[Hackathon] implement kontext client authorization

js/modules/k6/experimental/kontext/kontext.go

@@ -26,7 +26,8 @@
 // ErrKontextWrongType is the error returned when the type of the value in the kontext is not the expected one.
 var ErrKontextWrongType = errors.New("wrong type")
 
 const k6ServiceURLEnvironmentVariable = "K6_KONTEXT_SERVICE_URL"
+const k6ServiceAuthEnvironmentVariable = "K6_KONTEXT_AUTH_TOKEN"
 const secureEnvironmentVariable = "K6_KONTEXT_SECURE"
 const testRunIDHeader = "X-Test-Run-ID"
 
@@ -339,7 +340,7 @@
 	return poppedValue, nil
 }
 
 func (lk *LocalKontext) Size(key string) (int64, error) {
 	var size int64
 
 	err := lk.db.handle.View(func(tx *bolt.Tx) error {
@@ -372,11 +373,11 @@
 	return size, nil
 }
 
 func (lk *LocalKontext) Incr(key string) (int64, error) {
 	return lk.incrBy(key, 1)
 }
 
 func (lk *LocalKontext) Decr(key string) (int64, error) {
 	return lk.incrBy(key, -1)
 }
 
@@ -447,8 +448,24 @@
 // Ensure that CloudKontext implements the Kontexter interface.
 var _ Kontexter = &CloudKontext{}
 
+// kontextTokenAuth implements the credentials.PerRPCCredentials interface
+// to send the authorization token to the k6-cloud-kontext server.
+type kontextTokenAuth struct {
+	Token string
+}
+
+func (t *kontextTokenAuth) GetRequestMetadata(ctx context.Context, uri ...string) (map[string]string, error) {
+	return map[string]string{
+		"authorization": "Bearer " + t.Token,
+	}, nil
+}
+
+func (t *kontextTokenAuth) RequireTransportSecurity() bool {
+	return true
+}
+
 // NewCloudKontext creates a new CloudKontext instance.
-func NewCloudKontext(vu modules.VU, serviceURL string, secure bool, testRunID string) (*CloudKontext, error) {
+func NewCloudKontext(vu modules.VU, serviceURL string, secure bool, testRunID string, authToken string) (*CloudKontext, error) {
 	// create a gRPC connection to the server
 	opts := []grpc.DialOption{}
 	if secure {
@@ -459,6 +476,10 @@
 		opts = append(opts, grpc.WithTransportCredentials(insecure.NewCredentials()))
 	}
 
+	opts = append(opts, grpc.WithPerRPCCredentials(&kontextTokenAuth{
+		Token: authToken,
+	}))
+
 	conn, err := grpc.NewClient(serviceURL, opts...)
 	if err != nil {
 		return nil, fmt.Errorf("failed to dial gRPC server: %w", err)
@@ -615,7 +636,7 @@
 	return value, nil
 }
 
 func (c CloudKontext) Size(key string) (int64, error) {
 	ctx := c.context()
 	response, err := c.client.Size(ctx, &proto.SizeRequest{Key: key})
 
@@ -630,14 +651,14 @@
 	}
 
 	return response.Count, nil
 
 }
 
 func (c CloudKontext) Incr(key string) (int64, error) {
 	return c.incrBy(key, 1)
 }
 
 func (c CloudKontext) Decr(key string) (int64, error) {
 	return c.incrBy(key, -1)
 }
 

js/modules/k6/experimental/kontext/module.go

@@ -95,13 +95,17 @@
 		common.Throw(mi.vu.Runtime(), fmt.Errorf("kontext instances can only be created in the init context"))
 	}
 
-	serviceURL, hasServiceURL := os.LookupEnv(k6ServiceURLEnvironmentVariable)
-	secure := strings.ToLower(os.Getenv(secureEnvironmentVariable)) != "false"
-
 	var kv Kontexter
 	var err error
-	if hasServiceURL {
-		kv, err = NewCloudKontext(mi.vu, serviceURL, secure, mi.rm.testRunID)
+
+	if serviceURL, hasServiceURL := os.LookupEnv(k6ServiceURLEnvironmentVariable); hasServiceURL {
+		kontextAuthToken := os.Getenv(k6ServiceAuthEnvironmentVariable)
+		if kontextAuthToken == "" {
+			common.Throw(mi.vu.Runtime(), fmt.Errorf("Kontext module is missing the kontext	authToken"))
+		}
+		secure := strings.ToLower(os.Getenv(secureEnvironmentVariable)) != "false"
+
+		kv, err = NewCloudKontext(mi.vu, serviceURL, secure, mi.rm.testRunID, kontextAuthToken)
 		if err != nil {
 			common.Throw(mi.vu.Runtime(), fmt.Errorf("failed to create new Kontext instance: %w", err))
 		}