feat: port session 11 — Accounts & Directory JWT Store
- Account: full Account class (200 features) with subject mappings, connection counting, export/import checks, expiration timers - DirJwtStore: directory-based JWT storage with sharding and expiry - AccountResolver: IAccountResolver, MemoryAccountResolver, UrlAccountResolver, DirAccountResolver, CacheDirAccountResolver - AccountTypes: all supporting types (AccountLimits, SConns, ExportMap, ImportMap, ServiceExport, StreamExport, ServiceLatency, etc.) - 34 unit tests (599 total), 234 features complete (IDs 150-349, 793-826)
This commit is contained in:
Joseph Doherty
2118
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/Account.cs
Normal file
2118
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/Account.cs
Normal file
File diff suppressed because it is too large
Load Diff
525
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/AccountResolver.cs
Normal file
525
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/AccountResolver.cs
Normal file
@@ -0,0 +1,525 @@
|
||||
// Copyright 2018-2026 The NATS Authors
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
//
|
||||
// Adapted from server/accounts.go in the NATS server Go source.
|
||||
|
||||
using System.Collections.Concurrent;
|
||||
using System.Net;
|
||||
using System.Net.Http;
|
||||
|
||||
namespace ZB.MOM.NatsNet.Server;
|
||||
|
||||
// ============================================================================
|
||||
// IAccountResolver
|
||||
// Mirrors Go AccountResolver interface (accounts.go ~line 4035).
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Resolves and stores account JWTs by account public key name.
|
||||
/// Mirrors Go <c>AccountResolver</c> interface.
|
||||
/// </summary>
|
||||
public interface IAccountResolver
|
||||
{
|
||||
/// <summary>
|
||||
/// Fetches the JWT for the named account.
|
||||
/// Throws <see cref="InvalidOperationException"/> when the account is not found.
|
||||
/// Mirrors Go <c>AccountResolver.Fetch</c>.
|
||||
/// </summary>
|
||||
Task<string> FetchAsync(string name, CancellationToken ct = default);
|
||||
|
||||
/// <summary>
|
||||
/// Stores the JWT for the named account.
|
||||
/// Read-only implementations throw <see cref="NotSupportedException"/>.
|
||||
/// Mirrors Go <c>AccountResolver.Store</c>.
|
||||
/// </summary>
|
||||
Task StoreAsync(string name, string jwt, CancellationToken ct = default);
|
||||
|
||||
/// <summary>Returns true when no writes are permitted. Mirrors Go <c>IsReadOnly</c>.</summary>
|
||||
bool IsReadOnly();
|
||||
|
||||
/// <summary>
|
||||
/// Starts any background processing needed by the resolver (system subscriptions, timers, etc.).
|
||||
/// The <paramref name="server"/> parameter accepts an <c>object</c> to avoid a circular assembly
|
||||
/// reference; implementations should cast it to the concrete server type as needed.
|
||||
/// Mirrors Go <c>AccountResolver.Start</c>.
|
||||
/// </summary>
|
||||
void Start(object server);
|
||||
|
||||
/// <summary>Returns true when the resolver reacts to JWT update events. Mirrors Go <c>IsTrackingUpdate</c>.</summary>
|
||||
bool IsTrackingUpdate();
|
||||
|
||||
/// <summary>Reloads state from the backing store. Mirrors Go <c>AccountResolver.Reload</c>.</summary>
|
||||
void Reload();
|
||||
|
||||
/// <summary>Releases resources held by the resolver. Mirrors Go <c>AccountResolver.Close</c>.</summary>
|
||||
void Close();
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ResolverDefaultsOps
|
||||
// Mirrors Go resolverDefaultsOpsImpl (accounts.go ~line 4046).
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Abstract base that provides sensible no-op / read-only defaults for <see cref="IAccountResolver"/>
|
||||
/// so concrete implementations only need to override what they change.
|
||||
/// Mirrors Go <c>resolverDefaultsOpsImpl</c>.
|
||||
/// </summary>
|
||||
public abstract class ResolverDefaultsOps : IAccountResolver
|
||||
{
|
||||
/// <inheritdoc/>
|
||||
public abstract Task<string> FetchAsync(string name, CancellationToken ct = default);
|
||||
|
||||
/// <summary>
|
||||
/// Default store implementation — always throws because the base defaults to read-only.
|
||||
/// Mirrors Go <c>resolverDefaultsOpsImpl.Store</c>.
|
||||
/// </summary>
|
||||
public virtual Task StoreAsync(string name, string jwt, CancellationToken ct = default)
|
||||
=> throw new NotSupportedException("store operation not supported");
|
||||
|
||||
/// <summary>Default: the resolver is read-only. Mirrors Go <c>resolverDefaultsOpsImpl.IsReadOnly</c>.</summary>
|
||||
public virtual bool IsReadOnly() => true;
|
||||
|
||||
/// <summary>Default: no-op start. Mirrors Go <c>resolverDefaultsOpsImpl.Start</c>.</summary>
|
||||
public virtual void Start(object server) { }
|
||||
|
||||
/// <summary>Default: does not track updates. Mirrors Go <c>resolverDefaultsOpsImpl.IsTrackingUpdate</c>.</summary>
|
||||
public virtual bool IsTrackingUpdate() => false;
|
||||
|
||||
/// <summary>Default: no-op reload. Mirrors Go <c>resolverDefaultsOpsImpl.Reload</c>.</summary>
|
||||
public virtual void Reload() { }
|
||||
|
||||
/// <summary>Default: no-op close. Mirrors Go <c>resolverDefaultsOpsImpl.Close</c>.</summary>
|
||||
public virtual void Close() { }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// MemoryAccountResolver
|
||||
// Mirrors Go MemAccResolver (accounts.go ~line 4072).
