alice.pds.demo.boltless.dev
This repository has no description
1package xrpc
2
3import (
4 "encoding/json"
5 "fmt"
6 "net/http"
7
8 "github.com/bluesky-social/indigo/api/atproto"
9 "github.com/bluesky-social/indigo/atproto/syntax"
10 "github.com/bluesky-social/indigo/xrpc"
11 securejoin "github.com/cyphar/filepath-securejoin"
12 "tangled.org/core/api/tangled"
13 "tangled.org/core/rbac"
14 "tangled.org/core/spindle/secrets"
15 xrpcerr "tangled.org/core/xrpc/errors"
16)
17
18func (x *Xrpc) RemoveSecret(w http.ResponseWriter, r *http.Request) {
19 l := x.Logger
20 fail := func(e xrpcerr.XrpcError) {
21 l.Error("failed", "kind", e.Tag, "error", e.Message)
22 writeError(w, e, http.StatusBadRequest)
23 }
24
25 actorDid, ok := r.Context().Value(ActorDid).(syntax.DID)
26 if !ok {
27 fail(xrpcerr.MissingActorDidError)
28 return
29 }
30
31 var data tangled.RepoRemoveSecret_Input
32 if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
33 fail(xrpcerr.GenericError(err))
34 return
35 }
36
37 // unfortunately we have to resolve repo-at here
38 repoAt, err := syntax.ParseATURI(data.Repo)
39 if err != nil {
40 fail(xrpcerr.InvalidRepoError(data.Repo))
41 return
42 }
43
44 // resolve this aturi to extract the repo record
45 ident, err := x.Resolver.ResolveIdent(r.Context(), repoAt.Authority().String())
46 if err != nil || ident.Handle.IsInvalidHandle() {
47 fail(xrpcerr.GenericError(fmt.Errorf("failed to resolve handle: %w", err)))
48 return
49 }
50
51 xrpcc := xrpc.Client{Host: ident.PDSEndpoint()}
52 resp, err := atproto.RepoGetRecord(r.Context(), &xrpcc, "", tangled.RepoNSID, repoAt.Authority().String(), repoAt.RecordKey().String())
53 if err != nil {
54 fail(xrpcerr.GenericError(err))
55 return
56 }
57
58 if _, ok := resp.Value.Val.(*tangled.Repo); !ok {
59 fail(xrpcerr.RepoNotFoundError)
60 return
61 }
62 didPath, err := securejoin.SecureJoin(ident.DID.String(), repoAt.RecordKey().String())
63 if err != nil {
64 fail(xrpcerr.GenericError(err))
65 return
66 }
67
68 if ok, err := x.Enforcer.IsSettingsAllowed(actorDid.String(), rbac.ThisServer, didPath); !ok || err != nil {
69 l.Error("insufficient permissions", "did", actorDid.String())
70 writeError(w, xrpcerr.AccessControlError(actorDid.String()), http.StatusUnauthorized)
71 return
72 }
73
74 secret := secrets.Secret[any]{
75 Repo: secrets.RepoIdentifier(didPath),
76 Key: data.Key,
77 }
78 err = x.Vault.RemoveSecret(r.Context(), secret)
79 if err != nil {
80 l.Error("failed to remove secret from vault", "did", actorDid.String(), "err", err)
81 writeError(w, xrpcerr.GenericError(err), http.StatusInternalServerError)
82 return
83 }
84
85 w.WriteHeader(http.StatusOK)
86}