_closure);
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error());
                json_object_put(args);
        } else {
-               afb_subcall(xreq, api, verb, args, callback, cb_closure);
+               subcall->callback = callback;
+               subcall->closure = cb_closure;
+               subcall_process(subcall);
        }
 }
 
-struct xreq_sync
+static void xreq_subcall_req_reply_cb(void *closure, int status, struct json_object *result)
 {
-       struct afb_xreq *caller;
-       const char *api;
-       const char *verb;
-       struct json_object *args;
-       struct jobloop *jobloop;
-       struct json_object *result;
-       int iserror;
-};
-
-static void xreq_sync_leave(struct xreq_sync *sync)
-{
-       struct jobloop *jobloop = sync->jobloop;
-       if (jobloop) {
-               sync->jobloop = NULL;
-               jobs_leave(jobloop);
-       }
-}
-
-static void xreq_sync_reply(void *closure, int iserror, struct json_object *obj)
-{
-       struct xreq_sync *sync = closure;
-
-       sync->iserror = iserror;
-       sync->result = json_object_get(obj);
-       xreq_sync_leave(sync);
+       struct subcall *subcall = closure;
+       subcall->hooked.callback2(subcall->hooked.closure, status, result, to_req(subcall->caller));
 }
 
-static void xreq_sync_enter(int signum, void *closure, struct jobloop *jobloop)
+static void xreq_subcall_req_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*, struct afb_req), void *cb_closure)
 {
-       struct xreq_sync *sync = closure;
+       struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
 
-       if (!signum) {
-               sync->jobloop = jobloop;
-               xreq_subcall_cb(sync->caller, sync->api, sync->verb, json_object_get(sync->args), xreq_sync_reply, sync);
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error(), to_req(xreq));
+               json_object_put(args);
        } else {
-               sync->iserror = 1;
-               xreq_sync_leave(sync);
+               subcall->callback = xreq_subcall_req_reply_cb;
+               subcall->closure = subcall;
+               subcall->hooked.callback2 = callback;
+               subcall->hooked.closure = cb_closure;
+               subcall_process(subcall);
        }
 }
 
+
 static int xreq_subcallsync_cb(void *closure, const char *api, const char *verb, struct json_object *args, struct json_object **result)
 {
        int rc;
-       struct xreq_sync sync;
-       struct afb_xreq *xreq = closure;
-
-       sync.caller = xreq;
-       sync.api = api;
-       sync.verb = verb;
-       sync.args = args;
-       sync.jobloop = NULL;
-       sync.result = NULL;
-       sync.iserror = 1;
-
-       rc = jobs_enter(NULL, 0, xreq_sync_enter, &sync);
-       json_object_put(args);
-       if (rc < 0 || sync.iserror) {
-               *result = sync.result ? : afb_msg_json_internal_error();
-               return 0;
+       struct subcall *subcall;
+       struct afb_xreq *xreq = closure;
+       struct json_object *resu;
+
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (!subcall) {
+               rc = -1;
+               resu = afb_msg_json_internal_error();
+               json_object_put(args);
+       } else {
+               subcall->callback = subcall_sync_reply;
+               subcall->closure = subcall;
+               subcall->jobloop = NULL;
+               subcall->result = NULL;
+               subcall->status = 0;
+               rc = jobs_enter(NULL, 0, subcall_sync_enter, subcall);
+               resu = subcall->result;
+               if (rc < 0 || subcall->status < 0) {
+                       resu = resu ?: afb_msg_json_internal_error();
+                       rc = -1;
+               }
        }
-       *result = sync.result;
-       return 1;
+       if (result)
+               *result = resu;
+       else
+               json_object_put(resu);
+       return rc;
 }
 
 static void xreq_vverbose_cb(void*closure, int level, const char *file, int line, const char *func, const char *fmt, va_list args)
@@ -285,6 +448,12 @@ static struct afb_stored_req *xreq_store_cb(void *closure)
        return closure;
 }
 
