mirror of
git://git.savannah.gnu.org/guix/data-service.git
synced 2023-12-14 03:23:03 +01:00
57 lines
1.9 KiB
Scheme
57 lines
1.9 KiB
Scheme
;;; Guix Data Service -- Information about Guix over time
|
|
;;; Copyright © 2019 Christopher Baines <mail@cbaines.net>
|
|
;;;
|
|
;;; This program is free software: you can redistribute it and/or
|
|
;;; modify it under the terms of the GNU Affero General Public License
|
|
;;; as published by the Free Software Foundation, either version 3 of
|
|
;;; the License, or (at your option) any later version.
|
|
;;;
|
|
;;; This program is distributed in the hope that it will be useful,
|
|
;;; but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
;;; Affero General Public License for more details.
|
|
;;;
|
|
;;; You should have received a copy of the GNU Affero General Public
|
|
;;; License along with this program. If not, see
|
|
;;; <http://www.gnu.org/licenses/>.
|
|
|
|
(define-module (guix-data-service model build-server-token-seed)
|
|
#:use-module (ice-9 match)
|
|
#:use-module (rnrs bytevectors)
|
|
#:use-module (squee)
|
|
#:use-module (gcrypt hash)
|
|
#:use-module (gcrypt base64)
|
|
#:export (compute-tokens-for-build-server))
|
|
|
|
(define (compute-token secret-key-base build-server-id token-seed)
|
|
(let ((source-string
|
|
(simple-format #f "~A:~A:~A"
|
|
secret-key-base
|
|
build-server-id
|
|
token-seed)))
|
|
(string-filter
|
|
(base64-encode
|
|
(bytevector-hash
|
|
(string->utf8 source-string)
|
|
(hash-algorithm sha1)))
|
|
;; Remove the + / and = to make handling the value easier
|
|
char-set:letter+digit)))
|
|
|
|
(define (compute-tokens-for-build-server conn secret-key-base build-server-id)
|
|
(define query
|
|
"
|
|
SELECT token_seed
|
|
FROM build_server_token_seeds
|
|
WHERE build_server_id = $1
|
|
ORDER BY token_seed")
|
|
|
|
(map
|
|
(match-lambda
|
|
((token-seed)
|
|
(cons token-seed
|
|
(compute-token secret-key-base
|
|
build-server-id
|
|
token-seed))))
|
|
(exec-query conn query (list (number->string build-server-id)))))
|
|
|