Implement afb_req_has_permission
[src/app-framework-binder.git] / src / afb-xreq.c
index 95d089a..3535ce5 100644 (file)
  */
 
 #define _GNU_SOURCE
-#define NO_BINDING_VERBOSE_MACRO
+#define AFB_BINDING_PRAGMA_NO_VERBOSE_MACRO
 
 #include <stdlib.h>
+#include <stdio.h>
 #include <string.h>
 #include <errno.h>
 
 #include <json-c/json.h>
-#include <afb/afb-binding.h>
+#include <afb/afb-binding-v1.h>
+#include <afb/afb-binding-v2.h>
 
 #include "afb-context.h"
 #include "afb-xreq.h"
 #include "afb-evt.h"
 #include "afb-msg-json.h"
-#include "afb-subcall.h"
+#include "afb-cred.h"
 #include "afb-hook.h"
+#include "afb-api.h"
+#include "afb-apiset.h"
+#include "afb-auth.h"
+#include "jobs.h"
 #include "verbose.h"
 
+/******************************************************************************/
+
+static inline void xreq_addref(struct afb_xreq *xreq)
+{
+       __atomic_add_fetch(&xreq->refcount, 1, __ATOMIC_RELAXED);
+}
+
+static inline void xreq_unref(struct afb_xreq *xreq)
+{
+       if (!__atomic_sub_fetch(&xreq->refcount, 1, __ATOMIC_RELAXED)) {
+               if (!xreq->replied)
+                       afb_xreq_fail(xreq, "error", "no reply");
+               if (xreq->hookflags)
+                       afb_hook_xreq_end(xreq);
+               xreq->queryitf->unref(xreq);
+       }
+}
+
+/******************************************************************************/
+
+extern const struct afb_req_itf xreq_itf;
+extern const struct afb_req_itf xreq_hooked_itf;
+
+static inline struct afb_req to_req(struct afb_xreq *xreq)
+{
+       return (struct afb_req){ .itf = xreq->hookflags ? &xreq_hooked_itf : &xreq_itf, .closure = xreq };
+}
+
+/******************************************************************************/
+
+struct subcall
+{
+       struct afb_xreq xreq;
+       struct afb_xreq *caller;
+       void (*callback)(void*, int, struct json_object*);
+       void *closure;
+       union {
+               struct {
+                       struct jobloop *jobloop;
+                       struct json_object *result;
+                       int status;
+               };
+               struct {
+                       union {
+                               void (*callback)(void*, int, struct json_object*);
+                               void (*callback2)(void*, int, struct json_object*, struct afb_req);
+                       };
+                       void *closure;
+               } hooked;
+       };
+};
+
+static int subcall_subscribe(struct afb_xreq *xreq, struct afb_event event)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       return afb_xreq_subscribe(subcall->caller, event);
+}
+
+static int subcall_unsubscribe(struct afb_xreq *xreq, struct afb_event event)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       return afb_xreq_unsubscribe(subcall->caller, event);
+}
+
+static void subcall_reply(struct afb_xreq *xreq, int status, struct json_object *obj)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       if (subcall->callback)
+               subcall->callback(subcall->closure, status, obj);
+       json_object_put(obj);
+}
+
+static void subcall_destroy(struct afb_xreq *xreq)
+{
+       struct subcall *subcall = CONTAINER_OF_XREQ(struct subcall, xreq);
+
+       json_object_put(subcall->xreq.json);
+       afb_cred_unref(subcall->xreq.cred);
+       xreq_unref(subcall->caller);
+       free(subcall);
+}
+
+const struct afb_xreq_query_itf afb_xreq_subcall_itf = {
+       .reply = subcall_reply,
+       .unref = subcall_destroy,
+       .subscribe = subcall_subscribe,
+       .unsubscribe = subcall_unsubscribe
+};
+
+static struct subcall *subcall_alloc(
+               struct afb_xreq *caller,
+               const char *api,
+               const char *verb,
+               struct json_object *args
+)
+{
+       struct subcall *subcall;
+       size_t lenapi, lenverb;
+       char *copy;
+
+       lenapi = 1 + strlen(api);
+       lenverb = 1 + strlen(verb);
+       subcall = malloc(lenapi + lenverb + sizeof *subcall);
+       if (!subcall)
+               ERROR("out of memory");
+       else {
+               copy = (char*)&subcall[1];
+               memcpy(copy, api, lenapi);
+               api = copy;
+               copy = &copy[lenapi];
+               memcpy(copy, verb, lenverb);
+               verb = copy;
+
+               afb_xreq_init(&subcall->xreq, &afb_xreq_subcall_itf);
+               afb_context_subinit(&subcall->xreq.context, &caller->context);
+               subcall->xreq.cred = afb_cred_addref(caller->cred);
+               subcall->xreq.json = args;
+               subcall->xreq.api = api;
+               subcall->xreq.verb = verb;
+               subcall->caller = caller;
+               xreq_addref(caller);
+       }
+       return subcall;
+}
+
+static void subcall_process(struct subcall *subcall)
+{
+       if (subcall->caller->queryitf->subcall) {
+               subcall->caller->queryitf->subcall(
+                       subcall->caller, subcall->xreq.api, subcall->xreq.verb,
+                       subcall->xreq.json, subcall->callback, subcall->closure);
+               xreq_unref(&subcall->xreq);
+       } else
+               afb_xreq_process(&subcall->xreq, subcall->caller->apiset);
+}
+
+static void subcall_sync_leave(struct subcall *subcall)
+{
+       struct jobloop *jobloop = __atomic_exchange_n(&subcall->jobloop, NULL, __ATOMIC_RELAXED);
+       if (jobloop)
+               jobs_leave(jobloop);
+}
+
+static void subcall_sync_reply(void *closure, int status, struct json_object *obj)
+{
+       struct subcall *subcall = closure;
+
+       subcall->status = status;
+       subcall->result = json_object_get(obj);
+       subcall_sync_leave(subcall);
+}
+
+static void subcall_sync_enter(int signum, void *closure, struct jobloop *jobloop)
+{
+       struct subcall *subcall = closure;
+
+       if (!signum) {
+               subcall->jobloop = jobloop;
+               subcall_process(subcall);
+       } else {
+               subcall->status = -1;
+               subcall_sync_leave(subcall);
+       }
+}
+
+/******************************************************************************/
+
+static void vinfo(void *first, void *second, const char *fmt, va_list args, void (*fun)(void*,void*,const char*))
+{
+       char *info;
+       if (fmt == NULL || vasprintf(&info, fmt, args) < 0)
+               info = NULL;
+       fun(first, second, info);
+       free(info);
+}
+
+/******************************************************************************/
 
