@ -1,50 +1,190 @@
@@ -1,50 +1,190 @@
/* © SRSoftware 2024 */
package de.srsoftware.oidc.datastore.sqlite ;
import static de.srsoftware.utils.Strings.uuid ;
import static java.util.Optional.empty ;
import de.srsoftware.oidc.api.UserService ;
import de.srsoftware.oidc.api.data.AccessToken ;
import de.srsoftware.oidc.api.data.Permission ;
import de.srsoftware.oidc.api.data.User ;
import java.sql.Connection ;
import java.util.List ;
import java.util.Optional ;
import java.util.Set ;
import java.sql.ResultSet ;
import java.sql.SQLException ;
import java.time.Duration ;
import java.time.Instant ;
import java.time.temporal.ChronoUnit ;
import java.util.* ;
public class SqliteUserService extends SqliteStore implements UserService {
private static final String SELECT_USERSTORE_VERSION = "SELECT * FROM metainfo WHERE key = 'user_store_version'" ;
private static final String SET_USERSTORE_VERSION = "UPDATE metainfo SET value = ? WHERE key = 'user_store_version'" ;
private static final String CREATE_USER_TABLE = "CREATE TABLE IF NOT EXISTS users(uuid VARCHAR(255) NOT NULL PRIMARY KEY, password VARCHAR(255), email VARCHAR(255), sessionDuration INT NOT NULL DEFAULT 10, username VARCHAR(255), realname VARCHAR(255));" ;
private static final String CREATE_USER_PERMISSION_TABLE = "CREATE TABLE IF NOT EXISTS user_permissions(uuid VARCHAR(255), permission VARCHAR(50), PRIMARY KEY(uuid,permission));" ;
private static final String COUNT_USERS = "SELECT count(*) FROM users" ;
private static final String INSERT_USER = "INSERT INTO users (uuid,password,email,sessionDuration,username,realname) VALUES (?,?,?,?,?,?)" ;
private static final String DROP_PERMISSIONS = "DELETE FROM user_permissions WHERE uuid = ?" ;
private static final String INSERT_PERMISSIONS = "INSERT INTO user_permissions (uuid, permission) VALUES (?,?)" ;
private static final String DROP_USER = "DELETE FROM users WHERE uuid = ?" ;
private static final String LIST_USERS = "SELECT * FROM users" ;
private static final String LIST_USER_PERMISSIONS = "SELECT * FROM user_permissions WHERE uuid = ?" ;
private Map < String , AccessToken > accessTokens = new HashMap < > ( ) ;
public class SqliteUserService implements UserService {
private final Connection conn ;
public SqliteUserService ( Connection connection ) {
conn = connection ;
public SqliteUserService ( Connection connection ) throws SQLException {
super ( connection ) ;
}
@Override
public AccessToken accessToken ( User user ) {
return null ;
var token = new AccessToken ( uuid ( ) , Objects . requireNonNull ( user ) , Instant . now ( ) . plus ( 1 , ChronoUnit . HOURS ) ) ;
accessTokens . put ( token . id ( ) , token ) ;
return token ;
}
@Override
public Optional < User > consumeToken ( String accessToken ) {
return Optional . empty ( ) ;
public Optional < User > consumeToken ( String id ) {
var user = forToken ( id ) ;
accessTokens . remove ( id ) ;
return user ;
}
private void dropPermissionsOf ( String uuid ) throws SQLException {
var stmt = conn . prepareStatement ( DROP_PERMISSIONS ) ;
stmt . setString ( 1 , uuid ) ;
stmt . execute ( ) ;
}
@Override
public UserService delete ( User user ) {
return null ;
try {
conn . setAutoCommit ( false ) ;
dropPermissionsOf ( user . uuid ( ) ) ;
var stmt = conn . prepareStatement ( DROP_USER ) ;
stmt . setString ( 1 , user . uuid ( ) ) ;
stmt . execute ( ) ;
conn . commit ( ) ;
} catch ( SQLException e ) {
throw new RuntimeException ( e ) ;
}
return this ;
}
@Override
public Optional < User > forToken ( String accessToken ) {
return Optional . empty ( ) ;
public Optional < User > forToken ( String id ) {
AccessToken token = accessTokens . get ( id ) ;
