grant shares to users

Signed-off-by: Robert Landers <landers.robert@gmail.com>

Author: withinboredom

cli/lib/api.go

@@ -315,13 +315,13 @@ func Startup(ctx context.Context, js jetstream.JetStream, logger *zap.Logger, po
 		}
 	}
 
-	// POST /entity/{name}/{id}/share/{userid}: share ownership of the resource with another user
+	// PUT /entity/{name}/{id}/share/{userid}: share ownership of the resource with another user
 	r.HandleFunc("/entity/{name}/{id}/share/{userid}", func(writer http.ResponseWriter, request *http.Request) {
 		if stop := handleCors(writer, request); stop {
 			return
 		}
 
-		if request.Method != "POST" {
+		if request.Method != "PUT" {
 			http.Error(writer, "Method Not Allowed", http.StatusMethodNotAllowed)
 			return
 		}
@@ -355,6 +355,77 @@ func Startup(ctx context.Context, js jetstream.JetStream, logger *zap.Logger, po
 			logger.Error("Failed to share ownership", zap.Error(err))
 			http.Error(writer, "Internal Server Error", http.StatusInternalServerError)
 		}
+
+		err = r.Update(ctx, logger)
+		if err != nil {
+			logger.Error("Failed to update resource", zap.Error(err))
+			http.Error(writer, "Internal Server Error", http.StatusInternalServerError)
+		}
+
+		logger.Info("Shared ownership", zap.String("id", id.String()), zap.String("newUser", newUser))
+		http.Error(writer, "", http.StatusOK)
+	})
+
+	// PUT /entity/{name}/{id}/grant/{user}/{operation}
+	r.HandleFunc("/entity/{name}/{id}/grant/{type}/{user}/{operation}", func(writer http.ResponseWriter, request *http.Request) {
+		if stop := handleCors(writer, request); stop {
+			return
+		}
+
+		vars := mux.Vars(request)
+		id := &glue.EntityId{
+			Name: strings.TrimSpace(vars["name"]),
+			Id:   strings.TrimSpace(vars["id"]),
+		}
+		stateId := id.ToStateId()
+
+		operation := auth.Owner
+		switch strings.ToLower(vars["operation"]) {
+		case "signal":
+			operation = auth.Signal
+			break
+		case "completion":
+			operation = auth.Completion
+			break
+		case "output":
+			operation = auth.Output
+		case "call":
+			operation = auth.Call
+		case "lock":
+			operation = auth.Lock
+		case "sharePlus":
+			operation = auth.SharePlus
+		case "shareMinus":
+			operation = auth.ShareMinus
+		default:
+			http.Error(writer, "", http.StatusBadRequest)
+			return
+		}
+
+		r, err := rm.DiscoverResource(ctx, stateId, logger, true)
+		if err != nil {
+			logger.Error("Failed to discover resource", zap.Error(err))
+			http.Error(writer, "", http.StatusNotFound)
+		}
+
+		switch vars["type"] {
+		case "user":
+			err = r.GrantUser(auth.UserId(vars["user"]), operation, ctx)
+		case "role":
+			err = r.GrantRole(auth.Role(vars["user"]), operation, ctx)
+		}
+		if err != nil {
+			logger.Error("Failed to grant resource", zap.Error(err))
+			http.Error(writer, "", http.StatusForbidden)
+		}
+
+		err = r.Update(ctx, logger)
+		if err != nil {
+			logger.Error("Failed to update resource", zap.Error(err))
+			http.Error(writer, "", http.StatusInternalServerError)
+		}
+
+		http.Error(writer, "", http.StatusOK)
 	})
 
 	// GET /entity/{name}/{id}

src/DurableClient.php

@@ -25,6 +25,7 @@
 namespace Bottledcode\DurablePhp;
 
 use Amp\Http\Client\HttpClientBuilder;
+use Bottledcode\DurablePhp\Events\Shares\Operation;
 use Bottledcode\DurablePhp\Search\EntityFilter;
 use Bottledcode\DurablePhp\State\EntityId;
 use Bottledcode\DurablePhp\State\EntityState;
@@ -147,4 +148,14 @@ public function shareEntityOwnership(EntityId $id, string $with): void
     {
         $this->entityClient->shareEntityOwnership($id, $with);
     }
+
+    public function grantEntityAccessToUser(EntityId $id, string $user, Operation $operation): void
+    {
+        $this->entityClient->grantEntityAccessToUser($id, $user, $operation);
+    }
+
+    public function grantEntityAccessToRole(EntityId $id, string $role, Operation $operation): void
+    {
+        $this->entityClient->grantEntityAccessToRole($id, $role, $operation);
+    }
 }

src/EntityClientInterface.php

@@ -24,6 +24,7 @@
 
 namespace Bottledcode\DurablePhp;
 
+use Bottledcode\DurablePhp\Events\Shares\Operation;
 use Bottledcode\DurablePhp\Search\EntityFilter;
 use Bottledcode\DurablePhp\State\EntityId;
 use Bottledcode\DurablePhp\State\EntityState;
@@ -82,4 +83,8 @@ public function getEntitySnapshot(EntityId $entityId): ?EntityState;
     public function deleteEntity(EntityId $entityId): void;
 
     public function shareEntityOwnership(EntityId $id, string $with): void;
+
+    public function grantEntityAccessToUser(EntityId $id, string $user, Operation $operation): void;
+
+    public function grantEntityAccessToRole(EntityId $id, string $role, Operation $operation): void;
 }

src/RemoteEntityClient.php

@@ -26,6 +26,7 @@
 
 use Amp\Http\Client\HttpClient;
 use Amp\Http\Client\Request;
+use Bottledcode\DurablePhp\Events\Shares\Operation;
 use Bottledcode\DurablePhp\Proxy\SpyException;
 use Bottledcode\DurablePhp\Proxy\SpyProxy;
 use Bottledcode\DurablePhp\Search\EntityFilter;
@@ -166,7 +167,7 @@ public function deleteEntity(EntityId $entityId): void
 
     public function shareEntityOwnership(EntityId $id, string $with): void
     {
-        $req = new Request("{$this->apiHost}/entity/{$id->name}/{$id->id}/share/{$with}", 'POST');
+        $req = new Request("{$this->apiHost}/entity/{$id->name}/{$id->id}/share/{$with}", 'PUT');
         if ($this->userToken) {
             $req->setHeader('Authorization', 'Bearer ' . $this->userToken);
         }
@@ -175,4 +176,28 @@ public function shareEntityOwnership(EntityId $id, string $with): void
             throw new Exception('Failed to share ownership');
         }
     }
+
+    public function grantEntityAccessToUser(EntityId $id, string $user, Operation $operation): void
+    {
+        $req = new Request("{$this->apiHost}/entity/{$id->name}/{$id->id}/grant/user/{$user}/{$operation->value}", 'PUT');
+        if ($this->userToken) {
+            $req->setHeader('Authorization', 'Bearer ' . $this->userToken);
+        }
+        $result = $this->client->request($req);
+        if ($result->getStatus() !== 200) {
+            throw new Exception('Failed to grant access');
+        }
+    }
+
+    public function grantEntityAccessToRole(EntityId $id, string $role, Operation $operation): void
+    {
+        $req = new Request("{$this->apiHost}/entity/{$id->name}/{$id->id}/grant/role/{$role}/{$operation->value}", 'PUT');
+        if ($this->userToken) {
+            $req->setHeader('Authorization', 'Bearer ' . $this->userToken);
+        }
+        $result = $this->client->request($req);
+        if ($result->getStatus() !== 200) {
+            throw new Exception('Failed to grant access');
+        }
+    }
 }