mirror of
https://github.com/drakkan/sftpgo.git
synced 2026-10-20 00:16:38 +00:00
Nicola Murino
f9857a181c
A user or admin changing its own password, profile or two-factor settings wrote the whole account back and could overwrite a concurrent administrator change. Self-service updates are now conditional on the stored updated_at matching the value read, and every update stores a strictly increasing updated_at. Thanks to Thomas Toth for the report. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
1224 lines
59 KiB
Go
1224 lines
59 KiB
Go
// Copyright (C) 2019 Nicola Murino
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published
|
|
// by the Free Software Foundation, version 3.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
//go:build !nopgsql
|
|
|
|
package dataprovider
|
|
|
|
import (
|
|
"context"
|
|
"crypto/x509"
|
|
"database/sql"
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"slices"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/jackc/pgx/v5"
|
|
"github.com/jackc/pgx/v5/pgconn"
|
|
"github.com/jackc/pgx/v5/stdlib"
|
|
|
|
"github.com/drakkan/sftpgo/v2/internal/logger"
|
|
"github.com/drakkan/sftpgo/v2/internal/util"
|
|
"github.com/drakkan/sftpgo/v2/internal/version"
|
|
"github.com/drakkan/sftpgo/v2/internal/vfs"
|
|
)
|
|
|
|
const (
|
|
pgsqlResetSQL = `DROP TABLE IF EXISTS "{{api_keys}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{users_folders_mapping}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{users_groups_mapping}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{admins_groups_mapping}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{groups_folders_mapping}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{shares_groups_mapping}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{admins}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{folders}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{shares}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{users}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{groups}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{defender_events}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{defender_hosts}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{active_transfers}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{shared_sessions}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{rules_actions_mapping}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{events_actions}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{events_rules}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{tasks}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{nodes}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{roles}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{ip_lists}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{configs}}" CASCADE;
|
|
DROP TABLE IF EXISTS "{{schema_version}}" CASCADE;
|
|
`
|
|
pgsqlInitial = `CREATE TABLE "{{schema_version}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "version" integer NOT NULL);
|
|
CREATE TABLE "{{admins}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "username" varchar(255) NOT NULL UNIQUE,
|
|
"description" varchar(512) NULL, "password" varchar(255) NOT NULL, "email" varchar(255) NULL, "status" integer NOT NULL,
|
|
"permissions" text NOT NULL, "filters" text NULL, "additional_info" text NULL, "last_login" bigint NOT NULL,
|
|
"role_id" integer NULL, "created_at" bigint NOT NULL, "updated_at" bigint NOT NULL);
|
|
CREATE TABLE "{{active_transfers}}" ("id" bigint NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "connection_id" varchar(100) NOT NULL,
|
|
"transfer_id" bigint NOT NULL, "transfer_type" integer NOT NULL, "username" varchar(255) NOT NULL,
|
|
"folder_name" varchar(255) NULL, "ip" varchar(50) NOT NULL, "truncated_size" bigint NOT NULL,
|
|
"current_ul_size" bigint NOT NULL, "current_dl_size" bigint NOT NULL, "created_at" bigint NOT NULL,
|
|
"updated_at" bigint NOT NULL);
|
|
CREATE TABLE "{{defender_hosts}}" ("id" bigint NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "ip" varchar(50) NOT NULL UNIQUE,
|
|
"ban_time" bigint NOT NULL, "updated_at" bigint NOT NULL);
|
|
CREATE TABLE "{{defender_events}}" ("id" bigint NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "date_time" bigint NOT NULL, "score" integer NOT NULL,
|
|
"host_id" bigint NOT NULL);
|
|
ALTER TABLE "{{defender_events}}" ADD CONSTRAINT "{{prefix}}defender_events_host_id_fk_defender_hosts_id" FOREIGN KEY
|
|
("host_id") REFERENCES "{{defender_hosts}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
CREATE TABLE "{{folders}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL UNIQUE, "description" varchar(512) NULL,
|
|
"path" text NULL, "used_quota_size" bigint NOT NULL, "used_quota_files" integer NOT NULL, "last_quota_update" bigint NOT NULL,
|
|
"filesystem" text NULL);
|
|
CREATE TABLE "{{groups}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL UNIQUE,
|
|
"description" varchar(512) NULL, "created_at" bigint NOT NULL, "updated_at" bigint NOT NULL, "user_settings" text NULL);
|
|
CREATE TABLE "{{shared_sessions}}" ("key" varchar(128) NOT NULL, "type" integer NOT NULL,
|
|
"data" text NOT NULL, "timestamp" bigint NOT NULL, PRIMARY KEY ("key", "type"));
|
|
CREATE TABLE "{{users}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "username" varchar(255) NOT NULL UNIQUE, "status" integer NOT NULL,
|
|
"expiration_date" bigint NOT NULL, "description" varchar(512) NULL, "password" text NULL, "public_keys" text NULL,
|
|
"home_dir" text NOT NULL, "uid" bigint NOT NULL, "gid" bigint NOT NULL, "max_sessions" integer NOT NULL,
|
|
"quota_size" bigint NOT NULL, "quota_files" integer NOT NULL, "permissions" text NOT NULL, "used_quota_size" bigint NOT NULL,
|
|
"used_quota_files" integer NOT NULL, "last_quota_update" bigint NOT NULL, "upload_bandwidth" integer NOT NULL,
|
|
"download_bandwidth" integer NOT NULL, "last_login" bigint NOT NULL, "filters" text NULL, "filesystem" text NULL,
|
|
"additional_info" text NULL, "created_at" bigint NOT NULL, "updated_at" bigint NOT NULL, "email" varchar(255) NULL,
|
|
"upload_data_transfer" integer NOT NULL, "download_data_transfer" integer NOT NULL, "total_data_transfer" integer NOT NULL,
|
|
"used_upload_data_transfer" bigint NOT NULL, "used_download_data_transfer" bigint NOT NULL, "deleted_at" bigint NOT NULL,
|
|
"first_download" bigint NOT NULL, "first_upload" bigint NOT NULL, "last_password_change" bigint NOT NULL, "role_id" integer NULL);
|
|
CREATE TABLE "{{groups_folders_mapping}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "group_id" integer NOT NULL,
|
|
"folder_id" integer NOT NULL, "virtual_path" text NOT NULL, "quota_size" bigint NOT NULL, "quota_files" integer NOT NULL, "sort_order" integer NOT NULL);
|
|
CREATE TABLE "{{users_groups_mapping}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "user_id" integer NOT NULL,
|
|
"group_id" integer NOT NULL, "group_type" integer NOT NULL, "sort_order" integer NOT NULL);
|
|
CREATE TABLE "{{users_folders_mapping}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "virtual_path" text NOT NULL,
|
|
"quota_size" bigint NOT NULL, "quota_files" integer NOT NULL, "sort_order" integer NOT NULL, "folder_id" integer NOT NULL, "user_id" integer NOT NULL);
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT "{{prefix}}unique_user_folder_mapping" UNIQUE ("user_id", "folder_id");
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT "{{prefix}}users_folders_mapping_folder_id_fk_folders_id"
|
|
FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT "{{prefix}}users_folders_mapping_user_id_fk_users_id"
|
|
FOREIGN KEY ("user_id") REFERENCES "{{users}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
CREATE TABLE "{{shares}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
|
|
"share_id" varchar(60) NOT NULL UNIQUE, "name" varchar(255) NOT NULL, "description" varchar(512) NULL,
|
|
"scope" integer NOT NULL, "paths" text NOT NULL, "created_at" bigint NOT NULL, "updated_at" bigint NOT NULL,
|
|
"last_use_at" bigint NOT NULL, "expires_at" bigint NOT NULL, "password" text NULL,
|
|
"max_tokens" integer NOT NULL, "used_tokens" integer NOT NULL, "allow_from" text NULL, "options" text NULL,