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// An in-memory account resolver backed by a <see cref="ConcurrentDictionary{TKey,TValue}"/>.
|
||||
/// Primarily intended for testing.
|
||||
/// Mirrors Go <c>MemAccResolver</c>.
|
||||
/// </summary>
|
||||
public sealed class MemoryAccountResolver : ResolverDefaultsOps
|
||||
{
|
||||
private readonly ConcurrentDictionary<string, string> _store = new(StringComparer.Ordinal);
|
||||
|
||||
/// <summary>In-memory resolver is not read-only.</summary>
|
||||
public override bool IsReadOnly() => false;
|
||||
|
||||
/// <summary>
|
||||
/// Returns the stored JWT for <paramref name="name"/>, or throws
|
||||
/// <see cref="InvalidOperationException"/> when the account is unknown.
|
||||
/// Mirrors Go <c>MemAccResolver.Fetch</c>.
|
||||
/// </summary>
|
||||
public override Task<string> FetchAsync(string name, CancellationToken ct = default)
|
||||
{
|
||||
if (_store.TryGetValue(name, out var jwt))
|
||||
{
|
||||
return Task.FromResult(jwt);
|
||||
}
|
||||
|
||||
throw new InvalidOperationException($"Account not found: {name}");
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Stores <paramref name="jwt"/> for <paramref name="name"/>.
|
||||
/// Mirrors Go <c>MemAccResolver.Store</c>.
|
||||
/// </summary>
|
||||
public override Task StoreAsync(string name, string jwt, CancellationToken ct = default)
|
||||
{
|
||||
_store[name] = jwt;
|
||||
return Task.CompletedTask;
|
||||
}
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// UrlAccountResolver
|
||||
// Mirrors Go URLAccResolver (accounts.go ~line 4097).
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// An HTTP-based account resolver that fetches JWTs by appending the account public key
|
||||
/// to a configured base URL.
|
||||
/// Mirrors Go <c>URLAccResolver</c>.
|
||||
/// </summary>
|
||||
public sealed class UrlAccountResolver : ResolverDefaultsOps
|
||||
{
|
||||
// Mirrors Go DEFAULT_ACCOUNT_FETCH_TIMEOUT.
|
||||
private static readonly TimeSpan DefaultAccountFetchTimeout = TimeSpan.FromSeconds(2);
|
||||
|
||||
private readonly string _url;
|
||||
private readonly HttpClient _httpClient;
|
||||
|
||||
/// <summary>
|
||||
/// Creates a new URL resolver for the given <paramref name="url"/>.
|
||||
/// A trailing slash is appended when absent so that account names can be concatenated
|
||||
/// directly. An <see cref="HttpClient"/> is configured with connection-pooling
|
||||
/// settings that amortise TLS handshakes across requests, mirroring Go's custom
|
||||
/// <c>http.Transport</c>.
|
||||
/// Mirrors Go <c>NewURLAccResolver</c>.
|
||||
/// </summary>
|
||||
public UrlAccountResolver(string url)
|
||||
{
|
||||
if (!url.EndsWith('/'))
|
||||
{
|
||||
url += "/";
|
||||
}
|
||||
|
||||
_url = url;
|
||||
|
||||
// Mirror Go: MaxIdleConns=10, IdleConnTimeout=30s on a custom transport.
|
||||
var handler = new SocketsHttpHandler
|
||||
{
|
||||
MaxConnectionsPerServer = 10,
|
||||
PooledConnectionIdleTimeout = TimeSpan.FromSeconds(30),
|
||||
};
|
||||
|
||||
_httpClient = new HttpClient(handler)
|
||||
{
|
||||
Timeout = DefaultAccountFetchTimeout,
|
||||
};
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Issues an HTTP GET to the base URL with the account name appended, and returns
|
||||
/// the response body as the JWT string.
|
||||
/// Throws <see cref="InvalidOperationException"/> on a non-200 response.
|
||||
/// Mirrors Go <c>URLAccResolver.Fetch</c>.
|
||||
/// </summary>
|
||||
public override async Task<string> FetchAsync(string name, CancellationToken ct = default)
|
||||
{
|
||||
var requestUrl = _url + name;
|
||||
HttpResponseMessage response;
|
||||
|
||||
try
|
||||
{
|
||||
response = await _httpClient.GetAsync(requestUrl, ct).ConfigureAwait(false);
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
throw new InvalidOperationException($"could not fetch <\"{requestUrl}\">: {ex.Message}", ex);
|
||||
}
|
||||
|
||||
using (response)
|
||||
{
|
||||
if (response.StatusCode != HttpStatusCode.OK)
|
||||
{
|
||||
throw new InvalidOperationException(
|
||||
$"could not fetch <\"{requestUrl}\">: {(int)response.StatusCode} {response.ReasonPhrase}");
|
||||
}
|
||||
|
||||
return await response.Content.ReadAsStringAsync(ct).ConfigureAwait(false);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// DirResOption — functional option for DirAccountResolver
|
||||
// Mirrors Go DirResOption func type (accounts.go ~line 4552).
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// A functional option that configures a <see cref="DirAccountResolver"/> instance.
|
||||
/// Mirrors Go <c>DirResOption</c> function type.
|
||||
/// </summary>
|
||||
public delegate void DirResOption(DirAccountResolver resolver);
|
||||
|
||||
/// <summary>
|
||||
/// Factory methods for commonly used <see cref="DirResOption"/> values.
|
||||
/// </summary>
|
||||
public static class DirResOptions
|
||||
{
|
||||
/// <summary>
|
||||
/// Returns an option that overrides the default fetch timeout.
|
||||
/// <paramref name="timeout"/> must be positive.
|
||||
/// Mirrors Go <c>FetchTimeout</c> option constructor.
|
||||
/// </summary>
|
||||
/// <exception cref="ArgumentOutOfRangeException">
|
||||
/// Thrown at application time when <paramref name="timeout"/> is not positive.
|
||||
/// </exception>
|
||||
public static DirResOption FetchTimeout(TimeSpan timeout)
|
||||
{
|
||||
if (timeout <= TimeSpan.Zero)
|
||||
{
|
||||
throw new ArgumentOutOfRangeException(nameof(timeout),
|
||||
$"Fetch timeout {timeout} is too small");
|
||||
}
|
||||
|
||||
return resolver => resolver.FetchTimeout = timeout;
|
||||
}
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// DirAccountResolver (stub)
|
||||
// Mirrors Go DirAccResolver (accounts.go ~line 4143).
|
||||
// Full system-subscription wiring is deferred to session 12.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// A directory-backed account resolver that stores JWTs in a <see cref="DirJwtStore"/>
|
||||
/// and synchronises with peers via NATS system subjects.
|
||||
/// <para>
|
||||
/// The Start override that wires up system subscriptions and the periodic sync goroutine
|
||||
/// is a stub in this session; full implementation requires JetStream and system
|
||||
/// subscription support (session 12+).
|
||||
/// </para>
|
||||
/// Mirrors Go <c>DirAccResolver</c>.
