NOISSUE - Add delete certs feature

api/http/endpoint.go

@@ -36,17 +36,32 @@ func revokeCertEndpoint(svc certs.Service) endpoint.Endpoint {
 	return func(ctx context.Context, request interface{}) (response interface{}, err error) {
 		req := request.(viewReq)
 		if err := req.validate(); err != nil {
-			return revokeCertRes{}, err
+			return revokeCertRes{revoked: false}, err
 		}
 
 		if err = svc.RevokeCert(ctx, req.id); err != nil {
-			return revokeCertRes{}, err
+			return revokeCertRes{revoked: false}, err
 		}
 
 		return revokeCertRes{revoked: true}, nil
 	}
 }
 
+func deleteCertEndpoint(svc certs.Service) endpoint.Endpoint {
+	return func(ctx context.Context, request interface{}) (response interface{}, err error) {
+		req := request.(deleteReq)
+		if err := req.validate(); err != nil {
+			return deleteCertRes{deleted: false}, err
+		}
+
+		if err = svc.RemoveCerts(ctx, req.entityID); err != nil {
+			return deleteCertRes{deleted: false}, err
+		}
+
+		return deleteCertRes{deleted: true}, nil
+	}
+}
+
 func requestCertDownloadTokenEndpoint(svc certs.Service) endpoint.Endpoint {
 	return func(ctx context.Context, request interface{}) (response interface{}, err error) {
 		req := request.(viewReq)

api/http/errors.go

@@ -32,4 +32,7 @@ var (
 
 	// ErrMissingCN indicates missing common name.
 	ErrMissingCN = errors.New("missing common name")
+
+	// ErrEmptyEntityID indicates that the entity id is empty.
+	ErrEmptyEntityID = errors.New("missing entity id")
 )

api/http/requests.go

@@ -32,6 +32,17 @@ func (req viewReq) validate() error {
 	return nil
 }
 
+type deleteReq struct {
+	entityID string
+}
+
+func (req deleteReq) validate() error {
+	if req.entityID == "" {
+		return errors.Wrap(certs.ErrMalformedEntity, ErrEmptyEntityID)
+	}
+	return nil
+}
+
 type crlReq struct {
 	certtype certs.CertType
 }

api/http/responses.go

@@ -45,10 +45,10 @@ type revokeCertRes struct {
 
 func (res revokeCertRes) Code() int {
 	if res.revoked {
-		return http.StatusOK
+		return http.StatusNoContent
 	}
 
-	return http.StatusBadRequest
+	return http.StatusUnprocessableEntity
 }
 
 func (res revokeCertRes) Headers() map[string]string {
@@ -59,6 +59,26 @@ func (res revokeCertRes) Empty() bool {
 	return true
 }
 
+type deleteCertRes struct {
+	deleted bool
+}
+
+func (res deleteCertRes) Code() int {
+	if res.deleted {
+		return http.StatusNoContent
+	}
+
+	return http.StatusUnprocessableEntity
+}
+
+func (res deleteCertRes) Headers() map[string]string {
+	return map[string]string{}
+}
+
+func (res deleteCertRes) Empty() bool {
+	return true
+}
+
 type requestCertDownloadTokenRes struct {
 	Token string `json:"token"`
 }

api/http/transport.go

@@ -64,6 +64,12 @@ func MakeHandler(svc certs.Service, logger *slog.Logger, instanceID string) http
 			EncodeResponse,
 			opts...,
 		), "revoke_cert").ServeHTTP)
+		r.Delete("/{entityID}/delete", otelhttp.NewHandler(kithttp.NewServer(
+			deleteCertEndpoint(svc),
+			decodeDelete,
+			EncodeResponse,
+			opts...,
+		), "delete_cert").ServeHTTP)
 		r.Get("/{id}/download/token", otelhttp.NewHandler(kithttp.NewServer(
 			requestCertDownloadTokenEndpoint(svc),
 			decodeView,
@@ -133,6 +139,13 @@ func decodeView(_ context.Context, r *http.Request) (interface{}, error) {
 	return req, nil
 }
 
+func decodeDelete(_ context.Context, r *http.Request) (interface{}, error) {
+	req := deleteReq{
+		entityID: chi.URLParam(r, "entityID"),
+	}
+	return req, nil
+}
+
 func decodeCRL(_ context.Context, r *http.Request) (interface{}, error) {
 	certType, err := readNumQuery(r, "", defType)
 	if err != nil {

api/logging.go

@@ -109,6 +109,18 @@ func (lm *loggingMiddleware) ListCerts(ctx context.Context, pm certs.PageMetadat
 	return lm.svc.ListCerts(ctx, pm)
 }
 
+func (lm *loggingMiddleware) RemoveCerts(ctx context.Context, entityId string) (err error) {
+	defer func(begin time.Time) {
+		message := fmt.Sprintf("Method remove_certs took %s to complete", time.Since(begin))
+		if err != nil {
+			lm.logger.Warn(fmt.Sprintf("%s with error: %s.", message, err))
+			return
+		}
+		lm.logger.Info(message)
+	}(time.Now())
+	return lm.svc.RemoveCerts(ctx, entityId)
+}
+
 func (lm *loggingMiddleware) ViewCert(ctx context.Context, serialNumber string) (cert certs.Certificate, err error) {
 	defer func(begin time.Time) {
 		message := fmt.Sprintf("Method view_cert for serial number %s took %s to complete", serialNumber, time.Since(begin))

api/metrics.go

@@ -87,6 +87,14 @@ func (mm *metricsMiddleware) ListCerts(ctx context.Context, pm certs.PageMetadat
 	return mm.svc.ListCerts(ctx, pm)
 }
 
