accounts_message_handler.hpp

/* -*- mode: c++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*-
 *
 * Copyright (C) 2025 Marco Craveiro <marco.craveiro@gmail.com>
 *
 * This program is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License as published by the Free Software
 * Foundation; either version 3 of the License, or (at your option) any later
 * version.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
 * details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc., 51
 * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
 *
 */
#ifndef ORES_IAM_MESSAGING_ACCOUNTS_MESSAGE_HANDLER_HPP
#define ORES_IAM_MESSAGING_ACCOUNTS_MESSAGE_HANDLER_HPP
 
#include <memory>
#include "ores.database/domain/context.hpp"
#include "ores.logging/make_logger.hpp"
#include "ores.comms/messaging/message_handler.hpp"
#include "ores.comms/service/auth_session_service.hpp"
#include "ores.iam/service/account_service.hpp"
#include "ores.iam/service/account_setup_service.hpp"
#include "ores.iam/service/authorization_service.hpp"
#include "ores.iam/repository/session_repository.hpp"
#include "ores.variability/service/system_flags_service.hpp"
#include "ores.geo/service/geolocation_service.hpp"
#include "ores.iam/messaging/bootstrap_protocol.hpp"
 
namespace ores::iam::messaging {
 
using bundle_provider_fn = std::function<std::vector<bootstrap_bundle_info>()>;
 
class accounts_message_handler final : public comms::messaging::message_handler {
private:
    [[nodiscard]] static auto& lg() {
        using namespace ores::logging;
        static auto instance = make_logger(
            "ores.iam.messaging.accounts_message_handler");
        return instance;
    }
 
public:
    accounts_message_handler(database::context ctx,
        std::shared_ptr<variability::service::system_flags_service> system_flags,
        std::shared_ptr<comms::service::auth_session_service> sessions,
        std::shared_ptr<service::authorization_service> auth_service,
        std::shared_ptr<geo::service::geolocation_service> geo_service,
        bundle_provider_fn bundle_provider = nullptr);
 
    using handler_result = boost::asio::awaitable<
        std::expected<std::vector<std::byte>, ores::utility::serialization::error_code>
    >;
 
    handler_result
    handle_message(comms::messaging::message_type type,
        std::span<const std::byte> payload,
        const std::string& remote_address) override;
 
private:
    handler_result
    handle_save_account_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_get_accounts_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_list_login_info_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_login_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_lock_account_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_unlock_account_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_delete_account_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_create_initial_admin_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_bootstrap_status_request(std::span<const std::byte> payload);
 
    handler_result
    handle_logout_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_get_account_history_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_reset_password_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_change_password_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_update_my_email_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_signup_request(std::span<const std::byte> payload);
 
    // =========================================================================
    // RBAC Handlers
    // =========================================================================
 
    handler_result
    handle_list_roles_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_list_permissions_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_get_role_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_assign_role_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_revoke_role_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_get_account_roles_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_get_account_permissions_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    static bool is_localhost(const std::string& remote_address);
 
    using auth_check_result = std::expected<
        comms::service::session_info,
        ores::utility::serialization::error_code
    >;
 
    auth_check_result check_authorization(
        const std::string& remote_address,
        std::string_view permission,
        std::string_view operation_name);
 
    auth_check_result get_authenticated_session(
        const std::string& remote_address,
        std::string_view operation_name);
 
    handler_result
    handle_list_sessions_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_get_session_statistics_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    handler_result
    handle_get_active_sessions_request(std::span<const std::byte> payload,
        const std::string& remote_address);
 
    service::account_service service_;
    database::context ctx_;
    std::shared_ptr<variability::service::system_flags_service> system_flags_;
    std::shared_ptr<comms::service::auth_session_service> sessions_;
    std::shared_ptr<service::authorization_service> auth_service_;
    service::account_setup_service setup_service_;
    repository::session_repository session_repo_;
    std::shared_ptr<geo::service::geolocation_service> geo_service_;
    bundle_provider_fn bundle_provider_;
};
 
}
 
#endif