|
||||
/// </summary>
|
||||
public class DirAccountResolver : ResolverDefaultsOps, IDisposable
|
||||
{
|
||||
// Default fetch timeout — mirrors Go DEFAULT_ACCOUNT_FETCH_TIMEOUT (2 s).
|
||||
private static readonly TimeSpan DefaultFetchTimeout = TimeSpan.FromSeconds(2);
|
||||
|
||||
// Default sync interval — mirrors Go's fallback of 1 minute.
|
||||
private static readonly TimeSpan DefaultSyncInterval = TimeSpan.FromMinutes(1);
|
||||
|
||||
/// <summary>The underlying directory JWT store. Mirrors Go <c>DirAccResolver.DirJWTStore</c>.</summary>
|
||||
public DirJwtStore Store { get; }
|
||||
|
||||
/// <summary>Reference to the running server, set during <see cref="Start"/>. Mirrors Go <c>DirAccResolver.Server</c>.</summary>
|
||||
public object? Server { get; protected set; }
|
||||
|
||||
/// <summary>How often the resolver sends a sync (pack) request to peers. Mirrors Go <c>DirAccResolver.syncInterval</c>.</summary>
|
||||
public TimeSpan SyncInterval { get; protected set; }
|
||||
|
||||
/// <summary>Maximum time to wait for a remote JWT fetch. Mirrors Go <c>DirAccResolver.fetchTimeout</c>.</summary>
|
||||
public TimeSpan FetchTimeout { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Creates a new directory account resolver.
|
||||
/// <para>
|
||||
/// When <paramref name="limit"/> is zero it is promoted to <see cref="long.MaxValue"/> (unlimited).
|
||||
/// When <paramref name="syncInterval"/> is non-positive it defaults to one minute.
|
||||
/// </para>
|
||||
/// Mirrors Go <c>NewDirAccResolver</c>.
|
||||
/// </summary>
|
||||
/// <param name="path">Directory path for the JWT store.</param>
|
||||
/// <param name="limit">Maximum number of JWTs the store may hold (0 = unlimited).</param>
|
||||
/// <param name="syncInterval">How often to broadcast a sync/pack request to peers.</param>
|
||||
/// <param name="deleteType">Controls whether deletes are soft- or hard-deleted.</param>
|
||||
/// <param name="opts">Zero or more functional options to further configure this instance.</param>
|
||||
public DirAccountResolver(
|
||||
string path,
|
||||
long limit,
|
||||
TimeSpan syncInterval,
|
||||
JwtDeleteType deleteType,
|
||||
params DirResOption[] opts)
|
||||
{
|
||||
if (limit == 0)
|
||||
{
|
||||
limit = long.MaxValue;
|
||||
}
|
||||
|
||||
if (syncInterval <= TimeSpan.Zero)
|
||||
{
|
||||
syncInterval = DefaultSyncInterval;
|
||||
}
|
||||
|
||||
Store = DirJwtStore.NewExpiringDirJwtStore(
|
||||
path,
|
||||
shard: false,
|
||||
create: true,
|
||||
deleteType,
|
||||
expireCheck: TimeSpan.Zero,
|
||||
limit,
|
||||
evictOnLimit: false,
|
||||
ttl: TimeSpan.Zero,
|
||||
changeNotification: null);
|
||||
|
||||
SyncInterval = syncInterval;
|
||||
FetchTimeout = DefaultFetchTimeout;
|
||||
|
||||
Apply(opts);
|
||||
}
|
||||
|
||||
// Internal constructor used by CacheDirAccountResolver which supplies its own store.
|
||||
internal DirAccountResolver(
|
||||
DirJwtStore store,
|
||||
TimeSpan syncInterval,
|
||||
TimeSpan fetchTimeout)
|
||||
{
|
||||
Store = store;
|
||||
SyncInterval = syncInterval;
|
||||
FetchTimeout = fetchTimeout;
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Applies a sequence of functional options to this resolver.
|
||||
/// Mirrors Go <c>DirAccResolver.apply</c>.
|
||||
/// </summary>
|
||||
protected void Apply(IEnumerable<DirResOption> opts)
|
||||
{
|
||||
foreach (var opt in opts)
|
||||
{
|
||||
opt(this);
|
||||
}
|
||||
}
|
||||
|
||||
// -------------------------------------------------------------------------
|
||||
// IAccountResolver overrides
|
||||
// -------------------------------------------------------------------------
|
||||
|
||||
/// <summary>
|
||||
/// DirAccountResolver is not read-only.
|
||||
/// Mirrors Go: DirAccResolver does not override IsReadOnly, so it inherits false
|
||||
/// from the concrete behaviour (store is writable).
|
||||
/// </summary>
|
||||
public override bool IsReadOnly() => false;
|
||||
|
||||
/// <summary>
|
||||
/// Tracks updates (reacts to JWT change events).
|
||||
/// Mirrors Go <c>DirAccResolver.IsTrackingUpdate</c>.
|
||||
/// </summary>
|
||||
public override bool IsTrackingUpdate() => true;
|
||||
|
||||
/// <summary>
|
||||
/// Reloads state from the backing <see cref="DirJwtStore"/>.
|
||||
/// Mirrors Go <c>DirAccResolver.Reload</c>.
|
||||
/// </summary>
|
||||
public override void Reload() => Store.Reload();
|
||||
|
||||
/// <summary>
|
||||
/// Fetches the JWT for <paramref name="name"/> from the local <see cref="DirJwtStore"/>.
|
||||
/// Throws <see cref="InvalidOperationException"/> when the account is not found locally.
|
||||
/// <para>
|
||||
/// Note: the Go implementation falls back to <c>srv.fetch</c> (a cluster-wide lookup) when
|
||||
/// the local store misses. That fallback requires system subscriptions and is deferred to
|
||||
/// session 12. For now this method only consults the local store.
|
||||
/// </para>
|
||||
/// Mirrors Go <c>DirAccResolver.Fetch</c> (local path only).
|
||||
/// </summary>
|
||||
public override Task<string> FetchAsync(string name, CancellationToken ct = default)
|
||||
{
|
||||
var theJwt = Store.LoadAcc(name);
|
||||
if (!string.IsNullOrEmpty(theJwt))
|
||||
{
|
||||
return Task.FromResult(theJwt);
|
||||
}
|
||||
|
||||
throw new InvalidOperationException($"Account not found: {name}");
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Stores <paramref name="jwt"/> under <paramref name="name"/>, keeping the newer JWT
|
||||
/// when a conflicting entry already exists.
