feat: secret wit interface

G-Core · Sep 24, 2024 · 6bff175 · 6bff175
1 parent 4a049cc
commit 6bff175
Show file tree

Hide file tree

Showing 8 changed files with 82 additions and 13 deletions.
diff --git a/.cargo/config.toml b/.cargo/config.toml
@@ -1,2 +1,2 @@
 [build]
-target = "wasm32-wasi"
+target = "wasm32-wasip1"
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/examples/secret/Cargo.toml b/examples/secret/Cargo.toml
@@ -0,0 +1,12 @@
+[package]
+name = "secret"
+version = {workspace = true}
+edition = "2021"
+publish = false
+
+[lib]
+crate-type = ["cdylib"]
+
+[dependencies]
+fastedge = { path = "../../" }
+anyhow = "1.0"
diff --git a/examples/secret/src/lib.rs b/examples/secret/src/lib.rs
@@ -0,0 +1,38 @@
+use anyhow::{Error, Result};
+
+use fastedge::body::Body;
+use fastedge::http::{Request, Response, StatusCode};
+use fastedge::secret;
+
+#[allow(dead_code)]
+#[fastedge::http]
+fn main(_req: Request<Body>) -> Result<Response<Body>> {
+
+    let value = match secret::get("SECRET") {
+        Ok(value) => value,
+        Err(secret::Error::AccessDenied) => {
+            return Response::builder()
+                .status(StatusCode::FORBIDDEN)
+                .body(Body::empty())
+                .map_err(Error::msg);
+        },
+        Err(secret::Error::Other(msg)) => {
+            return Response::builder()
+                .status(StatusCode::FORBIDDEN)
+                .body(Body::from(msg))
+                .map_err(Error::msg);
+        },
+    };
+
+    if value.is_none() {
+        return Response::builder()
+            .status(StatusCode::NOT_FOUND)
+            .body(Body::empty())
+            .map_err(Error::msg);
+    }
+
+    Response::builder()
+        .status(StatusCode::OK)
+        .body(Body::empty())
+        .map_err(Error::msg)
+}
diff --git a/src/key_value.rs b/src/key_value.rs
diff --git a/src/lib.rs b/src/lib.rs
@@ -12,6 +12,7 @@ pub use http_client::send_request;
 pub use crate::exports::gcore::fastedge::http_handler;
 use crate::gcore::fastedge::http::{Error as HttpError, Method, Request, Response};
 pub use crate::gcore::fastedge::key_value;
+pub use crate::gcore::fastedge::secret;
 
 /// Implementation of Outbound HTTP component
 mod http_client;
@@ -25,7 +26,7 @@ pub mod wasi_nn {
 }
 
 wit_bindgen::generate!({
-    world: "reactor",
+    world: "http-reactor",
     path: "wit",
     pub_export_macro: true,
 });

diff --git a/wit/secret.wit b/wit/secret.wit
@@ -0,0 +1,14 @@
+interface secret {
+  /// Get the secret associated with the specified `key`
+  /// Returns `ok(none)` if the key does not exist.
+  get: func(key: string) -> result<option<string>, error>;
+
+  /// The set of errors which may be raised by functions in this interface
+  variant error {
+    /// The requesting component does not have access to the specified key
+    /// (which may or may not exist).
+    access-denied,
+    /// Some implementation-specific error has occurred (e.g. I/O)
+    other(string)
+  }
+}
diff --git a/wit/world.wit b/wit/world.wit
@@ -1,12 +1,12 @@
-package gcore:fastedge;
+package gcore: fastedge;
 
 world http-reactor {
-    import http;
-    import http-client;
+  import http;
+  import http-client;
 
-    import dictionary;
+  import dictionary;
+  import key-value;
+  import secret;
 
-    import key-value;
-
-    export http-handler;
+  export http-handler;
 }