 static struct json_object *xreq_json_cb(void *closure)
 {
        struct afb_xreq *xreq = closure;
-       return xreq->json ? : (xreq->json = xreq->queryitf->json(xreq->query));
+       if (!xreq->json && xreq->queryitf->json)
+               xreq->json = xreq->queryitf->json(xreq);
+       return xreq->json;
 }
 
 static struct afb_arg xreq_get_cb(void *closure, const char *name)
 {
        struct afb_xreq *xreq = closure;
+       struct afb_arg arg;
+       struct json_object *object, *value;
+
        if (xreq->queryitf->get)
-               return xreq->queryitf->get(xreq->query, name);
-       else
-               return afb_msg_json_get_arg(xreq_json_cb(closure), name);
+               arg = xreq->queryitf->get(xreq, name);
+       else {
+               object = xreq_json_cb(closure);
+               if (json_object_object_get_ex(object, name, &value)) {
+                       arg.name = name;
+                       arg.value = json_object_get_string(value);
+               } else {
+                       arg.name = NULL;
+                       arg.value = NULL;
+               }
+               arg.path = NULL;
+       }
+       return arg;
 }
 
 static void xreq_success_cb(void *closure, struct json_object *obj, const char *info)
 {
        struct afb_xreq *xreq = closure;
-       afb_xreq_success(xreq, obj, info);
-}
 
-void afb_xreq_success(struct afb_xreq *xreq, struct json_object *obj, const char *info)
-{
        if (xreq->replied) {
                ERROR("reply called more than one time!!");
                json_object_put(obj);
        } else {
                xreq->replied = 1;
                if (xreq->queryitf->success)
-                       xreq->queryitf->success(xreq->query, obj, info);
+                       xreq->queryitf->success(xreq, obj, info);
                else
-                       xreq->queryitf->reply(xreq->query, 0, afb_msg_json_reply_ok(info, obj, &xreq->context, NULL));
+                       xreq->queryitf->reply(xreq, 0, afb_msg_json_reply_ok(info, obj, &xreq->context, NULL));
        }
 }
 
 static void xreq_fail_cb(void *closure, const char *status, const char *info)
 {
        struct afb_xreq *xreq = closure;
-       afb_xreq_fail(xreq, status, info);
-}
 
