Method IssueMagicAuthToken

admin/server/magic_tokens.go:27–132

(ctx context.Context, req *adminv1.IssueMagicAuthTokenRequest)

const magicAuthTokenFilterMaxSize = 1024

func (s *Server) IssueMagicAuthToken(ctx context.Context, req *adminv1.IssueMagicAuthTokenRequest) (*adminv1.IssueMagicAuthTokenResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.organization", req.Org),
		attribute.String("args.project", req.Project),
		attribute.String("args.display_name", req.DisplayName),
	)

	proj, err := s.admin.DB.FindProjectByName(ctx, req.Org, req.Project)
	if err != nil {
		return nil, err
	}

	org, err := s.admin.DB.FindOrganization(ctx, proj.OrganizationID)
	if err != nil {
		return nil, err
	}

	claims := auth.GetClaims(ctx)
	projPerms := claims.ProjectPermissions(ctx, proj.OrganizationID, proj.ID)
	if !projPerms.CreateMagicAuthTokens {
		return nil, status.Error(codes.PermissionDenied, "not allowed to create a magic auth token")
	}

	if req.ResourceName != "" && req.ResourceType != "" { // nolint:staticcheck // for backwards compatibility
		addResource := true
		for _, r := range req.Resources {
			if r.Type == req.ResourceType && r.Name == req.ResourceName { // nolint:staticcheck // for backwards compatibility
				addResource = false
				break
			}
		}
		if addResource {
			req.Resources = append(req.Resources, &adminv1.ResourceName{
				Type: req.ResourceType, // nolint:staticcheck // for backwards compatibility
				Name: req.ResourceName, // nolint:staticcheck // for backwards compatibility
			})
		}
	}

	resources := make([]database.ResourceName, len(req.Resources))
	for i, r := range req.Resources {
		resources[i] = database.ResourceName{
			Type: r.Type,
			Name: r.Name,
		}
	}
	opts := &admin.IssueMagicAuthTokenOptions{
		ProjectID:   proj.ID,
		Fields:      req.Fields,
		State:       req.State,
		DisplayName: req.DisplayName,
		Resources:   resources,
	}

	if req.TtlMinutes != 0 {
		ttl := time.Duration(req.TtlMinutes) * time.Minute
		opts.TTL = &ttl
	}