22package config
33
44import (
5+ "context"
56 "encoding/json"
67 "fmt"
78 "os"
89 "path/filepath"
910 "strings"
11+ "sync"
1012
13+ "github.com/fsnotify/fsnotify"
1114 "github.com/pkg/errors"
15+ "github.com/rs/zerolog"
1216)
1317
1418// restrictedAddressBook is a map of restricted addresses
1519var restrictedAddressBook = map [string ]bool {}
20+ var restrictedAddressBookLock sync.RWMutex
21+
22+ const restrictedAddressesPath string = "zetaclient_restricted_addresses.json"
1623
1724// filename is config file name for ZetaClient
1825const filename string = "zetaclient_config.json"
@@ -45,9 +52,9 @@ func Save(config *Config, path string) error {
4552}
4653
4754// Load loads ZetaClient config from a filepath
48- func Load (path string ) (Config , error ) {
55+ func Load (basePath string ) (Config , error ) {
4956 // retrieve file
50- file := filepath .Join (path , folder , filename )
57+ file := filepath .Join (basePath , folder , filename )
5158 file , err := filepath .Abs (file )
5259 if err != nil {
5360 return Config {}, err
@@ -76,19 +83,114 @@ func Load(path string) (Config, error) {
7683 // fields sanitization
7784 cfg .TssPath = GetPath (cfg .TssPath )
7885 cfg .PreParamsPath = GetPath (cfg .PreParamsPath )
79- cfg .ZetaCoreHome = path
80-
81- // load compliance config
82- LoadComplianceConfig (cfg )
86+ cfg .ZetaCoreHome = basePath
8387
8488 return cfg , nil
8589}
8690
87- // LoadComplianceConfig loads compliance data (restricted addresses) from config
88- func LoadComplianceConfig (cfg Config ) {
91+ // SetRestrictedAddressesFromConfig loads compliance data (restricted addresses) from config.
92+ func SetRestrictedAddressesFromConfig (cfg Config ) {
8993 restrictedAddressBook = cfg .GetRestrictedAddressBook ()
9094}
9195
96+ func getRestrictedAddressAbsPath (basePath string ) (string , error ) {
97+ file := filepath .Join (basePath , folder , restrictedAddressesPath )
98+ file , err := filepath .Abs (file )
99+ if err != nil {
100+ return "" , errors .Wrapf (err , "absolute path conversion for %s" , file )
101+ }
102+ return file , nil
103+ }
104+
105+ func loadRestrictedAddressesConfig (cfg Config , file string ) error {
106+ input , err := os .ReadFile (file ) // #nosec G304
107+ if err != nil {
108+ return errors .Wrapf (err , "reading file %s" , file )
109+ }
110+ addresses := []string {}
111+ err = json .Unmarshal (input , & addresses )
112+ if err != nil {
113+ return errors .Wrap (err , "invalid json" )
114+ }
115+
116+ restrictedAddressBookLock .Lock ()
117+ defer restrictedAddressBookLock .Unlock ()
118+
119+ // Clear the existing map, load addresses from main config, then load addresses
120+ // from dedicated config file
121+ SetRestrictedAddressesFromConfig (cfg )
122+ for _ , addr := range cfg .ComplianceConfig .RestrictedAddresses {
123+ restrictedAddressBook [strings .ToLower (addr )] = true
124+ }
125+ return nil
126+ }
127+
128+ // LoadRestrictedAddressesConfig loads the restricted addresses from the config file
129+ func LoadRestrictedAddressesConfig (cfg Config , basePath string ) error {
130+ file , err := getRestrictedAddressAbsPath (basePath )
131+ if err != nil {
132+ return errors .Wrap (err , "getting restricted address path" )
133+ }
134+ return loadRestrictedAddressesConfig (cfg , file )
135+ }
136+
137+ // WatchRestrictedAddressesConfig monitors the restricted addresses config file
138+ // for changes and reloads it when necessary
139+ func WatchRestrictedAddressesConfig (ctx context.Context , cfg Config , basePath string , logger zerolog.Logger ) error {
140+ file , err := getRestrictedAddressAbsPath (basePath )
141+ if err != nil {
142+ return errors .Wrap (err , "getting restricted address path" )
143+ }
144+ watcher , err := fsnotify .NewWatcher ()
145+ if err != nil {
146+ return errors .Wrap (err , "creating file watcher" )
147+ }
148+ defer watcher .Close ()
149+
150+ // Watch the config directory
151+ // If you only watch the file, the watch will be disconnected if/when
152+ // the config is recreated.
153+ dir := filepath .Dir (file )
154+ err = watcher .Add (dir )
155+ if err != nil {
156+ return errors .Wrapf (err , "watching directory %s" , dir )
157+ }
158+
159+ for {
160+ select {
161+ case <- ctx .Done ():
162+ return nil
163+
164+ case event , ok := <- watcher .Events :
165+ if ! ok {
166+ return nil
167+ }
168+
169+ if event .Name != file {
170+ continue
171+ }
172+
173+ // only reload on create or write
174+ if event .Op & (fsnotify .Write | fsnotify .Create ) == 0 {
175+ continue
176+ }
177+
178+ logger .Info ().Msg ("restricted addresses config updated" )
179+
180+ err := loadRestrictedAddressesConfig (cfg , file )
181+ if err != nil {
182+ logger .Err (err ).Msg ("load restricted addresses config" )
183+ }
184+
185+ case err , ok := <- watcher .Errors :
186+ if ! ok {
187+ return nil
188+ }
189+ return errors .Wrap (err , "watcher error" )
190+ }
191+ }
192+ }
193+
92194// GetPath returns the absolute path of the input path
93195func GetPath (inputPath string ) string {
94196 path := strings .Split (inputPath , "/" )
@@ -109,6 +211,8 @@ func GetPath(inputPath string) string {
109211// ContainRestrictedAddress returns true if any one of the addresses is restricted
110212// Note: the addrs can contains both ETH and BTC addresses
111213func ContainRestrictedAddress (addrs ... string ) bool {
214+ restrictedAddressBookLock .RLock ()
215+ defer restrictedAddressBookLock .RUnlock ()
112216 for _ , addr := range addrs {
113217 if addr != "" && restrictedAddressBook [strings .ToLower (addr )] {
114218 return true
0 commit comments