60 lines
1.7 KiB
PHP
60 lines
1.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace KTXC\Service;
|
|
|
|
use KTXC\Context\IdentityContextInterface;
|
|
|
|
final class SystemFirewallStatusService
|
|
{
|
|
public const PERMISSION_MAINTENANCE_READ = 'firewall.system.maintenance.read';
|
|
public const PERMISSION_SETTINGS_MANAGE = 'firewall.system.settings.manage';
|
|
|
|
public function __construct(
|
|
private readonly FirewallStatusService $status,
|
|
private readonly IdentityContextInterface $identity,
|
|
private readonly FirewallSettingsService $settings,
|
|
) {
|
|
}
|
|
|
|
public function metrics(?string $tenantId = null, ?string $since = null): array
|
|
{
|
|
$this->requirePermission(SystemFirewallLogService::PERMISSION_READ);
|
|
return $this->status->systemMetrics($tenantId, $since);
|
|
}
|
|
|
|
public function maintenanceStatus(): array
|
|
{
|
|
$this->requirePermission(self::PERMISSION_MAINTENANCE_READ);
|
|
return $this->status->maintenanceStatus();
|
|
}
|
|
|
|
public function updateTenantConfiguration(
|
|
string $tenantId,
|
|
bool $enabled,
|
|
int $maxAuthFailures,
|
|
int $authFailureWindow,
|
|
int $autoBlockDuration,
|
|
string $reason
|
|
): ?array {
|
|
$this->requirePermission(self::PERMISSION_SETTINGS_MANAGE);
|
|
return $this->settings->update(
|
|
$tenantId,
|
|
$enabled,
|
|
$maxAuthFailures,
|
|
$authFailureWindow,
|
|
$autoBlockDuration,
|
|
$reason,
|
|
$this->identity->identifier()
|
|
);
|
|
}
|
|
|
|
private function requirePermission(string $permission): void
|
|
{
|
|
if (!$this->identity->hasPermission($permission)) {
|
|
throw new \RuntimeException("Missing required permission: {$permission}");
|
|
}
|
|
}
|
|
}
|