From 3fe8bb6cacb5d69b11d052df33b44225edbcaa8c Mon Sep 17 00:00:00 2001
From: Jeroen van der Heijden <jeroen@cesbit.com>
Date: Tue, 26 Nov 2024 11:04:37 +0100
Subject: [PATCH] token lock

---
 lib/utils.py   | 88 ++++++++++++++++++++++++++------------------------
 lib/version.py |  2 +-
 2 files changed, 47 insertions(+), 43 deletions(-)

diff --git a/lib/utils.py b/lib/utils.py
index 9193dcc..1eb3837 100644
--- a/lib/utils.py
+++ b/lib/utils.py
@@ -1,7 +1,9 @@
+import asyncio
 import aiohttp
 import time
 import logging
 from typing import Optional
+from collections import defaultdict
 from libprobe.asset import Asset
 
 DEF_API_VERSION = 'v2'  # v1 or v2
@@ -13,53 +15,55 @@
 
 # Token registration; Prevent new tokens for each request
 _tokens: dict[int, tuple[float, str]] = dict()
-
+_locks: dict[int, asyncio.Lock] = defaultdict(asyncio.Lock)
 
 async def get_token(
         asset: Asset,
         asset_config: dict,
         check_config: dict) -> str:
-
-    token_reg = _tokens.get(asset.id)
-    if token_reg is not None:
-        ts, token = token_reg
-        if ts + MAX_TOKEN_AGE > time.time():
-            return token
-
-    address = check_config.get('address')
-    if not address:
-        address = asset.name
-
-    api_version = check_config.get('version', DEF_API_VERSION)
-    secure = check_config.get('secure', DEF_SECURE)
-    port = check_config.get('port', DEF_PORT)
-
-    try:
-        username = asset_config['username']
-        password = asset_config['password']
-    except KeyError:
-        raise Exception('missing username or password in local asset config')
-
-    headers = {
-        'X-Auth-User': username,
-        'X-Auth-Key': password
-    }
-    protocol = 'https' if secure else 'http'
-    url = f'{protocol}://{address}:{port}/api/access/{api_version}'
-
-    logging.info(f'POST {url}')
-
-    async with aiohttp.ClientSession() as session:
-        async with session.post(url, headers=headers, ssl=False) as resp:
-            assert resp.status // 100 == 2, \
-                f'response status code: {resp.status}. reason: {resp.reason}.'
-            token = resp.headers.get('X-Auth-Session')
-            assert token, 'missing `X-Auth-Session` token in response'
-
-    # Resister the token with the current time-stamp
-    _tokens[asset.id] = time.time(), token
-
-    return token
+    async with _locks[asset.id]:
+        token_reg = _tokens.get(asset.id)
+        if token_reg is not None:
+            ts, token = token_reg
+            if ts + MAX_TOKEN_AGE > time.time():
+                return token
+
+        address = check_config.get('address')
+        if not address:
+            address = asset.name
+
+        api_version = check_config.get('version', DEF_API_VERSION)
+        secure = check_config.get('secure', DEF_SECURE)
+        port = check_config.get('port', DEF_PORT)
+
+        try:
+            username = asset_config['username']
+            password = asset_config['password']
+        except KeyError:
+            raise Exception(
+                'missing username or password in local asset config')
+
+        headers = {
+            'X-Auth-User': username,
+            'X-Auth-Key': password
+        }
+        protocol = 'https' if secure else 'http'
+        url = f'{protocol}://{address}:{port}/api/access/{api_version}'
+
+        logging.info(f'POST {url}')
+
+        async with aiohttp.ClientSession() as session:
+            async with session.post(url, headers=headers, ssl=False) as resp:
+                assert resp.status // 100 == 2, \
+                    f'response status code: {resp.status}. ' \
+                    f'reason: {resp.reason}.'
+                token = resp.headers.get('X-Auth-Session')
+                assert token, 'missing `X-Auth-Session` token in response'
+
+        # Resister the token with the current time-stamp
+        _tokens[asset.id] = time.time(), token
+
+        return token
 
 
 def as_int(d: dict, k: str) -> Optional[int]:
diff --git a/lib/version.py b/lib/version.py
index 551d0c1..e2aa02d 100644
--- a/lib/version.py
+++ b/lib/version.py
@@ -1,4 +1,4 @@
 # Version string. Examples:
 #  '3.0.0'
 #  '3.0.0-alpha0'
-__version__ = '3.0.1'
+__version__ = '3.0.2'