if ( token = = null ) return empty ( ) ;
if ( token . valid ( ) ) return Optional . of ( token . user ( ) ) ;
accessTokens . remove ( id ) ;
return empty ( ) ;
}
@Override
public UserService init ( User defaultUser ) {
return null ;
try {
var rs = conn . prepareStatement ( COUNT_USERS ) . executeQuery ( ) ;
var count = rs . next ( ) ? rs . getInt ( 1 ) : 0 ;
if ( count < 1 ) {
var stmt = conn . prepareStatement ( INSERT_USER ) ;
stmt . setString ( 1 , defaultUser . uuid ( ) ) ;
stmt . setString ( 2 , defaultUser . hashedPassword ( ) ) ;
stmt . setString ( 3 , defaultUser . email ( ) ) ;
stmt . setLong ( 4 , defaultUser . sessionDuration ( ) . toMinutes ( ) ) ;
stmt . setString ( 5 , defaultUser . username ( ) ) ;
stmt . setString ( 6 , defaultUser . realName ( ) ) ;
stmt . execute ( ) ;
}
rs . close ( ) ;
conn . setAutoCommit ( false ) ;
dropPermissionsOf ( defaultUser . uuid ( ) ) ;
var stmt = conn . prepareStatement ( INSERT_PERMISSIONS ) ;
stmt . setString ( 1 , defaultUser . uuid ( ) ) ;
for ( Permission perm : Permission . values ( ) ) {
if ( defaultUser . hasPermission ( perm ) ) {
stmt . setString ( 2 , perm . toString ( ) ) ;
stmt . execute ( ) ;
}
}
conn . commit ( ) ;
} catch ( SQLException e ) {
throw new RuntimeException ( e ) ;
}
return this ;
}
@Override
protected void initTables ( ) throws SQLException {
var rs = conn . prepareStatement ( SELECT_USERSTORE_VERSION ) . executeQuery ( ) ;
int availableVersion = 1 ;
int lastVersion = 1 ;
if ( rs . next ( ) ) {
lastVersion = rs . getInt ( 1 ) ;
}
rs . close ( ) ;
conn . setAutoCommit ( false ) ;
var stmt = conn . prepareStatement ( SET_USERSTORE_VERSION ) ;
for ( int version = lastVersion ; version < = availableVersion ; version + + ) {
try {
switch ( version ) {
case 1 :
createUserStoreTables ( ) ;
}
stmt . setInt ( 1 , version ) ;
stmt . execute ( ) ;
conn . commit ( ) ;
} catch ( Exception e ) {
conn . rollback ( ) ;
LOG . log ( System . Logger . Level . ERROR , "Failed to update at user store version = {0}" , version ) ;
break ;
}
}
conn . setAutoCommit ( true ) ;
}
private void createUserStoreTables ( ) throws SQLException {
conn . prepareStatement ( CREATE_USER_TABLE ) . execute ( ) ;
conn . prepareStatement ( CREATE_USER_PERMISSION_TABLE ) . execute ( ) ;
}
@Override
public List < User > list ( ) {
try {
List < User > result = new ArrayList < > ( ) ;
var rs = conn . prepareStatement ( LIST_USERS ) . executeQuery ( ) ;
while ( rs . next ( ) ) result . add ( userFrom ( rs ) ) ;
rs . close ( ) ;
for ( User user : result ) listPermissions ( user . uuid ( ) ) . forEach ( user : : add ) ;
} catch ( SQLException e ) {
throw new RuntimeException ( e ) ;
}
return List . of ( ) ;
}
private List < Permission > listPermissions ( String uuid ) throws SQLException {
var perms = new ArrayList < Permission > ( ) ;
var stmt = conn . prepareStatement ( LIST_USER_PERMISSIONS ) ;
stmt . setString ( 1 , uuid ) ;
var rs = stmt . executeQuery ( ) ;
while ( rs . next ( ) ) {
var perm = rs . getString ( "permission" ) ;
perms . add ( Permission . valueOf ( perm ) ) ;
}
rs . close ( ) ;
return perms ;
}
private User userFrom ( ResultSet rs ) throws SQLException {
var uuid = rs . getString ( "uuid" ) ;
var pass = rs . getString ( "password" ) ;
var user = rs . getString ( "username" ) ;
var name = rs . getString ( "realname" ) ;
var mail = rs . getString ( "email" ) ;
var mins = rs . getLong ( "sessionDuration" ) ;
return new User ( user , pass , name , mail , uuid ) . sessionDuration ( Duration . ofMinutes ( mins ) ) ;
}
@Override
public Set < User > find ( String key ) {
return Set . of ( ) ;