|
|
"user_id" integer NOT NULL);
|
|
ALTER TABLE "{{shares}}" ADD CONSTRAINT "{{prefix}}shares_user_id_fk_users_id" FOREIGN KEY ("user_id")
|
|
REFERENCES "{{users}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
CREATE TABLE "{{api_keys}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL,
|
|
"key_id" varchar(50) NOT NULL UNIQUE, "api_key" varchar(255) NOT NULL UNIQUE, "scope" integer NOT NULL,
|
|
"created_at" bigint NOT NULL, "updated_at" bigint NOT NULL, "last_use_at" bigint NOT NULL,"expires_at" bigint NOT NULL,
|
|
"description" text NULL, "admin_id" integer NULL, "user_id" integer NULL);
|
|
ALTER TABLE "{{api_keys}}" ADD CONSTRAINT "{{prefix}}api_keys_admin_id_fk_admins_id" FOREIGN KEY ("admin_id")
|
|
REFERENCES "{{admins}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{api_keys}}" ADD CONSTRAINT "{{prefix}}api_keys_user_id_fk_users_id" FOREIGN KEY ("user_id")
|
|
REFERENCES "{{users}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{users_groups_mapping}}" ADD CONSTRAINT "{{prefix}}unique_user_group_mapping" UNIQUE ("user_id", "group_id");
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT "{{prefix}}unique_group_folder_mapping" UNIQUE ("group_id", "folder_id");
|
|
CREATE INDEX "{{prefix}}users_groups_mapping_group_id_idx" ON "{{users_groups_mapping}}" ("group_id");
|
|
ALTER TABLE "{{users_groups_mapping}}" ADD CONSTRAINT "{{prefix}}users_groups_mapping_group_id_fk_groups_id"
|
|
FOREIGN KEY ("group_id") REFERENCES "{{groups}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION;
|
|
CREATE INDEX "{{prefix}}users_groups_mapping_user_id_idx" ON "{{users_groups_mapping}}" ("user_id");
|
|
ALTER TABLE "{{users_groups_mapping}}" ADD CONSTRAINT "{{prefix}}users_groups_mapping_user_id_fk_users_id"
|
|
FOREIGN KEY ("user_id") REFERENCES "{{users}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
CREATE INDEX "{{prefix}}users_groups_mapping_sort_order_idx" ON "{{users_groups_mapping}}" ("sort_order");
|
|
CREATE INDEX "{{prefix}}groups_folders_mapping_folder_id_idx" ON "{{groups_folders_mapping}}" ("folder_id");
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id"
|
|
FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
CREATE INDEX "{{prefix}}groups_folders_mapping_group_id_idx" ON "{{groups_folders_mapping}}" ("group_id");
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT "{{prefix}}groups_folders_mapping_group_id_fk_groups_id"
|
|
FOREIGN KEY ("group_id") REFERENCES "{{groups}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
CREATE INDEX "{{prefix}}groups_folders_mapping_sort_order_idx" ON "{{groups_folders_mapping}}" ("sort_order");
|
|
CREATE TABLE "{{events_rules}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL UNIQUE,
|
|
"status" integer NOT NULL, "description" varchar(512) NULL, "created_at" bigint NOT NULL, "updated_at" bigint NOT NULL,
|
|
"trigger" integer NOT NULL, "conditions" text NOT NULL, "deleted_at" bigint NOT NULL);
|
|
CREATE TABLE "{{events_actions}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL UNIQUE,
|
|
"description" varchar(512) NULL, "type" integer NOT NULL, "options" text NOT NULL);
|
|
CREATE TABLE "{{rules_actions_mapping}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "rule_id" integer NOT NULL,
|
|
"action_id" integer NOT NULL, "order" integer NOT NULL, "options" text NOT NULL);
|
|
CREATE TABLE "{{tasks}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL UNIQUE, "updated_at" bigint NOT NULL,
|
|
"version" bigint NOT NULL);
|
|
ALTER TABLE "{{rules_actions_mapping}}" ADD CONSTRAINT "{{prefix}}unique_rule_action_mapping" UNIQUE ("rule_id", "action_id");
|
|
ALTER TABLE "{{rules_actions_mapping}}" ADD CONSTRAINT "{{prefix}}rules_actions_mapping_rule_id_fk_events_rules_id"
|
|
FOREIGN KEY ("rule_id") REFERENCES "{{events_rules}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{rules_actions_mapping}}" ADD CONSTRAINT "{{prefix}}rules_actions_mapping_action_id_fk_events_targets_id"
|
|
FOREIGN KEY ("action_id") REFERENCES "{{events_actions}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION;
|
|
CREATE TABLE "{{admins_groups_mapping}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
|
|
"admin_id" integer NOT NULL, "group_id" integer NOT NULL, "options" text NOT NULL, "sort_order" integer NOT NULL);
|
|
ALTER TABLE "{{admins_groups_mapping}}" ADD CONSTRAINT "{{prefix}}unique_admin_group_mapping" UNIQUE ("admin_id", "group_id");
|
|
ALTER TABLE "{{admins_groups_mapping}}" ADD CONSTRAINT "{{prefix}}admins_groups_mapping_admin_id_fk_admins_id"
|
|
FOREIGN KEY ("admin_id") REFERENCES "{{admins}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{admins_groups_mapping}}" ADD CONSTRAINT "{{prefix}}admins_groups_mapping_group_id_fk_groups_id"
|
|
FOREIGN KEY ("group_id") REFERENCES "{{groups}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
CREATE TABLE "{{nodes}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL UNIQUE,
|
|
"data" text NOT NULL, "created_at" bigint NOT NULL, "updated_at" bigint NOT NULL);
|
|
CREATE TABLE "{{roles}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "name" varchar(255) NOT NULL UNIQUE,
|
|
"description" varchar(512) NULL, "created_at" bigint NOT NULL, "updated_at" bigint NOT NULL);
|
|
ALTER TABLE "{{admins}}" ADD CONSTRAINT "{{prefix}}admins_role_id_fk_roles_id" FOREIGN KEY ("role_id")
|
|
REFERENCES "{{roles}}" ("id") ON DELETE NO ACTION;
|
|
ALTER TABLE "{{users}}" ADD CONSTRAINT "{{prefix}}users_role_id_fk_roles_id" FOREIGN KEY ("role_id")
|
|
REFERENCES "{{roles}}" ("id") ON DELETE SET NULL;
|
|
CREATE TABLE "{{ip_lists}}" ("id" bigint NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "type" integer NOT NULL,
|
|
"ipornet" varchar(50) NOT NULL, "mode" integer NOT NULL, "description" varchar(512) NULL, "first" inet NOT NULL,
|
|
"last" inet NOT NULL, "ip_type" integer NOT NULL, "protocols" integer NOT NULL, "created_at" bigint NOT NULL,
|
|
"updated_at" bigint NOT NULL, "deleted_at" bigint NOT NULL);
|
|
ALTER TABLE "{{ip_lists}}" ADD CONSTRAINT "{{prefix}}unique_ipornet_type_mapping" UNIQUE ("type", "ipornet");
|
|
CREATE TABLE "{{configs}}" ("id" integer NOT NULL PRIMARY KEY GENERATED ALWAYS AS IDENTITY, "configs" text NOT NULL);
|
|
INSERT INTO {{configs}} (configs) VALUES ('{}');
|
|
CREATE INDEX "{{prefix}}users_folders_mapping_folder_id_idx" ON "{{users_folders_mapping}}" ("folder_id");
|
|
CREATE INDEX "{{prefix}}users_folders_mapping_user_id_idx" ON "{{users_folders_mapping}}" ("user_id");
|
|
CREATE INDEX "{{prefix}}users_folders_mapping_sort_order_idx" ON "{{users_folders_mapping}}" ("sort_order");
|
|
CREATE INDEX "{{prefix}}api_keys_admin_id_idx" ON "{{api_keys}}" ("admin_id");
|
|
CREATE INDEX "{{prefix}}api_keys_user_id_idx" ON "{{api_keys}}" ("user_id");
|
|
CREATE INDEX "{{prefix}}users_updated_at_idx" ON "{{users}}" ("updated_at");
|
|
CREATE INDEX "{{prefix}}users_deleted_at_idx" ON "{{users}}" ("deleted_at");
|
|
CREATE INDEX "{{prefix}}shares_user_id_idx" ON "{{shares}}" ("user_id");
|
|
CREATE INDEX "{{prefix}}defender_hosts_updated_at_idx" ON "{{defender_hosts}}" ("updated_at");
|
|
CREATE INDEX "{{prefix}}defender_hosts_ban_time_idx" ON "{{defender_hosts}}" ("ban_time");
|
|
CREATE INDEX "{{prefix}}defender_events_date_time_idx" ON "{{defender_events}}" ("date_time");
|
|
CREATE INDEX "{{prefix}}defender_events_host_id_idx" ON "{{defender_events}}" ("host_id");
|
|
CREATE INDEX "{{prefix}}active_transfers_connection_id_idx" ON "{{active_transfers}}" ("connection_id");
|
|
CREATE INDEX "{{prefix}}active_transfers_transfer_id_idx" ON "{{active_transfers}}" ("transfer_id");
|
|
CREATE INDEX "{{prefix}}active_transfers_updated_at_idx" ON "{{active_transfers}}" ("updated_at");
|
|
CREATE INDEX "{{prefix}}shared_sessions_type_idx" ON "{{shared_sessions}}" ("type");
|
|
CREATE INDEX "{{prefix}}shared_sessions_timestamp_idx" ON "{{shared_sessions}}" ("timestamp");
|
|
CREATE INDEX "{{prefix}}events_rules_updated_at_idx" ON "{{events_rules}}" ("updated_at");
|
|
CREATE INDEX "{{prefix}}events_rules_deleted_at_idx" ON "{{events_rules}}" ("deleted_at");
|
|
CREATE INDEX "{{prefix}}events_rules_trigger_idx" ON "{{events_rules}}" ("trigger");
