signoz/ee/query-service/dao/sqlite/pat.go

package sqlite

import (
	"context"
	"fmt"
	"time"

	"github.com/SigNoz/signoz/ee/query-service/model"
	"github.com/SigNoz/signoz/ee/types"
	basemodel "github.com/SigNoz/signoz/pkg/query-service/model"
	ossTypes "github.com/SigNoz/signoz/pkg/types"
	"github.com/SigNoz/signoz/pkg/valuer"

	"go.uber.org/zap"
)

func (m *modelDao) CreatePAT(ctx context.Context, orgID string, p types.GettablePAT) (types.GettablePAT, basemodel.BaseApiError) {
	p.StorablePersonalAccessToken.OrgID = orgID
	p.StorablePersonalAccessToken.ID = valuer.GenerateUUID()
	_, err := m.sqlStore.BunDB().NewInsert().
		Model(&p.StorablePersonalAccessToken).
		Exec(ctx)
	if err != nil {
		zap.L().Error("Failed to insert PAT in db, err: %v", zap.Error(err))
		return types.GettablePAT{}, model.InternalError(fmt.Errorf("PAT insertion failed"))
	}

	createdByUser, _ := m.userModule.GetUserByID(ctx, orgID, p.UserID)
	if createdByUser == nil {
		p.CreatedByUser = types.PatUser{
			NotFound: true,
		}
	} else {
		p.CreatedByUser = types.PatUser{
			User: ossTypes.User{
				Identifiable: ossTypes.Identifiable{
					ID: createdByUser.ID,
				},
				DisplayName: createdByUser.DisplayName,
				Email:       createdByUser.Email,
				TimeAuditable: ossTypes.TimeAuditable{
					CreatedAt: createdByUser.CreatedAt,
					UpdatedAt: createdByUser.UpdatedAt,
				},
			},
			NotFound: false,
		}
	}
	return p, nil
}

func (m *modelDao) UpdatePAT(ctx context.Context, orgID string, p types.GettablePAT, id valuer.UUID) basemodel.BaseApiError {
	_, err := m.sqlStore.BunDB().NewUpdate().
		Model(&p.StorablePersonalAccessToken).
		Column("role", "name", "updated_at", "updated_by_user_id").
		Where("id = ?", id.StringValue()).
		Where("org_id = ?", orgID).
		Where("revoked = false").
		Exec(ctx)
	if err != nil {
		zap.L().Error("Failed to update PAT in db, err: %v", zap.Error(err))
		return model.InternalError(fmt.Errorf("PAT update failed"))
	}
	return nil
}

func (m *modelDao) ListPATs(ctx context.Context, orgID string) ([]types.GettablePAT, basemodel.BaseApiError) {
	pats := []types.StorablePersonalAccessToken{}

	if err := m.sqlStore.BunDB().NewSelect().
		Model(&pats).
		Where("revoked = false").
		Where("org_id = ?", orgID).
		Order("updated_at DESC").
		Scan(ctx); err != nil {
		zap.L().Error("Failed to fetch PATs err: %v", zap.Error(err))
		return nil, model.InternalError(fmt.Errorf("failed to fetch PATs"))
	}

	patsWithUsers := []types.GettablePAT{}
	for i := range pats {
		patWithUser := types.GettablePAT{
			StorablePersonalAccessToken: pats[i],
		}

		createdByUser, _ := m.userModule.GetUserByID(ctx, orgID, pats[i].UserID)
		if createdByUser == nil {
			patWithUser.CreatedByUser = types.PatUser{
				NotFound: true,
			}
		} else {
			patWithUser.CreatedByUser = types.PatUser{
				User: ossTypes.User{
					Identifiable: ossTypes.Identifiable{
						ID: createdByUser.ID,
					},
					DisplayName: createdByUser.DisplayName,
					Email:       createdByUser.Email,
					TimeAuditable: ossTypes.TimeAuditable{
						CreatedAt: createdByUser.CreatedAt,
						UpdatedAt: createdByUser.UpdatedAt,
					},
				},
				NotFound: false,
			}
		}

		updatedByUser, _ := m.userModule.GetUserByID(ctx, orgID, pats[i].UpdatedByUserID)
		if updatedByUser == nil {
			patWithUser.UpdatedByUser = types.PatUser{
				NotFound: true,
			}
		} else {
			patWithUser.UpdatedByUser = types.PatUser{
				User: ossTypes.User{
					Identifiable: ossTypes.Identifiable{
						ID: updatedByUser.ID,
					},
					DisplayName: updatedByUser.DisplayName,
					Email:       updatedByUser.Email,
					TimeAuditable: ossTypes.TimeAuditable{
						CreatedAt: updatedByUser.CreatedAt,
						UpdatedAt: updatedByUser.UpdatedAt,
					},
				},
				NotFound: false,
			}
		}

		patsWithUsers = append(patsWithUsers, patWithUser)
	}
	return patsWithUsers, nil
}

func (m *modelDao) RevokePAT(ctx context.Context, orgID string, id valuer.UUID, userID string) basemodel.BaseApiError {
	updatedAt := time.Now().Unix()
	_, err := m.sqlStore.BunDB().NewUpdate().
		Model(&types.StorablePersonalAccessToken{}).
		Set("revoked = ?", true).
		Set("updated_by_user_id = ?", userID).
		Set("updated_at = ?", updatedAt).
		Where("id = ?", id.StringValue()).
		Where("org_id = ?", orgID).
		Exec(ctx)
	if err != nil {
		zap.L().Error("Failed to revoke PAT in db, err: %v", zap.Error(err))
		return model.InternalError(fmt.Errorf("PAT revoke failed"))
	}
	return nil
}

func (m *modelDao) GetPAT(ctx context.Context, token string) (*types.GettablePAT, basemodel.BaseApiError) {
	pats := []types.StorablePersonalAccessToken{}

	if err := m.sqlStore.BunDB().NewSelect().
		Model(&pats).
		Where("token = ?", token).
		Where("revoked = false").
		Scan(ctx); err != nil {
		return nil, model.InternalError(fmt.Errorf("failed to fetch PAT"))
	}

	if len(pats) != 1 {
		return nil, &model.ApiError{
			Typ: model.ErrorInternal,
			Err: fmt.Errorf("found zero or multiple PATs with same token, %s", token),
		}
	}

	patWithUser := types.GettablePAT{
		StorablePersonalAccessToken: pats[0],
	}

	return &patWithUser, nil
}

func (m *modelDao) GetPATByID(ctx context.Context, orgID string, id valuer.UUID) (*types.GettablePAT, basemodel.BaseApiError) {
	pats := []types.StorablePersonalAccessToken{}

	if err := m.sqlStore.BunDB().NewSelect().
		Model(&pats).
		Where("id = ?", id.StringValue()).
		Where("org_id = ?", orgID).
		Where("revoked = false").
		Scan(ctx); err != nil {
		return nil, model.InternalError(fmt.Errorf("failed to fetch PAT"))
	}

	if len(pats) != 1 {
		return nil, &model.ApiError{
			Typ: model.ErrorInternal,
			Err: fmt.Errorf("found zero or multiple PATs with same token"),
		}
	}

	patWithUser := types.GettablePAT{
		StorablePersonalAccessToken: pats[0],
	}

	return &patWithUser, nil
}