[WIP] Add object ownership management

backend/src/drivers/sqlite.ts

@@ -21,6 +21,11 @@ const initSchema = async (db: Database) => {
   await db.run(
     "CREATE TABLE IF NOT EXISTS transactionResults (cid TEXT PRIMARY KEY, transaction_result TEXT, head_cid TEXT)"
   );
+
+  // Object Ownership
+  await db.exec(
+    "CREATE TABLE IF NOT EXISTS object_ownership (cid TEXT PRIMARY KEY, user_id TEXT, is_admin BOOLEAN, marked_as_deleted BOOLEAN)"
+  );
 };
 
 const createDB = async (

backend/src/models/index.ts

@@ -2,3 +2,4 @@ export * from "./chunkInfo.js";
 export * from "./folderTree.js";
 export * from "./nodeWithMetadata.js";
 export * from "./transaction.js";
+export * from "./user.js";

backend/src/models/user.ts

@@ -0,0 +1,4 @@
+export type User = {
+  provider: string;
+  email: string;
+};

backend/src/repositories/index.ts

@@ -1,4 +1,5 @@
 export { getDatabase } from "../drivers/sqlite.js";
 export { metadataRepository } from "./metadata.js";
 export { nodesRepository } from "./nodes.js";
+export { ownershipRepository } from "./ownership.js";
 export { transactionResultsRepository } from "./transactionResults.js";

backend/src/repositories/ownership.ts

@@ -0,0 +1,42 @@
+import { getDatabase } from "../drivers/sqlite.js";
+
+const setUserAsOwner = async (cid: string, userId: string) => {
+  const db = await getDatabase();
+
+  await db.run(
+    "INSERT INTO object_ownership (cid, user_id, is_admin, marked_as_deleted) VALUES (?, ?, ?, ?)",
+    cid,
+    userId,
+    false,
+    false
+  );
+};
+
+const setUserAsAdmin = async (cid: string, userId: string) => {
+  const db = await getDatabase();
+
+  await db.run(
+    "INSERT INTO object_ownership (cid, user_id, is_admin, marked_as_deleted) VALUES (?, ?, ?, ?)",
+    cid,
+    userId,
+    true,
+    false
+  );
+};
+
+const setObjectAsDeleted = async (userId: string, cid: string) => {
+  const db = await getDatabase();
+
+  await db.run(
+    "UPDATE object_ownership SET marked_as_deleted = ? WHERE cid = ? AND user_id = ?",
+    true,
+    cid,
+    userId
+  );
+};
+
+export const ownershipRepository = {
+  setUserAsOwner,
+  setUserAsAdmin,
+  setObjectAsDeleted,
+};

backend/src/server.ts

@@ -13,6 +13,7 @@ import { decode } from "@ipld/dag-pb";
 import "dotenv/config.js";
 import { FolderTreeSchema, NodeWithMetadata } from "./models/index.js";
 import { transactionResultsRepository } from "./repositories/index.js";
+import { handleAuth } from "./services/authManager/express.js";
 import { uploadManager } from "./services/uploadManager/index.js";
 import {
   FilesUseCases,
@@ -55,8 +56,18 @@ const createServer = async () => {
         return res.status(400).json({ error: "Field `data` is required" });
       }
 
+      const user = await handleAuth(req, res);
+      if (!user) {
+        return;
+      }
+
       const buffer = Buffer.from(data, "base64");
-      const cid = await FilesUseCases.uploadFile(buffer, filename, mimeType);
+      const cid = await FilesUseCases.uploadFile(
+        user,
+        buffer,
+        filename,
+        mimeType
+      );
 
       res.json({ cid });
     } catch (error) {
@@ -67,6 +78,11 @@ const createServer = async () => {
 
   app.post("/upload-folder", multer().any(), async (req, res) => {
     try {
+      const user = await handleAuth(req, res);
+      if (!user) {
+        return;
+      }
+
       const folderTreeString = req.body.folderTree;
       if (!folderTreeString) {
         return res
@@ -90,6 +106,7 @@ const createServer = async () => {
       }
 
       const cid = await FilesUseCases.uploadTree(
+        user,
         validatedFolderTree.data,
         (req.files || []) as Express.Multer.File[]
       );

backend/src/services/authManager/express.ts

@@ -0,0 +1,31 @@
+import { Request, Response } from "express";
+import { AuthManager } from "./index.js";
+
+export const handleAuth = async (req: Request, res: Response) => {
+  const accessToken = req.headers.authorization?.split(" ")[1];
+  if (!accessToken) {
+    res.status(401).json({ error: "Missing or invalid access token" });
+    return null;
+  }
+
+  const provider = req.headers["x-auth-provider"];
+  if (!provider || typeof provider !== "string") {
+    res
+      .status(401)
+      .json({ error: "Missing or invalid x-auth-provider header" });
+
+    return null;
+  }
+
+  const user = await AuthManager.getUserFromAccessToken(
+    provider,
+    accessToken
+  ).catch(() => null);
+
+  if (!user) {
+    res.status(401).json({ error: "Failed to authenticate user" });
+    return null;
+  }
+
+  return user;
+};