|
|
CREATE INDEX "{{prefix}}rules_actions_mapping_rule_id_idx" ON "{{rules_actions_mapping}}" ("rule_id");
|
|
CREATE INDEX "{{prefix}}rules_actions_mapping_action_id_idx" ON "{{rules_actions_mapping}}" ("action_id");
|
|
CREATE INDEX "{{prefix}}rules_actions_mapping_order_idx" ON "{{rules_actions_mapping}}" ("order");
|
|
CREATE INDEX "{{prefix}}admins_groups_mapping_admin_id_idx" ON "{{admins_groups_mapping}}" ("admin_id");
|
|
CREATE INDEX "{{prefix}}admins_groups_mapping_group_id_idx" ON "{{admins_groups_mapping}}" ("group_id");
|
|
CREATE INDEX "{{prefix}}admins_groups_mapping_sort_order_idx" ON "{{admins_groups_mapping}}" ("sort_order");
|
|
CREATE INDEX "{{prefix}}admins_role_id_idx" ON "{{admins}}" ("role_id");
|
|
CREATE INDEX "{{prefix}}users_role_id_idx" ON "{{users}}" ("role_id");
|
|
CREATE INDEX "{{prefix}}ip_lists_type_idx" ON "{{ip_lists}}" ("type");
|
|
CREATE INDEX "{{prefix}}ip_lists_ipornet_idx" ON "{{ip_lists}}" ("ipornet");
|
|
CREATE INDEX "{{prefix}}ip_lists_updated_at_idx" ON "{{ip_lists}}" ("updated_at");
|
|
CREATE INDEX "{{prefix}}ip_lists_deleted_at_idx" ON "{{ip_lists}}" ("deleted_at");
|
|
CREATE INDEX "{{prefix}}ip_lists_first_last_idx" ON "{{ip_lists}}" ("first", "last");
|
|
INSERT INTO {{schema_version}} (version) VALUES (33);
|
|
`
|
|
// not supported in CockroachDB
|
|
ipListsLikeIndex = `CREATE INDEX "{{prefix}}ip_lists_ipornet_like_idx" ON "{{ip_lists}}" ("ipornet" varchar_pattern_ops);`
|
|
pgsqlV34SQL = `CREATE TABLE "{{shares_groups_mapping}}" (
|
|
"id" integer NOT NULL PRIMARY KEY GENERATED BY DEFAULT AS IDENTITY,
|
|
"share_id" integer NOT NULL,
|
|
"group_id" integer NOT NULL,
|
|
"permissions" integer NOT NULL,
|
|
"sort_order" integer NOT NULL,
|
|
CONSTRAINT "{{prefix}}unique_share_group_mapping" UNIQUE ("share_id", "group_id"),
|
|
CONSTRAINT "{{prefix}}shares_groups_mapping_share_id_fk" FOREIGN KEY ("share_id") REFERENCES "{{shares}}"("id") ON DELETE CASCADE,
|
|
CONSTRAINT "{{prefix}}shares_groups_mapping_group_id_fk" FOREIGN KEY ("group_id") REFERENCES "{{groups}}"("id") ON DELETE CASCADE);
|
|
CREATE INDEX "{{prefix}}shares_groups_mapping_sort_order_idx" ON "{{shares_groups_mapping}}" ("sort_order");
|
|
CREATE INDEX "{{prefix}}shares_groups_mapping_share_id_idx" ON "{{shares_groups_mapping}}" ("share_id");
|
|
CREATE INDEX "{{prefix}}shares_groups_mapping_group_id_idx" ON "{{shares_groups_mapping}}" ("group_id");
|
|
`
|
|
pgsqlV34DownSQL = `DROP TABLE IF EXISTS "{{shares_groups_mapping}}";`
|
|
pgsqlV35SQL = `ALTER TABLE "{{users_folders_mapping}}" ADD COLUMN "exposed_subpaths" text NULL;
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD COLUMN "subpath" text DEFAULT '' NOT NULL;
|
|
ALTER TABLE "{{users_folders_mapping}}" DROP CONSTRAINT "{{prefix}}unique_user_folder_mapping";
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT "{{prefix}}unique_user_folder_mapping" UNIQUE ("user_id", "folder_id", "subpath");
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD COLUMN "exposed_subpaths" text NULL;
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD COLUMN "subpath" text DEFAULT '' NOT NULL;
|
|
ALTER TABLE "{{groups_folders_mapping}}" DROP CONSTRAINT "{{prefix}}unique_group_folder_mapping";
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT "{{prefix}}unique_group_folder_mapping" UNIQUE ("group_id", "folder_id", "subpath");
|
|
`
|
|
pgsqlV35DownSQL = `ALTER TABLE "{{users_folders_mapping}}" DROP COLUMN "subpath" CASCADE;
|
|
ALTER TABLE "{{users_folders_mapping}}" DROP COLUMN "exposed_subpaths" CASCADE;
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT "{{prefix}}unique_user_folder_mapping" UNIQUE ("user_id", "folder_id");
|
|
ALTER TABLE "{{groups_folders_mapping}}" DROP COLUMN "subpath" CASCADE;
|
|
ALTER TABLE "{{groups_folders_mapping}}" DROP COLUMN "exposed_subpaths" CASCADE;
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT "{{prefix}}unique_group_folder_mapping" UNIQUE ("group_id", "folder_id");
|
|
`
|
|
pgsqlV36SQL = `ALTER TABLE "{{groups}}" ADD COLUMN "role_id" integer NULL;
|
|
ALTER TABLE "{{folders}}" ADD COLUMN "role_id" integer NULL;
|
|
CREATE INDEX "{{prefix}}groups_role_id_idx" ON "{{groups}}" ("role_id");
|
|
CREATE INDEX "{{prefix}}folders_role_id_idx" ON "{{folders}}" ("role_id");
|
|
ALTER TABLE "{{groups}}" ADD CONSTRAINT "{{prefix}}groups_role_id_fk_roles_id" FOREIGN KEY ("role_id")
|
|
REFERENCES "{{roles}}" ("id") ON DELETE NO ACTION;
|
|
ALTER TABLE "{{folders}}" ADD CONSTRAINT "{{prefix}}folders_role_id_fk_roles_id" FOREIGN KEY ("role_id")
|
|
REFERENCES "{{roles}}" ("id") ON DELETE NO ACTION;
|
|
ALTER TABLE "{{roles}}" ADD COLUMN "resource_isolation" integer DEFAULT 0 NOT NULL;
|
|
ALTER TABLE "{{roles}}" ADD COLUMN "settings" text NULL;
|
|
ALTER TABLE "{{users_folders_mapping}}" DROP CONSTRAINT "{{prefix}}users_folders_mapping_folder_id_fk_folders_id";
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT "{{prefix}}users_folders_mapping_folder_id_fk_folders_id"
|
|
FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION;
|
|
ALTER TABLE "{{groups_folders_mapping}}" DROP CONSTRAINT "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id";
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id"
|
|
FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION;
|
|
ALTER TABLE "{{admins_groups_mapping}}" DROP CONSTRAINT "{{prefix}}admins_groups_mapping_group_id_fk_groups_id";
|
|
ALTER TABLE "{{admins_groups_mapping}}" ADD CONSTRAINT "{{prefix}}admins_groups_mapping_group_id_fk_groups_id"
|
|
FOREIGN KEY ("group_id") REFERENCES "{{groups}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION;
|
|
ALTER TABLE "{{users}}" DROP CONSTRAINT "{{prefix}}users_role_id_fk_roles_id";
|
|
ALTER TABLE "{{users}}" ADD CONSTRAINT "{{prefix}}users_role_id_fk_roles_id" FOREIGN KEY ("role_id")
|
|
REFERENCES "{{roles}}" ("id") ON DELETE NO ACTION;
|
|
`
|
|
pgsqlV36DownSQL = `ALTER TABLE "{{groups}}" DROP COLUMN "role_id" CASCADE;
|
|
ALTER TABLE "{{folders}}" DROP COLUMN "role_id" CASCADE;
|
|
ALTER TABLE "{{roles}}" DROP COLUMN "settings" CASCADE;
|
|
ALTER TABLE "{{roles}}" DROP COLUMN "resource_isolation" CASCADE;
|
|
ALTER TABLE "{{users_folders_mapping}}" DROP CONSTRAINT "{{prefix}}users_folders_mapping_folder_id_fk_folders_id";
|
|
ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT "{{prefix}}users_folders_mapping_folder_id_fk_folders_id"
|
|
FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{groups_folders_mapping}}" DROP CONSTRAINT "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id";
|
|
ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id"
|
|
FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{admins_groups_mapping}}" DROP CONSTRAINT "{{prefix}}admins_groups_mapping_group_id_fk_groups_id";
|
|
ALTER TABLE "{{admins_groups_mapping}}" ADD CONSTRAINT "{{prefix}}admins_groups_mapping_group_id_fk_groups_id"
|
|
FOREIGN KEY ("group_id") REFERENCES "{{groups}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE;
|
|
ALTER TABLE "{{users}}" DROP CONSTRAINT "{{prefix}}users_role_id_fk_roles_id";
|
|
ALTER TABLE "{{users}}" ADD CONSTRAINT "{{prefix}}users_role_id_fk_roles_id" FOREIGN KEY ("role_id")
|
|
REFERENCES "{{roles}}" ("id") ON DELETE SET NULL;
|
|
`
|
|
)
|
|
|
|
// CockroachDB executes DDL inside an explicit transaction as async schema
|
|
// change jobs: the commit succeeds even when a job later fails (verified: a
|
|
// unique-constraint backfill hitting duplicates failed after a successful
|
|
// commit, letting the migration proceed). An autocommit DDL statement
|
|
// instead blocks until its job completes and reports its error, so every
|
|
// migration altering the schema runs its statements one by one outside
|
|
// transactions, each idempotent via IF [NOT] EXISTS so a partial failure can
|
|
// be retried. PostgreSQL keeps the strict statements in a single transaction:
|
|
// it has transactional DDL, does not support ADD CONSTRAINT IF NOT EXISTS and
|
|
// ADD COLUMN IF NOT EXISTS would accept a pre-existing column of a different
|
|
// type. The v35 downgrade re-adds the narrow constraints BEFORE dropping the
|
|
// columns: a multi-mount conflict then aborts while the data is still intact.
