package handler import ( "github.com/caos/logging" "github.com/caos/zitadel/internal/eventstore" iam_es_model "github.com/caos/zitadel/internal/iam/repository/eventsourcing/model" "github.com/caos/zitadel/internal/eventstore/models" es_models "github.com/caos/zitadel/internal/eventstore/models" "github.com/caos/zitadel/internal/eventstore/query" "github.com/caos/zitadel/internal/eventstore/spooler" iam_model "github.com/caos/zitadel/internal/iam/repository/view/model" "github.com/caos/zitadel/internal/org/repository/eventsourcing/model" ) const ( loginPolicyTable = "auth.login_policies" ) type LoginPolicy struct { handler subscription *eventstore.Subscription } func newLoginPolicy(handler handler) *LoginPolicy { h := &LoginPolicy{ handler: handler, } h.subscribe() return h } func (p *LoginPolicy) subscribe() { p.subscription = p.es.Subscribe(p.AggregateTypes()...) go func() { for event := range p.subscription.Events { query.ReduceEvent(p, event) } }() } func (p *LoginPolicy) ViewModel() string { return loginPolicyTable } func (_ *LoginPolicy) AggregateTypes() []models.AggregateType { return []models.AggregateType{model.OrgAggregate, iam_es_model.IAMAggregate} } func (p *LoginPolicy) CurrentSequence() (uint64, error) { sequence, err := p.view.GetLatestLoginPolicySequence() if err != nil { return 0, err } return sequence.CurrentSequence, nil } func (p *LoginPolicy) EventQuery() (*models.SearchQuery, error) { sequence, err := p.view.GetLatestLoginPolicySequence() if err != nil { return nil, err } return es_models.NewSearchQuery(). AggregateTypeFilter(p.AggregateTypes()...). LatestSequenceFilter(sequence.CurrentSequence), nil } func (p *LoginPolicy) Reduce(event *models.Event) (err error) { switch event.AggregateType { case model.OrgAggregate, iam_es_model.IAMAggregate: err = p.processLoginPolicy(event) } return err } func (p *LoginPolicy) processLoginPolicy(event *models.Event) (err error) { policy := new(iam_model.LoginPolicyView) switch event.Type { case iam_es_model.LoginPolicyAdded, model.LoginPolicyAdded: err = policy.AppendEvent(event) case iam_es_model.LoginPolicyChanged, model.LoginPolicyChanged, iam_es_model.LoginPolicySecondFactorAdded, model.LoginPolicySecondFactorAdded, iam_es_model.LoginPolicySecondFactorRemoved, model.LoginPolicySecondFactorRemoved, iam_es_model.LoginPolicyMultiFactorAdded, model.LoginPolicyMultiFactorAdded, iam_es_model.LoginPolicyMultiFactorRemoved, model.LoginPolicyMultiFactorRemoved: policy, err = p.view.LoginPolicyByAggregateID(event.AggregateID) if err != nil { return err } err = policy.AppendEvent(event) case model.LoginPolicyRemoved: return p.view.DeleteLoginPolicy(event.AggregateID, event) default: return p.view.ProcessedLoginPolicySequence(event) } if err != nil { return err } return p.view.PutLoginPolicy(policy, event) } func (p *LoginPolicy) OnError(event *models.Event, err error) error { logging.LogWithFields("SPOOL-5id9s", "id", event.AggregateID).WithError(err).Warn("something went wrong in login policy handler") return spooler.HandleError(event, err, p.view.GetLatestLoginPolicyFailedEvent, p.view.ProcessedLoginPolicyFailedEvent, p.view.ProcessedLoginPolicySequence, p.errorCountUntilSkip) } func (p *LoginPolicy) OnSuccess() error { return spooler.HandleSuccess(p.view.UpdateLoginPolicySpoolerRunTimestamp) }