|
||||
/// Mirrors Go <c>DirAccResolver.Store</c> (delegates to <c>saveIfNewer</c>).
|
||||
/// </summary>
|
||||
public override Task StoreAsync(string name, string jwt, CancellationToken ct = default)
|
||||
{
|
||||
// SaveAcc is equivalent to saveIfNewer in the DirJwtStore implementation.
|
||||
Store.SaveAcc(name, jwt);
|
||||
return Task.CompletedTask;
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Starts background system subscriptions and the periodic sync timer.
|
||||
/// <para>
|
||||
/// TODO (session 12): wire up system subscriptions for account JWT update/lookup/pack
|
||||
/// requests, cluster synchronisation, and the periodic pack broadcast goroutine.
|
||||
/// </para>
|
||||
/// Mirrors Go <c>DirAccResolver.Start</c>.
|
||||
/// </summary>
|
||||
public override void Start(object server)
|
||||
{
|
||||
Server = server;
|
||||
// TODO (session 12): set up system subscriptions and periodic sync timer.
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Stops background processing and closes the <see cref="DirJwtStore"/>.
|
||||
/// Mirrors Go <c>AccountResolver.Close</c> (no explicit Go override; store is closed
|
||||
/// by the server shutdown path).
|
||||
/// </summary>
|
||||
public override void Close() => Store.Close();
|
||||
|
||||
/// <inheritdoc/>
|
||||
public void Dispose() => Store.Dispose();
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// CacheDirAccountResolver (stub)
|
||||
// Mirrors Go CacheDirAccResolver (accounts.go ~line 4594).
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// A caching variant of <see cref="DirAccountResolver"/> that uses a TTL-based expiring
|
||||
/// store so that fetched JWTs are automatically evicted after <see cref="Ttl"/>.
|
||||
/// <para>
|
||||
/// The Start override that wires up system subscriptions is a stub in this session;
|
||||
/// full implementation requires system subscription support (session 12+).
|
||||
/// </para>
|
||||
/// Mirrors Go <c>CacheDirAccResolver</c>.
|
||||
/// </summary>
|
||||
public sealed class CacheDirAccountResolver : DirAccountResolver
|
||||
{
|
||||
// Default cache limit — mirrors Go's fallback of 1 000 entries.
|
||||
private const long DefaultCacheLimit = 1_000;
|
||||
|
||||
// Default fetch timeout — mirrors Go DEFAULT_ACCOUNT_FETCH_TIMEOUT (2 s).
|
||||
private static readonly TimeSpan DefaultFetchTimeout = TimeSpan.FromSeconds(2);
|
||||
|
||||
/// <summary>The TTL applied to each cached JWT entry. Mirrors Go <c>CacheDirAccResolver.ttl</c>.</summary>
|
||||
public TimeSpan Ttl { get; }
|
||||
|
||||
/// <summary>
|
||||
/// Creates a new caching directory account resolver.
|
||||
/// <para>
|
||||
/// When <paramref name="limit"/> is zero or negative it defaults to 1 000.
|
||||
/// </para>
|
||||
/// Mirrors Go <c>NewCacheDirAccResolver</c>.
|
||||
/// </summary>
|
||||
/// <param name="path">Directory path for the JWT store.</param>
|
||||
/// <param name="limit">Maximum number of JWTs to cache (0 = 1 000).</param>
|
||||
/// <param name="ttl">Time-to-live for each cached JWT.</param>
|
||||
/// <param name="opts">Zero or more functional options to further configure this instance.</param>
|
||||
public CacheDirAccountResolver(
|
||||
string path,
|
||||
long limit,
|
||||
TimeSpan ttl,
|
||||
params DirResOption[] opts)
|
||||
: base(
|
||||
store: DirJwtStore.NewExpiringDirJwtStore(
|
||||
path,
|
||||
shard: false,
|
||||
create: true,
|
||||
JwtDeleteType.HardDelete,
|
||||
expireCheck: TimeSpan.Zero,
|
||||
limit: limit <= 0 ? DefaultCacheLimit : limit,
|
||||
evictOnLimit: true,
|
||||
ttl: ttl,
|
||||
changeNotification: null),
|
||||
syncInterval: TimeSpan.Zero,
|
||||
fetchTimeout: DefaultFetchTimeout)
|
||||
{
|
||||
Ttl = ttl;
|
||||
Apply(opts);
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Starts background system subscriptions for cached JWT update notifications.
|
||||
/// <para>
|
||||
/// TODO (session 12): wire up system subscriptions for account JWT update events
|
||||
/// (cache variant — does not include pack/list/delete handling).
|
||||
/// </para>
|
||||
/// Mirrors Go <c>CacheDirAccResolver.Start</c>.
|
||||
/// </summary>
|
||||
public override void Start(object server)
|
||||
{
|
||||
Server = server;
|
||||
// TODO (session 12): set up system subscriptions for cache-update notifications.
|
||||
}
|
||||
}
|
||||
737
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/AccountTypes.cs
Normal file
737
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/AccountTypes.cs
Normal file
@@ -0,0 +1,737 @@
|
||||
// Copyright 2018-2026 The NATS Authors
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
//
|
||||
// Adapted from server/accounts.go in the NATS server Go source.
|
||||
|
||||
using System.Text.Json.Serialization;
|
||||
using ZB.MOM.NatsNet.Server.Auth;
|
||||
using ZB.MOM.NatsNet.Server.Internal;
|
||||
|
||||
namespace ZB.MOM.NatsNet.Server;
|
||||
|
||||
// ============================================================================
|
||||
// AccountLimits — account-based limits
|
||||
// Mirrors Go `limits` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Per-account connection and payload limits.
|
||||
/// Mirrors Go <c>limits</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class AccountLimits
|
||||
{
|
||||
/// <summary>Maximum payload size (-1 = unlimited). Mirrors Go <c>mpay</c>.</summary>
|
||||
public int MaxPayload { get; set; } = -1;
|
||||
|
||||
/// <summary>Maximum subscriptions (-1 = unlimited). Mirrors Go <c>msubs</c>.</summary>
|
||||
public int MaxSubscriptions { get; set; } = -1;
|
||||
|
||||
/// <summary>Maximum connections (-1 = unlimited). Mirrors Go <c>mconns</c>.</summary>
|
||||
public int MaxConnections { get; set; } = -1;
|
||||
|
||||
/// <summary>Maximum leaf nodes (-1 = unlimited). Mirrors Go <c>mleafs</c>.</summary>
|
||||
public int MaxLeafNodes { get; set; } = -1;
|
||||
|
||||
/// <summary>When true, bearer tokens are not allowed. Mirrors Go <c>disallowBearer</c>.</summary>
|
||||
public bool DisallowBearer { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// SConns — remote server connection/leafnode counters
|
||||
// Mirrors Go `sconns` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Tracks the number of client connections and leaf nodes for a remote server.