|
|
var (
|
|
crdbV36SQL = []string{
|
|
`ALTER TABLE "{{groups}}" ADD COLUMN IF NOT EXISTS "role_id" integer NULL`,
|
|
`ALTER TABLE "{{folders}}" ADD COLUMN IF NOT EXISTS "role_id" integer NULL`,
|
|
`CREATE INDEX IF NOT EXISTS "{{prefix}}groups_role_id_idx" ON "{{groups}}" ("role_id")`,
|
|
`CREATE INDEX IF NOT EXISTS "{{prefix}}folders_role_id_idx" ON "{{folders}}" ("role_id")`,
|
|
`ALTER TABLE "{{groups}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}groups_role_id_fk_roles_id" FOREIGN KEY ("role_id") REFERENCES "{{roles}}" ("id") ON DELETE NO ACTION`,
|
|
`ALTER TABLE "{{folders}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}folders_role_id_fk_roles_id" FOREIGN KEY ("role_id") REFERENCES "{{roles}}" ("id") ON DELETE NO ACTION`,
|
|
`ALTER TABLE "{{roles}}" ADD COLUMN IF NOT EXISTS "resource_isolation" integer DEFAULT 0 NOT NULL`,
|
|
`ALTER TABLE "{{roles}}" ADD COLUMN IF NOT EXISTS "settings" text NULL`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}users_folders_mapping_folder_id_fk_folders_id"`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}users_folders_mapping_folder_id_fk_folders_id" FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id"`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id" FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION`,
|
|
`ALTER TABLE "{{admins_groups_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}admins_groups_mapping_group_id_fk_groups_id"`,
|
|
`ALTER TABLE "{{admins_groups_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}admins_groups_mapping_group_id_fk_groups_id" FOREIGN KEY ("group_id") REFERENCES "{{groups}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE NO ACTION`,
|
|
`ALTER TABLE "{{users}}" DROP CONSTRAINT IF EXISTS "{{prefix}}users_role_id_fk_roles_id"`,
|
|
`ALTER TABLE "{{users}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}users_role_id_fk_roles_id" FOREIGN KEY ("role_id") REFERENCES "{{roles}}" ("id") ON DELETE NO ACTION`,
|
|
}
|
|
crdbV36DownSQL = []string{
|
|
`ALTER TABLE "{{groups}}" DROP COLUMN IF EXISTS "role_id" CASCADE`,
|
|
`ALTER TABLE "{{folders}}" DROP COLUMN IF EXISTS "role_id" CASCADE`,
|
|
`ALTER TABLE "{{roles}}" DROP COLUMN IF EXISTS "settings" CASCADE`,
|
|
`ALTER TABLE "{{roles}}" DROP COLUMN IF EXISTS "resource_isolation" CASCADE`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}users_folders_mapping_folder_id_fk_folders_id"`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}users_folders_mapping_folder_id_fk_folders_id" FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id"`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}groups_folders_mapping_folder_id_fk_folders_id" FOREIGN KEY ("folder_id") REFERENCES "{{folders}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE`,
|
|
`ALTER TABLE "{{admins_groups_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}admins_groups_mapping_group_id_fk_groups_id"`,
|
|
`ALTER TABLE "{{admins_groups_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}admins_groups_mapping_group_id_fk_groups_id" FOREIGN KEY ("group_id") REFERENCES "{{groups}}" ("id") MATCH SIMPLE ON UPDATE NO ACTION ON DELETE CASCADE`,
|
|
`ALTER TABLE "{{users}}" DROP CONSTRAINT IF EXISTS "{{prefix}}users_role_id_fk_roles_id"`,
|
|
`ALTER TABLE "{{users}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}users_role_id_fk_roles_id" FOREIGN KEY ("role_id") REFERENCES "{{roles}}" ("id") ON DELETE SET NULL`,
|
|
}
|
|
crdbV35SQL = []string{
|
|
`ALTER TABLE "{{users_folders_mapping}}" ADD COLUMN IF NOT EXISTS "exposed_subpaths" text NULL`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" ADD COLUMN IF NOT EXISTS "subpath" text DEFAULT '' NOT NULL`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" ADD COLUMN IF NOT EXISTS "exposed_subpaths" text NULL`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" ADD COLUMN IF NOT EXISTS "subpath" text DEFAULT '' NOT NULL`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}unique_user_folder_mapping"`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}unique_group_folder_mapping"`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}unique_user_folder_mapping" UNIQUE ("user_id", "folder_id", "subpath")`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}unique_group_folder_mapping" UNIQUE ("group_id", "folder_id", "subpath")`,
|
|
}
|
|
crdbV35DownSQL = []string{
|
|
`ALTER TABLE "{{users_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}unique_user_folder_mapping"`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" DROP CONSTRAINT IF EXISTS "{{prefix}}unique_group_folder_mapping"`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}unique_user_folder_mapping" UNIQUE ("user_id", "folder_id")`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" ADD CONSTRAINT IF NOT EXISTS "{{prefix}}unique_group_folder_mapping" UNIQUE ("group_id", "folder_id")`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" DROP COLUMN IF EXISTS "subpath" CASCADE`,
|
|
`ALTER TABLE "{{users_folders_mapping}}" DROP COLUMN IF EXISTS "exposed_subpaths" CASCADE`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" DROP COLUMN IF EXISTS "subpath" CASCADE`,
|
|
`ALTER TABLE "{{groups_folders_mapping}}" DROP COLUMN IF EXISTS "exposed_subpaths" CASCADE`,
|
|
}
|
|
)
|
|
|
|
var (
|
|
pgSQLTargetSessionAttrs = []string{"any", "read-write", "read-only", "primary", "standby", "prefer-standby"}
|
|
)
|
|
|
|
// PGSQLProvider defines the auth provider for PostgreSQL database
|
|
type PGSQLProvider struct {
|
|
dbHandle *sql.DB
|
|
}
|
|
|
|
func init() {
|
|
version.AddFeature("+pgsql")
|
|
}
|
|
|
|
func initializePGSQLProvider() error {
|
|
var dbHandle *sql.DB
|
|
if config.TargetSessionAttrs == "any" {
|
|
pgxConfig, err := pgx.ParseConfig(getPGSQLConnectionString(false))
|
|
if err != nil {
|
|
providerLog(logger.LevelError, "error parsing postgres configuration, connection string: %q, error: %v",
|
|
getPGSQLConnectionString(true), err)
|
|
return err
|
|
}
|
|
dbHandle = stdlib.OpenDB(*pgxConfig, stdlib.OptionBeforeConnect(stdlib.RandomizeHostOrderFunc))
|
|
} else {
|
|
var err error
|
|
dbHandle, err = sql.Open("pgx", getPGSQLConnectionString(false))
|
|
if err != nil {
|
|
providerLog(logger.LevelError, "error creating postgres database handler, connection string: %q, error: %v",
|
|
getPGSQLConnectionString(true), err)
|
|
return err
|
|
}
|
|
}
|
|
providerLog(logger.LevelDebug, "postgres database handle created, connection string: %q, pool size: %d",
|
|
getPGSQLConnectionString(true), config.PoolSize)
|
|
dbHandle.SetMaxOpenConns(config.PoolSize)
|
|
if config.PoolSize > 0 {
|
|
dbHandle.SetMaxIdleConns(config.PoolSize)
|
|
} else {
|
|
dbHandle.SetMaxIdleConns(2)
|
|
}
|
|
dbHandle.SetConnMaxLifetime(240 * time.Second)
|
|
dbHandle.SetConnMaxIdleTime(120 * time.Second)
|
|
provider = &PGSQLProvider{dbHandle: dbHandle}
|
|
|
|
ctx, cancel := context.WithTimeout(context.Background(), defaultSQLQueryTimeout)
|
|
defer cancel()
|
|
|
|
return dbHandle.PingContext(ctx)
|
|
}
|
|
|
|
func getPGSQLHostsAndPorts(configHost string, configPort int) (string, string) {
|
|
var hosts, ports []string
|
|
defaultPort := strconv.Itoa(configPort)
|
|
if defaultPort == "0" {
|
|
defaultPort = "5432"
|
|
}
|
|
|
|
for hostport := range strings.SplitSeq(configHost, ",") {
|
|
hostport = strings.TrimSpace(hostport)
|
|
if hostport == "" {
|
|
continue
|
|
}
|
|
host, port, err := net.SplitHostPort(hostport)
|
|
if err == nil {
|
|
hosts = append(hosts, host)
|
|
ports = append(ports, port)
|
|
} else {
|
|
hosts = append(hosts, hostport)
|
|
ports = append(ports, defaultPort)
|
|
}
|
|
}
|
|
|
|
return strings.Join(hosts, ","), strings.Join(ports, ",")
|
|
}
|
|
|
|
func getPGSQLConnectionString(redactedPwd bool) string {
|
|
var connectionString string
|
|
if config.ConnectionString == "" {
|
|
password := config.Password
|
|
if redactedPwd && password != "" {
|
|
password = "[redacted]"
|
|
}
|
|
host, port := getPGSQLHostsAndPorts(config.Host, config.Port)
|
|
connectionString = fmt.Sprintf("host='%s' port='%s' dbname='%s' user='%s' password='%s' sslmode=%s connect_timeout=10",
|
|
host, port, config.Name, config.Username, password, getSSLMode())
|
|
if config.RootCert != "" {
|
|
connectionString += fmt.Sprintf(" sslrootcert='%s'", config.RootCert)
|
|
}
|
|
if config.ClientCert != "" && config.ClientKey != "" {
|
|
connectionString += fmt.Sprintf(" sslcert='%s' sslkey='%s'", config.ClientCert, config.ClientKey)
|
|
}
|
|
if config.DisableSNI {
|
|
connectionString += " sslsni=0"
|
|
}
|
|
if slices.Contains(pgSQLTargetSessionAttrs, config.TargetSessionAttrs) {
|
|
connectionString += fmt.Sprintf(" target_session_attrs='%s'", config.TargetSessionAttrs)
|
|
}
|
|
} else {
|
|
connectionString = config.ConnectionString
|
|
}
|
|
return connectionString
|
|
}
|
|
|
|
func (p *PGSQLProvider) checkAvailability() error {
|
|
return sqlCommonCheckAvailability(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) validateUserAndPass(username, password, ip, protocol string) (User, error) {
|
|
return sqlCommonValidateUserAndPass(username, password, ip, protocol, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) validateUserAndTLSCert(username, protocol string, tlsCert *x509.Certificate) (User, error) {
