zitadel/internal/eventstore/handler/crdb/lock.go

package crdb

import (
	"context"
	"database/sql"
	"fmt"
	"strconv"
	"strings"
	"time"

	"github.com/zitadel/logging"

	"github.com/zitadel/zitadel/internal/database"
	"github.com/zitadel/zitadel/internal/id"
	"github.com/zitadel/zitadel/internal/zerrors"
)

const (
	lockStmtFormat = "INSERT INTO %[1]s" +
		" (locker_id, locked_until, projection_name, instance_id) VALUES %[2]s" +
		" ON CONFLICT (projection_name, instance_id)" +
		" DO UPDATE SET locker_id = $1, locked_until = now()+$2::INTERVAL" +
		" WHERE %[1]s.projection_name = $3 AND %[1]s.instance_id = ANY ($%[3]d) AND (%[1]s.locker_id = $1 OR %[1]s.locked_until < now())"
)

type Locker interface {
	Lock(ctx context.Context, lockDuration time.Duration, instanceIDs ...string) <-chan error
	Unlock(instanceIDs ...string) error
}

type locker struct {
	client         *sql.DB
	lockStmt       func(values string, instances int) string
	workerName     string
	projectionName string
}

func NewLocker(client *sql.DB, lockTable, projectionName string) Locker {
	workerName, err := id.SonyFlakeGenerator().Next()
	logging.OnError(err).Panic("unable to generate lockID")
	return &locker{
		client: client,
		lockStmt: func(values string, instances int) string {
			return fmt.Sprintf(lockStmtFormat, lockTable, values, instances)
		},
		workerName:     workerName,
		projectionName: projectionName,
	}
}

func (h *locker) Lock(ctx context.Context, lockDuration time.Duration, instanceIDs ...string) <-chan error {
	errs := make(chan error)
	go h.handleLock(ctx, errs, lockDuration, instanceIDs...)
	return errs
}

func (h *locker) handleLock(ctx context.Context, errs chan error, lockDuration time.Duration, instanceIDs ...string) {
	renewLock := time.NewTimer(0)
	for {
		select {
		case <-renewLock.C:
			errs <- h.renewLock(ctx, lockDuration, instanceIDs...)
			//refresh the lock 500ms before it times out. 500ms should be enough for one transaction
			renewLock.Reset(lockDuration - (500 * time.Millisecond))
		case <-ctx.Done():
			close(errs)
			renewLock.Stop()
			return
		}
	}
}

func (h *locker) renewLock(ctx context.Context, lockDuration time.Duration, instanceIDs ...string) error {
	lockStmt, values := h.lockStatement(lockDuration, instanceIDs)
	res, err := h.client.ExecContext(ctx, lockStmt, values...)
	if err != nil {
		return zerrors.ThrowInternal(err, "CRDB-uaDoR", "unable to execute lock")
	}
	if rows, _ := res.RowsAffected(); rows == 0 {
		return zerrors.ThrowAlreadyExists(nil, "CRDB-mmi4J", "projection already locked")
	}
	return nil
}

func (h *locker) Unlock(instanceIDs ...string) error {
	lockStmt, values := h.lockStatement(0, instanceIDs)
	_, err := h.client.Exec(lockStmt, values...)
	if err != nil {
		return zerrors.ThrowUnknown(err, "CRDB-JjfwO", "unlock failed")
	}
	return nil
}

func (h *locker) lockStatement(lockDuration time.Duration, instanceIDs database.TextArray[string]) (string, []interface{}) {
	valueQueries := make([]string, len(instanceIDs))
	values := make([]interface{}, len(instanceIDs)+4)
	values[0] = h.workerName
	//the unit of crdb interval is seconds (https://www.cockroachlabs.com/docs/stable/interval.html).
	values[1] = lockDuration
	values[2] = h.projectionName
	for i, instanceID := range instanceIDs {
		valueQueries[i] = "($1, now()+$2::INTERVAL, $3, $" + strconv.Itoa(i+4) + ")"
		values[i+3] = instanceID
	}
	values[len(values)-1] = instanceIDs
	return h.lockStmt(strings.Join(valueQueries, ", "), len(values)), values
}