zitadel/internal/auth/repository/eventsourcing/handler/user_session.go

package handler

import (
	"github.com/caos/logging"
	req_model "github.com/caos/zitadel/internal/auth_request/model"
	"github.com/caos/zitadel/internal/errors"
	"github.com/caos/zitadel/internal/eventstore/v1"
	"github.com/caos/zitadel/internal/eventstore/v1/models"
	"github.com/caos/zitadel/internal/eventstore/v1/query"
	"github.com/caos/zitadel/internal/eventstore/v1/spooler"
	es_model "github.com/caos/zitadel/internal/user/repository/eventsourcing/model"
	"github.com/caos/zitadel/internal/user/repository/view"
	view_model "github.com/caos/zitadel/internal/user/repository/view/model"
)

const (
	userSessionTable = "auth.user_sessions"
)

type UserSession struct {
	handler
	subscription *v1.Subscription
}

func newUserSession(
	handler handler,
) *UserSession {
	h := &UserSession{
		handler: handler,
	}

	h.subscribe()

	return h
}

func (k *UserSession) subscribe() {
	k.subscription = k.es.Subscribe(k.AggregateTypes()...)
	go func() {
		for event := range k.subscription.Events {
			query.ReduceEvent(k, event)
		}
	}()
}

func (u *UserSession) ViewModel() string {
	return userSessionTable
}

func (u *UserSession) Subscription() *v1.Subscription {
	return u.subscription
}

func (_ *UserSession) AggregateTypes() []models.AggregateType {
	return []models.AggregateType{es_model.UserAggregate}
}

func (u *UserSession) CurrentSequence() (uint64, error) {
	sequence, err := u.view.GetLatestUserSessionSequence()
	if err != nil {
		return 0, err
	}
	return sequence.CurrentSequence, nil
}

func (u *UserSession) EventQuery() (*models.SearchQuery, error) {
	sequence, err := u.view.GetLatestUserSessionSequence()
	if err != nil {
		return nil, err
	}
	return view.UserQuery(sequence.CurrentSequence), nil
}

func (u *UserSession) Reduce(event *models.Event) (err error) {
	var session *view_model.UserSessionView
	switch event.Type {
	case es_model.UserPasswordCheckSucceeded,
		es_model.UserPasswordCheckFailed,
		es_model.MFAOTPCheckSucceeded,
		es_model.MFAOTPCheckFailed,
		es_model.SignedOut,
		es_model.HumanPasswordCheckSucceeded,
		es_model.HumanPasswordCheckFailed,
		es_model.HumanExternalLoginCheckSucceeded,
		es_model.HumanMFAOTPCheckSucceeded,
		es_model.HumanMFAOTPCheckFailed,
		es_model.HumanMFAU2FTokenCheckSucceeded,
		es_model.HumanMFAU2FTokenCheckFailed,
		es_model.HumanPasswordlessTokenCheckSucceeded,
		es_model.HumanPasswordlessTokenCheckFailed,
		es_model.HumanSignedOut:
		eventData, err := view_model.UserSessionFromEvent(event)
		if err != nil {
			return err
		}
		session, err = u.view.UserSessionByIDs(eventData.UserAgentID, event.AggregateID)
		if err != nil {
			if !errors.IsNotFound(err) {
				return err
			}
			session = &view_model.UserSessionView{
				CreationDate:  event.CreationDate,
				ResourceOwner: event.ResourceOwner,
				UserAgentID:   eventData.UserAgentID,
				UserID:        event.AggregateID,
				State:         int32(req_model.UserSessionStateActive),
			}
		}
		return u.updateSession(session, event)
	case es_model.UserPasswordChanged,
		es_model.MFAOTPRemoved,
		es_model.UserProfileChanged,
		es_model.UserLocked,
		es_model.UserDeactivated,
		es_model.HumanPasswordChanged,
		es_model.HumanMFAOTPRemoved,
		es_model.HumanProfileChanged,
		es_model.HumanAvatarAdded,
		es_model.HumanAvatarRemoved,
		es_model.DomainClaimed,
		es_model.UserUserNameChanged,
		es_model.HumanExternalIDPRemoved,
		es_model.HumanExternalIDPCascadeRemoved,
		es_model.HumanPasswordlessTokenRemoved,
		es_model.HumanMFAU2FTokenRemoved:
		sessions, err := u.view.UserSessionsByUserID(event.AggregateID)
		if err != nil {
			return err
		}
		if len(sessions) == 0 {
			return u.view.ProcessedUserSessionSequence(event)
		}
		for _, session := range sessions {
			if err := session.AppendEvent(event); err != nil {
				return err
			}
			if err := u.fillUserInfo(session, event.AggregateID); err != nil {
				return err
			}
		}
		return u.view.PutUserSessions(sessions, event)
	case es_model.UserRemoved:
		return u.view.DeleteUserSessions(event.AggregateID, event)
	default:
		return u.view.ProcessedUserSessionSequence(event)
	}
}

func (u *UserSession) OnError(event *models.Event, err error) error {
	logging.LogWithFields("SPOOL-sdfw3s", "id", event.AggregateID).WithError(err).Warn("something went wrong in user session handler")
	return spooler.HandleError(event, err, u.view.GetLatestUserSessionFailedEvent, u.view.ProcessedUserSessionFailedEvent, u.view.ProcessedUserSessionSequence, u.errorCountUntilSkip)
}

func (u *UserSession) OnSuccess() error {
	return spooler.HandleSuccess(u.view.UpdateUserSessionSpoolerRunTimestamp)
}

func (u *UserSession) updateSession(session *view_model.UserSessionView, event *models.Event) error {
	if err := session.AppendEvent(event); err != nil {
		return err
	}
	if err := u.fillUserInfo(session, event.AggregateID); err != nil {
		return err
	}
	return u.view.PutUserSession(session, event)
}

func (u *UserSession) fillUserInfo(session *view_model.UserSessionView, id string) error {
	user, err := u.view.UserByID(id)
	if err != nil {
		return err
	}
	session.UserName = user.UserName
	session.LoginName = user.PreferredLoginName
	session.DisplayName = user.DisplayName
	session.AvatarKey = user.AvatarKey
	return nil
}