|
|
return sqlCommonValidateUserAndTLSCertificate(username, protocol, tlsCert, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) validateUserAndPubKey(username string, publicKey []byte, isSSHCert bool) (User, string, error) {
|
|
return sqlCommonValidateUserAndPubKey(username, publicKey, isSSHCert, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateTransferQuota(username string, uploadSize, downloadSize int64, reset bool) error {
|
|
return sqlCommonUpdateTransferQuota(username, uploadSize, downloadSize, reset, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateQuota(username string, filesAdd int, sizeAdd int64, reset bool) error {
|
|
return sqlCommonUpdateQuota(username, filesAdd, sizeAdd, reset, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getUsedQuota(username string) (int, int64, int64, int64, error) {
|
|
return sqlCommonGetUsedQuota(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getAdminSignature(username string) (string, error) {
|
|
return sqlCommonGetAdminSignature(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getUserSignature(username string) (string, error) {
|
|
return sqlCommonGetUserSignature(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) setUpdatedAt(username string) {
|
|
sqlCommonSetUpdatedAt(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateLastLogin(username string) error {
|
|
return sqlCommonUpdateLastLogin(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateAdminLastLogin(username string) error {
|
|
return sqlCommonUpdateAdminLastLogin(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) userExists(username, role string) (User, error) {
|
|
return sqlCommonGetUserByUsername(username, role, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addUser(user *User) error {
|
|
return p.normalizeError(sqlCommonAddUser(user, p.dbHandle), fieldUsername)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateUser(user *User, expectedUpdatedAt int64) error {
|
|
return p.normalizeError(sqlCommonUpdateUser(user, expectedUpdatedAt, p.dbHandle), -1)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteUser(user User, softDelete bool) error {
|
|
return sqlCommonDeleteUser(user, softDelete, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateUserPassword(username, password string) error {
|
|
return sqlCommonUpdateUserPassword(username, password, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpUsers() ([]User, error) {
|
|
return sqlCommonDumpUsers(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getRecentlyUpdatedUsers(after int64) ([]User, error) {
|
|
return sqlCommonGetRecentlyUpdatedUsers(after, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getUsers(limit int, offset int, order, role string) ([]User, error) {
|
|
return sqlCommonGetUsers(limit, offset, order, role, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getUsersForQuotaCheck(toFetch map[string]bool) ([]User, error) {
|
|
return sqlCommonGetUsersForQuotaCheck(toFetch, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpFolders() ([]vfs.BaseVirtualFolder, error) {
|
|
return sqlCommonDumpFolders(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getFolders(limit, offset int, order string, minimal bool) ([]vfs.BaseVirtualFolder, error) {
|
|
return sqlCommonGetFolders(limit, offset, order, minimal, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getFolderByName(name string) (vfs.BaseVirtualFolder, error) {
|
|
ctx, cancel := context.WithTimeout(context.Background(), defaultSQLQueryTimeout)
|
|
defer cancel()
|
|
return sqlCommonGetFolderByName(ctx, name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addFolder(folder *vfs.BaseVirtualFolder) error {
|
|
return p.normalizeError(sqlCommonAddFolder(folder, p.dbHandle), fieldName)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateFolder(folder *vfs.BaseVirtualFolder) error {
|
|
return sqlCommonUpdateFolder(folder, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteFolder(folder vfs.BaseVirtualFolder) error {
|
|
return sqlCommonDeleteFolder(folder, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateFolderQuota(name string, filesAdd int, sizeAdd int64, reset bool) error {
|
|
return sqlCommonUpdateFolderQuota(name, filesAdd, sizeAdd, reset, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getUsedFolderQuota(name string) (int, int64, error) {
|
|
return sqlCommonGetFolderUsedQuota(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getGroups(limit, offset int, order string, minimal bool) ([]Group, error) {
|
|
return sqlCommonGetGroups(limit, offset, order, minimal, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getGroupsWithNames(names []string) ([]Group, error) {
|
|
return sqlCommonGetGroupsWithNames(names, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getUsersInGroups(names []string) ([]string, error) {
|
|
return sqlCommonGetUsersInGroups(names, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) groupExists(name string) (Group, error) {
|
|
return sqlCommonGetGroupByName(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addGroup(group *Group) error {
|
|
return p.normalizeError(sqlCommonAddGroup(group, p.dbHandle), fieldName)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateGroup(group *Group) error {
|
|
return sqlCommonUpdateGroup(group, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteGroup(group Group) error {
|
|
return sqlCommonDeleteGroup(group, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpGroups() ([]Group, error) {
|
|
return sqlCommonDumpGroups(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) adminExists(username string) (Admin, error) {
|
|
return sqlCommonGetAdminByUsername(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addAdmin(admin *Admin) error {
|
|
return p.normalizeError(sqlCommonAddAdmin(admin, p.dbHandle), fieldUsername)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateAdmin(admin *Admin, expectedUpdatedAt int64) error {
|
|
return p.normalizeError(sqlCommonUpdateAdmin(admin, expectedUpdatedAt, p.dbHandle), -1)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteAdmin(admin Admin) error {
|
|
return sqlCommonDeleteAdmin(admin, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getAdmins(limit int, offset int, order string) ([]Admin, error) {
|
|
return sqlCommonGetAdmins(limit, offset, order, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpAdmins() ([]Admin, error) {
|
|
return sqlCommonDumpAdmins(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) validateAdminAndPass(username, password, ip string) (Admin, error) {
|
|
return sqlCommonValidateAdminAndPass(username, password, ip, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) apiKeyExists(keyID string) (APIKey, error) {
|
|
return sqlCommonGetAPIKeyByID(keyID, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addAPIKey(apiKey *APIKey) error {
|
|
return p.normalizeError(sqlCommonAddAPIKey(apiKey, p.dbHandle), -1)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateAPIKey(apiKey *APIKey) error {
|
|
return p.normalizeError(sqlCommonUpdateAPIKey(apiKey, p.dbHandle), -1)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteAPIKey(apiKey APIKey) error {
|
|
return sqlCommonDeleteAPIKey(apiKey, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getAPIKeys(limit int, offset int, order string) ([]APIKey, error) {
|
|
return sqlCommonGetAPIKeys(limit, offset, order, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpAPIKeys() ([]APIKey, error) {
|
|
return sqlCommonDumpAPIKeys(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateAPIKeyLastUse(keyID string) error {
|
|
return sqlCommonUpdateAPIKeyLastUse(keyID, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) shareExists(shareID, username string) (Share, error) {
|
|
return sqlCommonGetShareByID(shareID, username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addShare(share *Share) error {
|
|
return p.normalizeError(sqlCommonAddShare(share, p.dbHandle), fieldName)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateShare(share *Share) error {
|
|
return p.normalizeError(sqlCommonUpdateShare(share, p.dbHandle), -1)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteShare(share Share) error {
|
|
return sqlCommonDeleteShare(share, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getShares(limit int, offset int, order, username string) ([]Share, error) {
|
|
return sqlCommonGetShares(limit, offset, order, username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpShares() ([]Share, error) {
|
|
return sqlCommonDumpShares(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateShareLastUse(shareID string, numTokens int) error {
|
|
return sqlCommonUpdateShareLastUse(shareID, numTokens, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getDefenderHosts(from int64, limit int) ([]DefenderEntry, error) {
|
|
return sqlCommonGetDefenderHosts(from, limit, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getDefenderHostByIP(ip string, from int64) (DefenderEntry, error) {
|
|
return sqlCommonGetDefenderHostByIP(ip, from, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) isDefenderHostBanned(ip string) (DefenderEntry, error) {
