From 210467cc289e31fabef9e8eef78a07d5818d7513 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Victor=20N=C3=A4slund?= <victor@sunet.se>
Date: Wed, 16 Nov 2022 20:05:18 +0100
Subject: better object id handling

---
 src/soc_collector/main.py | 24 +++++++++++++++---------
 1 file changed, 15 insertions(+), 9 deletions(-)

(limited to 'src/soc_collector/main.py')

diff --git a/src/soc_collector/main.py b/src/soc_collector/main.py
index eb6041f..e70199b 100755
--- a/src/soc_collector/main.py
+++ b/src/soc_collector/main.py
@@ -6,10 +6,11 @@ from json.decoder import JSONDecodeError
 
 from fastapi import FastAPI, Request
 from fastapi.responses import JSONResponse
-from bson import ObjectId
+
 from .db import (
     DBClient,
     SearchInput,
+    object_id_from_key,
 )
 from .schema import valid_schema
 from .auth import authorize_client, load_api_keys
@@ -66,6 +67,11 @@ async def create(request: Request) -> JSONResponse:
     except JSONDecodeError:
         return JSONResponse(content={"status": "error", "message": "Invalid JSON"}, status_code=400)
 
+    if "_id" in json_data:
+        return JSONResponse(
+            content={"status": "error", "message": "Internal key '_id' must not exist in document"}, status_code=400
+        )
+
     if not valid_schema(json_data):
         return JSONResponse(content={"status": "error", "message": "Not our JSON schema"}, status_code=400)
 
@@ -98,11 +104,7 @@ async def replace(request: Request) -> JSONResponse:  # pylint: disable=too-many
 
     # Get the key
     if isinstance(json_data["_id"], str):
-        object_id = ObjectId(json_data["_id"])
-    elif (
-        isinstance(json_data["_id"], dict) and "$oid" in json_data["_id"] and isinstance(json_data["_id"]["$oid"], str)
-    ):
-        object_id = ObjectId(json_data["_id"]["$oid"])
+        object_id = object_id_from_key(json_data["_id"])
     else:
         return JSONResponse(content={"status": "error", "message": "Missing key '_id' with valid id"}, status_code=400)
 
@@ -138,7 +140,9 @@ async def get(request: Request, key: str) -> JSONResponse:
     # Ensure authorization
     authorize_client(request, API_KEYS)
 
-    document = await db.find_one(ObjectId(key))
+    object_id = object_id_from_key(key)
+
+    document = await db.find_one(object_id)
 
     if document is None:
         return JSONResponse(content={"status": "error", "message": "Document not found"}, status_code=404)
@@ -157,12 +161,14 @@ async def delete(request: Request, key: str) -> JSONResponse:
     # Ensure authorization
     authorize_client(request, API_KEYS)
 
-    result = await db.delete_one(ObjectId(key))
+    object_id = object_id_from_key(key)
+
+    result = await db.delete_one(object_id)
 
     if result is None:
         return JSONResponse(content={"status": "error", "message": "Document not found"}, status_code=404)
 
-    return JSONResponse(content={"status": "success", "key": str(key)})
+    return JSONResponse(content={"status": "success", "key": str(object_id)})
 
 
 @app.get("/info")
-- 
cgit v1.1