Merge pull request #5526 from hashicorp/ddebko-backport-db-fix-to-17

ddebko · web-flow · commit 4e64f8802a28 · 2025-02-07T11:53:28.000-08:00
backport database transaction fix
diff --git a/internal/auth/ldap/repository_auth_method_create.go b/internal/auth/ldap/repository_auth_method_create.go
@@ -62,7 +62,7 @@ func (r *Repository) CreateAuthMethod(ctx context.Context, am *AuthMethod, opt .
 		return nil, errors.Wrap(ctx, err, op)
 	}
 
-	dbWrapper, err := r.kms.GetWrapper(context.Background(), am.ScopeId, kms.KeyPurposeDatabase)
+	dbWrapper, err := r.kms.GetWrapper(ctx, am.ScopeId, kms.KeyPurposeDatabase)
 	if err != nil {
 		return nil, errors.Wrap(ctx, err, op, errors.WithMsg("unable to get database wrapper"))
 	}
diff --git a/internal/auth/oidc/repository_auth_method.go b/internal/auth/oidc/repository_auth_method.go
@@ -179,7 +179,7 @@ func (r *Repository) upsertAccount(ctx context.Context, am *AuthMethod, IdTokenC
 			var rowCnt int
 			for rows.Next() {
 				rowCnt += 1
-				err = r.reader.ScanRows(ctx, rows, &result)
+				err = reader.ScanRows(ctx, rows, &result)
 				if err != nil {
 					return errors.Wrap(ctx, err, op, errors.WithMsg("unable to scan rows for account"))
 				}
diff --git a/internal/auth/oidc/repository_auth_method_create.go b/internal/auth/oidc/repository_auth_method_create.go
@@ -61,7 +61,7 @@ func (r *Repository) CreateAuthMethod(ctx context.Context, am *AuthMethod, opt .
 		return nil, errors.Wrap(ctx, err, op, errors.WithMsg("unable to get oplog wrapper"))
 	}
 
-	databaseWrapper, err := r.kms.GetWrapper(context.Background(), am.ScopeId, kms.KeyPurposeDatabase)
+	databaseWrapper, err := r.kms.GetWrapper(ctx, am.ScopeId, kms.KeyPurposeDatabase)
 	if err != nil {
 		return nil, errors.Wrap(ctx, err, op, errors.WithMsg("unable to get database wrapper"))
 	}
diff --git a/internal/auth/oidc/repository_managed_group_members.go b/internal/auth/oidc/repository_managed_group_members.go
@@ -11,6 +11,7 @@ import (
 	"github.com/hashicorp/boundary/internal/errors"
 	"github.com/hashicorp/boundary/internal/kms"
 	"github.com/hashicorp/boundary/internal/oplog"
+	"github.com/hashicorp/boundary/internal/util"
 )
 
 // SetManagedGroupMemberships will set the managed groups for the given account
@@ -207,7 +208,7 @@ func (r *Repository) ListManagedGroupMembershipsByMember(ctx context.Context, wi
 		limit = opts.withLimit
 	}
 	reader := r.reader
-	if opts.withReader != nil {
+	if !util.IsNil(opts.withReader) {
 		reader = opts.withReader
 	}
 	var mgs []*ManagedGroupMemberAccount
@@ -232,7 +233,7 @@ func (r *Repository) ListManagedGroupMembershipsByGroup(ctx context.Context, wit
 		limit = opts.withLimit
 	}
 	reader := r.reader
-	if opts.withReader != nil {
+	if !util.IsNil(opts.withReader) {
 		reader = opts.withReader
 	}
 	var mgs []*ManagedGroupMemberAccount
diff --git a/internal/auth/repository_auth_method.go b/internal/auth/repository_auth_method.go
@@ -147,7 +147,7 @@ func (amr *AuthMethodRepository) ListDeletedIds(ctx context.Context, since time.
 	var deletedAuthMethodIDs []string
 	var transactionTimestamp time.Time
 	if _, err := amr.writer.DoTx(ctx, db.StdRetryCnt, db.ExpBackoff{}, func(r db.Reader, w db.Writer) error {
-		rows, err := amr.writer.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})
+		rows, err := w.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})
 		if err != nil {
 			return errors.Wrap(ctx, err, op)
 		}
diff --git a/internal/credential/repository_store.go b/internal/credential/repository_store.go
@@ -118,7 +118,7 @@ func (s *StoreRepository) ListDeletedIds(ctx context.Context, since time.Time) (
 	var deletedStoreIDs []string
 	var transactionTimestamp time.Time
 	if _, err := s.writer.DoTx(ctx, db.StdRetryCnt, db.ExpBackoff{}, func(r db.Reader, w db.Writer) error {
-		rows, err := s.writer.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})
+		rows, err := w.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})
 		if err != nil {
 			return errors.Wrap(ctx, err, op)
 		}
diff --git a/internal/credential/vault/jobs.go b/internal/credential/vault/jobs.go
@@ -264,7 +264,7 @@ func nextRenewal(ctx context.Context, j scheduler.Job) (time.Duration, error) {
 		return 0, errors.New(ctx, errors.Unknown, op, "unknown job")
 	}
 