|
|
return sqlCommonIsDefenderHostBanned(ip, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateDefenderBanTime(ip string, minutes int) error {
|
|
return sqlCommonDefenderIncrementBanTime(ip, minutes, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteDefenderHost(ip string) error {
|
|
return sqlCommonDeleteDefenderHost(ip, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addDefenderEvent(ip string, score int) error {
|
|
return sqlCommonAddDefenderHostAndEvent(ip, score, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) setDefenderBanTime(ip string, banTime int64) error {
|
|
return sqlCommonSetDefenderBanTime(ip, banTime, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) cleanupDefender(from int64) error {
|
|
return sqlCommonDefenderCleanup(from, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addActiveTransfer(transfer ActiveTransfer) error {
|
|
return sqlCommonAddActiveTransfer(transfer, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateActiveTransferSizes(ulSize, dlSize, transferID int64, connectionID string) error {
|
|
return sqlCommonUpdateActiveTransferSizes(ulSize, dlSize, transferID, connectionID, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) removeActiveTransfer(transferID int64, connectionID string) error {
|
|
return sqlCommonRemoveActiveTransfer(transferID, connectionID, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) cleanupActiveTransfers(before time.Time) error {
|
|
return sqlCommonCleanupActiveTransfers(before, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getActiveTransfers(from time.Time) ([]ActiveTransfer, error) {
|
|
return sqlCommonGetActiveTransfers(from, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addSharedSession(session Session) error {
|
|
return sqlCommonAddSession(session, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteSharedSession(key string, sessionType SessionType) error {
|
|
return sqlCommonDeleteSession(key, sessionType, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getSharedSession(key string, sessionType SessionType) (Session, error) {
|
|
return sqlCommonGetSession(key, sessionType, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) cleanupSharedSessions(sessionType SessionType, before int64) error {
|
|
return sqlCommonCleanupSessions(sessionType, before, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getEventActions(limit, offset int, order string, minimal bool) ([]BaseEventAction, error) {
|
|
return sqlCommonGetEventActions(limit, offset, order, minimal, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpEventActions() ([]BaseEventAction, error) {
|
|
return sqlCommonDumpEventActions(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) eventActionExists(name string) (BaseEventAction, error) {
|
|
return sqlCommonGetEventActionByName(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addEventAction(action *BaseEventAction) error {
|
|
return p.normalizeError(sqlCommonAddEventAction(action, p.dbHandle), fieldName)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateEventAction(action *BaseEventAction) error {
|
|
return sqlCommonUpdateEventAction(action, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteEventAction(action BaseEventAction) error {
|
|
return sqlCommonDeleteEventAction(action, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getEventRules(limit, offset int, order string) ([]EventRule, error) {
|
|
return sqlCommonGetEventRules(limit, offset, order, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpEventRules() ([]EventRule, error) {
|
|
return sqlCommonDumpEventRules(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getRecentlyUpdatedRules(after int64) ([]EventRule, error) {
|
|
return sqlCommonGetRecentlyUpdatedRules(after, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) eventRuleExists(name string) (EventRule, error) {
|
|
return sqlCommonGetEventRuleByName(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addEventRule(rule *EventRule) error {
|
|
return p.normalizeError(sqlCommonAddEventRule(rule, p.dbHandle), fieldName)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateEventRule(rule *EventRule) error {
|
|
return sqlCommonUpdateEventRule(rule, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteEventRule(rule EventRule, softDelete bool) error {
|
|
return sqlCommonDeleteEventRule(rule, softDelete, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getTaskByName(name string) (Task, error) {
|
|
return sqlCommonGetTaskByName(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addTask(name string) error {
|
|
return sqlCommonAddTask(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateTask(name string, version int64) error {
|
|
return sqlCommonUpdateTask(name, version, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateTaskTimestamp(name string) error {
|
|
return sqlCommonUpdateTaskTimestamp(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addNode() error {
|
|
return sqlCommonAddNode(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getNodeByName(name string) (Node, error) {
|
|
return sqlCommonGetNodeByName(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getNodes() ([]Node, error) {
|
|
return sqlCommonGetNodes(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateNodeTimestamp() error {
|
|
return sqlCommonUpdateNodeTimestamp(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) cleanupNodes() error {
|
|
return sqlCommonCleanupNodes(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) roleExists(name string) (Role, error) {
|
|
return sqlCommonGetRoleByName(name, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addRole(role *Role) error {
|
|
return p.normalizeError(sqlCommonAddRole(role, p.dbHandle), fieldName)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateRole(role *Role) error {
|
|
return sqlCommonUpdateRole(role, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteRole(role Role) error {
|
|
return sqlCommonDeleteRole(role, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getRoles(limit int, offset int, order string, minimal bool) ([]Role, error) {
|
|
return sqlCommonGetRoles(limit, offset, order, minimal, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpRoles() ([]Role, error) {
|
|
return sqlCommonDumpRoles(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) ipListEntryExists(ipOrNet string, listType IPListType) (IPListEntry, error) {
|
|
return sqlCommonGetIPListEntry(ipOrNet, listType, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) addIPListEntry(entry *IPListEntry) error {
|
|
return p.normalizeError(sqlCommonAddIPListEntry(entry, p.dbHandle), fieldIPNet)
|
|
}
|
|
|
|
func (p *PGSQLProvider) updateIPListEntry(entry *IPListEntry) error {
|
|
return sqlCommonUpdateIPListEntry(entry, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) deleteIPListEntry(entry IPListEntry, softDelete bool) error {
|
|
return sqlCommonDeleteIPListEntry(entry, softDelete, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getIPListEntries(listType IPListType, filter, from, order string, limit int) ([]IPListEntry, error) {
|
|
return sqlCommonGetIPListEntries(listType, filter, from, order, limit, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getRecentlyUpdatedIPListEntries(after int64) ([]IPListEntry, error) {
|
|
return sqlCommonGetRecentlyUpdatedIPListEntries(after, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) dumpIPListEntries() ([]IPListEntry, error) {
|
|
return sqlCommonDumpIPListEntries(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) countIPListEntries(listType IPListType) (int64, error) {
|
|
return sqlCommonCountIPListEntries(listType, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getListEntriesForIP(ip string, listType IPListType) ([]IPListEntry, error) {
|
|
return sqlCommonGetListEntriesForIP(ip, listType, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) getConfigs() (Configs, error) {
|
|
return sqlCommonGetConfigs(p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) setConfigs(configs *Configs) error {
|
|
return sqlCommonSetConfigs(configs, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) setFirstDownloadTimestamp(username string) error {
|
|
return sqlCommonSetFirstDownloadTimestamp(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) setFirstUploadTimestamp(username string) error {
|
|
return sqlCommonSetFirstUploadTimestamp(username, p.dbHandle)
|
|
}
|
|
|
|
func (p *PGSQLProvider) close() error {
|
|
return p.dbHandle.Close()
|
|
}
|
|
|
|
func (p *PGSQLProvider) reloadConfig() error {
|
|
return nil
|
|
}
|
|
|
|
// initializeDatabase creates the initial database structure
|
|
func (p *PGSQLProvider) initializeDatabase() error {
|
|
dbVersion, err := sqlCommonGetDatabaseVersion(p.dbHandle, false)
|
|
if err == nil && dbVersion.Version > 0 {
|
|
return ErrNoInitRequired
|
|
}
|
|
if errors.Is(err, sql.ErrNoRows) && config.Driver != CockroachDataProviderName {
|
|
// on CockroachDB an empty schema_version is the footprint of an
|
|
// interrupted initialization: the statements are idempotent, so
|
|
// the retry below completes the missing pieces.