|
||||
/// Mirrors Go <c>sconns</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class SConns
|
||||
{
|
||||
/// <summary>Number of client connections from the remote server. Mirrors Go <c>conns</c>.</summary>
|
||||
public int Conns;
|
||||
|
||||
/// <summary>Number of leaf nodes from the remote server. Mirrors Go <c>leafs</c>.</summary>
|
||||
public int Leafs;
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ServiceRespType — service response type enum
|
||||
// Mirrors Go `ServiceRespType` and its iota constants in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// The response type for an exported service.
|
||||
/// Mirrors Go <c>ServiceRespType</c> in server/accounts.go.
|
||||
/// </summary>
|
||||
public enum ServiceRespType : byte
|
||||
{
|
||||
/// <summary>A single response is expected. Default. Mirrors Go <c>Singleton</c>.</summary>
|
||||
Singleton = 0,
|
||||
|
||||
/// <summary>Multiple responses are streamed. Mirrors Go <c>Streamed</c>.</summary>
|
||||
Streamed = 1,
|
||||
|
||||
/// <summary>Responses are sent in chunks. Mirrors Go <c>Chunked</c>.</summary>
|
||||
Chunked = 2,
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Extension methods for <see cref="ServiceRespType"/>.
|
||||
/// </summary>
|
||||
public static class ServiceRespTypeExtensions
|
||||
{
|
||||
/// <summary>
|
||||
/// Returns the string representation of the response type.
|
||||
/// Mirrors Go <c>ServiceRespType.String()</c>.
|
||||
/// </summary>
|
||||
public static string ToNatsString(this ServiceRespType rt) => rt switch
|
||||
{
|
||||
ServiceRespType.Singleton => "Singleton",
|
||||
ServiceRespType.Streamed => "Streamed",
|
||||
ServiceRespType.Chunked => "Chunked",
|
||||
_ => "Unknown ServiceResType",
|
||||
};
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ExportAuth — export authorization configuration
|
||||
// Mirrors Go `exportAuth` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Holds configured approvals or a flag indicating that an auth token is
|
||||
/// required for import.
|
||||
/// Mirrors Go <c>exportAuth</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal class ExportAuth
|
||||
{
|
||||
/// <summary>When true, an auth token is required to import this export. Mirrors Go <c>tokenReq</c>.</summary>
|
||||
public bool TokenRequired { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Position in the subject token where the account name appears (for
|
||||
/// public exports that embed the importing account name).
|
||||
/// Mirrors Go <c>accountPos</c>.
|
||||
/// </summary>
|
||||
public uint AccountPosition { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Accounts explicitly approved to import this export.
|
||||
/// Key is the account name. Mirrors Go <c>approved</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, Account>? Approved { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Accounts whose activations have been revoked.
|
||||
/// Key is the account name, value is the revocation timestamp (Unix ns).
|
||||
/// Mirrors Go <c>actsRevoked</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, long>? ActivationsRevoked { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// StreamExport — exported stream descriptor
|
||||
// Mirrors Go `streamExport` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Describes a stream exported by an account.
|
||||
/// Mirrors Go <c>streamExport</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class StreamExport : ExportAuth
|
||||
{
|
||||
// No additional fields beyond ExportAuth for now.
|
||||
// Full implementation in session 11 (accounts.go).
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// InternalServiceLatency — service latency tracking configuration
|
||||
// Mirrors Go `serviceLatency` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Configuration for service latency tracking on an exported service.
|
||||
/// Mirrors Go <c>serviceLatency</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class InternalServiceLatency
|
||||
{
|
||||
/// <summary>
|
||||
/// Sampling percentage (1–100), or 0 to indicate triggered by header.
|
||||
/// Mirrors Go <c>sampling int8</c>.
|
||||
/// </summary>
|
||||
public int Sampling { get; set; }
|
||||
|
||||
/// <summary>Subject to publish latency metrics to. Mirrors Go <c>subject</c>.</summary>
|
||||
public string Subject { get; set; } = string.Empty;
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ServiceExportEntry — exported service descriptor
|
||||
// Mirrors Go `serviceExport` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Describes a service exported by an account with additional configuration
|
||||
/// for response type, latency tracking, and timers.
|
||||
/// Mirrors Go <c>serviceExport</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class ServiceExportEntry : ExportAuth
|
||||
{
|
||||
/// <summary>Account that owns this export. Mirrors Go <c>acc</c>.</summary>
|
||||
public Account? Account { get; set; }
|
||||
|
||||
/// <summary>Response type (Singleton, Streamed, Chunked). Mirrors Go <c>respType</c>.</summary>
|
||||
public ServiceRespType ResponseType { get; set; } = ServiceRespType.Singleton;
|
||||
|
||||
/// <summary>Latency tracking configuration, or null if disabled. Mirrors Go <c>latency</c>.</summary>
|
||||
public InternalServiceLatency? Latency { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Timer used to collect response-latency measurements.
|
||||
/// Mirrors Go <c>rtmr *time.Timer</c>.
|
||||
/// </summary>
|
||||
public Timer? ResponseTimer { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Threshold duration for service responses.
|
||||
/// Mirrors Go <c>respThresh time.Duration</c>.
|
||||
/// </summary>
|
||||
public TimeSpan ResponseThreshold { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// When true, tracing is allowed past the account boundary for this export.
|
||||
/// Mirrors Go <c>atrc</c> (allow_trace).
|
||||
/// </summary>
|
||||
public bool AllowTrace { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ExportMap — tracks exported streams and services for an account
|
||||
// Mirrors Go `exportMap` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Tracks all stream exports, service exports, and response mappings for an account.
|
||||
/// Mirrors Go <c>exportMap</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class ExportMap
|
||||
{
|
||||
/// <summary>
|
||||
/// Exported streams keyed by subject pattern.
|
||||
/// Mirrors Go <c>streams map[string]*streamExport</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, StreamExport>? Streams { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Exported services keyed by subject pattern.
