Naeel
e9a26f7975
Phase 1 (Critical): - #1 JWT auth (done in v0.1.16) - #2 Batch message size validation in send_message_batch.go - #10 RLock in GetQueueUrlV1 (data race fix) Phase 2 (AWS-compatible limits): - #3 QueueName validation: max 80 chars, [a-zA-Z0-9_-](.fifo)? - #4 WaitTimeSeconds clamped to 0-20 - #5 ReceiveMessageWaitTimeSeconds clamped to 0-20 - #6 DelaySeconds clamped to 0-900 - #7 VisibilityTimeout clamped to 0-43200 - #8 MaxNumberOfMessages clamped to 1-10 - #9 Message attributes limited to 10 per message - #15 BatchEntryId length validated (max 80) - #16 DeduplicationID length validated (max 128) - #17 GroupID length validated (max 128) Phase 3 (Per-tenant resource limits): - #11 Max messages per queue (120K standard, 20K FIFO) - #12 Global tenant limit (1000) - #3.5 HTTP request body size limit (1MB via MaxBytesReader) Phase 4 (Stability): - #14 Duplicates map cleanup (already in PeriodicTasks) - #13 FIFO group lock timeout (already in visibility timeout reset) - #18 Redis size guard: skip save if >50MB Skipped (Low, no real risk): - #19 {account} URL param (informational only, not used for access) - #20 ReceiptHandle format (self-validating UUID#UUID) New file: app/gosqs/validation.go — centralized AWS SQS limits and validators
47 lines
1.3 KiB
Go
47 lines
1.3 KiB
Go
// Изменено: 2026-04-09
|
|
// GetQueueUrlV1 — возвращает URL очереди тенанта по имени.
|
|
package gosqs
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"shared-sqs/app/interfaces"
|
|
"shared-sqs/app/models"
|
|
"shared-sqs/app/utils"
|
|
log "github.com/sirupsen/logrus"
|
|
)
|
|
|
|
func GetQueueUrlV1(req *http.Request) (int, interfaces.AbstractResponseBody) {
|
|
requestBody := models.NewGetQueueUrlRequest()
|
|
ok := utils.REQUEST_TRANSFORMER(requestBody, req, false)
|
|
if !ok {
|
|
log.Error("Invalid Request - GetQueueUrlV1")
|
|
return utils.CreateErrorResponseV1("InvalidParameterValue", true)
|
|
}
|
|
|
|
t := getTenantFromContext(req)
|
|
if t == nil {
|
|
return utils.CreateErrorResponseV1("InvalidClientTokenId", true)
|
|
}
|
|
|
|
queueName := requestBody.QueueName
|
|
key := tenantQueueKey(t.AccessKey, queueName)
|
|
|
|
// Fix #10: RLock перед чтением SyncQueues — иначе data race
|
|
models.SyncQueues.RLock()
|
|
queue, ok := models.SyncQueues.Queues[key]
|
|
models.SyncQueues.RUnlock()
|
|
if !ok {
|
|
log.Errorf("Get Queue URL: %s, queue does not exist for tenant %s", queueName, t.ID)
|
|
return utils.CreateErrorResponseV1("QueueNotFound", true)
|
|
}
|
|
log.Debug("Get Queue URL:", queue.Name)
|
|
|
|
respStruct := models.GetQueueUrlResponse{
|
|
Xmlns: models.BaseXmlns,
|
|
Result: models.GetQueueUrlResult{QueueUrl: queue.URL},
|
|
Metadata: models.BaseResponseMetadata,
|
|
}
|
|
return http.StatusOK, respStruct
|
|
}
|