-void afb_xreq_fail(struct afb_xreq *xreq, const char *status, const char *info)
-{
        if (xreq->replied) {
                ERROR("reply called more than one time!!");
        } else {
                xreq->replied = 1;
                if (xreq->queryitf->fail)
-                       xreq->queryitf->fail(xreq->query, status, info);
+                       xreq->queryitf->fail(xreq, status, info);
                else
-                       xreq->queryitf->reply(xreq->query, 1, afb_msg_json_reply_error(status, info, &xreq->context, NULL));
+                       xreq->queryitf->reply(xreq, -1, afb_msg_json_reply_error(status, info, &xreq->context, NULL));
        }
 }
 
-static const char *xreq_raw_cb(void *closure, size_t *size)
-{
-       struct afb_xreq *xreq = closure;
-       return afb_xreq_raw(xreq, size);
-}
-
-const char *afb_xreq_raw(struct afb_xreq *xreq, size_t *size)
+static void xreq_vsuccess_cb(void *closure, struct json_object *obj, const char *fmt, va_list args)
 {
-       const char *result = json_object_to_json_string(xreq_json_cb(xreq));
-       if (size != NULL)
-               *size = strlen(result);
-       return result;
+       vinfo(closure, obj, fmt, args, (void*)xreq_success_cb);
 }
 
-static void xreq_send_cb(void *closure, const char *buffer, size_t size)
+static void xreq_vfail_cb(void *closure, const char *status, const char *fmt, va_list args)
 {
-       struct json_object *obj = json_tokener_parse(buffer);
-       if (!obj == !buffer)
-               xreq_success_cb(closure, obj, "fake send");
-       else
-               xreq_fail_cb(closure, "fake-send-failed", "fake send");
+       vinfo(closure, (void*)status, fmt, args, (void*)xreq_fail_cb);
 }
 
 static void *xreq_context_get_cb(void *closure)
@@ -126,25 +306,13 @@ static void xreq_context_set_cb(void *closure, void *value, void (*free_value)(v
 static void xreq_addref_cb(void *closure)
 {
        struct afb_xreq *xreq = closure;
-       afb_xreq_addref(xreq);
-}
-
-void afb_xreq_addref(struct afb_xreq *xreq)
-{
-       xreq->refcount++;
+       xreq_addref(xreq);
 }
 
 static void xreq_unref_cb(void *closure)
 {
        struct afb_xreq *xreq = closure;
-       afb_xreq_unref(xreq);
-}
-
-void afb_xreq_unref(struct afb_xreq *xreq)
-{
-       if (!--xreq->refcount) {
-               xreq->queryitf->unref(xreq->query);
-       }
+       xreq_unref(xreq);
 }
 
 static void xreq_session_close_cb(void *closure)
@@ -170,7 +338,7 @@ int afb_xreq_subscribe(struct afb_xreq *xreq, struct afb_event event)
        if (xreq->listener)
                return afb_evt_add_watch(xreq->listener, event);
        if (xreq->queryitf->subscribe)
-               return xreq->queryitf->subscribe(xreq->query, event);
+               return xreq->queryitf->subscribe(xreq, event);
        ERROR("no event listener, subscription impossible");
        errno = EINVAL;
        return -1;
@@ -187,7 +355,7 @@ int afb_xreq_unsubscribe(struct afb_xreq *xreq, struct afb_event event)
        if (xreq->listener)
                return afb_evt_remove_watch(xreq->listener, event);
        if (xreq->queryitf->unsubscribe)
-               return xreq->queryitf->unsubscribe(xreq->query, event);
+               return xreq->queryitf->unsubscribe(xreq, event);
        ERROR("no event listener, unsubscription impossible");
        errno = EINVAL;
        return -1;
@@ -196,24 +364,98 @@ int afb_xreq_unsubscribe(struct afb_xreq *xreq, struct afb_event event)
 static void xreq_subcall_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*), void *cb_closure)
 {
        struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
 
-       afb_xreq_subcall(xreq, api, verb, args, callback, cb_closure);
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error());
+               json_object_put(args);
+       } else {
+               subcall->callback = callback;
+               subcall->closure = cb_closure;
+               subcall_process(subcall);
+       }
 }
 
