Jo
edcd113054
* remove API key roles * remove API key gen * remove frontend and doc mentions * restore legacy keygen * restore codeowners * prettier * update swagger * remove permissions including apikeys * add migrator for removing deprecated permissions * add tracing * update openapi3 * simplify migrator for now * accesscontrol/migrator: remove batching for deprecated permissions deletion
70 lines
1.4 KiB
Go
70 lines
1.4 KiB
Go
package apikeygen
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"encoding/json"
|
|
|
|
"github.com/grafana/grafana/pkg/components/satokengen"
|
|
"github.com/grafana/grafana/pkg/util"
|
|
)
|
|
|
|
type KeyGenResult struct {
|
|
HashedKey string
|
|
ClientSecret string
|
|
}
|
|
|
|
type ApiKeyJson struct {
|
|
Key string `json:"k"`
|
|
Name string `json:"n"`
|
|
OrgId int64 `json:"id"`
|
|
}
|
|
|
|
func New(orgId int64, name string) (KeyGenResult, error) {
|
|
result := KeyGenResult{}
|
|
|
|
jsonKey := ApiKeyJson{}
|
|
jsonKey.OrgId = orgId
|
|
jsonKey.Name = name
|
|
var err error
|
|
jsonKey.Key, err = util.GetRandomString(32)
|
|
if err != nil {
|
|
return result, err
|
|
}
|
|
|
|
result.HashedKey, err = util.EncodePassword(jsonKey.Key, name)
|
|
if err != nil {
|
|
return result, err
|
|
}
|
|
|
|
jsonString, err := json.Marshal(jsonKey)
|
|
if err != nil {
|
|
return result, err
|
|
}
|
|
|
|
result.ClientSecret = base64.StdEncoding.EncodeToString(jsonString)
|
|
return result, nil
|
|
}
|
|
|
|
func Decode(keyString string) (*ApiKeyJson, error) {
|
|
jsonString, err := base64.StdEncoding.DecodeString(keyString)
|
|
if err != nil {
|
|
return nil, satokengen.ErrInvalidApiKey
|
|
}
|
|
|
|
var keyObj ApiKeyJson
|
|
err = json.Unmarshal(jsonString, &keyObj)
|
|
if err != nil {
|
|
return nil, satokengen.ErrInvalidApiKey
|
|
}
|
|
|
|
return &keyObj, nil
|
|
}
|
|
|
|
func IsValid(key *ApiKeyJson, hashedKey string) (bool, error) {
|
|
check, err := util.EncodePassword(key.Key, key.Name)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return check == hashedKey, nil
|
|
}
|