+func (mm *metricsMiddleware) RemoveCerts(ctx context.Context, entityId string) error {
+	defer func(begin time.Time) {
+		mm.counter.With("method", "remove_certificates").Add(1)
+		mm.latency.With("method", "remove_certificates").Observe(time.Since(begin).Seconds())
+	}(time.Now())
+	return mm.svc.RemoveCerts(ctx, entityId)
+}
+
 func (mm *metricsMiddleware) ViewCert(ctx context.Context, serialNumber string) (certs.Certificate, error) {
 	defer func(begin time.Time) {
 		mm.counter.With("method", "view_certificate").Add(1)

certs.go

@@ -70,6 +70,9 @@ type Service interface {
 
 	// GetChainCA retrieves the chain of CA i.e. root and intermediate cert concat together.
 	GetChainCA(ctx context.Context, token string) (Certificate, error)
+
+	// RemoveCerts deletes a certs for a provided  entityID.
+	RemoveCerts(ctx context.Context, entityId string) error
 }
 
 type Repository interface {
@@ -90,4 +93,7 @@ type Repository interface {
 
 	// ListRevokedCerts retrieves revoked lists from database.
 	ListRevokedCerts(ctx context.Context) ([]Certificate, error)
+
+	// RemoveCerts deletes certs from database.
+	RemoveCerts(ctx context.Context, entityId string) error
 }

cli/certs.go

@@ -70,6 +70,23 @@ var cmdCerts = []cobra.Command{
 			logOKCmd(*cmd)
 		},
 	},
+	{
+		Use:   "delete <entity_id> ",
+		Short: "Delete certificate",
+		Long:  `Deletes certificates for a given entity id.`,
+		Run: func(cmd *cobra.Command, args []string) {
+			if len(args) != 1 {
+				logUsageCmd(*cmd, cmd.Use)
+				return
+			}
+			err := sdk.DeleteCerts(args[0])
+			if err != nil {
+				logErrorCmd(*cmd, err)
+				return
+			}
+			logOKCmd(*cmd)
+		},
+	},
 	{
 		Use:   "renew <serial_number> ",
 		Short: "Renew certificate",

cli/certs_test.go

@@ -22,6 +22,7 @@ import (
 
 const (
 	revokeCmd     = "revoke"
+	deleteCmd     = "delete"
 	issueCmd      = "issue"
 	renewCmd      = "renew"
 	listCmd       = "get"
@@ -175,6 +176,62 @@ func TestRevokeCertCmd(t *testing.T) {
 	}
 }
 
+func TestDeleteCertCmd(t *testing.T) {
+	sdkMock := new(sdkmocks.MockSDK)
+	cli.SetSDK(sdkMock)
+	certCmd := cli.NewCertsCmd()
+	rootCmd := setFlags(certCmd)
+
+	cases := []struct {
+		desc          string
+		args          []string
+		sdkErr        errors.SDKError
+		errLogMessage string
+		logType       outputLog
+	}{
+		{
+			desc: "delete certs successfully",
+			args: []string{
+				id,
+			},
+			logType: okLog,
+		},
+		{
+			desc: "delete certs with invalid args",
+			args: []string{
+				id,
+				extraArg,
+			},
+			logType: usageLog,
+		},
+		{
+			desc: "delete certs failed",
+			args: []string{
+				id,
+			},
+			sdkErr:        errors.NewSDKErrorWithStatus(certs.ErrUpdateEntity, http.StatusUnprocessableEntity),
+			errLogMessage: fmt.Sprintf("\nerror: %s\n\n", errors.NewSDKErrorWithStatus(certs.ErrUpdateEntity, http.StatusUnprocessableEntity)),
+			logType:       errLog,
+		},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.desc, func(t *testing.T) {
+			sdkCall := sdkMock.On("DeleteCerts", mock.Anything).Return(tc.sdkErr)
+			out := executeCommand(t, rootCmd, append([]string{deleteCmd}, tc.args...)...)
+			switch tc.logType {
+			case okLog:
+				assert.True(t, strings.Contains(out, "ok"), fmt.Sprintf("%s unexpected response: expected success message, got: %v", tc.desc, out))
+			case errLog:
+				assert.Equal(t, tc.errLogMessage, out, fmt.Sprintf("%s unexpected error response: expected %s got errLogMessage:%s", tc.desc, tc.errLogMessage, out))
+			case usageLog:
+				assert.False(t, strings.Contains(out, rootCmd.Use), fmt.Sprintf("%s invalid usage: %s", tc.desc, out))
+			}
+			sdkCall.Unset()
+		})
+	}
+}
+
 func TestRenewCertCmd(t *testing.T) {
 	sdkMock := new(sdkmocks.MockSDK)
 	cli.SetSDK(sdkMock)