cm_authorization.h

/*
 * Developer : Alexey Zakharov (alexey.zakharov@vectioneer.com)
 * All rights reserved. Copyright (c) 2016 VECTIONEER.
 */
 
#ifndef CM_AUTHORIZATION_H
#define CM_AUTHORIZATION_H
 
#include "cm_rpcprocessor.h"
 
#include "motorcortex.pb.h"
#include "motorcortex_hash.h"
#include "ps_types.h"
 
#include <cstdint>
#include <mutex>
#include <set>
#include <map>
 
namespace mcx::comm {
 
struct RequestData;
struct RequestMsg;
struct ReplyMsg;
 
class GroupManager;
 
 
class AuthorizationBase : public RPCProcessor {
public:
 
  explicit AuthorizationBase(GroupManager* group_manager);
 
  void init(uint32_t system_param_hash);
 
  virtual bool check(RequestMsg& request_data);
 
  [[nodiscard]] MsgHashSet getHashList() const override;
 
  virtual bool initLogin(const char* filename);
 
  virtual motorcortex_StatusCode logout(uint32_t client_id);
 
  bool noAccessMsg(ReplyMsg& reply) const;
 
protected:
 
  static bool decodeRestoreSessionMsg(const RequestMsg& request, motorcortex_RestoreSessionMsg& restore_session);
 
  static bool encodeStatusMsg(const motorcortex_StatusMsg& status_msg, ReplyMsg& output_msg);
 
  static bool encodeSessionTokenMsg(const motorcortex_SessionTokenMsg& session_token, ReplyMsg& output_msg);
 
  static bool generateToken(char* token, uint32_t length);
 
private:
 
  bool processRequest(const RequestMsg& request, ReplyMsg& reply) override;
 
  //GroupManager* group_manager_;
 
  motorcortex_SessionTokenMsg session_toke_{};
  bool has_token_{false};
 
};
 
class Authorization : public AuthorizationBase {
 
  enum class LoginRequest {
    NOT_A_LOGIN_REQUEST,
    SUCCESSFUL,
    LOGGED_IN_NO_CONTROL,
    WRONG_PASSWORD,
    UNDEFINED_USER_LEVEL,
    DECODE_FAILED
  };
 
  struct LoginData {
    std::string user;
    std::string password;
    parameter_server::UserGroup group;
  };
  using SystemLoginList = std::map<std::string, LoginData>;
 
public:
  Authorization(GroupManager* group_manager, uint32_t max_number_users_in_control);
 
  Authorization(const Authorization& orig) = delete;
 
  ~Authorization() override;
 
  bool initLogin(const char* filename) override;
 
  bool check(RequestMsg& request_data) override;
 
  motorcortex_StatusCode logout(uint32_t client_id) override;
 
private:
 
  static parameter_server::UserGroup getUserLevel(const motorcortex_LoginMsg& login_msg);
 
  static parameter_server::UserGroup getUserLevel(const char* login_msg);
 
  static parameter_server::UserGroup checkUserLevel(int level);
 
  bool processRequest(const RequestMsg& request, ReplyMsg& reply) override;
 
  static bool decodeLoginMsg(uint8_t* msg, size_t msg_size, motorcortex_LoginMsg& login_msg);
 
  static bool checkPassword(const LoginData& login_data, const motorcortex_LoginMsg& login_msg);
 
  static bool checkLogin(const SystemLoginList& system_login, const motorcortex_LoginMsg& login_msg);
 
  std::map<uint32_t, parameter_server::UserGroup> logged_in_users_;
  std::mutex login_users_mutex_;
  std::set<uint32_t> users_in_control_;
  std::mutex users_in_control_mutex_;
  const uint32_t max_number_operators_in_control_;
 
  SystemLoginList login_list_;
};
 
}  // namespace mcx::comm
 
#endif /* CM_AUTHORIZATION_H */