grpc 1.66.0 → 1.67.0.pre1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (547) hide show
  1. checksums.yaml +4 -4
  2. data/Makefile +19 -10
  3. data/include/grpc/credentials.h +1 -1
  4. data/include/grpc/event_engine/README.md +1 -1
  5. data/include/grpc/event_engine/internal/slice_cast.h +1 -1
  6. data/include/grpc/event_engine/slice.h +0 -1
  7. data/include/grpc/event_engine/slice_buffer.h +0 -1
  8. data/include/grpc/grpc_crl_provider.h +1 -1
  9. data/include/grpc/impl/channel_arg_names.h +1 -1
  10. data/include/grpc/support/log.h +34 -32
  11. data/include/grpc/support/sync_generic.h +2 -4
  12. data/src/core/channelz/channelz.cc +0 -1
  13. data/src/core/channelz/channelz_registry.cc +0 -1
  14. data/src/core/client_channel/client_channel.cc +10 -7
  15. data/src/core/client_channel/client_channel.h +1 -1
  16. data/src/core/client_channel/client_channel_filter.cc +21 -18
  17. data/src/core/client_channel/client_channel_filter.h +1 -1
  18. data/src/core/client_channel/client_channel_internal.h +0 -2
  19. data/src/core/client_channel/config_selector.h +0 -1
  20. data/src/core/client_channel/dynamic_filters.cc +0 -2
  21. data/src/core/client_channel/local_subchannel_pool.cc +0 -2
  22. data/src/core/client_channel/retry_filter.h +0 -1
  23. data/src/core/client_channel/retry_filter_legacy_call_data.cc +175 -257
  24. data/src/core/client_channel/subchannel.cc +21 -27
  25. data/src/core/client_channel/subchannel_stream_client.cc +1 -1
  26. data/src/core/ext/filters/backend_metrics/backend_metric_filter.cc +8 -9
  27. data/src/core/ext/filters/channel_idle/legacy_channel_idle_filter.cc +0 -1
  28. data/src/core/ext/filters/fault_injection/fault_injection_filter.cc +3 -4
  29. data/src/core/ext/filters/gcp_authentication/gcp_authentication_filter.cc +167 -0
  30. data/src/core/ext/filters/gcp_authentication/gcp_authentication_filter.h +82 -0
  31. data/src/core/ext/filters/gcp_authentication/gcp_authentication_service_config_parser.cc +81 -0
  32. data/src/core/ext/filters/gcp_authentication/gcp_authentication_service_config_parser.h +87 -0
  33. data/src/core/ext/filters/http/message_compress/compression_filter.cc +7 -9
  34. data/src/core/ext/filters/http/server/http_server_filter.cc +2 -4
  35. data/src/core/ext/filters/message_size/message_size_filter.cc +6 -7
  36. data/src/core/ext/filters/stateful_session/stateful_session_filter.cc +0 -2
  37. data/src/core/ext/transport/chttp2/alpn/alpn.cc +0 -1
  38. data/src/core/ext/transport/chttp2/server/chttp2_server.cc +6 -8
  39. data/src/core/ext/transport/chttp2/transport/bin_encoder.cc +0 -1
  40. data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +288 -265
  41. data/src/core/ext/transport/chttp2/transport/flow_control.cc +3 -4
  42. data/src/core/ext/transport/chttp2/transport/flow_control.h +0 -1
  43. data/src/core/ext/transport/chttp2/transport/frame.cc +0 -1
  44. data/src/core/ext/transport/chttp2/transport/frame_data.cc +0 -1
  45. data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +0 -1
  46. data/src/core/ext/transport/chttp2/transport/frame_ping.cc +6 -6
  47. data/src/core/ext/transport/chttp2/transport/frame_rst_stream.cc +3 -4
  48. data/src/core/ext/transport/chttp2/transport/frame_settings.cc +5 -6
  49. data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +0 -1
  50. data/src/core/ext/transport/chttp2/transport/hpack_encoder.cc +2 -3
  51. data/src/core/ext/transport/chttp2/transport/hpack_encoder_table.cc +0 -1
  52. data/src/core/ext/transport/chttp2/transport/hpack_parse_result.h +0 -1
  53. data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +3 -3
  54. data/src/core/ext/transport/chttp2/transport/hpack_parser_table.cc +37 -5
  55. data/src/core/ext/transport/chttp2/transport/hpack_parser_table.h +27 -6
  56. data/src/core/ext/transport/chttp2/transport/internal.h +2 -3
  57. data/src/core/ext/transport/chttp2/transport/parsing.cc +21 -32
  58. data/src/core/ext/transport/chttp2/transport/ping_callbacks.cc +0 -1
  59. data/src/core/ext/transport/chttp2/transport/stream_lists.cc +6 -8
  60. data/src/core/ext/transport/chttp2/transport/varint.h +0 -1
  61. data/src/core/ext/transport/chttp2/transport/write_size_policy.cc +0 -1
  62. data/src/core/ext/transport/chttp2/transport/writing.cc +22 -22
  63. data/src/core/ext/upb-gen/envoy/extensions/filters/http/gcp_authn/v3/gcp_authn.upb.h +431 -0
  64. data/src/core/ext/upb-gen/envoy/extensions/filters/http/gcp_authn/v3/gcp_authn.upb_minitable.c +129 -0
  65. data/src/core/ext/upb-gen/envoy/extensions/filters/http/gcp_authn/v3/gcp_authn.upb_minitable.h +33 -0
  66. data/src/core/ext/upb-gen/google/api/expr/v1alpha1/checked.upb.h +16 -0
  67. data/src/core/ext/upb-gen/google/api/expr/v1alpha1/checked.upb_minitable.c +13 -2
  68. data/src/core/ext/upb-gen/google/api/expr/v1alpha1/syntax.upb.h +397 -22
  69. data/src/core/ext/upb-gen/google/api/expr/v1alpha1/syntax.upb_minitable.c +94 -20
  70. data/src/core/ext/upb-gen/google/api/expr/v1alpha1/syntax.upb_minitable.h +2 -0
  71. data/src/core/ext/upbdefs-gen/envoy/extensions/filters/http/gcp_authn/v3/gcp_authn.upbdefs.c +86 -0
  72. data/src/core/ext/upbdefs-gen/envoy/extensions/filters/http/gcp_authn/v3/gcp_authn.upbdefs.h +47 -0
  73. data/src/core/ext/upbdefs-gen/google/api/expr/v1alpha1/checked.upbdefs.c +108 -107
  74. data/src/core/ext/upbdefs-gen/google/api/expr/v1alpha1/syntax.upbdefs.c +101 -78
  75. data/src/core/ext/upbdefs-gen/google/api/expr/v1alpha1/syntax.upbdefs.h +10 -0
  76. data/src/core/handshaker/handshaker.cc +21 -29
  77. data/src/core/handshaker/security/secure_endpoint.cc +3 -3
  78. data/src/core/handshaker/security/security_handshaker.cc +60 -72
  79. data/src/core/handshaker/tcp_connect/tcp_connect_handshaker.cc +0 -1
  80. data/src/core/lib/backoff/backoff.cc +7 -10
  81. data/src/core/lib/backoff/backoff.h +4 -6
  82. data/src/core/lib/channel/channel_stack.cc +0 -1
  83. data/src/core/lib/channel/channel_stack.h +0 -1
  84. data/src/core/lib/channel/channel_stack_builder_impl.cc +0 -1
  85. data/src/core/lib/channel/connected_channel.cc +0 -1
  86. data/src/core/lib/channel/promise_based_filter.cc +146 -194
  87. data/src/core/lib/channel/promise_based_filter.h +1 -1
  88. data/src/core/lib/compression/compression_internal.cc +0 -1
  89. data/src/core/lib/config/config_vars.cc +11 -1
  90. data/src/core/lib/config/config_vars.h +8 -0
  91. data/src/core/lib/config/core_configuration.cc +0 -1
  92. data/src/core/lib/config/core_configuration.h +0 -1
  93. data/src/core/lib/debug/event_log.cc +0 -1
  94. data/src/core/lib/debug/trace_flags.cc +4 -18
  95. data/src/core/lib/debug/trace_flags.h +2 -5
  96. data/src/core/lib/debug/trace_impl.h +6 -0
  97. data/src/core/lib/event_engine/ares_resolver.cc +89 -56
  98. data/src/core/lib/event_engine/ares_resolver.h +0 -9
  99. data/src/core/lib/event_engine/cf_engine/cfstream_endpoint.cc +14 -1
  100. data/src/core/lib/event_engine/cf_engine/cftype_unique_ref.h +1 -1
  101. data/src/core/lib/event_engine/forkable.cc +0 -1
  102. data/src/core/lib/event_engine/forkable.h +0 -1
  103. data/src/core/lib/event_engine/posix_engine/ev_epoll1_linux.cc +1 -1
  104. data/src/core/lib/event_engine/posix_engine/ev_epoll1_linux.h +4 -4
  105. data/src/core/lib/event_engine/posix_engine/ev_poll_posix.cc +0 -1
  106. data/src/core/lib/event_engine/posix_engine/lockfree_event.cc +0 -1
  107. data/src/core/lib/event_engine/posix_engine/posix_endpoint.cc +9 -1
  108. data/src/core/lib/event_engine/posix_engine/posix_endpoint.h +0 -1
  109. data/src/core/lib/event_engine/posix_engine/posix_engine_listener.h +2 -2
  110. data/src/core/lib/event_engine/posix_engine/tcp_socket_utils.h +1 -2
  111. data/src/core/lib/event_engine/posix_engine/timer_manager.cc +4 -9
  112. data/src/core/lib/event_engine/posix_engine/traced_buffer_list.cc +0 -1
  113. data/src/core/lib/event_engine/resolved_address.cc +0 -1
  114. data/src/core/lib/event_engine/slice.cc +0 -1
  115. data/src/core/lib/event_engine/thread_pool/thread_count.cc +0 -1
  116. data/src/core/lib/event_engine/thread_pool/work_stealing_thread_pool.cc +3 -5
  117. data/src/core/lib/event_engine/windows/grpc_polled_fd_windows.cc +121 -93
  118. data/src/core/lib/experiments/config.cc +12 -10
  119. data/src/core/lib/experiments/experiments.cc +45 -66
  120. data/src/core/lib/experiments/experiments.h +22 -27
  121. data/src/core/lib/gprpp/chunked_vector.h +0 -1
  122. data/src/core/lib/gprpp/down_cast.h +0 -1
  123. data/src/core/lib/gprpp/host_port.cc +0 -1
  124. data/src/core/lib/gprpp/load_file.cc +0 -1
  125. data/src/core/lib/gprpp/mpscq.h +0 -1
  126. data/src/core/lib/gprpp/single_set_ptr.h +0 -1
  127. data/src/core/lib/gprpp/status_helper.cc +0 -1
  128. data/src/core/lib/gprpp/sync.h +0 -1
  129. data/src/core/lib/gprpp/table.h +28 -0
  130. data/src/core/lib/gprpp/thd.h +0 -1
  131. data/src/core/lib/gprpp/time.h +0 -1
  132. data/src/core/lib/gprpp/time_util.cc +0 -1
  133. data/src/core/lib/gprpp/windows/directory_reader.cc +0 -2
  134. data/src/core/lib/gprpp/windows/thd.cc +0 -1
  135. data/src/core/lib/gprpp/work_serializer.cc +23 -34
  136. data/src/core/lib/iomgr/buffer_list.cc +0 -1
  137. data/src/core/lib/iomgr/call_combiner.h +6 -8
  138. data/src/core/lib/iomgr/cfstream_handle.cc +6 -8
  139. data/src/core/lib/iomgr/closure.h +5 -8
  140. data/src/core/lib/iomgr/combiner.cc +6 -8
  141. data/src/core/lib/iomgr/endpoint_cfstream.cc +17 -22
  142. data/src/core/lib/iomgr/endpoint_pair_posix.cc +0 -1
  143. data/src/core/lib/iomgr/error.h +0 -1