|
||||
/// Mirrors Go <c>services map[string]*serviceExport</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, ServiceExportEntry>? Services { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// In-flight response service imports keyed by reply subject.
|
||||
/// Mirrors Go <c>responses map[string]*serviceImport</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, ServiceImportEntry>? Responses { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ImportMap — tracks imported streams and services for an account
|
||||
// Mirrors Go `importMap` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Tracks all stream imports, service imports, and reverse-response maps.
|
||||
/// Mirrors Go <c>importMap</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class ImportMap
|
||||
{
|
||||
/// <summary>
|
||||
/// Imported streams (ordered list).
|
||||
/// Mirrors Go <c>streams []*streamImport</c>.
|
||||
/// </summary>
|
||||
public List<StreamImportEntry>? Streams { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Imported services keyed by subject pattern; each key may have
|
||||
/// multiple import entries (e.g. fan-out imports).
|
||||
/// Mirrors Go <c>services map[string][]*serviceImport</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, List<ServiceImportEntry>>? Services { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Reverse-response map used to clean up singleton service imports.
|
||||
/// Mirrors Go <c>rrMap map[string][]*serviceRespEntry</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, List<ServiceRespEntry>>? ReverseResponseMap { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// StreamImportEntry — an imported stream mapping
|
||||
// Mirrors Go `streamImport` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// An imported stream from another account, with optional subject remapping.
|
||||
/// Mirrors Go <c>streamImport</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class StreamImportEntry
|
||||
{
|
||||
/// <summary>Account providing the stream. Mirrors Go <c>acc</c>.</summary>
|
||||
public Account? Account { get; set; }
|
||||
|
||||
/// <summary>Source subject on the exporting account. Mirrors Go <c>from</c>.</summary>
|
||||
public string From { get; set; } = string.Empty;
|
||||
|
||||
/// <summary>Destination subject on the importing account. Mirrors Go <c>to</c>.</summary>
|
||||
public string To { get; set; } = string.Empty;
|
||||
|
||||
/// <summary>
|
||||
/// Subject transform applied to the source subject.
|
||||
/// Mirrors Go <c>tr *subjectTransform</c>.
|
||||
/// Stubbed as <see cref="ISubjectTransformer"/> until the transform
|
||||
/// engine is wired in.
|
||||
/// </summary>
|
||||
public ISubjectTransformer? Transform { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Reverse transform for reply subjects.
|
||||
/// Mirrors Go <c>rtr *subjectTransform</c>.
|
||||
/// </summary>
|
||||
public ISubjectTransformer? ReverseTransform { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// JWT import claim that authorized this import.
|
||||
/// Mirrors Go <c>claim *jwt.Import</c>.
|
||||
/// Stubbed as <c>object?</c> until JWT integration is complete (session 11).
|
||||
/// </summary>
|
||||
public object? Claim { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// When true, use the published subject instead of <see cref="To"/>.
|
||||
/// Mirrors Go <c>usePub</c>.
|
||||
/// </summary>
|
||||
public bool UsePublishedSubject { get; set; }
|
||||
|
||||
/// <summary>Whether this import is considered invalid. Mirrors Go <c>invalid</c>.</summary>
|
||||
public bool Invalid { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// When true, tracing is allowed past the account boundary.
|
||||
/// Mirrors Go <c>atrc</c> (allow_trace).
|
||||
/// </summary>
|
||||
public bool AllowTrace { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ServiceImportEntry — an imported service mapping
|
||||
// Mirrors Go `serviceImport` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// An imported service from another account, with response routing and
|
||||
/// latency tracking state.
|
||||
/// Mirrors Go <c>serviceImport</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class ServiceImportEntry
|
||||
{
|
||||
/// <summary>Account providing the service. Mirrors Go <c>acc</c>.</summary>
|
||||
public Account? Account { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// JWT import claim that authorized this import.
|
||||
/// Mirrors Go <c>claim *jwt.Import</c>.
|
||||
/// Stubbed as <c>object?</c> until JWT integration is complete (session 11).
|
||||
/// </summary>
|
||||
public object? Claim { get; set; }
|
||||
|
||||
/// <summary>Parent service export entry. Mirrors Go <c>se *serviceExport</c>.</summary>
|
||||
public ServiceExportEntry? ServiceExport { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Subscription ID byte slice for cleanup.
|
||||
/// Mirrors Go <c>sid []byte</c>.
|
||||
/// </summary>
|
||||
public byte[]? SubscriptionId { get; set; }
|
||||
|
||||
/// <summary>Source subject on the importing account. Mirrors Go <c>from</c>.</summary>
|
||||
public string From { get; set; } = string.Empty;
|
||||
|
||||
/// <summary>Destination subject on the exporting account. Mirrors Go <c>to</c>.</summary>
|
||||
public string To { get; set; } = string.Empty;
|
||||
|
||||
/// <summary>
|
||||
/// Subject transform applied when routing requests.
|
||||
/// Mirrors Go <c>tr *subjectTransform</c>.
|
||||
/// Stubbed as <see cref="ISubjectTransformer"/> until transform engine is wired in.
|
||||
/// </summary>
|
||||
public ISubjectTransformer? Transform { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Timestamp (Unix nanoseconds) when the import request was created.
|
||||
/// Used for latency tracking. Mirrors Go <c>ts int64</c>.
|
||||
/// </summary>
|
||||
public long Timestamp { get; set; }
|
||||
|
||||
/// <summary>Response type for this service import. Mirrors Go <c>rt ServiceRespType</c>.</summary>
|
||||
public ServiceRespType ResponseType { get; set; } = ServiceRespType.Singleton;
|
||||
|
||||
/// <summary>Latency tracking configuration. Mirrors Go <c>latency *serviceLatency</c>.</summary>
|
||||
public InternalServiceLatency? Latency { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// First-leg latency measurement (requestor side).
|
||||
/// Mirrors Go <c>m1 *ServiceLatency</c>.
|
||||
/// </summary>
|
||||
public ServiceLatency? M1 { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Client connection that sent the original request.
|
||||
/// Mirrors Go <c>rc *client</c>.
|
||||
/// </summary>
|
||||
public ClientConnection? RequestingClient { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// When true, use the published subject instead of <see cref="To"/>.
|
||||
/// Mirrors Go <c>usePub</c>.
|
||||
/// </summary>
|
||||
public bool UsePublishedSubject { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// When true, this import entry represents a pending response rather
|
||||
/// than an originating request.
