sessions.go

/*
 * Copyright (c) 2018. Abstrium SAS <team (at) pydio.com>
 * This file is part of Pydio Cells.
 *
 * Pydio Cells is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Pydio Cells is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with Pydio Cells.  If not, see <http://www.gnu.org/licenses/>.
 *
 * The latest code can be found at <https://pydio.com>.
 */

// Package websocket starts a WebSocket service forwarding internal events to http clients
package websocket

import (
	"context"

	"github.com/pydio/melody"
	"go.uber.org/zap"
	"golang.org/x/time/rate"

	"github.com/pydio/cells/common/auth/claim"
	"github.com/pydio/cells/common/log"
	"github.com/pydio/cells/common/utils/permissions"
	"github.com/pydio/cells/common/views"
)

const SessionRolesKey = "roles"
const SessionWorkspacesKey = "workspaces"
const SessionAccessListKey = "accessList"
const SessionUsernameKey = "user"
const SessionProfileKey = "profile"
const SessionClaimsKey = "claims"
const SessionLimiterKey = "limiter"

const LimiterRate = 30
const LimiterBurst = 20

func UpdateSessionFromClaims(session *melody.Session, claims claim.Claims, pool *views.ClientsPool) {

	ctx := context.WithValue(context.Background(), claim.ContextKey, claims)
	vNodeManager := views.GetVirtualNodesManager()
	if accessList, err := permissions.AccessListFromContextClaims(ctx); err == nil {
		roles := accessList.OrderedRoles
		workspaces := accessList.Workspaces
		// Resolve workspaces roots in the current context
		for _, workspaces := range workspaces {
			var resolvedRoots []string
			for _, rootId := range workspaces.RootUUIDs {
				if vNode, exists := vNodeManager.ByUuid(rootId); exists {
					if resolved, e := vNodeManager.ResolveInContext(ctx, vNode, pool, true); e == nil && resolved.Uuid != "" {
						resolvedRoots = append(resolvedRoots, resolved.Uuid)
					}
					continue // skip this node totally if the resolution failed
				}
				resolvedRoots = append(resolvedRoots, rootId)
			}
			workspaces.RootUUIDs = resolvedRoots
		}
		log.Logger(ctx).Debug("Setting workspaces in session", zap.Any("workspaces", workspaces))
		session.Set(SessionRolesKey, roles)
		session.Set(SessionWorkspacesKey, workspaces)
		session.Set(SessionAccessListKey, accessList)
		session.Set(SessionUsernameKey, claims.Name)
		session.Set(SessionProfileKey, claims.Profile)
		session.Set(SessionClaimsKey, claims)
		session.Set(SessionLimiterKey, rate.NewLimiter(LimiterRate, LimiterBurst))
	} else {
		log.Logger(ctx).Error("Error while setting workspaces in session", zap.Error(err))
		ClearSession(session)
	}

}

func ClearSession(session *melody.Session) {

	session.Set(SessionRolesKey, nil)
	session.Set(SessionWorkspacesKey, nil)
	session.Set(SessionAccessListKey, nil)
	session.Set(SessionUsernameKey, nil)
	session.Set(SessionProfileKey, nil)
	session.Set(SessionClaimsKey, nil)
	session.Set(SessionLimiterKey, nil)

}