  144. data/src/core/lib/iomgr/ev_apple.cc +13 -18
  145. data/src/core/lib/iomgr/ev_epoll1_linux.cc +47 -85
  146. data/src/core/lib/iomgr/ev_poll_posix.cc +17 -24
  147. data/src/core/lib/iomgr/ev_posix.cc +55 -44
  148. data/src/core/lib/iomgr/ev_posix.h +0 -5
  149. data/src/core/lib/iomgr/event_engine_shims/closure.cc +7 -9
  150. data/src/core/lib/iomgr/event_engine_shims/endpoint.cc +3 -4
  151. data/src/core/lib/iomgr/exec_ctx.cc +6 -9
  152. data/src/core/lib/iomgr/exec_ctx.h +26 -16
  153. data/src/core/lib/iomgr/executor.cc +43 -33
  154. data/src/core/lib/iomgr/fork_windows.cc +0 -1
  155. data/src/core/lib/iomgr/internal_errqueue.cc +0 -1
  156. data/src/core/lib/iomgr/iocp_windows.cc +0 -1
  157. data/src/core/lib/iomgr/iomgr_windows.cc +0 -2
  158. data/src/core/lib/iomgr/lockfree_event.cc +7 -11
  159. data/src/core/lib/iomgr/polling_entity.cc +10 -3
  160. data/src/core/lib/iomgr/pollset_windows.cc +0 -2
  161. data/src/core/lib/iomgr/resolve_address.cc +0 -1
  162. data/src/core/lib/iomgr/resolve_address_posix.cc +0 -1
  163. data/src/core/lib/iomgr/resolve_address_windows.cc +0 -1
  164. data/src/core/lib/iomgr/sockaddr_utils_posix.cc +0 -1
  165. data/src/core/lib/iomgr/socket_mutator.cc +0 -1
  166. data/src/core/lib/iomgr/socket_utils_linux.cc +0 -2
  167. data/src/core/lib/iomgr/socket_utils_posix.cc +0 -1
  168. data/src/core/lib/iomgr/socket_utils_windows.cc +0 -2
  169. data/src/core/lib/iomgr/tcp_client_cfstream.cc +7 -12
  170. data/src/core/lib/iomgr/tcp_client_posix.cc +8 -12
  171. data/src/core/lib/iomgr/tcp_client_windows.cc +0 -1
  172. data/src/core/lib/iomgr/tcp_posix.cc +32 -68
  173. data/src/core/lib/iomgr/tcp_server_posix.cc +7 -11
  174. data/src/core/lib/iomgr/tcp_windows.cc +4 -12
  175. data/src/core/lib/iomgr/timer_generic.cc +46 -65
  176. data/src/core/lib/iomgr/timer_manager.cc +4 -5
  177. data/src/core/lib/iomgr/unix_sockets_posix.cc +0 -1
  178. data/src/core/lib/iomgr/unix_sockets_posix_noop.cc +0 -2
  179. data/src/core/lib/iomgr/vsock.cc +0 -1
  180. data/src/core/lib/iomgr/wakeup_fd_eventfd.cc +0 -2
  181. data/src/core/lib/promise/activity.h +0 -1
  182. data/src/core/lib/promise/context.h +0 -1
  183. data/src/core/lib/promise/detail/join_state.h +44 -44
  184. data/src/core/lib/promise/detail/seq_state.h +1101 -1356
  185. data/src/core/lib/promise/for_each.h +8 -15
  186. data/src/core/lib/promise/interceptor_list.h +17 -27
  187. data/src/core/lib/promise/latch.h +16 -24
  188. data/src/core/lib/promise/map.h +1 -1
  189. data/src/core/lib/promise/party.cc +238 -114
  190. data/src/core/lib/promise/party.h +105 -308
  191. data/src/core/lib/promise/pipe.h +3 -4
  192. data/src/core/lib/promise/poll.h +0 -1
  193. data/src/core/lib/promise/status_flag.h +0 -1
  194. data/src/core/lib/resource_quota/connection_quota.cc +0 -1
  195. data/src/core/lib/resource_quota/memory_quota.cc +11 -19
  196. data/src/core/lib/resource_quota/memory_quota.h +2 -4
  197. data/src/core/lib/resource_quota/periodic_update.cc +2 -3
  198. data/src/core/lib/resource_quota/thread_quota.cc +0 -1
  199. data/src/core/lib/security/authorization/audit_logging.cc +0 -1
  200. data/src/core/lib/security/authorization/grpc_authorization_engine.cc +0 -1
  201. data/src/core/lib/security/authorization/grpc_server_authz_filter.cc +14 -19
  202. data/src/core/lib/security/authorization/stdout_logger.cc +0 -1
  203. data/src/core/lib/security/credentials/alts/check_gcp_environment.cc +0 -1
  204. data/src/core/lib/security/credentials/alts/check_gcp_environment_windows.cc +0 -1
  205. data/src/core/lib/security/credentials/call_creds_util.cc +0 -1
  206. data/src/core/lib/security/credentials/composite/composite_credentials.cc +0 -1
  207. data/src/core/lib/security/credentials/composite/composite_credentials.h +2 -0
  208. data/src/core/lib/security/credentials/credentials.h +1 -2
  209. data/src/core/lib/security/credentials/external/aws_external_account_credentials.cc +322 -324
  210. data/src/core/lib/security/credentials/external/aws_external_account_credentials.h +53 -42
  211. data/src/core/lib/security/credentials/external/external_account_credentials.cc +391 -353
  212. data/src/core/lib/security/credentials/external/external_account_credentials.h +121 -51
  213. data/src/core/lib/security/credentials/external/file_external_account_credentials.cc +83 -44
  214. data/src/core/lib/security/credentials/external/file_external_account_credentials.h +27 -7
  215. data/src/core/lib/security/credentials/external/url_external_account_credentials.cc +91 -116
  216. data/src/core/lib/security/credentials/external/url_external_account_credentials.h +14 -17
  217. data/src/core/lib/security/credentials/fake/fake_credentials.h +2 -0
  218. data/src/core/lib/security/credentials/gcp_service_account_identity/gcp_service_account_identity_credentials.cc +196 -0
  219. data/src/core/lib/security/credentials/gcp_service_account_identity/gcp_service_account_identity_credentials.h +90 -0
  220. data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +27 -41
  221. data/src/core/lib/security/credentials/iam/iam_credentials.cc +0 -1
  222. data/src/core/lib/security/credentials/iam/iam_credentials.h +2 -0
  223. data/src/core/lib/security/credentials/jwt/jwt_credentials.h +2 -0
  224. data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +163 -259
  225. data/src/core/lib/security/credentials/oauth2/oauth2_credentials.h +34 -56
  226. data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +12 -16
  227. data/src/core/lib/security/credentials/plugin/plugin_credentials.h +2 -0
  228. data/src/core/lib/security/credentials/ssl/ssl_credentials.h +0 -1
  229. data/src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.cc +0 -1
  230. data/src/core/lib/security/credentials/tls/grpc_tls_certificate_provider.h +0 -1
  231. data/src/core/lib/security/credentials/tls/grpc_tls_certificate_verifier.cc +0 -1
  232. data/src/core/lib/security/credentials/tls/grpc_tls_certificate_verifier.h +0 -1
  233. data/src/core/lib/security/credentials/token_fetcher/token_fetcher_credentials.cc +298 -0
  234. data/src/core/lib/security/credentials/token_fetcher/token_fetcher_credentials.h +176 -0
  235. data/src/core/lib/security/credentials/xds/xds_credentials.cc +0 -1
  236. data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +0 -1
  237. data/src/core/lib/security/security_connector/insecure/insecure_security_connector.cc +0 -1
  238. data/src/core/lib/security/security_connector/load_system_roots_windows.cc +0 -1
  239. data/src/core/lib/security/transport/server_auth_filter.cc +4 -6
  240. data/src/core/lib/slice/percent_encoding.cc +0 -1
  241. data/src/core/lib/slice/slice.cc +0 -1
  242. data/src/core/lib/slice/slice.h +0 -1
  243. data/src/core/lib/slice/slice_buffer.cc +0 -1
  244. data/src/core/lib/slice/slice_internal.h +0 -1
  245. data/src/core/lib/slice/slice_refcount.h +6 -8
  246. data/src/core/lib/surface/byte_buffer_reader.cc +0 -1
  247. data/src/core/lib/surface/call.cc +3 -5
  248. data/src/core/lib/surface/call_utils.h +0 -1
  249. data/src/core/lib/surface/channel.cc +0 -1
  250. data/src/core/lib/surface/channel_create.cc +0 -1
  251. data/src/core/lib/surface/channel_init.h +0 -1
  252. data/src/core/lib/surface/client_call.cc +0 -1
  253. data/src/core/lib/surface/client_call.h +0 -1
  254. data/src/core/lib/surface/completion_queue.cc +28 -4
  255. data/src/core/lib/surface/completion_queue_factory.cc +0 -1
  256. data/src/core/lib/surface/filter_stack_call.cc +9 -9
  257. data/src/core/lib/surface/filter_stack_call.h +0 -1
  258. data/src/core/lib/surface/lame_client.cc +0 -1
  259. data/src/core/lib/surface/server_call.cc +0 -1
  260. data/src/core/lib/surface/server_call.h +0 -1
  261. data/src/core/lib/surface/validate_metadata.h +0 -1
  262. data/src/core/lib/surface/version.cc +2 -2
  263. data/src/core/lib/transport/bdp_estimator.cc +9 -12
  264. data/src/core/lib/transport/bdp_estimator.h +6 -8
  265. data/src/core/lib/transport/call_arena_allocator.cc +2 -16
  266. data/src/core/lib/transport/call_arena_allocator.h +20 -5
  267. data/src/core/lib/transport/call_filters.cc +6 -9
  268. data/src/core/lib/transport/call_spine.h +24 -13
  269. data/src/core/lib/transport/connectivity_state.cc +34 -42
  270. data/src/core/lib/transport/metadata_batch.h +41 -1
  271. data/src/core/lib/transport/timeout_encoding.cc +0 -1
  272. data/src/core/lib/transport/transport.h +6 -8
  273. data/src/core/lib/transport/transport_op_string.cc +0 -1
  274. data/src/core/lib/uri/uri_parser.cc +0 -1
  275. data/src/core/load_balancing/grpclb/grpclb.cc +55 -71
  276. data/src/core/load_balancing/health_check_client.cc +31 -42
  277. data/src/core/load_balancing/oob_backend_metric.cc +2 -4
  278. data/src/core/load_balancing/outlier_detection/outlier_detection.cc +99 -129
  279. data/src/core/load_balancing/pick_first/pick_first.cc +168 -228
  280. data/src/core/load_balancing/priority/priority.cc +77 -106
  281. data/src/core/load_balancing/ring_hash/ring_hash.cc +32 -46
  282. data/src/core/load_balancing/rls/rls.cc +142 -187
  283. data/src/core/load_balancing/round_robin/round_robin.cc +36 -55
  284. data/src/core/load_balancing/weighted_round_robin/static_stride_scheduler.cc +0 -1
  285. data/src/core/load_balancing/weighted_round_robin/weighted_round_robin.cc +85 -110
  286. data/src/core/load_balancing/weighted_target/weighted_target.cc +52 -75
  287. data/src/core/load_balancing/xds/cds.cc +26 -43
  288. data/src/core/load_balancing/xds/xds_cluster_impl.cc +57 -54
