AuthService.h

Go to the documentation of this file.

#ifndef LINTEL_AUTHSERVICE_H
#define LINTEL_AUTHSERVICE_H
 
#include <atomic>
#include <chrono>
#include <cstdint>
#include <deque>
#include <map>
#include <memory>
#include <mutex>
#include <vector>
 
#include "lintel/core/services/PropertyRegistration.h"
#include "lintel/features/base/repositories/UserRepository.h"
#include "lintel/features/base/services/IAuthService.h"
#include "lintel/features/base/services/SchedulerService.h"
 
namespace lintel {
class AuthService
  : public IAuthService
  , public PropertyRegistration<AuthService>
  , public std::enable_shared_from_this<AuthService>
{
private:
  // properties
  std::shared_ptr<Property<std::chrono::seconds>> m_scheduleRate;
  std::shared_ptr<Property<std::chrono::minutes>> m_timeoutLogin;
  std::shared_ptr<Property<int32_t>> m_maxLoginFailures;
  std::shared_ptr<Property<std::chrono::seconds>> m_loginLockout;
  std::shared_ptr<Property<int32_t>> m_maxLoginAttempts;
  std::shared_ptr<Property<std::chrono::seconds>> m_rateLimitWindow;
  // variables
  std::map<std::string, UserToken> m_userTokens;
  std::mutex m_mutex;
  struct FailedAttempt
  {
    std::deque<std::chrono::steady_clock::time_point> m_timestamps;
  };
  std::map<std::string, FailedAttempt> m_failedAttempts;
  std::map<std::string, std::deque<std::chrono::steady_clock::time_point>> m_loginAttempts;
  std::shared_ptr<UserRepository> m_userRepository;
  std::shared_ptr<SchedulerService> m_scheduler;
  std::atomic_bool m_running = true;
 
  void onCheck();
 
  bool isLockedOut(const std::string &ipAddress);
 
  void recordFailedLogin(const std::string &ipAddress);
 
  void clearFailedLogins(const std::string &ipAddress);
 
  bool allowLoginAttempt(const std::string &ipAddress);
 
  void pruneLoginAttempts();
 
  void pruneFailedLogins();
 
public:
  AuthService(const std::shared_ptr<ProcessName> &processName,
    std::shared_ptr<UserRepository> userRepository,
    std::shared_ptr<SchedulerService> schedulerService);
 
  virtual ~AuthService() = default;
 
  std::optional<UserToken> onLoginOf(const UserLogin &userLogin);
 
  std::optional<UserToken> onAccessOf(const UserTokenLogin &userTokenLogin);
 
  void onLogoutOf(const UserTokenLogin &userToken) override;
 
  std::vector<UserToken> allTokensOf(const std::string &userName) override;
 
  void revokeTokenOf(const std::string &id) override;
 
  void onInitialize() override;
 
  void onShutdown() override;
};
 
}// namespace lintel
#endif// LINTEL_AUTHSERVICE_H