-void afb_xreq_subcall(struct afb_xreq *xreq, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*), void *cb_closure)
+static void xreq_subcall_req_reply_cb(void *closure, int status, struct json_object *result)
 {
-       if (xreq->queryitf->subcall)
-               xreq->queryitf->subcall(xreq->query, api, verb, args, callback, cb_closure);
-       else
-               afb_subcall(xreq, api, verb, args, callback, cb_closure);
+       struct subcall *subcall = closure;
+       subcall->hooked.callback2(subcall->hooked.closure, status, result, to_req(subcall->caller));
+}
+
+static void xreq_subcall_req_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*, struct afb_req), void *cb_closure)
+{
+       struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
+
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error(), to_req(xreq));
+               json_object_put(args);
+       } else {
+               subcall->callback = xreq_subcall_req_reply_cb;
+               subcall->closure = subcall;
+               subcall->hooked.callback2 = callback;
+               subcall->hooked.closure = cb_closure;
+               subcall_process(subcall);
+       }
 }
 
+
 static int xreq_subcallsync_cb(void *closure, const char *api, const char *verb, struct json_object *args, struct json_object **result)
 {
+       int rc;
+       struct subcall *subcall;
        struct afb_xreq *xreq = closure;
-       return afb_subcall_sync(xreq, api, verb, args, result);
+       struct json_object *resu;
+
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (!subcall) {
+               rc = -1;
+               resu = afb_msg_json_internal_error();
+               json_object_put(args);
+       } else {
+               subcall->callback = subcall_sync_reply;
+               subcall->closure = subcall;
+               subcall->jobloop = NULL;
+               subcall->result = NULL;
+               subcall->status = 0;
+               rc = jobs_enter(NULL, 0, subcall_sync_enter, subcall);
+               resu = subcall->result;
+               if (rc < 0 || subcall->status < 0) {
+                       resu = resu ?: afb_msg_json_internal_error();
+                       rc = -1;
+               }
+       }
+       if (result)
+               *result = resu;
+       else
+               json_object_put(resu);
+       return rc;
+}
+
+static void xreq_vverbose_cb(void*closure, int level, const char *file, int line, const char *func, const char *fmt, va_list args)
+{
+       /* TODO: improves the implementation. example: on condition make a list of log messages that will be returned */
+       vverbose(level, file, line, func, fmt, args);
+}
+
+static struct afb_stored_req *xreq_store_cb(void *closure)
+{
+       xreq_addref_cb(closure);
+       return closure;
 }
 
+static int xreq_has_permission_cb(void*closure, const char *permission)
+{
+       struct afb_xreq *xreq = closure;
+       return afb_auth_has_permission(xreq, permission);
+}
+
+/******************************************************************************/
+
 static struct json_object *xreq_hooked_json_cb(void *closure)
 {
        struct json_object *r = xreq_json_cb(closure);
@@ -242,19 +484,14 @@ static void xreq_hooked_fail_cb(void *closure, const char *status, const char *i
        xreq_fail_cb(closure, status, info);
 }
 
-static const char *xreq_hooked_raw_cb(void *closure, size_t *size)
+static void xreq_hooked_vsuccess_cb(void *closure, struct json_object *obj, const char *fmt, va_list args)
 {
-       size_t s;
-       const char *r = xreq_raw_cb(closure, size ? : &s);
-       struct afb_xreq *xreq = closure;
-       return afb_hook_xreq_raw(xreq, r, *(size ? : &s));
+       vinfo(closure, obj, fmt, args, (void*)xreq_hooked_success_cb);
 }
 
-static void xreq_hooked_send_cb(void *closure, const char *buffer, size_t size)
+static void xreq_hooked_vfail_cb(void *closure, const char *status, const char *fmt, va_list args)
 {
-       struct afb_xreq *xreq = closure;
-       afb_hook_xreq_send(xreq, buffer, size);
-       xreq_send_cb(closure, buffer, size);
+       vinfo(closure, (void*)status, fmt, args, (void*)xreq_hooked_fail_cb);
 }
 
 static void *xreq_hooked_context_get_cb(void *closure)
@@ -277,12 +514,14 @@ static void xreq_hooked_addref_cb(void *closure)
        afb_hook_xreq_addref(xreq);
        xreq_addref_cb(closure);
 }
-/*
+
 static void xreq_hooked_unref_cb(void *closure)
 {
-       TODO
+       struct afb_xreq *xreq = closure;
+       afb_hook_xreq_unref(xreq);
+       xreq_unref_cb(closure);
 }
-*/
+
 static void xreq_hooked_session_close_cb(void *closure)
 {
        struct afb_xreq *xreq = closure;
@@ -311,27 +550,105 @@ static int xreq_hooked_unsubscribe_cb(void *closure, struct afb_event event)
        return afb_hook_xreq_unsubscribe(xreq, event, r);
 }
 
