Joseph Doherty
88 lines
3.9 KiB
C#
88 lines
3.9 KiB
C#
using ZB.MOM.WW.ScadaBridge.CentralUI.Auth;
|
|
using Microsoft.AspNetCore.Components.Authorization;
|
|
using ZB.MOM.WW.ScadaBridge.Commons.Messages.Management;
|
|
using ZB.MOM.WW.ScadaBridge.Commons.Serialization;
|
|
using ZB.MOM.WW.ScadaBridge.Commons.Types.DataConnections;
|
|
using ZB.MOM.WW.ScadaBridge.Communication;
|
|
using ZB.MOM.WW.ScadaBridge.Security;
|
|
|
|
namespace ZB.MOM.WW.ScadaBridge.CentralUI.Services;
|
|
|
|
/// <summary>
|
|
/// Default <see cref="IEndpointVerificationService"/> implementation — a thin facade
|
|
/// over <see cref="CommunicationService.VerifyEndpointAsync"/> that enforces the
|
|
/// CentralUI-side <c>Design</c>-role trust boundary, serializes the endpoint config,
|
|
/// and translates transport exceptions into a typed
|
|
/// <see cref="VerifyEndpointResult"/>.
|
|
/// </summary>
|
|
/// <remarks>
|
|
/// Site-side actors (<c>SiteCommunicationActor</c> + <c>DataConnectionManagerActor</c>)
|
|
/// do not unwrap the central trust envelope, so the role check MUST run here — never
|
|
/// on the site (mirrors <see cref="BrowseService"/>). Transport failures collapse into
|
|
/// a <see cref="VerifyFailureKind.Timeout"/> or <see cref="VerifyFailureKind.ServerError"/>
|
|
/// result so the editor can show an inline outcome rather than throwing.
|
|
/// </remarks>
|
|
public sealed class EndpointVerificationService : IEndpointVerificationService
|
|
{
|
|
private readonly CommunicationService _communication;
|
|
private readonly AuthenticationStateProvider _auth;
|
|
|
|
/// <summary>
|
|
/// Initializes a new instance of the <see cref="EndpointVerificationService"/>.
|
|
/// </summary>
|
|
/// <param name="communication">Central-side cluster communication service.</param>
|
|
/// <param name="auth">Authentication state provider used for the Design-role guard.</param>
|
|
public EndpointVerificationService(CommunicationService communication, AuthenticationStateProvider auth)
|
|
{
|
|
_communication = communication ?? throw new ArgumentNullException(nameof(communication));
|
|
_auth = auth ?? throw new ArgumentNullException(nameof(auth));
|
|
}
|
|
|
|
/// <inheritdoc/>
|
|
public async Task<VerifyEndpointResult> VerifyAsync(
|
|
string siteIdentifier,
|
|
string connectionName,
|
|
string protocol,
|
|
OpcUaEndpointConfig config,
|
|
CancellationToken cancellationToken = default)
|
|
{
|
|
// CentralUI-side role guard — sites don't enforce envelope-level roles, so the
|
|
// Designer check must happen here before any cross-cluster traffic.
|
|
var state = await _auth.GetAuthoritativeStateAsync();
|
|
if (!state.User.HasClaim(JwtTokenService.RoleClaimType, Roles.Designer))
|
|
{
|
|
return new VerifyEndpointResult(
|
|
false, VerifyFailureKind.ServerError, "Not authorized.", null);
|
|
}
|
|
|
|
var configJson = OpcUaEndpointConfigSerializer.Serialize(config);
|
|
var command = new VerifyEndpointCommand(connectionName, protocol, configJson);
|
|
|
|
try
|
|
{
|
|
return await _communication.VerifyEndpointAsync(siteIdentifier, command, cancellationToken);
|
|
}
|
|
catch (TimeoutException ex)
|
|
{
|
|
// Akka Ask timed out — the site (or its OPC UA connect probe) didn't answer
|
|
// within CommunicationOptions.QueryTimeout. Surface as a typed Timeout
|
|
// failure so the editor can render the outcome inline.
|
|
return new VerifyEndpointResult(
|
|
false, VerifyFailureKind.Timeout, ex.Message, null);
|
|
}
|
|
catch (OperationCanceledException)
|
|
{
|
|
// Caller-initiated cancel — propagate so Blazor can drop the response
|
|
// cleanly. Distinct from Timeout (which the editor renders inline).
|
|
throw;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
// Any other transport / serialization failure: keep the editor alive and
|
|
// show the failure inline rather than crashing the form.
|
|
return new VerifyEndpointResult(
|
|
false, VerifyFailureKind.ServerError, ex.Message, null);
|
|
}
|
|
}
|
|
}
|