auth_session_service.hpp

/* -*- mode: c++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*-
 *
 * Copyright (C) 2025 Marco Craveiro <marco.craveiro@gmail.com>
 *
 * This program is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License as published by the Free Software
 * Foundation; either version 3 of the License, or (at your option) any later
 * version.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
 * details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc., 51
 * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
 *
 */
#ifndef ORES_COMMS_SERVICE_AUTH_SESSION_SERVICE_HPP
#define ORES_COMMS_SERVICE_AUTH_SESSION_SERVICE_HPP
 
#include <map>
#include <mutex>
#include <optional>
#include <expected>
#include <boost/uuid/uuid.hpp>
#include "ores.utility/log/make_logger.hpp"
#include "ores.comms/messaging/message_types.hpp"
 
namespace ores::comms::service {
 
struct session_info {
    boost::uuids::uuid account_id;
    bool is_admin;
};
 
class auth_session_service final {
private:
    inline static std::string_view logger_name =
        "ores.comms.service.auth_session_service";
 
    static auto& lg() {
        using namespace ores::utility::log;
        static auto instance = make_logger(logger_name);
        return instance;
    }
 
public:
    auth_session_service() = default;
 
    [[nodiscard]] std::optional<session_info>
    get_session(const std::string& remote_address) const;
 
    [[nodiscard]] bool is_authenticated(const std::string& remote_address) const;
 
    [[nodiscard]] bool is_admin(const std::string& remote_address) const;
 
    void store_session(const std::string& remote_address, session_info info);
 
    void remove_session(const std::string& remote_address);
 
    void clear_all_sessions();
 
    [[nodiscard]] std::expected<void, messaging::error_code>
    authorize_request(messaging::message_type type,
                      const std::string& remote_address) const;
 
private:
    static bool requires_authentication(messaging::message_type type);
 
    static bool requires_admin(messaging::message_type type);
 
    mutable std::mutex session_mutex_;
    std::map<std::string, session_info> sessions_;
};
 
}
 
#endif