-/*
+static void xreq_hooked_subcall_reply_cb(void *closure, int status, struct json_object *result)
+{
+       struct subcall *subcall = closure;
+
+       afb_hook_xreq_subcall_result(subcall->caller, status, result);
+       subcall->hooked.callback(subcall->hooked.closure, status, result);
+}
+
 static void xreq_hooked_subcall_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*), void *cb_closure)
 {
        struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
+
+       afb_hook_xreq_subcall(xreq, api, verb, args);
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error());
+               json_object_put(args);
+       } else {
+               subcall->callback = xreq_hooked_subcall_reply_cb;
+               subcall->closure = subcall;
+               subcall->hooked.callback = callback;
+               subcall->hooked.closure = cb_closure;
+               subcall_process(subcall);
+       }
+}
+
+static void xreq_hooked_subcall_req_reply_cb(void *closure, int status, struct json_object *result)
+{
+       struct subcall *subcall = closure;
+
+       afb_hook_xreq_subcall_req_result(subcall->caller, status, result);
+       subcall->hooked.callback2(subcall->hooked.closure, status, result, to_req(subcall->caller));
+}
 
-       afb_xreq_subcall(xreq, api, verb, args, callback, cb_closure);
+static void xreq_hooked_subcall_req_cb(void *closure, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*, struct afb_req), void *cb_closure)
+{
+       struct afb_xreq *xreq = closure;
+       struct subcall *subcall;
+
+       afb_hook_xreq_subcall_req(xreq, api, verb, args);
+       subcall = subcall_alloc(xreq, api, verb, args);
+       if (subcall == NULL) {
+               if (callback)
+                       callback(cb_closure, 1, afb_msg_json_internal_error(), to_req(xreq));
+               json_object_put(args);
+       } else {
+               subcall->callback = xreq_hooked_subcall_req_reply_cb;
+               subcall->closure = subcall;
+               subcall->hooked.callback2 = callback;
+               subcall->hooked.closure = cb_closure;
+               subcall_process(subcall);
+       }
 }
 
 static int xreq_hooked_subcallsync_cb(void *closure, const char *api, const char *verb, struct json_object *args, struct json_object **result)
+{
+       int r;
+       struct afb_xreq *xreq = closure;
+       afb_hook_xreq_subcallsync(xreq, api, verb, args);
+       r = xreq_subcallsync_cb(closure, api, verb, args, result);
+       return afb_hook_xreq_subcallsync_result(xreq, r, *result);
+}
+
+static void xreq_hooked_vverbose_cb(void*closure, int level, const char *file, int line, const char *func, const char *fmt, va_list args)
 {
        struct afb_xreq *xreq = closure;
-       return afb_subcall_sync(xreq, api, verb, args, result);
+       va_list ap;
+       va_copy(ap, args);
+       xreq_vverbose_cb(closure, level, file, line, func, fmt, args);
+       afb_hook_xreq_vverbose(xreq, level, file, line, func, fmt, ap);
+       va_end(ap);
 }
-*/
+
+static struct afb_stored_req *xreq_hooked_store_cb(void *closure)
+{
+       struct afb_xreq *xreq = closure;
+       struct afb_stored_req *r = xreq_store_cb(closure);
+       afb_hook_xreq_store(xreq, r);
+       return r;
+}
+
+static int xreq_hooked_has_permission_cb(void*closure, const char *permission)
+{
+       struct afb_xreq *xreq = closure;
+       int r = xreq_has_permission_cb(closure, permission);
+       return afb_hook_xreq_has_permission(xreq, permission, r);
+}
+
+/******************************************************************************/
+
 const struct afb_req_itf xreq_itf = {
        .json = xreq_json_cb,
        .get = xreq_get_cb,
        .success = xreq_success_cb,
        .fail = xreq_fail_cb,
-       .raw = xreq_raw_cb,
-       .send = xreq_send_cb,
+       .vsuccess = xreq_vsuccess_cb,
+       .vfail = xreq_vfail_cb,
        .context_get = xreq_context_get_cb,
        .context_set = xreq_context_set_cb,
        .addref = xreq_addref_cb,
@@ -341,7 +658,11 @@ const struct afb_req_itf xreq_itf = {
        .subscribe = xreq_subscribe_cb,
        .unsubscribe = xreq_unsubscribe_cb,
        .subcall = xreq_subcall_cb,
-       .subcallsync = xreq_subcallsync_cb
+       .subcallsync = xreq_subcallsync_cb,
+       .vverbose = xreq_vverbose_cb,
+       .store = xreq_store_cb,
+       .subcall_req = xreq_subcall_req_cb,
+       .has_permission = xreq_has_permission_cb
 };
 