+static int xreq_has_permission_cb(void*closure, const char *permission)
+{
+       struct afb_xreq *xreq = closure;
+       return afb_auth_has_permission(xreq, permission);
+}
+
 /******************************************************************************/
 
 static struct json_object *xreq_hooked_json_cb(void *closure)
@@ -350,10 +519,7 @@ static void xreq_hooked_unref_cb(void *closure)
 {
        struct afb_xreq *xreq = closure;
        afb_hook_xreq_unref(xreq);
-       if (!__atomic_sub_fetch(&xreq->refcount, 1, __ATOMIC_RELAXED)) {
-               afb_hook_xreq_end(xreq);
-               xreq->queryitf->unref(xreq);
-       }
+       xreq_unref_cb(closure);
 }
 
 static void xreq_hooked_session_close_cb(void *closure)
@@ -384,35 +550,59 @@ static int xreq_hooked_unsubscribe_cb(void *closure, struct afb_event event)
        return afb_hook_xreq_unsubscribe(xreq, event, r);
 }
 
-struct reply
+static void xreq_hooked_subcall_reply_cb(void *closure, int status, struct json_object *result)
 {
-       struct afb_xreq *xreq;
-       void (*callback)(void*, int, struct json_object*);
-       void *closure;
-};
+       struct subcall *subcall = closure;
 
-static void xreq_hooked_subcall_reply_cb(void *closure, int iserror, struct json_object *result)
-{
-       struct reply *reply = closure;
-       
-       afb_hook_xreq_subcall_result(reply->xreq, iserror, result);
-       reply->callback(reply->closure, iserror, result);
-       free(reply);
+       afb_hook_xreq_subcall_result(subcall->caller, status, result);
+       subcall->hooked.callback(subcall->hooked.closure, status, result);
 }
 
 static void xreq_hooked_subcall_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*), void *cb_closure)
 {
-       struct reply *reply = malloc(sizeof *reply);
        struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
+
        afb_hook_xreq_subcall(xreq, api, verb, args);
-       if (reply) {
-               reply->xreq = xreq;
-               reply->callback = callback;
-               reply->closure = cb_closure;
-               xreq_subcall_cb(closure, api, verb, args, xreq_hooked_subcall_reply_cb, reply);
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error());
+               json_object_put(args);
        } else {
-               ERROR("out of memory");
-               xreq_subcall_cb(closure, api, verb, args, callback, cb_closure);
+               subcall->callback = xreq_hooked_subcall_reply_cb;
+               subcall->closure = subcall;
+               subcall->hooked.callback = callback;
+               subcall->hooked.closure = cb_closure;
+               subcall_process(subcall);
+       }
+}
+
+static void xreq_hooked_subcall_req_reply_cb(void *closure, int status, struct json_object *result)
+{
+       struct subcall *subcall = closure;
+
+       afb_hook_xreq_subcall_req_result(subcall->caller, status, result);
+       subcall->hooked.callback2(subcall->hooked.closure, status, result, to_req(subcall->caller));
+}
+
+static void xreq_hooked_subcall_req_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*, struct afb_req), void *cb_closure)
+{
+       struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
+
+       afb_hook_xreq_subcall_req(xreq, api, verb, args);
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error(), to_req(xreq));
+               json_object_put(args);
+       } else {
+               subcall->callback = xreq_hooked_subcall_req_reply_cb;
+               subcall->closure = subcall;
+               subcall->hooked.callback2 = callback;
+               subcall->hooked.closure = cb_closure;
+               subcall_process(subcall);
        }
 }
 
@@ -443,6 +633,13 @@ static struct afb_stored_req *xreq_hooked_store_cb(void *closure)
        return r;
 }
 
