X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;f=src%2Fafb-context.c;h=5235707f09d3e0d97ac63d56f714b23993e08e47;hb=b70caad7da2eaea85db06dec8377b1cbebcec997;hp=6057e69dd72fba402f3a020525117c44467c8936;hpb=29ae81fa15c6080fd27929f4cc78e1289cb920e9;p=src%2Fapp-framework-binder.git diff --git a/src/afb-context.c b/src/afb-context.c index 6057e69d..5235707f 100644 --- a/src/afb-context.c +++ b/src/afb-context.c @@ -25,8 +25,12 @@ #include "afb-session.h" #include "afb-context.h" +#include "afb-token.h" +#include "afb-cred.h" +#include "afb-permission-text.h" +#include "verbose.h" -static void init_context(struct afb_context *context, struct afb_session *session, const char *token) +static void init_context(struct afb_context *context, struct afb_session *session, struct afb_token *token, struct afb_cred *cred) { assert(session != NULL); @@ -35,38 +39,40 @@ static void init_context(struct afb_context *context, struct afb_session *sessio context->flags = 0; context->super = NULL; context->api_key = NULL; + context->token = afb_token_addref(token); + context->credentials = afb_cred_addref(cred); /* check the token */ if (token != NULL) { - if (afb_session_check_token(session, token)) + if (afb_token_check(token)) context->validated = 1; else context->invalidated = 1; } } -void afb_context_init(struct afb_context *context, struct afb_session *session, const char *token) +void afb_context_init(struct afb_context *context, struct afb_session *session, struct afb_token *token, struct afb_cred *cred) { - init_context(context, afb_session_addref(session), token); + init_context(context, afb_session_addref(session), token, cred); } -void afb_context_init_validated(struct afb_context *context, struct afb_session *session) +void afb_context_init_validated(struct afb_context *context, struct afb_session *session, struct afb_token *token, struct afb_cred *cred) { - afb_context_init(context, session, NULL); + afb_context_init(context, session, token, cred); context->validated = 1; } void afb_context_subinit(struct afb_context *context, struct afb_context *super) { - context->session = super->session; + context->session = afb_session_addref(super->session); context->flags = 0; context->super = super; context->api_key = NULL; - context->token = NULL; - context->validated = super->validated; + context->token = afb_token_addref(super->token); + context->credentials = afb_cred_addref(super->credentials); } -int afb_context_connect(struct afb_context *context, const char *uuid, const char *token) +int afb_context_connect(struct afb_context *context, const char *uuid, struct afb_token *token, struct afb_cred *cred) { int created; struct afb_session *session; @@ -74,17 +80,16 @@ int afb_context_connect(struct afb_context *context, const char *uuid, const cha session = afb_session_get (uuid, AFB_SESSION_TIMEOUT_DEFAULT, &created); if (session == NULL) return -1; - init_context(context, session, token); + init_context(context, session, token, cred); if (created) { context->created = 1; - /* context->refreshing = 1; */ } return 0; } -int afb_context_connect_validated(struct afb_context *context, const char *uuid) +int afb_context_connect_validated(struct afb_context *context, const char *uuid, struct afb_token *token, struct afb_cred *cred) { - int rc = afb_context_connect(context, uuid, NULL); + int rc = afb_context_connect(context, uuid, token, cred); if (!rc) context->validated = 1; return rc; @@ -92,46 +97,85 @@ int afb_context_connect_validated(struct afb_context *context, const char *uuid) void afb_context_disconnect(struct afb_context *context) { - if (context->session && !context->super) { - if (context->refreshing && !context->refreshed) { - afb_session_new_token (context->session); - context->refreshed = 1; - } - if (context->closing && !context->closed) { - afb_context_change_loa(context, 0); - afb_context_set(context, NULL, NULL); - context->closed = 1; - } - afb_session_unref(context->session); - context->session = NULL; + if (context->session && !context->super && context->closing && !context->closed) { + afb_context_change_loa(context, 0); + afb_context_set(context, NULL, NULL); + context->closed = 1; } + afb_session_unref(context->session); + context->session = NULL; + afb_cred_unref(context->credentials); + context->credentials = NULL; + afb_token_unref(context->token); + context->token = NULL; } -const char *afb_context_sent_token(struct afb_context *context) +void afb_context_change_cred(struct afb_context *context, struct afb_cred *cred) { - if (context->session == NULL || context->closing || context->super) - return NULL; - if (!context->refreshing) - return NULL; - if (!context->refreshed) { - afb_session_new_token (context->session); - context->refreshed = 1; + struct afb_cred *ocred = context->credentials; + if (ocred != cred) { + context->credentials = afb_cred_addref(cred); + afb_cred_unref(ocred); } - return afb_session_token(context->session); } -const char *afb_context_uuid(struct afb_context *context) +void afb_context_change_token(struct afb_context *context, struct afb_token *token) +{ + struct afb_token *otoken = context->token; + if (otoken != token) { + context->validated = 0; + context->invalidated = 0; + context->token = afb_token_addref(token); + afb_token_unref(otoken); + } +} + +const char *afb_context_on_behalf_export(struct afb_context *context) { - return context->session ? afb_session_uuid(context->session) : ""; + return context->credentials ? afb_cred_export(context->credentials) : NULL; } -const char *afb_context_sent_uuid(struct afb_context *context) +int afb_context_on_behalf_import(struct afb_context *context, const char *exported) { - if (context->session == NULL || context->closing || context->super) - return NULL; - if (!context->created) - return NULL; - return afb_session_uuid(context->session); + int rc; + struct afb_cred *imported, *ocred; + + if (!exported || !*exported) + rc = 0; + else { + if (afb_context_has_permission(context, afb_permission_on_behalf_credential)) { + imported = afb_cred_import(exported); + if (!imported) { + ERROR("Can't import on behalf credentials: %m"); + rc = -1; + } else { + ocred = context->credentials; + context->credentials = imported; + afb_cred_unref(ocred); + rc = 0; + } + } else { + ERROR("On behalf credentials refused"); + rc = -1; + } + } + return rc; +} + +void afb_context_on_behalf_other_context(struct afb_context *context, struct afb_context *other) +{ + afb_context_change_cred(context, other->credentials); + afb_context_change_token(context, other->token); +} + +int afb_context_has_permission(struct afb_context *context, const char *permission) +{ + return afb_cred_has_permission(context->credentials, permission, context); +} + +const char *afb_context_uuid(struct afb_context *context) +{ + return context->session ? afb_session_uuid(context->session) : NULL; } void *afb_context_make(struct afb_context *context, int replace, void *(*make_value)(void *closure), void (*free_value)(void *item), void *closure) @@ -157,20 +201,6 @@ void afb_context_close(struct afb_context *context) context->closing = 1; } -void afb_context_refresh(struct afb_context *context) -{ - if (context->super) - afb_context_refresh(context->super); - else { - assert(context->validated); - context->refreshing = 1; - if (!context->refreshed) { - afb_session_new_token (context->session); - context->refreshed = 1; - } - } -} - int afb_context_check(struct afb_context *context) { if (context->super)