alice.pds.demo.boltless.dev
This repository has no description
1package xrpc
2
3import (
4 "encoding/json"
5 "fmt"
6 "net/http"
7
8 "github.com/bluesky-social/indigo/api/atproto"
9 "github.com/bluesky-social/indigo/atproto/syntax"
10 "github.com/bluesky-social/indigo/xrpc"
11 "tangled.org/core/api/tangled"
12 "tangled.org/core/spindle/secrets"
13 xrpcerr "tangled.org/core/xrpc/errors"
14)
15
16func (x *Xrpc) RemoveSecret(w http.ResponseWriter, r *http.Request) {
17 l := x.Logger
18 fail := func(e xrpcerr.XrpcError) {
19 l.Error("failed", "kind", e.Tag, "error", e.Message)
20 writeError(w, e, http.StatusBadRequest)
21 }
22
23 actorDid, ok := r.Context().Value(ActorDid).(syntax.DID)
24 if !ok {
25 fail(xrpcerr.MissingActorDidError)
26 return
27 }
28
29 var data tangled.RepoRemoveSecret_Input
30 if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
31 fail(xrpcerr.GenericError(err))
32 return
33 }
34
35 // unfortunately we have to resolve repo-at here
36 repoAt, err := syntax.ParseATURI(data.Repo)
37 if err != nil {
38 fail(xrpcerr.InvalidRepoError(data.Repo))
39 return
40 }
41
42 // resolve this aturi to extract the repo record
43 ident, err := x.Resolver.ResolveIdent(r.Context(), repoAt.Authority().String())
44 if err != nil || ident.Handle.IsInvalidHandle() {
45 fail(xrpcerr.GenericError(fmt.Errorf("failed to resolve handle: %w", err)))
46 return
47 }
48
49 xrpcc := xrpc.Client{Host: ident.PDSEndpoint()}
50 resp, err := atproto.RepoGetRecord(r.Context(), &xrpcc, "", tangled.RepoNSID, repoAt.Authority().String(), repoAt.RecordKey().String())
51 if err != nil {
52 fail(xrpcerr.GenericError(err))
53 return
54 }
55
56 repoRec, ok := resp.Value.Val.(*tangled.Repo)
57 if !ok {
58 fail(xrpcerr.RepoNotFoundError)
59 return
60 }
61 if repoRec.RepoDid == nil || *repoRec.RepoDid == "" {
62 fail(xrpcerr.GenericError(fmt.Errorf("repo record %s has no repoDid", repoAt)))
63 return
64 }
65 repoDid, err := syntax.ParseDID(*repoRec.RepoDid)
66 if err != nil {
67 fail(xrpcerr.GenericError(fmt.Errorf("repo record %q has invalid repoDid: %q", repoAt, *repoRec.RepoDid)))
68 return
69 }
70
71 if ok, err := x.Enforcer.IsRepoSecretsAllowed(actorDid, repoDid); !ok || err != nil {
72 l.Error("insufficient permissions", "did", actorDid.String())
73 writeError(w, xrpcerr.AccessControlError(actorDid.String()), http.StatusUnauthorized)
74 return
75 }
76
77 secret := secrets.Secret[any]{
78 Repo: secrets.RepoIdentifier(repoDid),
79 Key: data.Key,
80 }
81 err = x.Vault.RemoveSecret(r.Context(), secret)
82 if err != nil {
83 l.Error("failed to remove secret from vault", "did", actorDid.String(), "err", err)
84 writeError(w, xrpcerr.GenericError(err), http.StatusInternalServerError)
85 return
86 }
87
88 w.WriteHeader(http.StatusOK)
89}