-	rows, err := r.Query(context.Background(), query, nil)
+	rows, err := r.Query(ctx, query, nil)
 	if err != nil {
 		return 0, errors.Wrap(ctx, err, op)
 	}
diff --git a/internal/credential/vault/vault_token.go b/internal/credential/vault/vault_token.go
@@ -75,7 +75,7 @@ func newToken(ctx context.Context, storeId string, token TokenSecret, accessor [
 	accessorCopy := make([]byte, len(accessor))
 	copy(accessorCopy, accessor)
 
-	hmac, err := crypto.HmacSha256WithPrk(context.Background(), tokenCopy, accessorCopy)
+	hmac, err := crypto.HmacSha256WithPrk(ctx, tokenCopy, accessorCopy)
 	if err != nil {
 		return nil, errors.Wrap(ctx, err, op, errors.WithCode(errors.Encrypt))
 	}
diff --git a/internal/daemon/controller/handler.go b/internal/daemon/controller/handler.go
@@ -686,7 +686,7 @@ func wrapHandlerWithCallbackInterceptor(h http.Handler, c *Controller) http.Hand
 
 				if strings.HasSuffix(req.URL.Path, "oidc:authenticate") {
 					if s, ok := values["state"].(string); ok {
-						stateWrapper, err := oidc.UnwrapMessage(context.Background(), s)
+						stateWrapper, err := oidc.UnwrapMessage(ctx, s)
 						if err != nil {
 							event.WriteError(ctx, op, err, event.WithInfoMsg("error marshaling state"))
 							w.WriteHeader(http.StatusInternalServerError)
diff --git a/internal/host/options.go b/internal/host/options.go
@@ -6,7 +6,9 @@ package host
 import (
 	"errors"
 
+	"github.com/hashicorp/boundary/internal/db"
 	"github.com/hashicorp/boundary/internal/pagination"
+	"github.com/hashicorp/boundary/internal/util"
 )
 
 // GetOpts - iterate the inbound Options and return a struct
@@ -26,6 +28,8 @@ type Option func(*options) error
 // options = how options are represented
 type options struct {
 	WithLimit              int
+	WithReader             db.Reader
+	WithWriter             db.Writer
 	WithOrderByCreateTime  bool
 	Ascending              bool
 	WithStartPageAfterItem pagination.Item
@@ -66,3 +70,19 @@ func WithStartPageAfterItem(item pagination.Item) Option {
 		return nil
 	}
 }
+
+// WithReaderWriter is used to share the same database reader
+// and writer when executing sql within a transaction.
+func WithReaderWriter(r db.Reader, w db.Writer) Option {
+	return func(o *options) error {
+		if util.IsNil(r) {
+			return errors.New("reader cannot be nil")
+		}
+		if util.IsNil(w) {
+			return errors.New("writer cannot be nil")
+		}
+		o.WithReader = r
+		o.WithWriter = w
+		return nil
+	}
+}
diff --git a/internal/host/options_test.go b/internal/host/options_test.go
@@ -77,4 +77,23 @@ func Test_GetOpts(t *testing.T) {
 		assert.Equal(opts.WithStartPageAfterItem.GetPublicId(), "s_1")
 		assert.Equal(opts.WithStartPageAfterItem.GetUpdateTime(), timestamp.New(updateTime))
 	})
+	t.Run("WithReaderWriter", func(t *testing.T) {
+		t.Parallel()
+		t.Run("nil writer", func(t *testing.T) {
+			t.Parallel()
+			_, err := GetOpts(WithReaderWriter(&db.Db{}, nil))
+			require.Error(t, err)
+		})
+		t.Run("nil reader", func(t *testing.T) {
+			t.Parallel()
+			_, err := GetOpts(WithReaderWriter(nil, &db.Db{}))
+			require.Error(t, err)
+		})
+		reader := &db.Db{}
+		writer := &db.Db{}
+		opts, err := GetOpts(WithReaderWriter(reader, writer))
+		require.NoError(t, err)
+		assert.Equal(t, reader, opts.WithReader)
+		assert.Equal(t, writer, opts.WithWriter)
+	})
 }
diff --git a/internal/host/plugin/job_set_sync.go b/internal/host/plugin/job_set_sync.go
@@ -148,7 +148,7 @@ func nextSync(ctx context.Context, j scheduler.Job) (time.Duration, error) {
 		return 0, errors.New(ctx, errors.Unknown, op, "unknown job")
 	}
 