 const struct afb_req_itf xreq_hooked_itf = {
@@ -349,23 +670,42 @@ const struct afb_req_itf xreq_hooked_itf = {
        .get = xreq_hooked_get_cb,
        .success = xreq_hooked_success_cb,
        .fail = xreq_hooked_fail_cb,
-       .raw = xreq_hooked_raw_cb,
-       .send = xreq_hooked_send_cb,
+       .vsuccess = xreq_hooked_vsuccess_cb,
+       .vfail = xreq_hooked_vfail_cb,
        .context_get = xreq_hooked_context_get_cb,
        .context_set = xreq_hooked_context_set_cb,
        .addref = xreq_hooked_addref_cb,
-.unref = xreq_unref_cb,
+       .unref = xreq_hooked_unref_cb,
        .session_close = xreq_hooked_session_close_cb,
        .session_set_LOA = xreq_hooked_session_set_LOA_cb,
        .subscribe = xreq_hooked_subscribe_cb,
        .unsubscribe = xreq_hooked_unsubscribe_cb,
-.subcall = xreq_subcall_cb,
-.subcallsync = xreq_subcallsync_cb
+       .subcall = xreq_hooked_subcall_cb,
+       .subcallsync = xreq_hooked_subcallsync_cb,
+       .vverbose = xreq_hooked_vverbose_cb,
+       .store = xreq_hooked_store_cb,
+       .subcall_req = xreq_hooked_subcall_req_cb,
+       .has_permission = xreq_hooked_has_permission_cb
 };
 
-static inline struct afb_req to_req(struct afb_xreq *xreq)
+/******************************************************************************/
+
+struct afb_req afb_xreq_unstore(struct afb_stored_req *sreq)
 {
-       return (struct afb_req){ .itf = xreq->hookflags ? &xreq_hooked_itf : &xreq_itf, .closure = xreq };
+       struct afb_xreq *xreq = (struct afb_xreq *)sreq;
+       if (xreq->hookflags)
+               afb_hook_xreq_unstore(xreq);
+       return to_req(xreq);
+}
+
+struct json_object *afb_xreq_json(struct afb_xreq *xreq)
+{
+       return afb_req_json(to_req(xreq));
+}
+
+void afb_xreq_success(struct afb_xreq *xreq, struct json_object *obj, const char *info)
+{
+       afb_req_success(to_req(xreq), obj, info);
 }
 
 void afb_xreq_success_f(struct afb_xreq *xreq, struct json_object *obj, const char *info, ...)
@@ -380,6 +720,11 @@ void afb_xreq_success_f(struct afb_xreq *xreq, struct json_object *obj, const ch
        free(message);
 }
 
+void afb_xreq_fail(struct afb_xreq *xreq, const char *status, const char *info)
+{
+       afb_req_fail(to_req(xreq), status, info);
+}
+
 void afb_xreq_fail_f(struct afb_xreq *xreq, const char *status, const char *info, ...)
 {
        char *message;
@@ -392,62 +737,207 @@ void afb_xreq_fail_f(struct afb_xreq *xreq, const char *status, const char *info
        free(message);
 }
 
