command-authenticator.hpp

Go to the documentation of this file.

/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
#ifndef NFD_DAEMON_MGMT_COMMAND_AUTHENTICATOR_HPP
#define NFD_DAEMON_MGMT_COMMAND_AUTHENTICATOR_HPP

#include "core/config-file.hpp"
#include <ndn-cxx/mgmt/dispatcher.hpp>
#include <ndn-cxx/security/command-interest-validator.hpp>
#include <ndn-cxx/security/public-key.hpp>

namespace nfd {

class CommandAuthenticator : public enable_shared_from_this<CommandAuthenticator>, noncopyable
{
public:
  static shared_ptr<CommandAuthenticator>
  create();

  void
  setConfigFile(ConfigFile& configFile);

  ndn::mgmt::Authorization
  makeAuthorization(const std::string& module, const std::string& verb);

private:
  CommandAuthenticator();

  void
  processConfig(const ConfigSection& section, bool isDryRun, const std::string& filename);

  static std::pair<bool, Name>
  extractKeyName(const Interest& interest);

private:
  struct AuthorizedCerts
  {
    bool allowAny = false;
    std::unordered_map<Name, ndn::PublicKey> certs; 
  };
  std::unordered_map<std::string, AuthorizedCerts> m_moduleAuth; 

  ndn::security::CommandInterestValidator m_validator;
};

} // namespace nfd

#endif // NFD_DAEMON_MGMT_COMMAND_AUTHENTICATOR_HPP