+static int xreq_hooked_has_permission_cb(void*closure, const char *permission)
+{
+       struct afb_xreq *xreq = closure;
+       int r = xreq_has_permission_cb(closure, permission);
+       return afb_hook_xreq_has_permission(xreq, permission, r);
+}
+
 /******************************************************************************/
 
 const struct afb_req_itf xreq_itf = {
@@ -463,7 +660,9 @@ const struct afb_req_itf xreq_itf = {
        .subcall = xreq_subcall_cb,
        .subcallsync = xreq_subcallsync_cb,
        .vverbose = xreq_vverbose_cb,
-       .store = xreq_store_cb
+       .store = xreq_store_cb,
+       .subcall_req = xreq_subcall_req_cb,
+       .has_permission = xreq_has_permission_cb
 };
 
 const struct afb_req_itf xreq_hooked_itf = {
@@ -484,14 +683,11 @@ const struct afb_req_itf xreq_hooked_itf = {
        .subcall = xreq_hooked_subcall_cb,
        .subcallsync = xreq_hooked_subcallsync_cb,
        .vverbose = xreq_hooked_vverbose_cb,
-       .store = xreq_hooked_store_cb
+       .store = xreq_hooked_store_cb,
+       .subcall_req = xreq_hooked_subcall_req_cb,
+       .has_permission = xreq_hooked_has_permission_cb
 };
 
-static inline struct afb_req to_req(struct afb_xreq *xreq)
-{
-       return (struct afb_req){ .itf = xreq->hookflags ? &xreq_hooked_itf : &xreq_itf, .closure = xreq };
-}
-
 /******************************************************************************/
 
 struct afb_req afb_xreq_unstore(struct afb_stored_req *sreq)
@@ -642,7 +838,7 @@ static int xreq_session_check_apply_v2(struct afb_xreq *xreq, uint32_t sessionfl
                return -1;
        }
 
-       if (auth && !afb_auth_check(auth, xreq)) {
+       if (auth && !afb_auth_check(xreq, auth)) {
                afb_xreq_fail_f(xreq, "denied", "authorisation refused");
                errno = EPERM;
                return -1;
@@ -695,7 +891,7 @@ void afb_xreq_fail_unknown_verb(struct afb_xreq *xreq)
 
 static void process_sync(struct afb_xreq *xreq)
 {
-       struct afb_api api;
+       const struct afb_api *api;
 
        /* init hooking */
        afb_hook_init_xreq(xreq);
@@ -703,14 +899,15 @@ static void process_sync(struct afb_xreq *xreq)
                afb_hook_xreq_begin(xreq);
 
        /* search the api */
-       if (afb_apiset_get_started(xreq->apiset, xreq->api, &api) < 0) {
+       api = (const struct afb_api*)xreq->context.api_key;
+       if (api)
+               api->itf->call(api->closure, xreq);
+       else {
+               api = afb_apiset_lookup_started(xreq->apiset, xreq->api, 1);
                if (errno == ENOENT)
                        afb_xreq_fail_f(xreq, "unknown-api", "api %s not found", xreq->api);
                else
                        afb_xreq_fail_f(xreq, "bad-api-state", "api %s not started correctly: %m", xreq->api);
-       } else {
-               xreq->context.api_key = api.closure;
-               api.itf->call(api.closure, xreq);
        }
 }
 
@@ -723,20 +920,24 @@ static void process_async(int signum, void *arg)
        } else {
                process_sync(xreq);
        }
-       afb_xreq_unref(xreq);
+       xreq_unref(xreq);
 }
 
 void afb_xreq_process(struct afb_xreq *xreq, struct afb_apiset *apiset)
 {
+       const struct afb_api *api;
+
        xreq->apiset = apiset;
+       api = afb_apiset_lookup_started(apiset, xreq->api, 1);
+       xreq->context.api_key = (void*)api;
 
-       afb_xreq_addref(xreq);
-       if (jobs_queue(NULL, afb_apiset_timeout_get(apiset), process_async, xreq) < 0) {
+       xreq_addref(xreq);
+       if (jobs_queue(api && api->noconcurrency ? (void*)api : NULL, afb_apiset_timeout_get(apiset), process_async, xreq) < 0) {
                /* TODO: allows or not to proccess it directly as when no threading? (see above) */
                ERROR("can't process job with threads: %m");
                afb_xreq_fail_f(xreq, "cancelled", "not able to create a job for the task");
-               afb_xreq_unref(xreq);
+               xreq_unref(xreq);
        }
-       afb_xreq_unref(xreq);
+       xreq_unref(xreq);
 }