role.go

package splunk

import (
	"context"
	"fmt"
	"time"

	"github.com/fatih/structs"
	"github.com/hashicorp/errwrap"
	"github.com/hashicorp/vault/logical"
)

type roleConfig struct {
	Connection string        `json:"connection" structs:"connection"`
	DefaultTTL time.Duration `json:"default_ttl" structs:"default_ttl"`
	MaxTTL     time.Duration `json:"max_ttl" structs:"max_ttl"`

	// Splunk user attributes
	Roles      []string `json:"roles" structs:"roles"`
	DefaultApp string   `json:"default_app,omitempty" structs:"default_app"`
	Email      string   `json:"email,omitempty" structs:"email"`
	TZ         string   `json:"tz,omitempty" structs:"tz"`
}

// Role returns nil if role named `name` does not exist in `storage`, otherwise
// returns the role.  The second return value is non-nil on error.
func roleConfigLoad(ctx context.Context, s logical.Storage, name string) (*roleConfig, error) {
	if name == "" {
		return nil, fmt.Errorf("invalid role name")
	}

	entry, err := s.Get(ctx, rolesPrefix+name)
	if err != nil {
		return nil, errwrap.Wrapf("error retrieving role: {{err}}", err)
	}
	if entry == nil {
		return nil, nil
	}

	role := roleConfig{}
	if err := entry.DecodeJSON(&role); err != nil {
		return nil, errwrap.Wrapf("error decoding role: {{err}}", err)
	}
	return &role, nil
}

func (role *roleConfig) store(ctx context.Context, s logical.Storage, name string) error {
	entry, err := logical.StorageEntryJSON(rolesPrefix+name, role)
	if err != nil {
		return err
	}
	if err := s.Put(ctx, entry); err != nil {
		return errwrap.Wrapf(fmt.Sprintf("error writing %q JSON: {{err}}", rolesPrefix+name), err)
	}
	return nil
}

func (role *roleConfig) toResponseData() map[string]interface{} {
	data := structs.New(role).Map()
	// need to patch up TTLs because time.Duration gets garbled
	data["default_ttl"] = int64(role.DefaultTTL.Seconds())
	data["max_ttl"] = int64(role.MaxTTL.Seconds())
	return data
}