-	rows, err := r.Query(context.Background(), query, []any{setSyncJobRunInterval})
+	rows, err := r.Query(ctx, query, []any{setSyncJobRunInterval})
 	if err != nil {
 		return 0, errors.Wrap(ctx, err, op)
 	}
diff --git a/internal/host/plugin/options.go b/internal/host/plugin/options.go
@@ -4,6 +4,7 @@
 package plugin
 
 import (
+	"github.com/hashicorp/boundary/internal/db"
 	"github.com/hashicorp/boundary/internal/pagination"
 	"google.golang.org/protobuf/types/known/structpb"
 )
@@ -37,6 +38,8 @@ type options struct {
 	withSetIds              []string
 	withSecretsHmac         []byte
 	withStartPageAfterItem  pagination.Item
+	WithReader              db.Reader
+	withWriter              db.Writer
 }
 
 func getDefaultOptions() options {
@@ -153,3 +156,12 @@ func WithStartPageAfterItem(item pagination.Item) Option {
 		o.withStartPageAfterItem = item
 	}
 }
+
+// WithReaderWriter is used to share the same database reader
+// and writer when executing sql within a transaction.
+func WithReaderWriter(r db.Reader, w db.Writer) Option {
+	return func(o *options) {
+		o.WithReader = r
+		o.withWriter = w
+	}
+}
diff --git a/internal/host/plugin/options_test.go b/internal/host/plugin/options_test.go
@@ -7,6 +7,7 @@ import (
 	"testing"
 	"time"
 
+	"github.com/hashicorp/boundary/internal/db"
 	"github.com/hashicorp/boundary/internal/db/timestamp"
 	"github.com/hashicorp/boundary/internal/pagination"
 	"github.com/stretchr/testify/assert"
@@ -107,4 +108,11 @@ func Test_GetOpts(t *testing.T) {
 		assert.Equal(opts.withStartPageAfterItem.GetPublicId(), "s_1")
 		assert.Equal(opts.withStartPageAfterItem.GetUpdateTime(), timestamp.New(updateTime))
 	})
+	t.Run("WithReaderWriter", func(t *testing.T) {
+		reader := &db.Db{}
+		writer := &db.Db{}
+		opts := getOpts(WithReaderWriter(reader, writer))
+		assert.Equal(t, reader, opts.WithReader)
+		assert.Equal(t, writer, opts.withWriter)
+	})
 }
diff --git a/internal/host/plugin/repository_host_catalog.go b/internal/host/plugin/repository_host_catalog.go
@@ -11,6 +11,7 @@ import (
 	"github.com/hashicorp/boundary/internal/db"
 	"github.com/hashicorp/boundary/internal/errors"
 	"github.com/hashicorp/boundary/internal/event"
+	"github.com/hashicorp/boundary/internal/host"
 	"github.com/hashicorp/boundary/internal/kms"
 	"github.com/hashicorp/boundary/internal/libs/patchstruct"
 	"github.com/hashicorp/boundary/internal/oplog"
@@ -395,7 +396,7 @@ func (r *Repository) UpdateCatalog(ctx context.Context, c *HostCatalog, version
 		ctx,
 		db.StdRetryCnt,
 		db.ExpBackoff{},
-		func(_ db.Reader, w db.Writer) error {
+		func(read db.Reader, w db.Writer) error {
 			msgs := make([]*oplog.Message, 0, 3)
 			ticket, err := w.GetTicket(ctx, newCatalog)
 			if err != nil {
@@ -517,7 +518,7 @@ func (r *Repository) UpdateCatalog(ctx context.Context, c *HostCatalog, version
 			if needSetSync {
 				// We also need to mark all host sets in this catalog to be
 				// synced as well.
-				setsForCatalog, _, err := r.getSets(ctx, "", returnedCatalog.PublicId)
+				setsForCatalog, _, err := r.getSets(ctx, "", returnedCatalog.PublicId, host.WithReaderWriter(read, w))
 				if err != nil {
 					return errors.Wrap(ctx, err, op, errors.WithMsg("unable to get sets for host catalog"))
 				}
@@ -697,14 +698,19 @@ func (r *Repository) getCatalog(ctx context.Context, id string) (*HostCatalog, *
 	return c, p, nil
 }
 