|
|
return errSchemaVersionEmpty
|
|
}
|
|
logger.InfoToConsole("creating initial database schema, version 33")
|
|
providerLog(logger.LevelInfo, "creating initial database schema, version 33")
|
|
if config.Driver == CockroachDataProviderName {
|
|
return runCRDBStatements(p.dbHandle, crdbInitialStatements(), 33, true)
|
|
}
|
|
initialSQL := sqlReplaceAll(pgsqlInitial + ipListsLikeIndex)
|
|
return sqlCommonExecSQLAndUpdateDBVersion(p.dbHandle, []string{initialSQL}, 33, true)
|
|
}
|
|
|
|
// crdbIdempotentStatements splits the given SQL into individual statements and
|
|
// rewrites them so that each one can be re-executed. On CockroachDB the
|
|
// migration takes no lock and a statement can fail after previous ones are
|
|
// already applied, so a retry must be able to run the whole script again.
|
|
func crdbIdempotentStatements(sql string) []string {
|
|
for _, r := range []struct {
|
|
old string
|
|
new string
|
|
}{
|
|
{"CREATE TABLE ", "CREATE TABLE IF NOT EXISTS "},
|
|
{"CREATE INDEX ", "CREATE INDEX IF NOT EXISTS "},
|
|
{"ADD COLUMN ", "ADD COLUMN IF NOT EXISTS "},
|
|
{"ADD CONSTRAINT ", "ADD CONSTRAINT IF NOT EXISTS "},
|
|
{"DROP TABLE ", "DROP TABLE IF EXISTS "},
|
|
{"DROP COLUMN ", "DROP COLUMN IF EXISTS "},
|
|
{"DROP CONSTRAINT ", "DROP CONSTRAINT IF EXISTS "},
|
|
} {
|
|
sql = strings.ReplaceAll(sql, r.old, r.new)
|
|
}
|
|
// statements that already carried the clause now have it twice
|
|
sql = strings.ReplaceAll(sql, "IF NOT EXISTS IF NOT EXISTS ", "IF NOT EXISTS ")
|
|
sql = strings.ReplaceAll(sql, "IF EXISTS IF EXISTS ", "IF EXISTS ")
|
|
return strings.Split(sql, ";")
|
|
}
|
|
|
|
// crdbInitialStatements returns the initial schema as individual idempotent
|
|
// statements for runCRDBStatements.
|
|
func crdbInitialStatements() []string {
|
|
initialSQL := sqlReplaceAll(pgsqlInitial)
|
|
initialSQL = strings.ReplaceAll(initialSQL, "GENERATED ALWAYS AS IDENTITY", "DEFAULT unordered_unique_rowid()")
|
|
initialSQL = strings.ReplaceAll(initialSQL,
|
|
fmt.Sprintf("INSERT INTO %s (configs) VALUES ('{}')", sqlTableConfigs),
|
|
fmt.Sprintf("INSERT INTO %s (configs) SELECT '{}' WHERE NOT EXISTS (SELECT id FROM %s)",
|
|
sqlTableConfigs, sqlTableConfigs))
|
|
return crdbIdempotentStatements(initialSQL)
|
|
}
|
|
|
|
func (p *PGSQLProvider) migrateDatabase() error {
|
|
dbVersion, err := sqlCommonGetDatabaseVersion(p.dbHandle, true)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
switch version := dbVersion.Version; {
|
|
case version == sqlDatabaseVersion:
|
|
providerLog(logger.LevelDebug, "sql database is up to date, current version: %d", version)
|
|
return ErrNoInitRequired
|
|
case version < 33:
|
|
err = errSchemaVersionTooOld(version)
|
|
providerLog(logger.LevelError, "%v", err)
|
|
logger.ErrorToConsole("%v", err)
|
|
return err
|
|
case version == 33:
|
|
return updatePGSQLDatabaseFromV33(p.dbHandle)
|
|
case version == 34:
|
|
return updatePGSQLDatabaseFromV34(p.dbHandle)
|
|
case version == 35:
|
|
return updatePGSQLDatabaseFromV35(p.dbHandle)
|
|
default:
|
|
if version > sqlDatabaseVersion {
|
|
providerLog(logger.LevelError, "database schema version %d is newer than the supported one: %d", version,
|
|
sqlDatabaseVersion)
|
|
logger.WarnToConsole("database schema version %d is newer than the supported one: %d", version,
|
|
sqlDatabaseVersion)
|
|
return nil
|
|
}
|
|
return fmt.Errorf("database schema version not handled: %d", version)
|
|
}
|
|
}
|
|
|
|
func (p *PGSQLProvider) revertDatabase(targetVersion int) error {
|
|
dbVersion, err := sqlCommonGetDatabaseVersion(p.dbHandle, true)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if dbVersion.Version == targetVersion {
|
|
return errors.New("current version match target version, nothing to do")
|
|
}
|
|
|
|
switch dbVersion.Version {
|
|
case 34:
|
|
return downgradePGSQLDatabaseFromV34(p.dbHandle)
|
|
case 35:
|
|
return downgradePGSQLDatabaseFromV35(p.dbHandle)
|
|
case 36:
|
|
return downgradePGSQLDatabaseFromV36(p.dbHandle)
|
|
default:
|
|
return fmt.Errorf("database schema version not handled: %d", dbVersion.Version)
|
|
}
|
|
}
|
|
|
|
func (p *PGSQLProvider) resetDatabase() error {
|
|
sql := sqlReplaceAll(pgsqlResetSQL)
|
|
return sqlCommonExecSQLAndUpdateDBVersion(p.dbHandle, []string{sql}, 0, false)
|
|
}
|
|
|
|
func (p *PGSQLProvider) normalizeError(err error, fieldType int) error {
|
|
if err == nil {
|
|
return nil
|
|
}
|
|
if pgsqlErr, ok := errors.AsType[*pgconn.PgError](err); ok {
|
|
switch pgsqlErr.Code {
|
|
case "23505":
|
|
var message string
|
|
switch fieldType {
|
|
case fieldUsername:
|
|
message = util.I18nErrorDuplicatedUsername
|
|
case fieldIPNet:
|
|
message = util.I18nErrorDuplicatedIPNet
|
|
default:
|
|
message = util.I18nErrorDuplicatedName
|
|
}
|
|
return util.NewI18nError(
|
|
fmt.Errorf("%w: %s", ErrDuplicatedKey, err.Error()),
|
|
message,
|
|
)
|
|
case "23503":
|
|
return fmt.Errorf("%w: %s", ErrForeignKeyViolated, err.Error())
|
|
}
|
|
}
|
|
return err
|
|
}
|
|
|
|
func updatePGSQLDatabaseFromV33(dbHandle *sql.DB) error {
|
|
if err := updatePGSQLDatabaseFrom33To34(dbHandle); err != nil {
|
|
return err
|
|
}
|
|
return updatePGSQLDatabaseFromV34(dbHandle)
|
|
}
|
|
|
|
func updatePGSQLDatabaseFromV34(dbHandle *sql.DB) error {
|
|
if err := updatePGSQLDatabaseFrom34To35(dbHandle); err != nil {
|
|
return err
|
|
}
|
|
return updatePGSQLDatabaseFromV35(dbHandle)
|
|
}
|
|
|
|
func updatePGSQLDatabaseFromV35(dbHandle *sql.DB) error {
|
|
return updatePGSQLDatabaseFrom35To36(dbHandle)
|
|
}
|
|
|
|
func downgradePGSQLDatabaseFromV34(dbHandle *sql.DB) error {