  289. data/src/core/load_balancing/xds/xds_cluster_manager.cc +36 -50
  290. data/src/core/load_balancing/xds/xds_override_host.cc +95 -131
  291. data/src/core/load_balancing/xds/xds_wrr_locality.cc +15 -23
  292. data/src/core/plugin_registry/grpc_plugin_registry_extra.cc +3 -0
  293. data/src/core/resolver/binder/binder_resolver.cc +0 -2
  294. data/src/core/resolver/dns/c_ares/dns_resolver_ares.cc +62 -44
  295. data/src/core/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +0 -2
  296. data/src/core/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +110 -89
  297. data/src/core/resolver/dns/c_ares/grpc_ares_wrapper.cc +132 -96
  298. data/src/core/resolver/dns/c_ares/grpc_ares_wrapper.h +0 -7
  299. data/src/core/resolver/dns/dns_resolver_plugin.cc +0 -1
  300. data/src/core/resolver/dns/event_engine/event_engine_client_channel_resolver.cc +40 -39
  301. data/src/core/resolver/dns/native/dns_resolver.cc +8 -14
  302. data/src/core/resolver/endpoint_addresses.cc +0 -1
  303. data/src/core/resolver/fake/fake_resolver.cc +0 -1
  304. data/src/core/resolver/polling_resolver.cc +6 -15
  305. data/src/core/resolver/polling_resolver.h +1 -1
  306. data/src/core/resolver/xds/xds_config.cc +96 -0
  307. data/src/core/resolver/xds/xds_config.h +109 -0
  308. data/src/core/resolver/xds/xds_dependency_manager.cc +59 -154
  309. data/src/core/resolver/xds/xds_dependency_manager.h +1 -69
  310. data/src/core/resolver/xds/xds_resolver.cc +51 -55
  311. data/src/core/server/server.cc +2 -2
  312. data/src/core/server/server_config_selector_filter.cc +0 -1
  313. data/src/core/server/xds_server_config_fetcher.cc +4 -6
  314. data/src/core/service_config/service_config_call_data.h +2 -3
  315. data/src/core/service_config/service_config_channel_arg_filter.cc +0 -1
  316. data/src/core/service_config/service_config_impl.h +0 -1
  317. data/src/core/telemetry/call_tracer.cc +0 -1
  318. data/src/core/telemetry/metrics.h +0 -1
  319. data/src/core/telemetry/stats_data.cc +67 -0
  320. data/src/core/telemetry/stats_data.h +48 -0
  321. data/src/core/tsi/alts/handshaker/alts_shared_resource.cc +0 -1
  322. data/src/core/tsi/alts/handshaker/transport_security_common_api.h +0 -1
  323. data/src/core/tsi/alts/zero_copy_frame_protector/alts_iovec_record_protocol.cc +0 -1
  324. data/src/core/tsi/fake_transport_security.cc +6 -5
  325. data/src/core/tsi/ssl/session_cache/ssl_session_cache.cc +0 -1
  326. data/src/core/util/alloc.cc +0 -1
  327. data/src/core/util/gcp_metadata_query.cc +0 -1
  328. data/src/core/util/http_client/httpcli.cc +12 -15
  329. data/src/core/util/http_client/httpcli.h +16 -11
  330. data/src/core/util/http_client/parser.cc +3 -4
  331. data/src/core/util/json/json_reader.cc +0 -1
  332. data/src/core/util/latent_see.cc +29 -9
  333. data/src/core/util/latent_see.h +122 -27
  334. data/src/core/util/log.cc +36 -55
  335. data/src/core/util/lru_cache.h +104 -0
  336. data/src/core/util/msys/tmpfile.cc +0 -1
  337. data/src/core/util/posix/sync.cc +0 -1
  338. data/src/core/util/posix/time.cc +0 -1
  339. data/src/core/util/ring_buffer.h +123 -0
  340. data/src/core/util/spinlock.h +1 -2
  341. data/src/core/util/string.cc +7 -7
  342. data/src/core/util/sync.cc +0 -1
  343. data/src/core/util/sync_abseil.cc +0 -1
  344. data/src/core/util/time.cc +0 -1
  345. data/src/core/util/unique_ptr_with_bitset.h +86 -0
  346. data/src/core/util/useful.h +0 -24
  347. data/src/core/util/windows/cpu.cc +0 -1
  348. data/src/core/util/windows/sync.cc +0 -1
  349. data/src/core/util/windows/time.cc +0 -1
  350. data/src/core/util/windows/tmpfile.cc +0 -1
  351. data/src/core/xds/grpc/xds_bootstrap_grpc.cc +0 -32
  352. data/src/core/xds/grpc/xds_bootstrap_grpc.h +0 -5
  353. data/src/core/xds/grpc/xds_certificate_provider.cc +0 -1
  354. data/src/core/xds/grpc/xds_client_grpc.cc +11 -16
  355. data/src/core/xds/grpc/xds_cluster.cc +2 -8
  356. data/src/core/xds/grpc/xds_cluster.h +4 -4
  357. data/src/core/xds/grpc/xds_cluster_parser.cc +58 -96
  358. data/src/core/xds/grpc/xds_cluster_specifier_plugin.cc +0 -1
  359. data/src/core/xds/grpc/xds_common_types_parser.cc +4 -4
  360. data/src/core/xds/grpc/xds_common_types_parser.h +17 -0
  361. data/src/core/xds/grpc/xds_endpoint_parser.cc +14 -14
  362. data/src/core/xds/grpc/xds_http_fault_filter.cc +15 -6
  363. data/src/core/xds/grpc/xds_http_fault_filter.h +5 -1
  364. data/src/core/xds/grpc/xds_http_filter.h +11 -1
  365. data/src/core/xds/grpc/xds_http_filter_registry.cc +7 -1
  366. data/src/core/xds/grpc/xds_http_filter_registry.h +8 -1
  367. data/src/core/xds/grpc/xds_http_gcp_authn_filter.cc +142 -0
  368. data/src/core/xds/grpc/xds_http_gcp_authn_filter.h +61 -0
  369. data/src/core/xds/grpc/xds_http_rbac_filter.cc +14 -6
  370. data/src/core/xds/grpc/xds_http_rbac_filter.h +5 -1
  371. data/src/core/xds/grpc/xds_http_stateful_session_filter.cc +9 -1
  372. data/src/core/xds/grpc/xds_http_stateful_session_filter.h +5 -1
  373. data/src/core/xds/grpc/xds_lb_policy_registry.cc +14 -16
  374. data/src/core/xds/grpc/xds_listener_parser.cc +10 -11
  375. data/src/core/xds/grpc/xds_metadata.cc +62 -0
  376. data/src/core/xds/grpc/xds_metadata.h +127 -0
  377. data/src/core/xds/grpc/xds_metadata_parser.cc +143 -0
  378. data/src/core/xds/grpc/xds_metadata_parser.h +36 -0
  379. data/src/core/xds/grpc/xds_route_config_parser.cc +12 -17
  380. data/src/core/xds/grpc/xds_routing.cc +57 -22
  381. data/src/core/xds/grpc/xds_routing.h +10 -2
  382. data/src/core/xds/grpc/xds_transport_grpc.cc +0 -1
  383. data/src/core/xds/xds_client/xds_client.cc +124 -165
  384. data/src/core/xds/xds_client/xds_client_stats.cc +20 -27
  385. data/src/ruby/ext/grpc/rb_call.c +1 -1
  386. data/src/ruby/ext/grpc/rb_call_credentials.c +34 -27
  387. data/src/ruby/ext/grpc/rb_channel.c +22 -16
  388. data/src/ruby/ext/grpc/rb_event_thread.c +3 -2
  389. data/src/ruby/ext/grpc/rb_grpc.c +9 -8
  390. data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +6 -10
  391. data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +9 -15
  392. data/src/ruby/ext/grpc/rb_server.c +10 -8
  393. data/src/ruby/lib/grpc/generic/active_call.rb +8 -5
  394. data/src/ruby/lib/grpc/version.rb +1 -1
  395. data/src/ruby/spec/call_spec.rb +53 -40
  396. data/src/ruby/spec/channel_spec.rb +4 -2
  397. data/src/ruby/spec/client_server_spec.rb +148 -507
  398. data/src/ruby/spec/generic/active_call_spec.rb +64 -86
  399. data/src/ruby/spec/support/services.rb +3 -0
  400. data/third_party/boringssl-with-bazel/src/crypto/{fipsmodule/rand/fork_detect.h → bcm_support.h} +51 -6
  401. data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/internal.h +43 -0
  402. data/third_party/boringssl-with-bazel/src/crypto/cpu_intel.c +72 -23
  403. data/third_party/boringssl-with-bazel/src/crypto/crypto.c +1 -1
  404. data/third_party/boringssl-with-bazel/src/crypto/ecdsa_extra/ecdsa_asn1.c +160 -14
  405. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/internal.h +2 -0
  406. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm.c +79 -78
  407. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bcm_interface.h +89 -0
  408. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{div.c → div.c.inc} +146 -179
  409. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{random.c → random.c.inc} +6 -8
  410. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{sqrt.c → sqrt.c.inc} +1 -1
  411. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/{e_aes.c → e_aes.c.inc} +9 -8
  412. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{ec_key.c → ec_key.c.inc} +11 -7
  413. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{p256-nistz.c → p256-nistz.c.inc} +104 -12
  414. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-nistz.h +65 -8
  415. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/{ecdsa.c → ecdsa.c.inc} +52 -107
  416. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdsa/internal.h +28 -11
  417. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/internal.h +1 -80
  418. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/{rand.c → rand.c.inc} +26 -40
  419. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/{padding.c → padding.c.inc} +2 -5
  420. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/{rsa_impl.c → rsa_impl.c.inc} +1 -1
  421. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/{self_check.c → self_check.c.inc} +9 -35
  422. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/service_indicator/internal.h +2 -2
  423. data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/service_indicator/{service_indicator.c → service_indicator.c.inc} +2 -2
  424. data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +293 -2
  425. data/third_party/boringssl-with-bazel/src/crypto/internal.h +69 -14
  426. data/third_party/boringssl-with-bazel/src/crypto/mem.c +7 -3
  427. data/third_party/boringssl-with-bazel/src/crypto/mldsa/internal.h +73 -0
  428. data/third_party/boringssl-with-bazel/src/crypto/mldsa/mldsa.c +1687 -0
  429. data/third_party/boringssl-with-bazel/src/crypto/mlkem/internal.h +90 -0
  430. data/third_party/boringssl-with-bazel/src/crypto/mlkem/mlkem.cc +1097 -0
  431. data/third_party/boringssl-with-bazel/src/crypto/obj/obj_dat.h +4 -1
  432. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_lib.c +4 -5
  433. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pk8.c +2 -3
  434. data/third_party/boringssl-with-bazel/src/crypto/pem/pem_pkey.c +1 -1
  435. data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +1 -0
