satellite/entitlements: added compute access token to projects' scope

VitaliiShpital · Storj Robot · commit 7a0f087c5d3f · 2025-09-24T15:37:38.000Z
Added method to set compute access token in the projects scope. Issue: storj/compute#12 Change-Id: Ie445707c5a16c813028ba5dbc07d59a56f25702c
diff --git a/satellite/entitlements/projects.go b/satellite/entitlements/projects.go
@@ -19,6 +19,7 @@ type PlacementProductMappings map[storj.PlacementConstraint]int32
 type ProjectFeatures struct {
 	NewBucketPlacements      []storj.PlacementConstraint `json:"new_bucket_placements,omitempty"`
 	PlacementProductMappings PlacementProductMappings    `json:"placement_product_mappings,omitempty"`
+	ComputeAccessToken       []byte                      `json:"compute_access_token,omitempty"`
 }
 
 // Projects separates project-related entitlements functionality.
@@ -93,6 +94,29 @@ func (p *Projects) SetPlacementProductMappingsByPublicID(ctx context.Context, pu
 	return Error.Wrap(p.upsertNewEntitlement(ctx, ent, features))
 }
 
+// SetComputeAccessTokenByPublicID sets the compute access token for a project by its public ID.
+func (p *Projects) SetComputeAccessTokenByPublicID(ctx context.Context, publicProjectID uuid.UUID, token []byte) (err error) {
+	defer mon.Task()(&ctx)(&err)
+
+	scope := ConvertPublicIDToProjectScope(publicProjectID)
+
+	// Load current record (may not exist yet).
+	ent, err := p.getEntitlementBeforeSet(ctx, scope)
+	if err != nil {
+		return Error.Wrap(err)
+	}
+
+	var features ProjectFeatures
+	if len(ent.Features) > 0 {
+		if err = json.Unmarshal(ent.Features, &features); err != nil {
+			return Error.Wrap(err)
+		}
+	}
+	features.ComputeAccessToken = token
+
+	return Error.Wrap(p.upsertNewEntitlement(ctx, ent, features))
+}
+
 // DeleteByPublicID removes the project entitlements by its public ID.
 func (p *Projects) DeleteByPublicID(ctx context.Context, publicID uuid.UUID) (err error) {
 	defer mon.Task()(&ctx)(&err)
diff --git a/satellite/entitlements/projects_test.go b/satellite/entitlements/projects_test.go
@@ -78,6 +78,42 @@ func TestProjectEntitlements(t *testing.T) {
 		require.NoError(t, err)
 		require.ElementsMatch(t, p2, got.NewBucketPlacements)
 		require.Equal(t, m2, got.PlacementProductMappings)
+		require.Nil(t, got.ComputeAccessToken)
+
+		// Test compute access token functionality.
+		token1 := []byte("compute-token-123")
+		err = projects.SetComputeAccessTokenByPublicID(ctx, publicID, token1)
+		require.NoError(t, err)
+
+		got, err = projects.GetByPublicID(ctx, publicID)
+		require.NoError(t, err)
+		require.ElementsMatch(t, p2, got.NewBucketPlacements)
+		require.Equal(t, m2, got.PlacementProductMappings)
+		require.Equal(t, token1, got.ComputeAccessToken)
+
+		// Test setting token to empty byte slice.
+		err = projects.SetComputeAccessTokenByPublicID(ctx, publicID, []byte{})
+		require.NoError(t, err)
+
+		got, err = projects.GetByPublicID(ctx, publicID)
+		require.NoError(t, err)
+		require.Nil(t, got.ComputeAccessToken)
+
+		// Test setting token to nil.
+		token2 := []byte("new-compute-token-456")
+		err = projects.SetComputeAccessTokenByPublicID(ctx, publicID, token2)
+		require.NoError(t, err)
+
+		got, err = projects.GetByPublicID(ctx, publicID)
+		require.NoError(t, err)
+		require.Equal(t, token2, got.ComputeAccessToken)
+
+		err = projects.SetComputeAccessTokenByPublicID(ctx, publicID, nil)
+		require.NoError(t, err)
+
+		got, err = projects.GetByPublicID(ctx, publicID)
+		require.NoError(t, err)
+		require.Nil(t, got.ComputeAccessToken)
 
 		err = projects.DeleteByPublicID(ctx, publicID)
 		require.NoError(t, err)
