use std::sync::Arc; use slog::Logger; use smol::net::TcpStream; use crate::error::{Error, Result}; use crate::api::auth; use crate::api::Bootstrap; use capnp_rpc::{twoparty, rpc_twoparty_capnp}; use crate::schema::connection_capnp; use crate::db::Databases; use crate::db::access::{AccessControl, Permission}; use crate::db::user::AuthzContext; use crate::builtin; #[derive(Debug, Clone)] /// Connection context // TODO this should track over several connections pub struct Session { // Session-spezific log pub log: Logger, authz_data: Option, accessdb: Arc, } impl Session { pub fn new(log: Logger, accessdb: Arc) -> Self { let authz_data = None; Session { log, authz_data, accessdb } } /// Check if the current session has a certain permission pub async fn check_permission>(&self, perm: &P) -> Result { if let Some(user) = self.authz_data.as_ref() { self.accessdb.check(user, perm).await } else { self.accessdb.check_roles(builtin::DEFAULT_ROLEIDS, perm).await } } } async fn handshake(log: &Logger, stream: &mut TcpStream) -> Result<()> { if let Some(m) = capnp_futures::serialize::read_message(stream.clone(), Default::default()).await? { let greeting = m.get_root::()?; let major = greeting.get_major(); let minor = greeting.get_minor(); if major != 0 { Err(Error::BadVersion((major, minor))) } else { let program = format!("{}-{}", env!("CARGO_PKG_NAME"), env!("CARGO_PKG_VERSION")); let mut answer = ::capnp::message::Builder::new_default(); let mut b = answer.init_root::(); b.set_program(&program); b.set_host("localhost"); b.set_major(0); b.set_minor(1); capnp_futures::serialize::write_message(stream, answer).await?; info!(log, "Handshake successful with peer {} running {}, API {}.{}", greeting.get_host()?, greeting.get_program()?, major, minor); Ok(()) } } else { unimplemented!() } } pub async fn handle_connection(log: Logger, mut stream: TcpStream, db: Databases) -> Result<()> { handshake(&log, &mut stream).await?; info!(log, "New connection from on {:?}", stream); let session = Arc::new(Session::new(log, db.access.clone())); let boots = Bootstrap::new(session, db); let rpc: connection_capnp::bootstrap::Client = capnp_rpc::new_client(boots); let network = twoparty::VatNetwork::new(stream.clone(), stream, rpc_twoparty_capnp::Side::Server, Default::default()); let rpc_system = capnp_rpc::RpcSystem::new(Box::new(network), Some(rpc.client)); rpc_system.await.unwrap(); Ok(()) }