  436. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/deterministic.c +9 -1
  437. data/third_party/boringssl-with-bazel/src/crypto/{fipsmodule/rand → rand_extra}/fork_detect.c +26 -28
  438. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/getentropy.c +9 -1
  439. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/ios.c +9 -1
  440. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/passive.c +19 -3
  441. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/rand_extra.c +26 -23
  442. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/sysrand_internal.h +37 -0
  443. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/trusty.c +9 -1
  444. data/third_party/boringssl-with-bazel/src/crypto/{fipsmodule/rand → rand_extra}/urandom.c +19 -19
  445. data/third_party/boringssl-with-bazel/src/crypto/rand_extra/windows.c +8 -1
  446. data/third_party/boringssl-with-bazel/src/crypto/rsa_extra/internal.h +2 -0
  447. data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +14 -1
  448. data/third_party/boringssl-with-bazel/src/include/openssl/bn.h +14 -9
  449. data/third_party/boringssl-with-bazel/src/include/openssl/experimental/dilithium.h +13 -15
  450. data/third_party/boringssl-with-bazel/src/include/openssl/hpke.h +8 -6
  451. data/third_party/boringssl-with-bazel/src/include/openssl/mldsa.h +136 -0
  452. data/third_party/boringssl-with-bazel/src/include/openssl/mlkem.h +246 -0
  453. data/third_party/boringssl-with-bazel/src/include/openssl/nid.h +3 -0
  454. data/third_party/boringssl-with-bazel/src/include/openssl/pem.h +3 -4
  455. data/third_party/boringssl-with-bazel/src/include/openssl/service_indicator.h +2 -2
  456. data/third_party/boringssl-with-bazel/src/include/openssl/span.h +22 -0
  457. data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +35 -5
  458. data/third_party/boringssl-with-bazel/src/ssl/d1_both.cc +5 -6
  459. data/third_party/boringssl-with-bazel/src/ssl/d1_lib.cc +6 -0
  460. data/third_party/boringssl-with-bazel/src/ssl/d1_pkt.cc +6 -1
  461. data/third_party/boringssl-with-bazel/src/ssl/dtls_method.cc +13 -1
  462. data/third_party/boringssl-with-bazel/src/ssl/dtls_record.cc +289 -55
  463. data/third_party/boringssl-with-bazel/src/ssl/extensions.cc +2 -0
  464. data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +69 -38
  465. data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +14 -3
  466. data/third_party/boringssl-with-bazel/src/ssl/internal.h +107 -14
  467. data/third_party/boringssl-with-bazel/src/ssl/s3_both.cc +44 -16
  468. data/third_party/boringssl-with-bazel/src/ssl/s3_pkt.cc +21 -1
  469. data/third_party/boringssl-with-bazel/src/ssl/ssl_aead_ctx.cc +86 -1
  470. data/third_party/boringssl-with-bazel/src/ssl/ssl_buffer.cc +7 -4
  471. data/third_party/boringssl-with-bazel/src/ssl/ssl_key_share.cc +97 -3
  472. data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +31 -2
  473. data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +6 -0
  474. data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +18 -4
  475. data/third_party/boringssl-with-bazel/src/ssl/tls13_enc.cc +96 -34
  476. data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +15 -5
  477. data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +3 -23
  478. metadata +113 -87
  479. data/src/core/ext/transport/chttp2/transport/max_concurrent_streams_policy.cc +0 -45
  480. data/src/core/ext/transport/chttp2/transport/max_concurrent_streams_policy.h +0 -67
  481. data/src/core/util/android/log.cc +0 -48
  482. data/src/core/util/linux/log.cc +0 -69
  483. data/src/core/util/posix/log.cc +0 -69
  484. data/src/core/util/windows/log.cc +0 -73
  485. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/{aes.c → aes.c.inc} +0 -0
  486. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/{aes_nohw.c → aes_nohw.c.inc} +0 -0
  487. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/{key_wrap.c → key_wrap.c.inc} +0 -0
  488. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/{mode_wrappers.c → mode_wrappers.c.inc} +0 -0
  489. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{add.c → add.c.inc} +0 -0
  490. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/asm/{x86_64-gcc.c → x86_64-gcc.c.inc} +0 -0
  491. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{bn.c → bn.c.inc} +0 -0
  492. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{bytes.c → bytes.c.inc} +0 -0
  493. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{cmp.c → cmp.c.inc} +0 -0
  494. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{ctx.c → ctx.c.inc} +0 -0
  495. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{div_extra.c → div_extra.c.inc} +0 -0
  496. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{exponentiation.c → exponentiation.c.inc} +0 -0
  497. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{gcd.c → gcd.c.inc} +0 -0
  498. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{gcd_extra.c → gcd_extra.c.inc} +0 -0
  499. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{generic.c → generic.c.inc} +0 -0
  500. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{jacobi.c → jacobi.c.inc} +0 -0
  501. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{montgomery.c → montgomery.c.inc} +0 -0
  502. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{montgomery_inv.c → montgomery_inv.c.inc} +0 -0
  503. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{mul.c → mul.c.inc} +0 -0
  504. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{prime.c → prime.c.inc} +0 -0
  505. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{rsaz_exp.c → rsaz_exp.c.inc} +0 -0
  506. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/{shift.c → shift.c.inc} +0 -0
  507. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/{aead.c → aead.c.inc} +0 -0
  508. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/{cipher.c → cipher.c.inc} +0 -0
  509. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cipher/{e_aesccm.c → e_aesccm.c.inc} +0 -0
  510. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/cmac/{cmac.c → cmac.c.inc} +0 -0
  511. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/{check.c → check.c.inc} +0 -0
  512. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/dh/{dh.c → dh.c.inc} +0 -0
  513. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/{digest.c → digest.c.inc} +0 -0
  514. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digest/{digests.c → digests.c.inc} +0 -0
  515. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/digestsign/{digestsign.c → digestsign.c.inc} +0 -0
  516. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{ec.c → ec.c.inc} +0 -0
  517. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{ec_montgomery.c → ec_montgomery.c.inc} +0 -0
  518. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{felem.c → felem.c.inc} +0 -0
  519. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{oct.c → oct.c.inc} +0 -0
  520. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{p224-64.c → p224-64.c.inc} +0 -0
  521. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{p256.c → p256.c.inc} +0 -0
  522. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{scalar.c → scalar.c.inc} +0 -0
  523. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{simple.c → simple.c.inc} +0 -0
  524. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{simple_mul.c → simple_mul.c.inc} +0 -0
  525. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{util.c → util.c.inc} +0 -0
  526. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/{wnaf.c → wnaf.c.inc} +0 -0
  527. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ecdh/{ecdh.c → ecdh.c.inc} +0 -0
  528. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/hkdf/{hkdf.c → hkdf.c.inc} +0 -0
  529. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/hmac/{hmac.c → hmac.c.inc} +0 -0
  530. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md4/{md4.c → md4.c.inc} +0 -0
  531. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/md5/{md5.c → md5.c.inc} +0 -0
  532. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/{cbc.c → cbc.c.inc} +0 -0
  533. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/{cfb.c → cfb.c.inc} +0 -0
  534. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/{ctr.c → ctr.c.inc} +0 -0
  535. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/{gcm.c → gcm.c.inc} +0 -0
  536. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/{gcm_nohw.c → gcm_nohw.c.inc} +0 -0
  537. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/{ofb.c → ofb.c.inc} +0 -0
  538. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/modes/{polyval.c → polyval.c.inc} +0 -0
  539. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rand/{ctrdrbg.c → ctrdrbg.c.inc} +0 -0
  540. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/{blinding.c → blinding.c.inc} +0 -0
  541. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/rsa/{rsa.c → rsa.c.inc} +0 -0
  542. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/{fips.c → fips.c.inc} +0 -0
  543. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/{sha1.c → sha1.c.inc} +0 -0
  544. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/{sha256.c → sha256.c.inc} +0 -0
  545. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/sha/{sha512.c → sha512.c.inc} +0 -0
  546. /data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/{kdf.c → kdf.c.inc} +0 -0
  547. /data/third_party/boringssl-with-bazel/src/crypto/{fipsmodule/rand → rand_extra}/getrandom_fillin.h +0 -0
@@ -20,11 +20,13 @@
20
20
  #include <stdint.h>
21
21
 