-func (r *Repository) getPlugin(ctx context.Context, plgId string) (*plg.Plugin, error) {
+func (r *Repository) getPlugin(ctx context.Context, plgId string, opts ...Option) (*plg.Plugin, error) {
 	const op = "plugin.(Repository).getPlugin"
 	if plgId == "" {
 		return nil, errors.New(ctx, errors.InvalidParameter, op, "no plugin id")
 	}
+	opt := getOpts(opts...)
+	reader := r.reader
+	if !util.IsNil(opt.WithReader) {
+		reader = opt.WithReader
+	}
 	plg := plg.NewPlugin()
 	plg.PublicId = plgId
-	if err := r.reader.LookupByPublicId(ctx, plg); err != nil {
+	if err := reader.LookupByPublicId(ctx, plg); err != nil {
 		return nil, errors.Wrap(ctx, err, op, errors.WithMsg(fmt.Sprintf("unable to get host plugin with id %q", plgId)))
 	}
 	return plg, nil
diff --git a/internal/host/plugin/repository_host_set.go b/internal/host/plugin/repository_host_set.go
@@ -799,6 +799,15 @@ func (r *Repository) getSets(ctx context.Context, publicId string, catalogId str
 		limit = opts.WithLimit
 	}
 
+	reader := r.reader
+	writer := r.writer
+	if !util.IsNil(opts.WithReader) {
+		reader = opts.WithReader
+	}
+	if !util.IsNil(opts.WithWriter) {
+		writer = opts.WithWriter
+	}
+
 	args := make([]any, 0, 1)
 	var where string
 
@@ -820,7 +829,7 @@ func (r *Repository) getSets(ctx context.Context, publicId string, catalogId str
 	}
 
 	var aggHostSets []*hostSetAgg
-	if err := r.reader.SearchWhere(ctx, &aggHostSets, where, args, dbArgs...); err != nil {
+	if err := reader.SearchWhere(ctx, &aggHostSets, where, args, dbArgs...); err != nil {
 		return nil, nil, errors.Wrap(ctx, err, op, errors.WithMsg(fmt.Sprintf("in %s", publicId)))
 	}
 
