Files
yovision/Sense/server/app/sense/device/credential_port.go
T

72 lines
2.0 KiB
Go

package device
import (
"context"
"fmt"
"sync/atomic"
)
type Credential struct {
Username string
Password string
}
var activeService atomic.Pointer[Service]
// ReadCredential is an internal adapter port. Credentials must never be
// returned from HTTP handlers, logged, or placed in a URL.
func ReadCredential(ctx context.Context, id string) (Credential, error) {
return ReadONVIFCredential(ctx, id)
}
func ReadONVIFCredential(ctx context.Context, id string) (Credential, error) {
service := activeService.Load()
if service == nil {
return Credential{}, fmt.Errorf("device service is not ready")
}
item, err := service.store.Get(ctx, id)
if err != nil {
return Credential{}, err
}
if len(item.CredentialCiphertext) == 0 {
return Credential{}, fmt.Errorf("device credential is not configured")
}
username, password, err := service.vault.Decrypt(item.CredentialCiphertext)
return Credential{Username: username, Password: password}, err
}
func ReadRTSPCredential(ctx context.Context, id string) (Credential, error) {
service := activeService.Load()
if service == nil {
return Credential{}, fmt.Errorf("device service is not ready")
}
item, err := service.store.Get(ctx, id)
if err != nil {
return Credential{}, err
}
if len(item.RTSPCredentialCiphertext) == 0 {
return Credential{}, fmt.Errorf("RTSP credential is not configured")
}
username, password, err := service.vault.Decrypt(item.RTSPCredentialCiphertext)
return Credential{Username: username, Password: password}, err
}
func MarkActive(ctx context.Context, id string) error {
service := activeService.Load()
if service == nil {
return fmt.Errorf("device service is not ready")
}
item, err := service.store.Get(ctx, id)
if err != nil {
return err
}
if item.Status == StatusDisabled || item.Status == StatusActive {
return nil
}
expected := item.Version
item.Status = StatusActive
item.Version++
item.UpdatedAt = service.now().UTC()
return service.store.Update(ctx, item, expected)
}