22
22
  #include <functional>
23
+ #include <memory>
23
24
  #include <string>
24
25
  #include <vector>
25
26
 
26
27
  #include "absl/strings/string_view.h"
27
28
 
29
+ #include <grpc/event_engine/event_engine.h>
28
30
  #include <grpc/support/port_platform.h>
29
31
 
30
32
  #include "src/core/lib/gprpp/orphanable.h"
@@ -34,6 +36,7 @@
34
36
  #include "src/core/lib/iomgr/error.h"
35
37
  #include "src/core/lib/iomgr/polling_entity.h"
36
38
  #include "src/core/lib/security/credentials/oauth2/oauth2_credentials.h"
39
+ #include "src/core/lib/security/credentials/token_fetcher/token_fetcher_credentials.h"
37
40
  #include "src/core/util/http_client/httpcli.h"
38
41
  #include "src/core/util/http_client/parser.h"
39
42
  #include "src/core/util/json/json.h"
@@ -44,8 +47,7 @@ namespace grpc_core {
44
47
  // exchanging external account credentials for GCP access token to authorize
45
48
  // requests to GCP APIs. The specific logic of retrieving subject token is
46
49
  // implemented in subclasses.
47
- class ExternalAccountCredentials
48
- : public grpc_oauth2_token_fetcher_credentials {
50
+ class ExternalAccountCredentials : public TokenFetcherCredentials {
49
51
  public:
50
52
  struct ServiceAccountImpersonation {
51
53
  int32_t token_lifetime_seconds;
@@ -66,72 +68,140 @@ class ExternalAccountCredentials
66
68
  std::string workforce_pool_user_project;
67
69
  };
68
70
 
69
- static RefCountedPtr<ExternalAccountCredentials> Create(
71
+ static absl::StatusOr<RefCountedPtr<ExternalAccountCredentials>> Create(
70
72
  const Json& json, std::vector<std::string> scopes,
71
- grpc_error_handle* error);
73
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine>
74
+ event_engine = nullptr);
72
75
 