backend/src/services/authManager/index.ts

@@ -0,0 +1,18 @@
+import { User } from "../../models/index.js";
+import { GoogleAuth } from "./providers/index.js";
+
+const getUserFromAccessToken = async (
+  provider: string,
+  accessToken: string
+): Promise<User> => {
+  switch (provider) {
+    case "google":
+      return GoogleAuth.getUserFromAccessToken(accessToken);
+    default:
+      throw new Error("Invalid provider");
+  }
+};
+
+export const AuthManager = {
+  getUserFromAccessToken,
+};

backend/src/services/authManager/providers/google.ts

@@ -0,0 +1,34 @@
+import { User } from "../../../models/index.js";
+
+type GoogleUser = {
+  email: string;
+  id: string;
+  verified_email: boolean;
+  picture: string;
+  hd: string;
+};
+
+const getUserFromAccessToken = async (accessToken: string): Promise<User> => {
+  const googleUser = await fetch(
+    "https://www.googleapis.com/oauth2/v1/userinfo?scope=https://www.googleapis.com/auth/userinfo.email",
+    {
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+      },
+    }
+  ).then((res) => {
+    if (res.status >= 400) {
+      throw new Error("Failed to fetch user info");
+    }
+    return res.json() as Promise<GoogleUser>;
+  });
+
+  return {
+    provider: "google",
+    email: googleUser.email,
+  };
+};
+
+export const GoogleAuth = {
+  getUserFromAccessToken,
+};

backend/src/services/authManager/providers/index.ts

@@ -0,0 +1 @@
+export * from "./google.js";

backend/src/useCases/files.ts

@@ -12,7 +12,12 @@ import {
 } from "@autonomys/auto-drive";
 import { PBNode } from "@ipld/dag-pb";
 import { FolderTree } from "../models/index.js";
-import { MetadataUseCases, NodesUseCases } from "../useCases/index.js";
+import { User } from "../models/user.js";
+import {
+  MetadataUseCases,
+  NodesUseCases,
+  OwnershipUseCases,
+} from "../useCases/index.js";
 
 const processFile = async (
   data: Buffer,
@@ -140,24 +145,28 @@ const retrieveAndReassembleData = async (
 };
 
 const uploadFile = async (
+  user: User,
   data: Buffer,
   filename?: string,
   mimeType?: string
 ): Promise<string> => {
   const { cid, nodes } = await processFile(data, filename, mimeType);
 
   await NodesUseCases.saveNodesWithHeadCID(nodes, cid);
+  await OwnershipUseCases.setUserAsOwner(user, cid);
 
   return cid;
 };
 
 const uploadTree = async (
+  user: User,
   folderTree: FolderTree,
   files: Express.Multer.File[]
 ): Promise<string> => {
   const { cid, nodes } = await processTree(folderTree, files);
 
   await NodesUseCases.saveNodesWithHeadCID(nodes, cid);
+  await OwnershipUseCases.setUserAsOwner(user, cid);
 
   return cid;
 };

backend/src/useCases/index.ts

@@ -1,4 +1,5 @@
 export * from "./files.js";
 export * from "./metadata.js";
 export * from "./nodes.js";
+export * from "./ownership.js";
 export * from "./transactionResults.js";

backend/src/useCases/ownership.ts

@@ -0,0 +1,20 @@
+import { User } from "../models/index.js";
+import { ownershipRepository } from "../repositories/index.js";
+
+const setUserAsOwner = async (user: User, cid: string) => {
+  await ownershipRepository.setUserAsOwner(cid, user.email);
+};
+
+const setUserAsAdmin = async (user: User, cid: string) => {
+  await ownershipRepository.setUserAsAdmin(cid, user.email);
+};
+
+const setObjectAsDeleted = async (user: User, cid: string) => {
+  await ownershipRepository.setObjectAsDeleted(user.email, cid);
+};
+
+export const OwnershipUseCases = {
+  setUserAsOwner,
+  setUserAsAdmin,
+  setObjectAsDeleted,
+};

frontend/package.json

@@ -17,6 +17,7 @@
     "lucide-react": "^0.439.0",
     "multiformats": "^13.2.3",
     "next": "^14.2.10",
+    "next-auth": "^4.24.8",
     "react": "^18",
     "react-dom": "^18",
     "usehooks-ts": "^3.1.0",

frontend/src/app/fs/[cid]/page.tsx → frontend/src/app/app/fs/[cid]/page.tsx

@@ -1,5 +1,5 @@
-import { FileCard } from "../../../components/common/FileCard";
-import { ApiService } from "../../../services/api";
+import { FileCard } from "../../../../components/common/FileCard";
+import { ApiService } from "../../../../services/api";
 
 export default async function Page({ params }: { params: { cid: string } }) {
   const { cid } = params;