c6d46098dd
- Add ReactivatePipeline to handle subscription reactivation, including scaling Docker services, health verification, status updates, audit logging, and broadcasting status changes. - Introduce RotateCredentialsPipeline for OAuth2 credential rotation, managing the deletion of old apps, creation of new ones, credential storage, access verification, and audit logging. - Create StepRunner to manage job step execution, including lifecycle management and progress broadcasting via SignalR. - Implement SuspendPipeline for subscription suspension, scaling down services, updating statuses, logging audits, and broadcasting changes. - Add UpdateScreenLimitPipeline to update Xibo CMS screen limits and record snapshots. - Introduce XiboFeatureManifests for hardcoded feature ACLs per role. - Add docker-compose.dev.yml for local development with PostgreSQL setup.
75 lines
2.9 KiB
C#
75 lines
2.9 KiB
C#
using OTSSignsOrchestrator.Server.Clients;
|
|
using OTSSignsOrchestrator.Server.Data.Entities;
|
|
|
|
namespace OTSSignsOrchestrator.Server.Health.Checks;
|
|
|
|
/// <summary>
|
|
/// Verifies the count of authorised displays does not exceed the customer's licensed
|
|
/// <see cref="Customer.ScreenCount"/>. Uses <see cref="XiboApiClientExtensions.GetAllPagesAsync{T}"/>
|
|
/// with <c>authorised=1</c> filter to get all authorised displays.
|
|
/// </summary>
|
|
public sealed class DisplayAuthorisedHealthCheck : IHealthCheck
|
|
{
|
|
private readonly XiboClientFactory _clientFactory;
|
|
private readonly IServiceProvider _services;
|
|
private readonly ILogger<DisplayAuthorisedHealthCheck> _logger;
|
|
|
|
public string CheckName => "DisplayAuthorised";
|
|
public bool AutoRemediate => false;
|
|
|
|
public DisplayAuthorisedHealthCheck(
|
|
XiboClientFactory clientFactory,
|
|
IServiceProvider services,
|
|
ILogger<DisplayAuthorisedHealthCheck> logger)
|
|
{
|
|
_clientFactory = clientFactory;
|
|
_services = services;
|
|
_logger = logger;
|
|
}
|
|
|
|
public async Task<HealthCheckResult> RunAsync(Instance instance, CancellationToken ct)
|
|
{
|
|
var (client, _) = await ResolveAsync(instance);
|
|
if (client is null)
|
|
return new HealthCheckResult(HealthStatus.Critical, "No OAuth app — cannot check displays");
|
|
|
|
try
|
|
{
|
|
var displays = await client.GetAllPagesAsync(
|
|
(start, length) => client.GetDisplaysAsync(start, length, authorised: 1));
|
|
|
|
var authorisedCount = displays.Count;
|
|
var licensed = instance.Customer.ScreenCount;
|
|
|
|
if (authorisedCount <= licensed)
|
|
{
|
|
return new HealthCheckResult(HealthStatus.Healthy,
|
|
$"Authorised displays: {authorisedCount}/{licensed}");
|
|
}
|
|
|
|
return new HealthCheckResult(HealthStatus.Degraded,
|
|
$"Authorised displays ({authorisedCount}) exceeds license ({licensed})",
|
|
$"Over-provisioned by {authorisedCount - licensed} display(s)");
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
return new HealthCheckResult(HealthStatus.Critical,
|
|
$"Failed to check displays: {ex.Message}");
|
|
}
|
|
}
|
|
|
|
private async Task<(IXiboApiClient? Client, string Abbrev)> ResolveAsync(Instance instance)
|
|
{
|
|
var abbrev = instance.Customer.Abbreviation;
|
|
var oauthApp = instance.OauthAppRegistries.FirstOrDefault();
|
|
if (oauthApp is null) return (null, abbrev);
|
|
|
|
var settings = _services.GetRequiredService<Core.Services.SettingsService>();
|
|
var secret = await settings.GetAsync(Core.Services.SettingsService.InstanceOAuthSecretId(abbrev));
|
|
if (string.IsNullOrEmpty(secret)) return (null, abbrev);
|
|
|
|
var client = await _clientFactory.CreateAsync(instance.XiboUrl, oauthApp.ClientId, secret);
|
|
return (client, abbrev);
|
|
}
|
|
}
|