73
- ExternalAccountCredentials(Options options, std::vector<std::string> scopes);
76
+ ExternalAccountCredentials(
77
+ Options options, std::vector<std::string> scopes,
78
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine>
79
+ event_engine = nullptr);
74
80
  ~ExternalAccountCredentials() override;
75
- std::string debug_string() override;
76
81
 
77
82
  protected:
78
- // This is a helper struct to pass information between multiple callback based
79
- // asynchronous calls.
80
- struct HTTPRequestContext {
81
- HTTPRequestContext(grpc_polling_entity* pollent, Timestamp deadline)
82
- : pollent(pollent), deadline(deadline) {}
83
- ~HTTPRequestContext() { grpc_http_response_destroy(&response); }
84
-
85
- // Contextual parameters passed from
86
- // grpc_oauth2_token_fetcher_credentials::fetch_oauth2().
87
- grpc_polling_entity* pollent;
88
- Timestamp deadline;
89
-
90
- // Reusable token fetch http response and closure.
91
- grpc_closure closure;
92
- grpc_http_response response;
83
+ // A base class for a cancellable fetch operation.
84
+ class FetchBody : public InternallyRefCounted<FetchBody> {
85
+ public:
86
+ explicit FetchBody(
87
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done)
88
+ : on_done_(std::move(on_done)) {}
89
+
90
+ void Orphan() override {
91
+ Shutdown();
92
+ Unref();
93
+ }
94
+
95
+ protected:
96
+ // The subclass must call this when the fetch is complete, even if
97
+ // cancelled.
98
+ void Finish(absl::StatusOr<std::string> result) {
99
+ std::exchange(on_done_, nullptr)(std::move(result));
100
+ }
101
+
102
+ private:
103
+ virtual void Shutdown() = 0;
104
+
105
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done_;
93
106
  };
94
107
 
95
- // Subclasses of base external account credentials need to override this
96
- // method to implement the specific subject token retrieval logic.
97
- // Once the subject token is ready, subclasses need to invoke
98
- // the callback function (cb) to pass the subject token (or error)
99
- // back.
100
- virtual void RetrieveSubjectToken(
101
- HTTPRequestContext* ctx, const Options& options,
102
- std::function<void(std::string, grpc_error_handle)> cb) = 0;
108
+ // A simple no-op implementation, used for async execution of the
109
+ // on_done callback.
110
+ class NoOpFetchBody final : public FetchBody {
111
+ public:
112
+ NoOpFetchBody(grpc_event_engine::experimental::EventEngine& event_engine,
113
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done,
114
+ absl::StatusOr<std::string> result);
103
115
 
104
- virtual absl::string_view CredentialSourceType();
116
+ private:
117
+ void Shutdown() override {}
118
+ };
105
119
 
106
- std::string MetricsHeaderValue();
120
+ // An implementation for HTTP requests.
121
+ class HttpFetchBody final : public FetchBody {
122
+ public:
123
+ HttpFetchBody(
124
+ absl::FunctionRef<OrphanablePtr<HttpRequest>(grpc_http_response*,
125
+ grpc_closure*)>
126
+ start_http_request,
127
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done);
107
128
 
108
- private:
109
- // This method implements the common token fetch logic and it will be called
110
- // when grpc_oauth2_token_fetcher_credentials request a new access token.
111
- void fetch_oauth2(grpc_credentials_metadata_request* req,
112
- grpc_polling_entity* pollent, grpc_iomgr_cb_func cb,
113
- Timestamp deadline) override;
129
+ ~HttpFetchBody() override { grpc_http_response_destroy(&response_); }
130
+
131
+ private:
132
+ void Shutdown() override { http_request_.reset(); }
133
+
134
+ static void OnHttpResponse(void* arg, grpc_error_handle error);
135
+
136
+ OrphanablePtr<HttpRequest> http_request_;
137
+ grpc_http_response response_;
138
+ grpc_closure on_http_response_;
139
+ };
114
140
 
115
- void OnRetrieveSubjectTokenInternal(absl::string_view subject_token,
116
- grpc_error_handle error);
141
+ // An implementation of TokenFetcherCredentials::FetchRequest that
142
+ // executes a series of FetchBody operations to ultimately get to a
143
+ // token result.
144
+ class ExternalFetchRequest : public FetchRequest {
145
+ public:
146
+ ExternalFetchRequest(
147
+ ExternalAccountCredentials* creds, Timestamp deadline,
148
+ absl::AnyInvocable<
149
+ void(absl::StatusOr<RefCountedPtr<TokenFetcherCredentials::Token>>)>
150
+ on_done);
151
+
152
+ void Orphan() override;
153
+
154
+ protected:
155
+ Timestamp deadline() const { return deadline_; }
156
+ grpc_polling_entity* pollent() const { return creds_->pollent(); }
157
+ const Options& options() const { return creds_->options_; }
158
+
159
+ private:
160
+ void ExchangeToken(absl::StatusOr<std::string> subject_token);
161
+ void MaybeImpersonateServiceAccount(
162
+ absl::StatusOr<std::string> response_body);
163
+ void OnImpersonateServiceAccount(absl::StatusOr<std::string> response_body);
164
+
165
+ void FinishTokenFetch(absl::StatusOr<std::string> response_body);
166
+
167
+ // If status is non-OK or we've been shut down, calls FinishTokenFetch()
168
+ // and returns true.
169
+ bool MaybeFailLocked(absl::Status status)
170
+ ABSL_EXCLUSIVE_LOCKS_REQUIRED(&mu_);
171
+
172
+ ExternalAccountCredentials* creds_;
173
+ Timestamp deadline_;
174
+ absl::AnyInvocable<void(
175
+ absl::StatusOr<RefCountedPtr<TokenFetcherCredentials::Token>>)>
176
+ on_done_;
177
+
178
+ Mutex mu_;
179
+ OrphanablePtr<FetchBody> fetch_body_ ABSL_GUARDED_BY(&mu_);
180
+ };
117
181
 
118
- void ExchangeToken(absl::string_view subject_token);
119
- static void OnExchangeToken(void* arg, grpc_error_handle error);
120
- void OnExchangeTokenInternal(grpc_error_handle error);
182
+ virtual absl::string_view CredentialSourceType();
121
183
 
122
- void ImpersenateServiceAccount();
123
- static void OnImpersenateServiceAccount(void* arg, grpc_error_handle error);
124
- void OnImpersenateServiceAccountInternal(grpc_error_handle error);
184
+ std::string MetricsHeaderValue();
125
185
 
126
- void FinishTokenFetch(grpc_error_handle error);
186
+ absl::string_view audience() const { return options_.audience; }
187
+
188
+ private:
189
+ OrphanablePtr<FetchRequest> FetchToken(
190
+ Timestamp deadline,
191
+ absl::AnyInvocable<void(absl::StatusOr<RefCountedPtr<Token>>)> on_done)
192
+ final;
193
+
194
+ // Subclasses of ExternalAccountCredentials need to override this
195
+ // method to implement the specific-subject token retrieval logic.
196
+ // The caller will save the resulting FetchBody object, which will
197
+ // be orphaned upon cancellation. The FetchBody object must
198
+ // eventually invoke on_done.
199
+ virtual OrphanablePtr<FetchBody> RetrieveSubjectToken(
200
+ Timestamp deadline,
201
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done) = 0;
127
202
 
128
203
  Options options_;
129
204
  std::vector<std::string> scopes_;
130
-
131
- OrphanablePtr<HttpRequest> http_request_;
132
- HTTPRequestContext* ctx_ = nullptr;
133
- grpc_credentials_metadata_request* metadata_req_ = nullptr;
134
- grpc_iomgr_cb_func response_cb_ = nullptr;
135
205
  };
136
206
 