|
||||
/// Mirrors Go <c>response</c>.
|
||||
/// </summary>
|
||||
public bool IsResponse { get; set; }
|
||||
|
||||
/// <summary>Whether this import is considered invalid. Mirrors Go <c>invalid</c>.</summary>
|
||||
public bool Invalid { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// When true, the requestor's <see cref="ClientInfo"/> is shared with
|
||||
/// the responder. Mirrors Go <c>share</c>.
|
||||
/// </summary>
|
||||
public bool Share { get; set; }
|
||||
|
||||
/// <summary>Whether latency tracking is active. Mirrors Go <c>tracking</c>.</summary>
|
||||
public bool Tracking { get; set; }
|
||||
|
||||
/// <summary>Whether a response was delivered to the requestor. Mirrors Go <c>didDeliver</c>.</summary>
|
||||
public bool DidDeliver { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// When true, tracing is allowed past the account boundary (inherited
|
||||
/// from the service export). Mirrors Go <c>atrc</c>.
|
||||
/// </summary>
|
||||
public bool AllowTrace { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Headers from the original request, used when latency is triggered by
|
||||
/// a header. Mirrors Go <c>trackingHdr http.Header</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, string[]>? TrackingHeader { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ServiceRespEntry — reverse-response map entry
|
||||
// Mirrors Go `serviceRespEntry` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Records a service import mapping for reverse-response-map cleanup.
|
||||
/// Mirrors Go <c>serviceRespEntry</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class ServiceRespEntry
|
||||
{
|
||||
/// <summary>Account that owns the service import. Mirrors Go <c>acc</c>.</summary>
|
||||
public Account? Account { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// The mapped subscription subject used for the response.
|
||||
/// Mirrors Go <c>msub</c>.
|
||||
/// </summary>
|
||||
public string MappedSubject { get; set; } = string.Empty;
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// MapDest — public API for weighted subject mappings
|
||||
// Mirrors Go `MapDest` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Describes a weighted mapping destination for published subjects.
|
||||
/// Mirrors Go <c>MapDest</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
public sealed class MapDest
|
||||
{
|
||||
[JsonPropertyName("subject")]
|
||||
public string Subject { get; set; } = string.Empty;
|
||||
|
||||
[JsonPropertyName("weight")]
|
||||
public byte Weight { get; set; }
|
||||
|
||||
[JsonPropertyName("cluster")]
|
||||
public string Cluster { get; set; } = string.Empty;
|
||||
|
||||
/// <summary>
|
||||
/// Creates a new <see cref="MapDest"/> with the given subject and weight.
|
||||
/// Mirrors Go <c>NewMapDest</c>.
|
||||
/// </summary>
|
||||
public static MapDest New(string subject, byte weight) =>
|
||||
new() { Subject = subject, Weight = weight };
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// Destination — internal weighted mapped destination
|
||||
// Mirrors Go `destination` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Internal representation of a weighted mapped destination, holding a
|
||||
/// transform and a weight.
|
||||
/// Mirrors Go <c>destination</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class Destination
|
||||
{
|
||||
/// <summary>
|
||||
/// Transform that converts the source subject to the destination subject.
|
||||
/// Mirrors Go <c>tr *subjectTransform</c>.
|
||||
/// </summary>
|
||||
public ISubjectTransformer? Transform { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Relative weight (0–100). Mirrors Go <c>weight uint8</c>.
|
||||
/// </summary>
|
||||
public byte Weight { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// SubjectMapping — internal subject mapping entry
|
||||
// Mirrors Go `mapping` struct in server/accounts.go.
|
||||
// Renamed from `mapping` to avoid collision with the C# keyword context.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// An internal entry describing how a source subject is remapped to one or
|
||||
/// more weighted destinations, optionally scoped to specific clusters.
|
||||
/// Mirrors Go <c>mapping</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class SubjectMapping
|
||||
{
|
||||
/// <summary>Source subject pattern. Mirrors Go <c>src</c>.</summary>
|
||||
public string Source { get; set; } = string.Empty;
|
||||
|
||||
/// <summary>
|
||||
/// Whether the source contains wildcards.
|
||||
/// Mirrors Go <c>wc</c>.
|
||||
/// </summary>
|
||||
public bool HasWildcard { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Weighted destinations with no cluster scope.
|
||||
/// Mirrors Go <c>dests []*destination</c>.
|
||||
/// </summary>
|
||||
public List<Destination> Destinations { get; set; } = [];
|
||||
|
||||
/// <summary>
|
||||
/// Per-cluster weighted destinations.
|
||||
/// Key is the cluster name. Mirrors Go <c>cdests map[string][]*destination</c>.
|
||||
/// </summary>
|
||||
public Dictionary<string, List<Destination>>? ClusterDestinations { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// TypedEvent — base for server advisory events
|
||||
// Mirrors Go `TypedEvent` struct in server/events.go.
|
||||
// Included here because ServiceLatency embeds it.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Base fields for a NATS typed event or advisory.
|
||||
/// Mirrors Go <c>TypedEvent</c> struct in server/events.go.
|
||||
/// </summary>
|
||||
public class TypedEvent
|
||||
{
|
||||
[JsonPropertyName("type")]
|
||||
public string Type { get; set; } = string.Empty;
|
||||
|
||||
[JsonPropertyName("id")]
|
||||
public string Id { get; set; } = string.Empty;
|
||||
|
||||
[JsonPropertyName("timestamp")]
|
||||
public DateTime Time { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// ServiceLatency — public latency measurement event
|
||||
// Mirrors Go `ServiceLatency` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// The JSON message published to a latency-tracking subject when a service
|
||||
/// request completes. Includes requestor and responder timing breakdowns.
|
||||
/// Mirrors Go <c>ServiceLatency</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
public sealed class ServiceLatency : TypedEvent
|
||||
{
|
||||
[JsonPropertyName("status")]
|
||||
public int Status { get; set; }
|
||||
|
||||
[JsonPropertyName("description")]
|
||||
public string Error { get; set; } = string.Empty;
|
||||
|
||||
[JsonPropertyName("requestor")]
|
||||
public ClientInfo? Requestor { get; set; }
|
||||
|
||||
[JsonPropertyName("responder")]
|
||||
public ClientInfo? Responder { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Headers from the original request that triggered latency measurement.
|
||||
/// Mirrors Go <c>RequestHeader http.Header</c>.
