Files
probo/pkg/resourcealias/service.go
Bryan Frimin 9b0a5745a0 Add resourcealias application service
Introduce a standalone resourcealias package with its own service,
IAM policies, and OAuth2 scopes so alias management no longer lives
inside the trust center services. Remove the trust-center-specific
alias services from probo and trust, and wire the new service into
probod, the server, and the API layer.

Signed-off-by: Bryan Frimin <bryan@probo.com>
2026-06-22 11:40:09 +02:00

186 lines
4.0 KiB
Go

// Copyright (c) 2025-2026 Probo Inc <hello@probo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
package resourcealias
import (
"context"
"errors"
"fmt"
"go.gearno.de/kit/pg"
"go.probo.inc/probo/pkg/coredata"
"go.probo.inc/probo/pkg/gid"
"go.probo.inc/probo/pkg/validator"
)
const aliasMaxLength = 100
type (
Service struct {
pg *pg.Client
}
CreateRequest struct {
ResourceID gid.GID
Alias string
}
)
func NewService(pgClient *pg.Client) *Service {
return &Service{
pg: pgClient,
}
}
func (req *CreateRequest) Validate() error {
v := validator.New()
v.Check(req.ResourceID, "resource_id", validator.Required(), validator.GID())
v.Check(req.Alias, "alias", validator.Required(), validator.Slug(aliasMaxLength))
return v.Error()
}
func (s *Service) ResolveAlias(
ctx context.Context,
scope coredata.Scoper,
alias string,
) (gid.GID, error) {
record := &coredata.ResourceAlias{}
err := s.pg.WithConn(
ctx,
func(ctx context.Context, conn pg.Querier) error {
if err := record.LoadByAlias(ctx, conn, scope, alias); err != nil {
return fmt.Errorf("cannot load resource alias: %w", err)
}
return nil
},
)
if err != nil {
return gid.Nil, err
}
return record.ResourceID, nil
}
func (s *Service) Create(
ctx context.Context,
scope coredata.Scoper,
req CreateRequest,
) (*coredata.ResourceAlias, error) {
if err := req.Validate(); err != nil {
return nil, err
}
alias := &coredata.ResourceAlias{}
err := s.pg.WithConn(
ctx,
func(ctx context.Context, conn pg.Querier) error {
if err := alias.Upsert(ctx, conn, scope, req.ResourceID, req.Alias); err != nil {
return fmt.Errorf("cannot create resource alias: %w", err)
}
return nil
},
)
if err != nil {
return nil, err
}
return alias, nil
}
func (s *Service) Remove(
ctx context.Context,
scope coredata.Scoper,
resourceID gid.GID,
) error {
return s.pg.WithConn(
ctx,
func(ctx context.Context, conn pg.Querier) error {
alias := &coredata.ResourceAlias{ResourceID: resourceID}
if err := alias.Delete(ctx, conn, scope); err != nil {
return fmt.Errorf("cannot remove resource alias: %w", err)
}
return nil
},
)
}
func (s *Service) GetByResourceID(
ctx context.Context,
scope coredata.Scoper,
resourceID gid.GID,
) (*string, error) {
record := &coredata.ResourceAlias{}
err := s.pg.WithConn(
ctx,
func(ctx context.Context, conn pg.Querier) error {
if err := record.LoadByResourceID(ctx, conn, scope, resourceID); err != nil {
return fmt.Errorf("cannot load resource alias: %w", err)
}
return nil
},
)
if err != nil {
if errors.Is(err, coredata.ErrResourceNotFound) {
return nil, nil
}
return nil, err
}
return &record.Alias, nil
}
func (s *Service) LoadByResourceIDs(
ctx context.Context,
scope coredata.Scoper,
resourceIDs []gid.GID,
) (map[gid.GID]string, error) {
if len(resourceIDs) == 0 {
return map[gid.GID]string{}, nil
}
var aliases coredata.ResourceAliases
err := s.pg.WithConn(
ctx,
func(ctx context.Context, conn pg.Querier) error {
if err := aliases.LoadByResourceIDs(ctx, conn, scope, resourceIDs); err != nil {
return fmt.Errorf("cannot load resource aliases: %w", err)
}
return nil
},
)
if err != nil {
return nil, err
}
result := make(map[gid.GID]string, len(aliases))
for _, alias := range aliases {
result[alias.ResourceID] = alias.Alias
}
return result, nil
}