-static int xcheck(struct afb_xreq *xreq, int sessionflags)
+const char *afb_xreq_raw(struct afb_xreq *xreq, size_t *size)
+{
+       struct json_object *obj = xreq_json_cb(xreq);
+       const char *result = json_object_to_json_string(obj);
+       if (size != NULL)
+               *size = strlen(result);
+       return result;
+}
+
+void afb_xreq_addref(struct afb_xreq *xreq)
+{
+       afb_req_addref(to_req(xreq));
+}
+
+void afb_xreq_unref(struct afb_xreq *xreq)
+{
+       afb_req_unref(to_req(xreq));
+}
+
+void afb_xreq_unhooked_subcall(struct afb_xreq *xreq, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*), void *cb_closure)
+{
+       xreq_subcall_cb(xreq, api, verb, args, callback, cb_closure);
+}
+
+void afb_xreq_subcall(struct afb_xreq *xreq, const char *api, const char *verb, struct json_object *args, void (*callback)(void*, int, struct json_object*), void *cb_closure)
+{
+       afb_req_subcall(to_req(xreq), api, verb, args, callback, cb_closure);
+}
+
+int afb_xreq_unhooked_subcall_sync(struct afb_xreq *xreq, const char *api, const char *verb, struct json_object *args, struct json_object **result)
+{
+       return xreq_subcallsync_cb(xreq, api, verb, args, result);
+}
+
+int afb_xreq_subcall_sync(struct afb_xreq *xreq, const char *api, const char *verb, struct json_object *args, struct json_object **result)
 {
-       if ((sessionflags & (AFB_SESSION_CREATE|AFB_SESSION_CLOSE|AFB_SESSION_RENEW|AFB_SESSION_CHECK|AFB_SESSION_LOA_EQ)) != 0) {
+       return afb_req_subcall_sync(to_req(xreq), api, verb, args, result);
+}
+
+static int xreq_session_check_apply_v1(struct afb_xreq *xreq, int sessionflags)
+{
+       int loa;
+
+       if ((sessionflags & (AFB_SESSION_CLOSE_V1|AFB_SESSION_RENEW_V1|AFB_SESSION_CHECK_V1|AFB_SESSION_LOA_EQ_V1)) != 0) {
                if (!afb_context_check(&xreq->context)) {
                        afb_context_close(&xreq->context);
-                       afb_xreq_fail_f(xreq, "failed", "invalid token's identity");
-                       return 0;
+                       afb_xreq_fail_f(xreq, "denied", "invalid token's identity");
+                       errno = EINVAL;
+                       return -1;
                }
        }
 
-       if ((sessionflags & AFB_SESSION_CREATE) != 0) {
-               if (afb_context_check_loa(&xreq->context, 1)) {
-                       afb_xreq_fail_f(xreq, "failed", "invalid creation state");
-                       return 0;
+       if ((sessionflags & AFB_SESSION_LOA_GE_V1) != 0) {
+               loa = (sessionflags >> AFB_SESSION_LOA_SHIFT_V1) & AFB_SESSION_LOA_MASK_V1;
+               if (!afb_context_check_loa(&xreq->context, loa)) {
+                       afb_xreq_fail_f(xreq, "denied", "invalid LOA");
+                       errno = EPERM;
+                       return -1;
                }
-               afb_context_change_loa(&xreq->context, 1);
-               afb_context_refresh(&xreq->context);
        }
 
-       if ((sessionflags & (AFB_SESSION_CREATE | AFB_SESSION_RENEW)) != 0)
-               afb_context_refresh(&xreq->context);
+       if ((sessionflags & AFB_SESSION_LOA_LE_V1) != 0) {
+               loa = (sessionflags >> AFB_SESSION_LOA_SHIFT_V1) & AFB_SESSION_LOA_MASK_V1;
+               if (afb_context_check_loa(&xreq->context, loa + 1)) {
+                       afb_xreq_fail_f(xreq, "denied", "invalid LOA");
+                       errno = EPERM;
+                       return -1;
+               }
+       }
 
-       if ((sessionflags & AFB_SESSION_CLOSE) != 0) {
+       if ((sessionflags & AFB_SESSION_RENEW_V1) != 0) {
+               afb_context_refresh(&xreq->context);
+       }
+       if ((sessionflags & AFB_SESSION_CLOSE_V1) != 0) {
                afb_context_change_loa(&xreq->context, 0);
                afb_context_close(&xreq->context);
        }
 
-       if ((sessionflags & AFB_SESSION_LOA_GE) != 0) {
-               int loa = (sessionflags >> AFB_SESSION_LOA_SHIFT) & AFB_SESSION_LOA_MASK;
-               if (!afb_context_check_loa(&xreq->context, loa)) {
-                       afb_xreq_fail_f(xreq, "failed", "invalid LOA");
-                       return 0;
+       return 0;
+}
+
+static int xreq_session_check_apply_v2(struct afb_xreq *xreq, uint32_t sessionflags, const struct afb_auth *auth)
+{
+       int loa;
+
+       if (sessionflags != 0) {
+               if (!afb_context_check(&xreq->context)) {
+                       afb_context_close(&xreq->context);
+                       afb_xreq_fail_f(xreq, "denied", "invalid token's identity");
+                       errno = EINVAL;
+                       return -1;
                }
        }
 