|
|
return downgradePGSQLDatabaseFrom34To33(dbHandle)
|
|
}
|
|
|
|
func downgradePGSQLDatabaseFromV35(dbHandle *sql.DB) error {
|
|
if err := downgradePGSQLDatabaseFrom35To34(dbHandle); err != nil {
|
|
return err
|
|
}
|
|
return downgradePGSQLDatabaseFromV34(dbHandle)
|
|
}
|
|
|
|
func downgradePGSQLDatabaseFromV36(dbHandle *sql.DB) error {
|
|
if err := downgradePGSQLDatabaseFrom36To35(dbHandle); err != nil {
|
|
return err
|
|
}
|
|
return downgradePGSQLDatabaseFromV35(dbHandle)
|
|
}
|
|
|
|
func updatePGSQLDatabaseFrom33To34(dbHandle *sql.DB) error {
|
|
logger.InfoToConsole("updating database schema version: 33 -> 34")
|
|
providerLog(logger.LevelInfo, "updating database schema version: 33 -> 34")
|
|
|
|
sql := strings.ReplaceAll(pgsqlV34SQL, "{{prefix}}", config.SQLTablesPrefix)
|
|
sql = strings.ReplaceAll(sql, "{{shares}}", sqlTableShares)
|
|
sql = strings.ReplaceAll(sql, "{{shares_groups_mapping}}", sqlTableSharesGroupsMapping)
|
|
sql = strings.ReplaceAll(sql, "{{groups}}", sqlTableGroups)
|
|
if config.Driver == CockroachDataProviderName {
|
|
return runCRDBStatements(dbHandle, crdbIdempotentStatements(sql), 34, true)
|
|
}
|
|
return sqlCommonExecSQLAndUpdateDBVersion(dbHandle, []string{sql}, 34, true)
|
|
}
|
|
|
|
func downgradePGSQLDatabaseFrom34To33(dbHandle *sql.DB) error {
|
|
logger.InfoToConsole("downgrading database schema version: 34 -> 33")
|
|
providerLog(logger.LevelInfo, "downgrading database schema version: 34 -> 33")
|
|
|
|
sql := strings.ReplaceAll(pgsqlV34DownSQL, "{{shares_groups_mapping}}", sqlTableSharesGroupsMapping)
|
|
if config.Driver == CockroachDataProviderName {
|
|
return runCRDBStatements(dbHandle, crdbIdempotentStatements(sql), 33, false)
|
|
}
|
|
return sqlCommonExecSQLAndUpdateDBVersion(dbHandle, []string{sql}, 33, false)
|
|
}
|
|
|
|
func replaceV35MappingTablesPlaceholders(sql string) string {
|
|
sql = strings.ReplaceAll(sql, "{{prefix}}", config.SQLTablesPrefix)
|
|
sql = strings.ReplaceAll(sql, "{{users_folders_mapping}}", sqlTableUsersFoldersMapping)
|
|
return strings.ReplaceAll(sql, "{{groups_folders_mapping}}", sqlTableGroupsFoldersMapping)
|
|
}
|
|
|
|
func replaceV35MappingTablesPlaceholdersList(statements []string) []string {
|
|
result := make([]string, 0, len(statements))
|
|
for _, q := range statements {
|
|
result = append(result, replaceV35MappingTablesPlaceholders(q))
|
|
}
|
|
return result
|
|
}
|
|
|
|
func runCRDBStatements(dbHandle *sql.DB, statements []string, newVersion int, isUp bool) error {
|
|
if currentVersion, err := sqlCommonGetDatabaseVersion(dbHandle, false); err == nil {
|
|
if (isUp && currentVersion.Version >= newVersion) || (!isUp && currentVersion.Version <= newVersion) {
|
|
providerLog(logger.LevelInfo, "current schema version: %d, requested: %d, did you execute simultaneous migrations?",
|
|
currentVersion.Version, newVersion)
|
|
return nil
|
|
}
|
|
}
|
|
execStatement := func(q string) error {
|
|
ctx, cancel := context.WithTimeout(context.Background(), longSQLQueryTimeout)
|
|
defer cancel()
|
|
|
|
_, err := dbHandle.ExecContext(ctx, q)
|
|
return err
|
|
}
|
|
for _, q := range statements {
|
|
q = strings.TrimSpace(q)
|
|
if q == "" {
|
|
continue
|
|
}
|
|
if err := execStatement(q); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
ctx, cancel := context.WithTimeout(context.Background(), defaultSQLQueryTimeout)
|
|
defer cancel()
|
|
|
|
return sqlCommonUpdateDatabaseVersion(ctx, dbHandle, newVersion)
|
|
}
|
|
|
|
func updatePGSQLDatabaseFrom34To35(dbHandle *sql.DB) error {
|
|
logger.InfoToConsole("updating database schema version: 34 -> 35")
|
|
providerLog(logger.LevelInfo, "updating database schema version: 34 -> 35")
|
|
|
|
if config.Driver == CockroachDataProviderName {
|
|
return runCRDBStatements(dbHandle, replaceV35MappingTablesPlaceholdersList(crdbV35SQL), 35, true)
|
|
}
|
|
sql := replaceV35MappingTablesPlaceholders(pgsqlV35SQL)
|
|
return sqlCommonExecSQLAndUpdateDBVersion(dbHandle, []string{sql}, 35, true)
|
|
}
|
|
|
|
func downgradePGSQLDatabaseFrom35To34(dbHandle *sql.DB) error {
|
|
logger.InfoToConsole("downgrading database schema version: 35 -> 34")
|
|
providerLog(logger.LevelInfo, "downgrading database schema version: 35 -> 34")
|
|
|
|
if config.Driver == CockroachDataProviderName {
|
|
return runCRDBStatements(dbHandle, replaceV35MappingTablesPlaceholdersList(crdbV35DownSQL), 34, false)
|
|
}
|
|
sql := replaceV35MappingTablesPlaceholders(pgsqlV35DownSQL)
|
|
return sqlCommonExecSQLAndUpdateDBVersion(dbHandle, []string{sql}, 34, false)
|
|
}
|
|
|
|
func updatePGSQLDatabaseFrom35To36(dbHandle *sql.DB) error {
|
|
logger.InfoToConsole("updating database schema version: 35 -> 36")
|
|
providerLog(logger.LevelInfo, "updating database schema version: 35 -> 36")
|
|
|
|
if config.Driver == CockroachDataProviderName {
|
|
return runCRDBStatements(dbHandle, sqlReplaceAllList(crdbV36SQL), 36, true)
|
|
}
|
|
sql := sqlReplaceAll(pgsqlV36SQL)
|
|
return sqlCommonExecSQLAndUpdateDBVersion(dbHandle, []string{sql}, 36, true)
|
|
}
|
|
|
|
func downgradePGSQLDatabaseFrom36To35(dbHandle *sql.DB) error {
|
|
logger.InfoToConsole("downgrading database schema version: 36 -> 35")
|
|
providerLog(logger.LevelInfo, "downgrading database schema version: 36 -> 35")
|
|
|
|
if config.Driver == CockroachDataProviderName {
|
|
return runCRDBStatements(dbHandle, sqlReplaceAllList(crdbV36DownSQL), 35, false)
|
|
}
|
|
sql := sqlReplaceAll(pgsqlV36DownSQL)
|
|
return sqlCommonExecSQLAndUpdateDBVersion(dbHandle, []string{sql}, 35, false)
|
|
}
|