|
||||
/// </summary>
|
||||
[JsonPropertyName("header")]
|
||||
public Dictionary<string, string[]>? RequestHeader { get; set; }
|
||||
|
||||
[JsonPropertyName("start")]
|
||||
public DateTime RequestStart { get; set; }
|
||||
|
||||
/// <summary>Mirrors Go <c>ServiceLatency time.Duration</c> (nanoseconds).</summary>
|
||||
[JsonPropertyName("service")]
|
||||
public TimeSpan ServiceLatencyDuration { get; set; }
|
||||
|
||||
/// <summary>Mirrors Go <c>SystemLatency time.Duration</c> (nanoseconds).</summary>
|
||||
[JsonPropertyName("system")]
|
||||
public TimeSpan SystemLatency { get; set; }
|
||||
|
||||
/// <summary>Mirrors Go <c>TotalLatency time.Duration</c> (nanoseconds).</summary>
|
||||
[JsonPropertyName("total")]
|
||||
public TimeSpan TotalLatency { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Returns the sum of requestor RTT, responder RTT, and system latency.
|
||||
/// Mirrors Go <c>ServiceLatency.NATSTotalTime()</c>.
|
||||
/// </summary>
|
||||
public TimeSpan NATSTotalTime()
|
||||
{
|
||||
var requestorRtt = Requestor?.Rtt ?? TimeSpan.Zero;
|
||||
var responderRtt = Responder?.Rtt ?? TimeSpan.Zero;
|
||||
return requestorRtt + responderRtt + SystemLatency;
|
||||
}
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// RemoteLatency — cross-server latency transport message
|
||||
// Mirrors Go `remoteLatency` struct in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Used to transport a responder-side latency measurement to the
|
||||
/// requestor's server so the two halves can be merged.
|
||||
/// Mirrors Go <c>remoteLatency</c> struct in server/accounts.go.
|
||||
/// </summary>
|
||||
internal sealed class RemoteLatency
|
||||
{
|
||||
[JsonPropertyName("account")]
|
||||
public string Account { get; set; } = string.Empty;
|
||||
|
||||
[JsonPropertyName("req_id")]
|
||||
public string RequestId { get; set; } = string.Empty;
|
||||
|
||||
[JsonPropertyName("m2")]
|
||||
public ServiceLatency M2 { get; set; } = new();
|
||||
|
||||
/// <summary>
|
||||
/// Private: response latency threshold used when deciding whether to
|
||||
/// send the remote measurement.
|
||||
/// Mirrors Go <c>respThresh time.Duration</c>.
|
||||
/// </summary>
|
||||
public TimeSpan ResponseThreshold { get; set; }
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// RsiReason — reason for removing a response service import
|
||||
// Mirrors Go `rsiReason` and its iota constants in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// The reason a response service import entry is being removed.
|
||||
/// Mirrors Go <c>rsiReason</c> and its iota constants in server/accounts.go.
|
||||
/// </summary>
|
||||
internal enum RsiReason
|
||||
{
|
||||
/// <summary>Normal completion. Mirrors Go <c>rsiOk</c>.</summary>
|
||||
Ok = 0,
|
||||
|
||||
/// <summary>Response was never delivered. Mirrors Go <c>rsiNoDelivery</c>.</summary>
|
||||
NoDelivery = 1,
|
||||
|
||||
/// <summary>Response timed out. Mirrors Go <c>rsiTimeout</c>.</summary>
|
||||
Timeout = 2,
|
||||
}
|
||||
|
||||
// ============================================================================
|
||||
// Account-level constants
|
||||
// Mirrors the const blocks in server/accounts.go.
|
||||
// ============================================================================
|
||||
|
||||
/// <summary>
|
||||
/// Constants related to account route-pool indexing and search depth.
|
||||
/// </summary>
|
||||
internal static class AccountConstants
|
||||
{
|
||||
/// <summary>
|
||||
/// Sentinel value indicating the account has a dedicated route connection.
|
||||
/// Mirrors Go <c>accDedicatedRoute = -1</c>.
|
||||
/// </summary>
|
||||
public const int DedicatedRoute = -1;
|
||||
|
||||
/// <summary>
|
||||
/// Sentinel value indicating the account is in the process of transitioning
|
||||
/// to a dedicated route.
|
||||
/// Mirrors Go <c>accTransitioningToDedicatedRoute = -2</c>.
|
||||
/// </summary>
|
||||
public const int TransitioningToDedicatedRoute = -2;
|
||||
|
||||
/// <summary>
|
||||
/// Maximum depth for account cycle detection when following import chains.
|
||||
/// Mirrors Go <c>MaxAccountCycleSearchDepth = 1024</c>.
|
||||
/// </summary>
|
||||
public const int MaxCycleSearchDepth = 1024;
|
||||
}
|
||||
|
||||
/// <summary>
|
||||
/// Well-known header names and event type identifiers used by the account
|
||||
/// service-latency and client-info subsystems.
|
||||
/// </summary>
|
||||
public static class AccountEventConstants
|
||||
{
|
||||
/// <summary>
|
||||
/// Header name used to pass client metadata into a service request.
|
||||
/// Mirrors Go <c>ClientInfoHdr = "Nats-Request-Info"</c>.
|
||||
/// </summary>
|
||||
public const string ClientInfoHeader = "Nats-Request-Info";
|
||||
|
||||
/// <summary>
|
||||
/// The default threshold (in nanoseconds, as a <see cref="TimeSpan"/>) below
|
||||
/// which a subscription-limit report is suppressed.
|
||||
/// Mirrors Go <c>defaultMaxSubLimitReportThreshold = int64(2 * time.Second)</c>.
|
||||
/// </summary>
|
||||
public static readonly TimeSpan DefaultMaxSubLimitReportThreshold = TimeSpan.FromSeconds(2);
|
||||
|
||||
/// <summary>
|
||||
/// NATS event type identifier for <see cref="ServiceLatency"/> messages.
|
||||
/// Mirrors Go <c>ServiceLatencyType = "io.nats.server.metric.v1.service_latency"</c>.
|
||||
/// </summary>
|
||||
public const string ServiceLatencyType = "io.nats.server.metric.v1.service_latency";
|
||||
}
|
||||
1373
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/DirJwtStore.cs
Normal file
1373
dotnet/src/ZB.MOM.NatsNet.Server/Accounts/DirJwtStore.cs
Normal file
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user