mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-10 10:35:51 +00:00
pulse-triage[bot]
9e8cdde75c
Commit restart-time token revocation before clearing live authentication or sessions. Restore auth environment files and remove the staged bootstrap credential when token persistence fails, preserving a usable retry path. Contract-Neutral: hardens development reset failure handling without changing successful API payloads or extension contracts
108 lines
3.0 KiB
Go
108 lines
3.0 KiB
Go
package api
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/rcourtman/pulse-go-rewrite/internal/config"
|
|
)
|
|
|
|
func resolveAuthEnvPath(configPath string) string {
|
|
return filepath.Join(config.ResolveRuntimeDataDir(configPath), ".env")
|
|
}
|
|
|
|
func resolveAuthEnvWritePaths(configPath string, dataPath string) []string {
|
|
paths := []string{resolveAuthEnvPath(configPath)}
|
|
dataEnvPath := resolveAuthEnvPath(dataPath)
|
|
if dataEnvPath != paths[0] {
|
|
paths = append(paths, dataEnvPath)
|
|
}
|
|
return paths
|
|
}
|
|
|
|
func writeAuthEnvFile(configPath string, dataPath string, content []byte) (string, error) {
|
|
paths := resolveAuthEnvWritePaths(configPath, dataPath)
|
|
var lastErr error
|
|
for _, envPath := range paths {
|
|
if err := os.MkdirAll(filepath.Dir(envPath), 0755); err != nil {
|
|
lastErr = err
|
|
continue
|
|
}
|
|
if err := os.WriteFile(envPath, content, 0600); err != nil {
|
|
lastErr = err
|
|
continue
|
|
}
|
|
return envPath, nil
|
|
}
|
|
if lastErr == nil {
|
|
lastErr = fmt.Errorf("no auth env write path available")
|
|
}
|
|
return "", lastErr
|
|
}
|
|
|
|
func removeAuthEnvFiles(configPath string, dataPath string) error {
|
|
paths := resolveAuthEnvWritePaths(configPath, dataPath)
|
|
var lastErr error
|
|
for _, envPath := range paths {
|
|
if err := os.Remove(envPath); err != nil && !os.IsNotExist(err) {
|
|
lastErr = err
|
|
}
|
|
}
|
|
return lastErr
|
|
}
|
|
|
|
type authEnvFileSnapshot struct {
|
|
path string
|
|
data []byte
|
|
mode os.FileMode
|
|
exists bool
|
|
}
|
|
|
|
func snapshotAuthEnvFiles(configPath string, dataPath string) ([]authEnvFileSnapshot, error) {
|
|
paths := resolveAuthEnvWritePaths(configPath, dataPath)
|
|
snapshots := make([]authEnvFileSnapshot, 0, len(paths))
|
|
for _, path := range paths {
|
|
data, err := os.ReadFile(path)
|
|
if errors.Is(err, os.ErrNotExist) {
|
|
snapshots = append(snapshots, authEnvFileSnapshot{path: path})
|
|
continue
|
|
}
|
|
if err != nil {
|
|
return nil, fmt.Errorf("read auth environment file %s: %w", path, err)
|
|
}
|
|
info, err := os.Stat(path)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("stat auth environment file %s: %w", path, err)
|
|
}
|
|
snapshots = append(snapshots, authEnvFileSnapshot{
|
|
path: path,
|
|
data: data,
|
|
mode: info.Mode().Perm(),
|
|
exists: true,
|
|
})
|
|
}
|
|
return snapshots, nil
|
|
}
|
|
|
|
func restoreAuthEnvFiles(snapshots []authEnvFileSnapshot) error {
|
|
var restoreErr error
|
|
for _, snapshot := range snapshots {
|
|
if !snapshot.exists {
|
|
if err := os.Remove(snapshot.path); err != nil && !errors.Is(err, os.ErrNotExist) {
|
|
restoreErr = errors.Join(restoreErr, fmt.Errorf("remove newly created auth environment file %s: %w", snapshot.path, err))
|
|
}
|
|
continue
|
|
}
|
|
if err := os.MkdirAll(filepath.Dir(snapshot.path), 0o755); err != nil {
|
|
restoreErr = errors.Join(restoreErr, fmt.Errorf("recreate auth environment directory for %s: %w", snapshot.path, err))
|
|
continue
|
|
}
|
|
if err := os.WriteFile(snapshot.path, snapshot.data, snapshot.mode); err != nil {
|
|
restoreErr = errors.Join(restoreErr, fmt.Errorf("restore auth environment file %s: %w", snapshot.path, err))
|
|
}
|
|
}
|
|
return restoreErr
|
|
}
|