snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

continuity/container.go

@@ -0,0 +1,67 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package continuity
+
+import (
+	"time"
+
+	"github.com/gofrs/uuid"
+	"github.com/pkg/errors"
+
+	"github.com/ory/herodot"
+	"github.com/ory/x/pointerx"
+	"github.com/ory/x/sqlxx"
+
+	"github.com/ory/kratos/x"
+)
+
+type Container struct {
+	ID         uuid.UUID  `json:"id" db:"id" rw:"r"`
+	NID        uuid.UUID  `json:"-" db:"nid"`
+	Name       string     `json:"name" db:"name"`
+	IdentityID *uuid.UUID `json:"identity_id" db:"identity_id"`
+
+	// ExpiresAt defines when this container expires.
+	ExpiresAt time.Time `json:"expires_at" db:"expires_at"`
+
+	// Payload is the container's payload.
+	Payload sqlxx.NullJSONRawMessage `json:"payload" db:"payload"`
+
+	// CreatedAt is a helper struct field for gobuffalo.pop.
+	CreatedAt time.Time `json:"created_at" db:"created_at"`
+
+	// UpdatedAt is a helper struct field for gobuffalo.pop.
+	UpdatedAt time.Time `json:"updated_at" db:"updated_at"`
+}
+
+func (c *Container) UTC() *Container {
+	c.CreatedAt = c.CreatedAt.UTC()
+	c.UpdatedAt = c.UpdatedAt.UTC()
+	c.ExpiresAt = c.ExpiresAt.UTC()
+	return c
+}
+
+func (Container) TableName() string { return "continuity_containers" }
+
+func NewContainer(name string, o managerOptions) *Container {
+	return &Container{
+		ID:         uuid.Nil,
+		Name:       name,
+		IdentityID: x.PointToUUID(o.iid),
+		ExpiresAt:  time.Now().Add(o.ttl).UTC().Truncate(time.Second),
+		Payload:    sqlxx.NullJSONRawMessage(o.payload),
+	}
+}
+
+func (c *Container) Valid(identity uuid.UUID) error {
+	if c.ExpiresAt.Before(time.Now()) {
+		return errors.WithStack(herodot.ErrBadRequest().WithReasonf("You must restart the flow because the resumable session has expired."))
+	}
+
+	if identity != uuid.Nil && pointerx.Deref(c.IdentityID) != identity {
+		return errors.WithStack(herodot.ErrForbidden().WithReasonf("The flow has been blocked for security reasons because it was initiated by another person.."))
+	}
+
+	return nil
+}