Method handle_frame

nodedb/src/control/server/session.rs:362–732

Parse a request frame and dispatch to the Data Plane.

(
        &mut self,
        request_id: RequestId,
        payload: &[u8],
    )

    /// Parse a request frame and dispatch to the Data Plane.
    async fn handle_frame(
        &mut self,
        request_id: RequestId,
        payload: &[u8],
    ) -> crate::Result<Vec<u8>> {
        // Parse the JSON request body.
        let body: serde_json::Value =
            sonic_rs::from_slice(payload).map_err(|e| crate::Error::BadRequest {
                detail: format!("invalid JSON: {e}"),
            })?;

        let op = body["op"]
            .as_str()
            .ok_or_else(|| crate::Error::BadRequest {
                detail: "missing 'op' field".into(),
            })?;

        // Auth handshake: must be first frame.
        if op == "auth" {
            let (identity, warning) = super::session_auth::authenticate(
                &self.state,
                &self.auth_mode,
                &body,
                &self.peer_addr.to_string(),
            )
            .await?;

            // Optional `"database"` field in the auth payload — bind the session
            // database at handshake time. If absent, falls back to the resolution
            // chain (user-default → tenant-default → DatabaseId::DEFAULT) below.
            let explicit_db = if let Some(db_name) = body["database"].as_str() {
                if db_name.is_empty() {
                    None
                } else {
                    // Validate the database name against the catalog.
                    let resolved = if let Some(cat) = self.state.credentials.catalog().as_ref() {
                        cat.get_database_id_by_name(db_name).ok().flatten()
                    } else {
                        None
                    };
                    match resolved {
                        Some(db_id) => Some(db_id),
                        None => {
                            let msg = format!(
                                r#"{{"status":"error","code":"DATABASE_NOT_FOUND","error":"database '{db_name}' does not exist"}}"#
                            );
                            return Ok(msg.into_bytes());
                        }
                    }
                }
            } else {
                None
            };

            let resolved_db = Self::resolve_database(&identity, explicit_db);

            // Enforce accessible_databases at session bind. Superusers bypass
            // this check (can_access_database returns true for all databases).