@@ -839,7 +848,7 @@ func (r *Repository) getSets(ctx context.Context, publicId string, catalogId str
 	}
 	var plg *plugin.Plugin
 	if plgId != "" {
-		plg, err = r.getPlugin(ctx, plgId)
+		plg, err = r.getPlugin(ctx, plgId, WithReaderWriter(reader, writer))
 		if err != nil {
 			return nil, nil, errors.Wrap(ctx, err, op)
 		}
diff --git a/internal/host/repository_catalog.go b/internal/host/repository_catalog.go
@@ -119,7 +119,7 @@ func (s *CatalogRepository) ListDeletedIds(ctx context.Context, since time.Time)
 	var deletedCatalogIDs []string
 	var transactionTimestamp time.Time
 	if _, err := s.writer.DoTx(ctx, db.StdRetryCnt, db.ExpBackoff{}, func(r db.Reader, w db.Writer) error {
-		rows, err := s.writer.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})
+		rows, err := w.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})
 		if err != nil {
 			return errors.Wrap(ctx, err, op)
 		}
diff --git a/internal/host/static/repository_host.go b/internal/host/static/repository_host.go
@@ -168,7 +168,7 @@ func (r *Repository) UpdateHost(ctx context.Context, projectId string, h *Host,
 	var rowsUpdated int
 	var returnedHost *Host
 	_, err = r.writer.DoTx(ctx, db.StdRetryCnt, db.ExpBackoff{},
-		func(_ db.Reader, w db.Writer) error {
+		func(r db.Reader, w db.Writer) error {
 			returnedHost = h.clone()
 			var err error
 			rowsUpdated, err = w.Update(ctx, returnedHost, dbMask, nullFields,
@@ -183,7 +183,7 @@ func (r *Repository) UpdateHost(ctx context.Context, projectId string, h *Host,
 			ha := &hostAgg{
 				PublicId: h.PublicId,
 			}
-			if err := r.reader.LookupByPublicId(ctx, ha); err != nil {
+			if err := r.LookupByPublicId(ctx, ha); err != nil {
 				return errors.Wrap(ctx, err, op, errors.WithMsg("failed to lookup host after update"))
 			}
 			returnedHost.SetIds = ha.getSetIds()
diff --git a/internal/iam/repository.go b/internal/iam/repository.go
@@ -13,6 +13,7 @@ import (
 	"github.com/hashicorp/boundary/internal/kms"
 	"github.com/hashicorp/boundary/internal/oplog"
 	"github.com/hashicorp/boundary/internal/types/scope"
+	"github.com/hashicorp/boundary/internal/util"
 )
 
 var ErrMetadataScopeNotFound = errors.New(context.Background(), errors.RecordNotFound, "iam", "scope not found for metadata", errors.WithoutEvent())
@@ -65,7 +66,7 @@ func (r *Repository) list(ctx context.Context, resources any, where string, args
 		limit = opts.withLimit
 	}
 	reader := r.reader
-	if opts.withReader != nil {
+	if !util.IsNil(opts.withReader) {
 		reader = opts.withReader
 	}
 	return reader.SearchWhere(ctx, resources, where, args, db.WithLimit(limit))
@@ -100,7 +101,7 @@ func (r *Repository) create(ctx context.Context, resource Resource, opt ...Optio
 
 	returnedResource := resourceCloner.Clone()
 	opts := getOpts(opt...)
-	if opts.withWriter != nil {
+	if !util.IsNil(opts.withWriter) {
 		err = opts.withWriter.Create(ctx, returnedResource, db.WithOplog(oplogWrapper, metadata))
 	} else {
 		_, err = r.writer.DoTx(
@@ -150,7 +151,7 @@ func (r *Repository) update(ctx context.Context, resource Resource, version uint
 	reader := r.reader
 	writer := r.writer
 	needFreshReaderWriter := true
-	if opts.withReader != nil && opts.withWriter != nil {
+	if !util.IsNil(opts.withReader) && !util.IsNil(opts.withWriter) {
 		reader = opts.withReader
 		writer = opts.withWriter
 		if !writer.IsTx(ctx) {
diff --git a/internal/iam/repository_grant_scope.go b/internal/iam/repository_grant_scope.go
@@ -11,6 +11,7 @@ import (
 	"github.com/hashicorp/boundary/internal/errors"
 	"github.com/hashicorp/boundary/internal/kms"
 	"github.com/hashicorp/boundary/internal/oplog"
+	"github.com/hashicorp/boundary/internal/util"
 )
 
