Add missing permissions

Author: satiracode

src/main/kotlin/org/exploit/keeper/constant/Permission.kt

@@ -2,15 +2,16 @@ package org.exploit.keeper.constant
 
 object Permission {
     private const val KEY_GET_PUBLICKEY = "bitkeeper.key.%s.public"
+
     private const val KEY_SIGN = "bitkeeper.key.%s.sign"
+    private const val KEY_VERIFY = "bitkeeper.key.%s.verify"
 
     private const val SYSTEM_UNSEAL = "bitkeeper.system.unseal"
     private const val SYSTEM_SEAL = "bitkeeper.system.seal"
     private const val SYSTEM_INIT = "bitkeeper.system.init"
+    private const val SYSTEM_STATUS = "bitkeeper.system.status"
 
     private const val STORE_WRITE = "bitkeeper.storage.write"
-    private const val STORE_READ = "bitkeeper.storage.read"
-
     private const val GENERATE_KEY = "bitkeeper.dkg.generate"
 
     fun systemUnseal(): String = SYSTEM_UNSEAL
@@ -21,11 +22,13 @@ object Permission {
 
     fun storageWrite(): String = STORE_WRITE
 
-    fun storageRead(): String = STORE_READ
-
     fun generateKey() = GENERATE_KEY
 
+    fun systemStatus(): String = SYSTEM_STATUS
+
     fun keyGetPublicKey(key: String): String = KEY_GET_PUBLICKEY.format(key)
 
     fun keySign(key: String): String = KEY_SIGN.format(key)
+
+    fun keyVerify(key: String): String = KEY_VERIFY.format(key)
 }

src/main/kotlin/org/exploit/keeper/controller/core/CentralController.kt renamed to src/main/kotlin/org/exploit/keeper/controller/keeper/CentralController.kt

@@ -1,4 +1,4 @@
-package org.exploit.keeper.controller.core
+package org.exploit.keeper.controller.keeper
 
 import io.smallrye.mutiny.Uni
 import jakarta.ws.rs.GET
@@ -28,11 +28,11 @@ class CentralController(
     @GET
     @Path("/publicKey")
     fun publicKey(@QueryParam("keyId") keyId: String): Uni<PublicKeyDto> {
+        policyChecker.ensureHasPermission(ctx, Permission.keyGetPublicKey(keyId))
+
         if (!keeper.initialized())
             throw SealedException()
 
-        policyChecker.ensureHasPermission(ctx, Permission.keyGetPublicKey(keyId))
-
         return pub.getPublicKey(keyId).toUni()
     }
 }

src/main/kotlin/org/exploit/keeper/controller/keygen/KeyGenController.kt renamed to src/main/kotlin/org/exploit/keeper/controller/keeper/KeyGenController.kt

@@ -1,4 +1,4 @@
-package org.exploit.keeper.controller.keygen
+package org.exploit.keeper.controller.keeper
 
 import io.smallrye.mutiny.Uni
 import jakarta.ws.rs.POST

src/main/kotlin/org/exploit/keeper/controller/core/SignatureController.kt renamed to src/main/kotlin/org/exploit/keeper/controller/keeper/SignatureController.kt

@@ -1,4 +1,4 @@
-package org.exploit.keeper.controller.core
+package org.exploit.keeper.controller.keeper
 
 import io.quarkus.arc.All
 import io.smallrye.mutiny.Uni
@@ -36,11 +36,11 @@ class SignatureController(
     @POST
     @Path("/sign")
     fun sign(body: Sign): Uni<TSSResult> {
+        policyChecker.ensureHasPermission(ctx, Permission.keySign(body.keyId))
+
         if (!keeper.initialized() || keeper.sealed())
             throw SealedException()
 
-        policyChecker.ensureHasPermission(ctx, Permission.keySign(body.keyId))
-
         return when (body.type) {
             SessionType.GG20 -> gg20.sign(
                 sessionId = body.sessionId,
@@ -61,6 +61,8 @@ class SignatureController(
     @POST
     @Path("/sign/verify")
     fun verify(body: Verify): Uni<VerifyResult> {
+        policyChecker.ensureHasPermission(ctx, Permission.keyVerify(body.keyId))
+
         if (!keeper.initialized() || keeper.sealed())
             throw SealedException()
 

src/main/kotlin/org/exploit/keeper/controller/core/StorageController.kt renamed to src/main/kotlin/org/exploit/keeper/controller/keeper/StorageController.kt

@@ -1,4 +1,4 @@
-package org.exploit.keeper.controller.core
+package org.exploit.keeper.controller.keeper
 
 import jakarta.ws.rs.Path
 import jakarta.ws.rs.container.ContainerRequestContext

src/main/kotlin/org/exploit/keeper/controller/core/SystemController.kt renamed to src/main/kotlin/org/exploit/keeper/controller/keeper/SystemController.kt

@@ -1,4 +1,4 @@
-package org.exploit.keeper.controller.core
+package org.exploit.keeper.controller.keeper
 
 import jakarta.ws.rs.GET
 import jakarta.ws.rs.POST
@@ -28,8 +28,10 @@ class SystemController(
 
     @GET
     @Path("/status")
-    fun status(): StatusResponse =
-        keeper.status()
+    fun status(): StatusResponse {
+        policyChecker.ensureHasPermission(ctx, Permission.systemStatus())
+        return keeper.status()
+    }
 
     @PUT
     @Path("/unseal")