8560830d3e
Co-authored-by: zearlin <ruomiao.linrm@alibaba-inc.com> Co-authored-by: chichuan <30925823+haofeng0705@users.noreply.github.com>
71 lines
2.2 KiB
Go
71 lines
2.2 KiB
Go
// Copyright 2026 Alibaba Group
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package auth
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"os"
|
|
"strings"
|
|
)
|
|
|
|
// ProfileMetadata is the minimal, non-sensitive identity projection exposed to
|
|
// telemetry callers. It intentionally excludes profile names, client IDs,
|
|
// organization names, token material, and credential status.
|
|
type ProfileMetadata struct {
|
|
UserID string
|
|
UserName string
|
|
CorpID string
|
|
}
|
|
|
|
// ResolveProfileMetadataReadOnly resolves one identity exclusively from the
|
|
// non-sensitive profiles.json metadata. It deliberately avoids auth locks,
|
|
// token stores, Keychain access, migrations, quarantine renames, and writes.
|
|
// A missing metadata file or an empty current profile returns (nil, nil).
|
|
func ResolveProfileMetadataReadOnly(configDir, selector string) (*ProfileMetadata, error) {
|
|
data, err := profilesReadFile(ProfilesPath(configDir))
|
|
if err != nil {
|
|
if os.IsNotExist(err) {
|
|
return nil, nil
|
|
}
|
|
return nil, fmt.Errorf("read profile metadata: %w", err)
|
|
}
|
|
|
|
var cfg ProfilesConfig
|
|
if err := json.Unmarshal(data, &cfg); err != nil {
|
|
return nil, fmt.Errorf("parse profile metadata: %w", err)
|
|
}
|
|
if cfg.Version > profilesMaxVersion {
|
|
return nil, fmt.Errorf("profile metadata version %d is newer than supported version %d", cfg.Version, profilesMaxVersion)
|
|
}
|
|
normalizeProfilesConfig(&cfg)
|
|
|
|
selector = strings.TrimSpace(selector)
|
|
if selector == "" {
|
|
selector = strings.TrimSpace(cfg.CurrentProfile)
|
|
if selector == "" {
|
|
return nil, nil
|
|
}
|
|
}
|
|
profile, _, err := resolveProfileSelection("", &cfg, selector)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &ProfileMetadata{
|
|
UserID: profile.UserID,
|
|
UserName: profile.UserName,
|
|
CorpID: profile.CorpID,
|
|
}, nil
|
|
}
|