+static void s3store_task(gpointer a, gpointer s)
+{
+ BlueSkyStoreAsync *async = (BlueSkyStoreAsync *)a;
+ S3Store *store = (S3Store *)s;
+
+ async->status = ASYNC_RUNNING;
+
+ if (async->op == STORE_OP_GET) {
+ struct get_info info;
+ info.buf = g_string_new("");
+ info.success = 0;
+
+ struct S3GetObjectHandler handler;
+ handler.responseHandler.propertiesCallback = s3store_properties_callback;
+ handler.responseHandler.completeCallback = s3store_response_callback;
+ handler.getObjectDataCallback = s3store_get_handler;
+
+ S3_get_object(&store->bucket, async->key, NULL, 0, 0, NULL,
+ &handler, &info);
+
+ if (info.success) {
+ BlueSkyRCStr *raw, *decrypted;
+ raw = bluesky_string_new_from_gstring(info.buf);
+ decrypted = bluesky_crypt_decrypt(raw, store->encryption_key);
+ bluesky_string_unref(raw);
+ async->data = decrypted;
+ async->result = 0;
+ } else {
+ g_string_free(info.buf, TRUE);
+ }
+
+ } else if (async->op == STORE_OP_PUT) {
+ BlueSkyRCStr *encrypted = bluesky_crypt_encrypt(async->data,
+ store->encryption_key);
+
+ struct put_info info;
+ info.val = encrypted;
+ info.offset = 0;
+
+ struct S3PutObjectHandler handler;
+ handler.responseHandler.propertiesCallback
+ = s3store_properties_callback;
+ handler.responseHandler.completeCallback = s3store_response_callback;
+ handler.putObjectDataCallback = s3store_put_handler;
+
+ S3_put_object(&store->bucket, async->key, encrypted->len, NULL, NULL,
+ &handler, &info);
+
+ bluesky_string_unref(encrypted);
+
+ async->result = 0;
+ }
+
+ bluesky_store_async_mark_complete(async);
+ bluesky_store_async_unref(async);
+}
+
+static gpointer s3store_new()
+{
+ S3Store *store = g_new(S3Store, 1);
+ store->thread_pool = g_thread_pool_new(s3store_task, store, -1, FALSE,
+ NULL);
+ store->bucket.bucketName = "mvrable-bluesky";
+ store->bucket.protocol = S3ProtocolHTTP;
+ store->bucket.uriStyle = S3UriStylePath;
+ store->bucket.accessKeyId = getenv("AWS_ACCESS_KEY_ID");
+ store->bucket.secretAccessKey = getenv("AWS_SECRET_ACCESS_KEY");
+
+ const char *key = getenv("BLUESKY_KEY");
+ if (key == NULL) {
+ g_error("Encryption key not defined; please set BLUESKY_KEY environment variable");
+ exit(1);
+ }
+
+ bluesky_crypt_hash_key(key, store->encryption_key);
+
+ g_print("Initializing S3 with bucket %s, access key %s, encryption key %s\n",
+ store->bucket.bucketName, store->bucket.accessKeyId, key);
+
+ return store;
+}
+
+static void s3store_destroy(gpointer store)