137
207
  } // namespace grpc_core
@@ -34,22 +34,78 @@
34
34
 
35
35
  namespace grpc_core {
36
36
 
37
- RefCountedPtr<FileExternalAccountCredentials>
38
- FileExternalAccountCredentials::Create(Options options,
39
- std::vector<std::string> scopes,
40
- grpc_error_handle* error) {
41
- auto creds = MakeRefCounted<FileExternalAccountCredentials>(
42
- std::move(options), std::move(scopes), error);
43
- if (error->ok()) {
44
- return creds;
45
- } else {
46
- return nullptr;
37
+ //
38
+ // FileExternalAccountCredentials::FileFetchBody
39
+ //
40
+
41
+ FileExternalAccountCredentials::FileFetchBody::FileFetchBody(
42
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done,
43
+ FileExternalAccountCredentials* creds)
44
+ : FetchBody(std::move(on_done)), creds_(creds) {
45
+ // Start work asynchronously, since we can't invoke the callback
46
+ // synchronously without causing a deadlock.
47
+ creds->event_engine().Run([self = RefAsSubclass<FileFetchBody>()]() mutable {
48
+ ApplicationCallbackExecCtx application_exec_ctx;
49
+ ExecCtx exec_ctx;
50
+ self->ReadFile();
51
+ self.reset();
52
+ });
53
+ }
54
+
55
+ void FileExternalAccountCredentials::FileFetchBody::ReadFile() {
56
+ // To retrieve the subject token, we read the file every time we make a
57
+ // request because it may have changed since the last request.
58
+ auto content_slice = LoadFile(creds_->file_, /*add_null_terminator=*/false);
59
+ if (!content_slice.ok()) {
60
+ Finish(content_slice.status());
61
+ return;
47
62
  }
63
+ absl::string_view content = content_slice->as_string_view();
64
+ if (creds_->format_type_ == "json") {
65
+ auto content_json = JsonParse(content);
66
+ if (!content_json.ok() || content_json->type() != Json::Type::kObject) {
67
+ Finish(GRPC_ERROR_CREATE(
68
+ "The content of the file is not a valid json object."));
69
+ return;
70
+ }
71
+ auto content_it =
72
+ content_json->object().find(creds_->format_subject_token_field_name_);
73
+ if (content_it == content_json->object().end()) {
74
+ Finish(GRPC_ERROR_CREATE("Subject token field not present."));
75
+ return;
76
+ }
77
+ if (content_it->second.type() != Json::Type::kString) {
78
+ Finish(GRPC_ERROR_CREATE("Subject token field must be a string."));
79
+ return;
80
+ }
81
+ Finish(content_it->second.string());
82
+ return;
83
+ }
84
+ Finish(std::string(content));
85
+ }
86
+
87
+ //
88
+ // FileExternalAccountCredentials
89
+ //
90
+
91
+ absl::StatusOr<RefCountedPtr<FileExternalAccountCredentials>>
92
+ FileExternalAccountCredentials::Create(
93
+ Options options, std::vector<std::string> scopes,
94
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine>
95
+ event_engine) {
96
+ grpc_error_handle error;
97
+ auto creds = MakeRefCounted<FileExternalAccountCredentials>(
98
+ std::move(options), std::move(scopes), std::move(event_engine), &error);
99
+ if (!error.ok()) return error;
100
+ return creds;
48
101
  }
49
102
 
50
103
  FileExternalAccountCredentials::FileExternalAccountCredentials(
51
- Options options, std::vector<std::string> scopes, grpc_error_handle* error)
52
- : ExternalAccountCredentials(options, std::move(scopes)) {
104
+ Options options, std::vector<std::string> scopes,
105
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine> event_engine,
106
+ grpc_error_handle* error)
107
+ : ExternalAccountCredentials(options, std::move(scopes),
108
+ std::move(event_engine)) {
53
109
  auto it = options.credential_source.object().find("file");
54
110
  if (it == options.credential_source.object().end()) {
55
111
  *error = GRPC_ERROR_CREATE("file field not present.");
@@ -96,38 +152,21 @@ FileExternalAccountCredentials::FileExternalAccountCredentials(
96
152
  }
97
153
  }
98
154
 
99
- void FileExternalAccountCredentials::RetrieveSubjectToken(
100
- HTTPRequestContext* /*ctx*/, const Options& /*options*/,
101
- std::function<void(std::string, grpc_error_handle)> cb) {
102
- // To retrieve the subject token, we read the file every time we make a
103
- // request because it may have changed since the last request.
104
- auto content_slice = LoadFile(file_, /*add_null_terminator=*/false);
105
- if (!content_slice.ok()) {
106
- cb("", content_slice.status());
107
- return;
108
- }
109
- absl::string_view content = content_slice->as_string_view();
110
- if (format_type_ == "json") {
111
- auto content_json = JsonParse(content);
112
- if (!content_json.ok() || content_json->type() != Json::Type::kObject) {
113
- cb("", GRPC_ERROR_CREATE(
114
- "The content of the file is not a valid json object."));
115
- return;
116
- }
117
- auto content_it =
118
- content_json->object().find(format_subject_token_field_name_);
119
- if (content_it == content_json->object().end()) {
120
- cb("", GRPC_ERROR_CREATE("Subject token field not present."));
121
- return;
122
- }
123
- if (content_it->second.type() != Json::Type::kString) {
124
- cb("", GRPC_ERROR_CREATE("Subject token field must be a string."));
125
- return;
126
- }
127
- cb(content_it->second.string(), absl::OkStatus());
128
- return;
129
- }
130
- cb(std::string(content), absl::OkStatus());
155
+ std::string FileExternalAccountCredentials::debug_string() {
156
+ return absl::StrCat("FileExternalAccountCredentials{Audience:", audience(),
157
+ ")");
158
+ }
159
+
160
+ UniqueTypeName FileExternalAccountCredentials::type() const {
161
+ static UniqueTypeName::Factory kFactory("FileExternalAccountCredentials");
162
+ return kFactory.Create();
163
+ }
164
+
165
+ OrphanablePtr<ExternalAccountCredentials::FetchBody>
166
+ FileExternalAccountCredentials::RetrieveSubjectToken(
167
+ Timestamp /*deadline*/,
168
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done) {
169
+ return MakeOrphanable<FileFetchBody>(std::move(on_done), this);
131
170
  }
132
171
 
133
172
  absl::string_view FileExternalAccountCredentials::CredentialSourceType() {
@@ -33,18 +33,38 @@ namespace grpc_core {
33
33
 
34
34
  class FileExternalAccountCredentials final : public ExternalAccountCredentials {
35
35
  public:
36
- static RefCountedPtr<FileExternalAccountCredentials> Create(
36
+ static absl::StatusOr<RefCountedPtr<FileExternalAccountCredentials>> Create(
37
37
  Options options, std::vector<std::string> scopes,
38
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine>
39
+ event_engine = nullptr);
40
+
41
+ FileExternalAccountCredentials(
42
+ Options options, std::vector<std::string> scopes,
43
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine>
44
+ event_engine,
38
45
  grpc_error_handle* error);
39
46
 
40
- FileExternalAccountCredentials(Options options,
41
- std::vector<std::string> scopes,
42
- grpc_error_handle* error);
47
+ std::string debug_string() override;
48
+
49
+ UniqueTypeName type() const override;
43
50
 
44
51
  private:
45
- void RetrieveSubjectToken(
46
- HTTPRequestContext* ctx, const Options& options,
47
- std::function<void(std::string, grpc_error_handle)> cb) override;
52
+ class FileFetchBody final : public FetchBody {
53
+ public:
54
+ FileFetchBody(absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done,
55
+ FileExternalAccountCredentials* creds);
56
+
57
+ private:
58
+ void Shutdown() override {}
59
+
60
+ void ReadFile();
61
+
62
+ FileExternalAccountCredentials* creds_;
63
+ };
64
+
65
+ OrphanablePtr<FetchBody> RetrieveSubjectToken(
66
+ Timestamp deadline,
67
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done) override;
48
68
 
49
69
  absl::string_view CredentialSourceType() override;
50
70
 
@@ -33,7 +33,6 @@
33
33
  #include <grpc/grpc_security.h>
34
34
  #include <grpc/support/alloc.h>
35
35
  #include <grpc/support/json.h>
36
- #include <grpc/support/log.h>
37
36
  #include <grpc/support/port_platform.h>
38
37
  #include <grpc/support/string_util.h>
39
38
 
@@ -47,22 +46,24 @@
47
46
 
48
47
  namespace grpc_core {
49
48
 
50
- RefCountedPtr<UrlExternalAccountCredentials>
51
- UrlExternalAccountCredentials::Create(Options options,
52
- std::vector<std::string> scopes,
53
- grpc_error_handle* error) {
49
+ absl::StatusOr<RefCountedPtr<UrlExternalAccountCredentials>>
50
+ UrlExternalAccountCredentials::Create(
51
+ Options options, std::vector<std::string> scopes,
52
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine>
53
+ event_engine) {
54
+ grpc_error_handle error;
54
55
  auto creds = MakeRefCounted<UrlExternalAccountCredentials>(
55
- std::move(options), std::move(scopes), error);
56
- if (error->ok()) {
57
- return creds;
58
- } else {
59
- return nullptr;
60
- }
56
+ std::move(options), std::move(scopes), std::move(event_engine), &error);
57
+ if (!error.ok()) return error;
58
+ return creds;
61
59
  }
62
60
 
63
61
  UrlExternalAccountCredentials::UrlExternalAccountCredentials(
64
- Options options, std::vector<std::string> scopes, grpc_error_handle* error)
65
- : ExternalAccountCredentials(options, std::move(scopes)) {
62
+ Options options, std::vector<std::string> scopes,
63
+ std::shared_ptr<grpc_event_engine::experimental::EventEngine> event_engine,
64
+ grpc_error_handle* error)
65
+ : ExternalAccountCredentials(options, std::move(scopes),
66
+ std::move(event_engine)) {
66
67
  auto it = options.credential_source.object().find("url");
67
68
  if (it == options.credential_source.object().end()) {
68
69
  *error = GRPC_ERROR_CREATE("url field not present.");
@@ -131,114 +132,88 @@ UrlExternalAccountCredentials::UrlExternalAccountCredentials(
131
132
  }
132
133
  }
133
134
 
