Added credential_reload and server_authorization_check API's.

pull/19778/head
Matthew Stevenson 5 years ago
parent 64a8f132e7
commit bd8952b214
  1. 179
      include/grpcpp/security/tls_credentials_options.h

@ -23,9 +23,9 @@
#include <memory>
#include <grpcpp/support/config.h>
#include <grpc/support/log.h>
#include <grpc/grpc_security.h>
namespace grpc_impl {
namespace experimental {
@ -57,6 +57,163 @@ class TlsKeyMaterialsConfig {
::grpc::string pem_root_certs_;
};
/** TLS credential reload arguments, wraps grpc_tls_credential_reload_arg. **/
typedef class TlsCredentialReloadArg TlsCredentialReloadArg;
typedef void (*grpcpp_tls_on_credential_reload_done_cb)(TlsCredentialReloadArg* arg);
class TlsCredentialReloadArg {
public:
/** Getters for member fields. **/
grpcpp_tls_on_credential_reload_done_cb cb() const {
return cb_;
}
void* cb_user_data() const {
return cb_user_data_;
}
::std::shared_ptr<TlsKeyMaterialsConfig> key_materials_config() const {
return key_materials_config_;
}
grpc_ssl_certificate_config_reload_status status() const {
return status_;
}
::grpc::string error_details() const {
return error_details_;
}
/** Setters for member fields. **/
void set_cb(grpcpp_tls_on_credential_reload_done_cb cb);
void set_cb_user_data(void* cb_user_data);
void set_key_materials_config(::std::shared_ptr<TlsKeyMaterialsConfig> key_materials_config);
void set_status(grpc_ssl_certificate_config_reload_status status);
void set_error_details(::grpc::string error_details);
/** Creates C struct for credential reload arg. **/
grpc_tls_credential_reload_arg* c_credential_reload_arg() const;
private:
grpcpp_tls_on_credential_reload_done_cb cb_;
void* cb_user_data_;
::std::shared_ptr<TlsKeyMaterialsConfig> key_materials_config_;
grpc_ssl_certificate_config_reload_status status_;
::grpc::string error_details_;
};
/** TLS credential reloag config, wraps grpc_tls_credential_reload_config. **/
class TlsCredentialReloadConfig {
public:
TlsCredentialReloadConfig(
const void* config_user_data,
int (*schedule)(void* config_user_data, TlsCredentialReloadArg* arg),
void (*cancel)(void* config_user_data, TlsCredentialReloadArg* arg),
void (*destruct)(void* config_user_data));
~TlsCredentialReloadConfig();
int Schedule(TlsCredentialReloadArg* arg) const {
return schedule_(config_user_data_, arg);
}
void Cancel(TlsCredentialReloadArg* arg) const {
if (cancel_ == nullptr) {
gpr_log(GPR_ERROR, "cancel API is nullptr");
return;
}
cancel_(config_user_data_, arg);
}
grpc_tls_credential_reload_config* c_credential_reload() const;
private:
void* config_user_data_;
int (*schedule_)(void* config_user_data, TlsCredentialReloadArg* arg);
void (*cancel_)(void* config_user_data, TlsCredentialReloadArg* arg);
void (*destruct_)(void* config_user_data);
};
/** TLS server authorization check arguments, wraps
* grpc_tls_server_authorization_check_arg. **/
typedef class TlsServerAuthorizationCheckArg TlsServerAuthorizationCheckArg;
typedef void (*grpcpp_tls_on_server_authorization_check_done_cb)(
TlsServerAuthorizationCheckArg* arg);
class TlsServerAuthorizationCheckArg {
public:
/** Getters for member fields. **/
grpcpp_tls_on_server_authorization_check_done_cb cb() const {
return cb_;
}
void* cb_user_data() const {
return cb_user_data_;
}
int success() const {
return success_;
}
::grpc::string peer_cert() const {
return peer_cert_;
}
grpc_status_code status() const {
return status_;
}
::grpc::string error_details() const {
return error_details_;
}
/** Setters for member fields. **/
void set_cb(grpcpp_tls_on_server_authorization_check_done_cb cb);
void set_cb_user_data(void* cb_user_data);
void set_success(int success);
void set_peer_cert(::grpc::string peer_cert);
void set_status(grpc_status_code status);
void set_error_details(::grpc::string error_details);
/** Creates C struct for credential reload arg. **/
grpc_tls_credential_reload_arg* c_credential_reload_arg() const;
private:
grpcpp_tls_on_server_authorization_check_done_cb cb_;
void* cb_user_data_;
int success_;
::grpc::string target_name_;
::grpc::string peer_cert_;
grpc_status_code status_;
::grpc::string error_details_;
};
/** TLS server authorization check config, wraps
* grps_tls_server_authorization_check_config. **/
class TlsServerAuthorizationCheckConfig {
public:
TlsServerAuthorizationCheckConfig(
const void* config_user_data,
int (*schedule)(void* config_user_data, TlsServerAuthorizationCheckArg* arg),
void (*cancel)(void* config_user_data, TlsServerAuthorizationCheckArg* arg),
void (*destruct)(void* config_user_data));
~TlsServerAuthorizationCheckConfig();
int Schedule(TlsServerAuthorizationCheckArg* arg) const {
return schedule_(config_user_data_, arg);
}
void Cancel(TlsServerAuthorizationCheckArg* arg) const {
if (cancel_ == nullptr) {
gpr_log(GPR_ERROR, "cancel API is nullptr");
return;
}
cancel_(config_user_data_, arg);
}
grpc_tls_server_authorization_check_config* c_server_authorization_check() const;
private:
void* config_user_data_;
int (*schedule_)(void* config_user_data, TlsServerAuthorizationCheckArg* arg);
void (*cancel_)(void* config_user_data, TlsServerAuthorizationCheckArg* arg);
void (*destruct_)(void* config_user_data);
};
/** TLS credentials options, wrapper for grpc_tls_credentials_options. **/
class TlsCredentialsOptions {
public:
@ -67,24 +224,40 @@ class TlsCredentialsOptions {
std::shared_ptr<TlsKeyMaterialsConfig> key_materials_config() const {
return key_materials_config_;
}
::std::shared_ptr<TlsCredentialReloadConfig> credential_reload_config() const {
return credential_reload_config_;
}
::std::shared_ptr<TlsServerAuthorizationCheckConfig> server_authorization_check_config() const {
return server_authorization_check_config_;
}
/** Setters for member fields. **/
void set_cert_request_type(
const grpc_ssl_client_certificate_request_type type) {
cert_request_type_ = type;
}
void set_key_materials_config(
std::shared_ptr<TlsKeyMaterialsConfig> config) {
key_materials_config_ = config;
}
void set_credential_reload_config(
::std::shared_ptr<TlsCredentialReloadConfig> config) {
credential_reload_config_ = config;
}
void set_server_authorization_check_config(
::std::shared_ptr<TlsServerAuthorizationCheckConfig> config) {
server_authorization_check_config_ = config;
}
/** Creates C struct for TLS credential options. **/
grpc_tls_credentials_options* c_credentials_options() const;
private:
grpc_ssl_client_certificate_request_type cert_request_type_;
std::shared_ptr<TlsKeyMaterialsConfig> key_materials_config_;
::std::shared_ptr<TlsKeyMaterialsConfig> key_materials_config_;
::std::shared_ptr<TlsCredentialReloadConfig> credential_reload_config_;
::std::shared_ptr<TlsServerAuthorizationCheckConfig> server_authorization_check_config_;
};
} // namespace experimental

Loading…
Cancel
Save