mirror of
https://github.com/shankar0123/certctl.git
synced 2026-06-07 13:51:36 +00:00
9b4122b159
Runtime fixes: - Fix env var mismatch (CERTCTL_DB_URL → CERTCTL_DATABASE_URL) - Fix table name mismatches (certificates → managed_certificates, notifications → notification_events) - Add renewal_policy_id to certificate queries - Remove non-existent created_at from notification queries - Add env var fallback for agent CLI flags - Graceful degradation for missing notifiers/issuers in demo mode - Copy web/ directory in Dockerfile for dashboard serving Service layer: - Implement handler-service interface pattern across all services - Wire up certificate, agent, job, policy, team, owner, audit, notification services Documentation: - Add concepts.md: beginner-friendly guide to TLS, CAs, private keys - Rewrite quickstart.md with accurate API examples matching actual handlers - Add demo-advanced.md: interactive demo with cert issuance and automated script - Update architecture.md with correct table names and connector interfaces - Update connectors.md to match actual Go interface signatures - Update demo-guide.md with cross-references to new docs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
163 lines
4.2 KiB
Go
163 lines
4.2 KiB
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/shankar0123/certctl/internal/domain"
|
|
"github.com/shankar0123/certctl/internal/repository"
|
|
)
|
|
|
|
// OwnerService provides business logic for certificate owner management.
|
|
type OwnerService struct {
|
|
ownerRepo repository.OwnerRepository
|
|
auditService *AuditService
|
|
}
|
|
|
|
// NewOwnerService creates a new owner service.
|
|
func NewOwnerService(
|
|
ownerRepo repository.OwnerRepository,
|
|
auditService *AuditService,
|
|
) *OwnerService {
|
|
return &OwnerService{
|
|
ownerRepo: ownerRepo,
|
|
auditService: auditService,
|
|
}
|
|
}
|
|
|
|
// List returns a paginated list of owners.
|
|
func (s *OwnerService) List(ctx context.Context, page, perPage int) ([]*domain.Owner, int64, error) {
|
|
if page < 1 {
|
|
page = 1
|
|
}
|
|
if perPage < 1 {
|
|
perPage = 50
|
|
}
|
|
|
|
owners, err := s.ownerRepo.List(ctx)
|
|
if err != nil {
|
|
return nil, 0, fmt.Errorf("failed to list owners: %w", err)
|
|
}
|
|
total := int64(len(owners))
|
|
start := (page - 1) * perPage
|
|
if start >= int(total) {
|
|
return nil, total, nil
|
|
}
|
|
end := start + perPage
|
|
if end > int(total) {
|
|
end = int(total)
|
|
}
|
|
return owners[start:end], total, nil
|
|
}
|
|
|
|
// Get retrieves an owner by ID.
|
|
func (s *OwnerService) Get(ctx context.Context, id string) (*domain.Owner, error) {
|
|
owner, err := s.ownerRepo.Get(ctx, id)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to get owner %s: %w", id, err)
|
|
}
|
|
return owner, nil
|
|
}
|
|
|
|
// Create validates and stores a new owner.
|
|
func (s *OwnerService) Create(ctx context.Context, owner *domain.Owner, actor string) error {
|
|
if owner.Name == "" {
|
|
return fmt.Errorf("owner name is required")
|
|
}
|
|
|
|
owner.ID = generateID("owner")
|
|
if err := s.ownerRepo.Create(ctx, owner); err != nil {
|
|
return fmt.Errorf("failed to create owner: %w", err)
|
|
}
|
|
|
|
if s.auditService != nil {
|
|
_ = s.auditService.RecordEvent(ctx, actor, domain.ActorTypeUser, "create_owner", "owner", owner.ID, nil)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// Update modifies an existing owner.
|
|
func (s *OwnerService) Update(ctx context.Context, id string, owner *domain.Owner, actor string) error {
|
|
if owner.Name == "" {
|
|
return fmt.Errorf("owner name is required")
|
|
}
|
|
|
|
owner.ID = id
|
|
if err := s.ownerRepo.Update(ctx, owner); err != nil {
|
|
return fmt.Errorf("failed to update owner %s: %w", id, err)
|
|
}
|
|
|
|
if s.auditService != nil {
|
|
_ = s.auditService.RecordEvent(ctx, actor, domain.ActorTypeUser, "update_owner", "owner", id, nil)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// Delete removes an owner.
|
|
func (s *OwnerService) Delete(ctx context.Context, id string, actor string) error {
|
|
if err := s.ownerRepo.Delete(ctx, id); err != nil {
|
|
return fmt.Errorf("failed to delete owner %s: %w", id, err)
|
|
}
|
|
|
|
if s.auditService != nil {
|
|
_ = s.auditService.RecordEvent(ctx, actor, domain.ActorTypeUser, "delete_owner", "owner", id, nil)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// ListOwners returns paginated owners (handler interface method).
|
|
func (s *OwnerService) ListOwners(page, perPage int) ([]domain.Owner, int64, error) {
|
|
if page < 1 {
|
|
page = 1
|
|
}
|
|
if perPage < 1 {
|
|
perPage = 50
|
|
}
|
|
|
|
owners, err := s.ownerRepo.List(context.Background())
|
|
if err != nil {
|
|
return nil, 0, fmt.Errorf("failed to list owners: %w", err)
|
|
}
|
|
total := int64(len(owners))
|
|
|
|
var result []domain.Owner
|
|
for _, o := range owners {
|
|
if o != nil {
|
|
result = append(result, *o)
|
|
}
|
|
}
|
|
|
|
return result, total, nil
|
|
}
|
|
|
|
// GetOwner returns a single owner (handler interface method).
|
|
func (s *OwnerService) GetOwner(id string) (*domain.Owner, error) {
|
|
return s.ownerRepo.Get(context.Background(), id)
|
|
}
|
|
|
|
// CreateOwner creates a new owner (handler interface method).
|
|
func (s *OwnerService) CreateOwner(owner domain.Owner) (*domain.Owner, error) {
|
|
owner.ID = generateID("owner")
|
|
if err := s.ownerRepo.Create(context.Background(), &owner); err != nil {
|
|
return nil, fmt.Errorf("failed to create owner: %w", err)
|
|
}
|
|
return &owner, nil
|
|
}
|
|
|
|
// UpdateOwner modifies an owner (handler interface method).
|
|
func (s *OwnerService) UpdateOwner(id string, owner domain.Owner) (*domain.Owner, error) {
|
|
owner.ID = id
|
|
if err := s.ownerRepo.Update(context.Background(), &owner); err != nil {
|
|
return nil, fmt.Errorf("failed to update owner: %w", err)
|
|
}
|
|
return &owner, nil
|
|
}
|
|
|
|
// DeleteOwner removes an owner (handler interface method).
|
|
func (s *OwnerService) DeleteOwner(id string) error {
|
|
return s.ownerRepo.Delete(context.Background(), id)
|
|
}
|