134
- void UrlExternalAccountCredentials::RetrieveSubjectToken(
135
- HTTPRequestContext* ctx, const Options& /*options*/,
136
- std::function<void(std::string, grpc_error_handle)> cb) {
137
- if (ctx == nullptr) {
138
- FinishRetrieveSubjectToken(
139
- "",
140
- GRPC_ERROR_CREATE(
141
- "Missing HTTPRequestContext to start subject token retrieval."));
142
- return;
143
- }
144
- auto url_for_request =
145
- URI::Create(url_.scheme(), url_.authority(), url_full_path_,
146
- {} /* query params */, "" /* fragment */);
147
- if (!url_for_request.ok()) {
148
- FinishRetrieveSubjectToken(
149
- "", absl_status_to_grpc_error(url_for_request.status()));
150
- return;
151
- }
152
- ctx_ = ctx;
153
- cb_ = cb;
154
- grpc_http_request request;
155
- memset(&request, 0, sizeof(grpc_http_request));
156
- request.path = gpr_strdup(url_full_path_.c_str());
157
- grpc_http_header* headers = nullptr;
158
- request.hdr_count = headers_.size();
159
- headers = static_cast<grpc_http_header*>(
160
- gpr_malloc(sizeof(grpc_http_header) * request.hdr_count));
161
- int i = 0;
162
- for (auto const& header : headers_) {
163
- headers[i].key = gpr_strdup(header.first.c_str());
164
- headers[i].value = gpr_strdup(header.second.c_str());
165
- ++i;
166
- }
167
- request.hdrs = headers;
168
- grpc_http_response_destroy(&ctx_->response);
169
- ctx_->response = {};
170
- GRPC_CLOSURE_INIT(&ctx_->closure, OnRetrieveSubjectToken, this, nullptr);
171
- CHECK(http_request_ == nullptr);
172
- RefCountedPtr<grpc_channel_credentials> http_request_creds;
173
- if (url_.scheme() == "http") {
174
- http_request_creds = RefCountedPtr<grpc_channel_credentials>(
175
- grpc_insecure_credentials_create());
176
- } else {
177
- http_request_creds = CreateHttpRequestSSLCredentials();
178
- }
179
- http_request_ =
180
- HttpRequest::Get(std::move(*url_for_request), nullptr /* channel args */,
181
- ctx_->pollent, &request, ctx_->deadline, &ctx_->closure,
182
- &ctx_->response, std::move(http_request_creds));
183
- http_request_->Start();
184
- grpc_http_request_destroy(&request);
135
+ std::string UrlExternalAccountCredentials::debug_string() {
136
+ return absl::StrCat("UrlExternalAccountCredentials{Audience:", audience(),
137
+ ")");
185
138
  }
186
139
 
187
- void UrlExternalAccountCredentials::OnRetrieveSubjectToken(
188
- void* arg, grpc_error_handle error) {
189
- UrlExternalAccountCredentials* self =
190
- static_cast<UrlExternalAccountCredentials*>(arg);
191
- self->OnRetrieveSubjectTokenInternal(error);
140
+ UniqueTypeName UrlExternalAccountCredentials::type() const {
141
+ static UniqueTypeName::Factory kFactory("UrlExternalAccountCredentials");
142
+ return kFactory.Create();
192
143
  }
193
144
 
194
- void UrlExternalAccountCredentials::OnRetrieveSubjectTokenInternal(
195
- grpc_error_handle error) {
196
- http_request_.reset();
197
- if (!error.ok()) {
198
- FinishRetrieveSubjectToken("", error);
199
- return;
200
- }
201
- absl::string_view response_body(ctx_->response.body,
202
- ctx_->response.body_length);
203
- if (format_type_ == "json") {
204
- auto response_json = JsonParse(response_body);
205
- if (!response_json.ok() || response_json->type() != Json::Type::kObject) {
206
- FinishRetrieveSubjectToken(
207
- "", GRPC_ERROR_CREATE(
208
- "The format of response is not a valid json object."));
209
- return;
210
- }
211
- auto response_it =
212
- response_json->object().find(format_subject_token_field_name_);
213
- if (response_it == response_json->object().end()) {
214
- FinishRetrieveSubjectToken(
215
- "", GRPC_ERROR_CREATE("Subject token field not present."));
216
- return;
217
- }
218
- if (response_it->second.type() != Json::Type::kString) {
219
- FinishRetrieveSubjectToken(
220
- "", GRPC_ERROR_CREATE("Subject token field must be a string."));
221
- return;
222
- }
223
- FinishRetrieveSubjectToken(response_it->second.string(), error);
224
- return;
225
- }
226
- FinishRetrieveSubjectToken(std::string(response_body), absl::OkStatus());
227
- }
228
-
229
- void UrlExternalAccountCredentials::FinishRetrieveSubjectToken(
230
- std::string subject_token, grpc_error_handle error) {
231
- // Reset context
232
- ctx_ = nullptr;
233
- // Move object state into local variables.
234
- auto cb = cb_;
235
- cb_ = nullptr;
236
- // Invoke the callback.
237
- if (!error.ok()) {
238
- cb("", error);
239
- } else {
240
- cb(subject_token, absl::OkStatus());
145
+ OrphanablePtr<ExternalAccountCredentials::FetchBody>
146
+ UrlExternalAccountCredentials::RetrieveSubjectToken(
147
+ Timestamp deadline,
148
+ absl::AnyInvocable<void(absl::StatusOr<std::string>)> on_done) {
149
+ auto url_for_request =
150
+ URI::Create(url_.scheme(), url_.authority(), url_full_path_,
151
+ {} /* query params */, "" /* fragment */);
152
+ if (!url_for_request.ok()) {
153
+ return MakeOrphanable<NoOpFetchBody>(
154
+ event_engine(), std::move(on_done),
155
+ absl_status_to_grpc_error(url_for_request.status()));
241
156
  }
157
+ return MakeOrphanable<HttpFetchBody>(
158
+ [&](grpc_http_response* response, grpc_closure* on_http_response) {
159
+ grpc_http_request request;
160
+ memset(&request, 0, sizeof(grpc_http_request));
161
+ request.path = gpr_strdup(url_full_path_.c_str());
162
+ grpc_http_header* headers = nullptr;
163
+ request.hdr_count = headers_.size();
164
+ headers = static_cast<grpc_http_header*>(
165
+ gpr_malloc(sizeof(grpc_http_header) * request.hdr_count));
166
+ int i = 0;
167
+ for (auto const& header : headers_) {
168
+ headers[i].key = gpr_strdup(header.first.c_str());
169
+ headers[i].value = gpr_strdup(header.second.c_str());
170
+ ++i;
171
+ }
172
+ request.hdrs = headers;
173
+ RefCountedPtr<grpc_channel_credentials> http_request_creds;
174
+ if (url_.scheme() == "http") {
175
+ http_request_creds = RefCountedPtr<grpc_channel_credentials>(
176
+ grpc_insecure_credentials_create());
177
+ } else {
178
+ http_request_creds = CreateHttpRequestSSLCredentials();
179
+ }
180
+ auto http_request =
181
+ HttpRequest::Get(std::move(*url_for_request), /*args=*/nullptr,
182
+ pollent(), &request, deadline, on_http_response,
183
+ response, std::move(http_request_creds));
184
+ http_request->Start();
185
+ grpc_http_request_destroy(&request);
186
+ return http_request;
187
+ },
188
+ [this, on_done = std::move(on_done)](
189
+ absl::StatusOr<std::string> response_body) mutable {
190
+ if (!response_body.ok()) {
191
+ on_done(std::move(response_body));
192
+ return;
193
+ }
194
+ if (format_type_ == "json") {
195
+ auto response_json = JsonParse(*response_body);
196
+ if (!response_json.ok() ||
197
+ response_json->type() != Json::Type::kObject) {
198
+ on_done(GRPC_ERROR_CREATE(
199
+ "The format of response is not a valid json object."));
200
+ return;
201
+ }
202
+ auto response_it =
203
+ response_json->object().find(format_subject_token_field_name_);
204
+ if (response_it == response_json->object().end()) {
205
+ on_done(GRPC_ERROR_CREATE("Subject token field not present."));
206
+ return;
207
+ }
208
+ if (response_it->second.type() != Json::Type::kString) {
209
+ on_done(GRPC_ERROR_CREATE("Subject token field must be a string."));
210
+ return;
211
+ }
212
+ on_done(response_it->second.string());
213
+ return;
214
+ }
215
+ on_done(std::move(response_body));
216
+ });
242
217
  }
243
218
 
244
219
  absl::string_view UrlExternalAccountCredentials::CredentialSourceType() {