Add a new dynamic authentication approach

This avoids the need to create agents upfront, which could be useful when
creating many childhurd VMs or using scheduling tools to dynamically run
agents.

1 files changed, 12 insertions, 0 deletions

diff --git a/guix-build-coordinator/client-communication.scm b/guix-build-coordinator/client-communication.scm
index 550b054..664b9aa 100644
--- a/guix-build-coordinator/client-communication.scm
+++ b/guix-build-coordinator/client-communication.scm
@@ -29,6 +29,7 @@
   #:use-module (rnrs bytevectors)
   #:use-module (json)
   #:use-module (logging logger)
+  #:use-module (gcrypt random)
   #:use-module (web uri)
   #:use-module (web client)
   #:use-module (web request)
@@ -52,6 +53,7 @@
             request-failed-builds-with-blocking-count-list
             send-create-agent-request
             send-create-agent-password-request
+            send-create-dynamic-auth-token-request
             send-replace-agent-tags-request))
 
 (define (start-client-request-server secret-key-base
@@ -217,6 +219,11 @@
                     #:description (assoc-ref body "description"))))
          (render-json
           `((agent-id . ,uuid)))))
+      (('POST "dynamic-auth-tokens")
+       (let ((token (random-token)))
+         (datastore-insert-dynamic-auth-token datastore token)
+         (render-json
+          `((token . ,token)))))
       (('GET "agent" agent-id)
        (let ((agent-details (datastore-find-agent datastore agent-id)))
          (render-json
@@ -631,6 +638,11 @@
                 'POST
                 (string-append "/agent/" agent-id "/passwords")))
 
+(define (send-create-dynamic-auth-token-request coordinator-uri)
+  (send-request coordinator-uri
+                'POST
+                "/dynamic-auth-tokens"))
+
 (define (send-replace-agent-tags-request coordinator-uri
                                          agent-id
                                          tags)