524b03dea5
In order to avoid fetching keys from system_auth.roles system table on every request, a cache layer is introduced. And in order not to reinvent the wheel, the existing implementation of loading_cache with max size 1024 and a 1 minute timeout is used.
55 lines
1.9 KiB
C++
55 lines
1.9 KiB
C++
/*
|
|
* Copyright 2019 ScyllaDB
|
|
*/
|
|
|
|
/*
|
|
* This file is part of Scylla.
|
|
*
|
|
* Scylla is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Scylla is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with Scylla. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "alternator/executor.hh"
|
|
#include <seastar/core/future.hh>
|
|
#include <seastar/http/httpd.hh>
|
|
#include <seastar/net/tls.hh>
|
|
#include <optional>
|
|
#include <alternator/auth.hh>
|
|
|
|
namespace alternator {
|
|
|
|
class server {
|
|
using alternator_callback = std::function<future<json::json_return_type>(executor&, executor::client_state&, std::unique_ptr<request>)>;
|
|
using alternator_callbacks_map = std::unordered_map<std::string_view, alternator_callback>;
|
|
|
|
seastar::httpd::http_server_control _control;
|
|
seastar::httpd::http_server_control _https_control;
|
|
seastar::sharded<executor>& _executor;
|
|
key_cache _key_cache;
|
|
bool _enforce_authorization;
|
|
alternator_callbacks_map _callbacks;
|
|
public:
|
|
server(seastar::sharded<executor>& executor);
|
|
|
|
seastar::future<> init(net::inet_address addr, std::optional<uint16_t> port, std::optional<uint16_t> https_port, std::optional<tls::credentials_builder> creds, bool enforce_authorization);
|
|
private:
|
|
void set_routes(seastar::httpd::routes& r);
|
|
future<> verify_signature(const seastar::httpd::request& r);
|
|
future<json::json_return_type> handle_api_request(std::unique_ptr<request>&& req);
|
|
};
|
|
|
|
}
|
|
|