-       if ((sessionflags & AFB_SESSION_LOA_LE) != 0) {
-               int loa = (sessionflags >> AFB_SESSION_LOA_SHIFT) & AFB_SESSION_LOA_MASK;
-               if (afb_context_check_loa(&xreq->context, loa + 1)) {
-                       afb_xreq_fail_f(xreq, "failed", "invalid LOA");
-                       return 0;
-               }
+       loa = (int)(sessionflags & AFB_SESSION_LOA_MASK_V2);
+       if (loa && !afb_context_check_loa(&xreq->context, loa)) {
+               afb_xreq_fail_f(xreq, "denied", "invalid LOA");
+               errno = EPERM;
+               return -1;
+       }
+
+       if (auth && !afb_auth_check(xreq, auth)) {
+               afb_xreq_fail_f(xreq, "denied", "authorisation refused");
+               errno = EPERM;
+               return -1;
+       }
+
+       if ((sessionflags & AFB_SESSION_REFRESH_V2) != 0) {
+               afb_context_refresh(&xreq->context);
+       }
+       if ((sessionflags & AFB_SESSION_CLOSE_V2) != 0) {
+               afb_context_close(&xreq->context);
        }
-       return 1;
+
+       return 0;
+}
+
+void afb_xreq_call_verb_v1(struct afb_xreq *xreq, const struct afb_verb_desc_v1 *verb)
+{
+       if (!verb)
+               afb_xreq_fail_unknown_verb(xreq);
+       else
+               if (!xreq_session_check_apply_v1(xreq, verb->session))
+                       verb->callback(to_req(xreq));
+}
+
+void afb_xreq_call_verb_v2(struct afb_xreq *xreq, const struct afb_verb_v2 *verb)
+{
+       if (!verb)
+               afb_xreq_fail_unknown_verb(xreq);
+       else
+               if (!xreq_session_check_apply_v2(xreq, verb->session, verb->auth))
+                       verb->callback(to_req(xreq));
+}
+
+void afb_xreq_init(struct afb_xreq *xreq, const struct afb_xreq_query_itf *queryitf)
+{
+       memset(xreq, 0, sizeof *xreq);
+       xreq->refcount = 1;
+       xreq->queryitf = queryitf;
+}
+
+void afb_xreq_fail_unknown_api(struct afb_xreq *xreq)
+{
+       afb_xreq_fail_f(xreq, "unknown-api", "api %s not found (for verb %s)", xreq->api, xreq->verb);
 }
 
-void afb_xreq_call(struct afb_xreq *xreq, int sessionflags, void (*method)(struct afb_req req))
+void afb_xreq_fail_unknown_verb(struct afb_xreq *xreq)
 {
-       if (xcheck(xreq, sessionflags))
-               method(to_req(xreq));
+       afb_xreq_fail_f(xreq, "unknown-verb", "verb %s unknown within api %s", xreq->verb, xreq->api);
 }
 
-void afb_xreq_begin(struct afb_xreq *xreq)
+static void process_sync(struct afb_xreq *xreq)
 {
+       const struct afb_api *api;
+
+       /* init hooking */
        afb_hook_init_xreq(xreq);
        if (xreq->hookflags)
                afb_hook_xreq_begin(xreq);
+
+       /* search the api */
+       api = (const struct afb_api*)xreq->context.api_key;
+       if (api)
+               api->itf->call(api->closure, xreq);
+       else {
+               api = afb_apiset_lookup_started(xreq->apiset, xreq->api, 1);
+               if (errno == ENOENT)
+                       afb_xreq_fail_f(xreq, "unknown-api", "api %s not found", xreq->api);
+               else
+                       afb_xreq_fail_f(xreq, "bad-api-state", "api %s not started correctly: %m", xreq->api);
+       }
 }
 
+static void process_async(int signum, void *arg)
+{
+       struct afb_xreq *xreq = arg;
+
+       if (signum != 0) {
+               afb_xreq_fail_f(xreq, "aborted", "signal %s(%d) caught", strsignal(signum), signum);
+       } else {
+               process_sync(xreq);
+       }
+       xreq_unref(xreq);
+}
+
+void afb_xreq_process(struct afb_xreq *xreq, struct afb_apiset *apiset)
+{
+       const struct afb_api *api;
+
+       xreq->apiset = apiset;
+       api = afb_apiset_lookup_started(apiset, xreq->api, 1);
+       xreq->context.api_key = (void*)api;
+
+       xreq_addref(xreq);
+       if (jobs_queue(api && api->noconcurrency ? (void*)api : NULL, afb_apiset_timeout_get(apiset), process_async, xreq) < 0) {
+               /* TODO: allows or not to proccess it directly as when no threading? (see above) */
+               ERROR("can't process job with threads: %m");
+               afb_xreq_fail_f(xreq, "cancelled", "not able to create a job for the task");
+               xreq_unref(xreq);
+       }
+       xreq_unref(xreq);
+}