 // AddRoleGrantScopes will add role grant scopes associated with the role ID in
@@ -235,7 +236,7 @@ func (r *Repository) SetRoleGrantScopes(ctx context.Context, roleId string, role
 	writer := r.writer
 	needFreshReaderWriter := true
 	opts := getOpts(opt...)
-	if opts.withReader != nil && opts.withWriter != nil {
+	if !util.IsNil(opts.withReader) && !util.IsNil(opts.withWriter) {
 		reader = opts.withReader
 		writer = opts.withWriter
 		needFreshReaderWriter = false
diff --git a/internal/iam/repository_role.go b/internal/iam/repository_role.go
diff --git a/internal/iam/repository_role_grant.go b/internal/iam/repository_role_grant.go
diff --git a/internal/iam/repository_user.go b/internal/iam/repository_user.go
diff --git a/internal/oplog/writer.go b/internal/oplog/writer.go
diff --git a/internal/server/options.go b/internal/server/options.go
diff --git a/internal/server/options_test.go b/internal/server/options_test.go
diff --git a/internal/server/repository_worker.go b/internal/server/repository_worker.go
diff --git a/internal/server/repository_worker_storage_bucket_credential_state.go b/internal/server/repository_worker_storage_bucket_credential_state.go

Original file line number	Diff line number	Diff line change
`@@ -62,7 +62,7 @@ func (r Repository) CreateAuthMethod(ctx context.Context, am AuthMethod, opt .`
`62`	`62`	`return nil, errors.Wrap(ctx, err, op)`
`63`	`63`	`}`
`64`	`64`
`65`		`- dbWrapper, err := r.kms.GetWrapper(context.Background(), am.ScopeId, kms.KeyPurposeDatabase)`
	`65`	`+ dbWrapper, err := r.kms.GetWrapper(ctx, am.ScopeId, kms.KeyPurposeDatabase)`
`66`	`66`	`if err != nil {`
`67`	`67`	`return nil, errors.Wrap(ctx, err, op, errors.WithMsg("unable to get database wrapper"))`
`68`	`68`	`}`
Original file line number	Diff line number	Diff line change
`@@ -179,7 +179,7 @@ func (r Repository) upsertAccount(ctx context.Context, am AuthMethod, IdTokenC`
`179`	`179`	`var rowCnt int`
`180`	`180`	`for rows.Next() {`
`181`	`181`	`rowCnt += 1`
`182`		`- err = r.reader.ScanRows(ctx, rows, &result)`
	`182`	`+ err = reader.ScanRows(ctx, rows, &result)`
`183`	`183`	`if err != nil {`
`184`	`184`	`return errors.Wrap(ctx, err, op, errors.WithMsg("unable to scan rows for account"))`
`185`	`185`	`}`
Original file line number	Diff line number	Diff line change
`@@ -61,7 +61,7 @@ func (r Repository) CreateAuthMethod(ctx context.Context, am AuthMethod, opt .`
`61`	`61`	`return nil, errors.Wrap(ctx, err, op, errors.WithMsg("unable to get oplog wrapper"))`
`62`	`62`	`}`
`63`	`63`
`64`		`- databaseWrapper, err := r.kms.GetWrapper(context.Background(), am.ScopeId, kms.KeyPurposeDatabase)`
	`64`	`+ databaseWrapper, err := r.kms.GetWrapper(ctx, am.ScopeId, kms.KeyPurposeDatabase)`
`65`	`65`	`if err != nil {`
`66`	`66`	`return nil, errors.Wrap(ctx, err, op, errors.WithMsg("unable to get database wrapper"))`
`67`	`67`	`}`
Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,7 @@ import (`
`11`	`11`	`"github.com/hashicorp/boundary/internal/errors"`
`12`	`12`	`"github.com/hashicorp/boundary/internal/kms"`
`13`	`13`	`"github.com/hashicorp/boundary/internal/oplog"`
	`14`	`+ "github.com/hashicorp/boundary/internal/util"`
`14`	`15`	`)`
`15`	`16`
`16`	`17`	`// SetManagedGroupMemberships will set the managed groups for the given account`
`@@ -207,7 +208,7 @@ func (r *Repository) ListManagedGroupMembershipsByMember(ctx context.Context, wi`
`207`	`208`	`limit = opts.withLimit`
`208`	`209`	`}`
`209`	`210`	`reader := r.reader`
`210`		`- if opts.withReader != nil {`
	`211`	`+ if !util.IsNil(opts.withReader) {`
`211`	`212`	`reader = opts.withReader`
`212`	`213`	`}`
`213`	`214`	`var mgs []*ManagedGroupMemberAccount`
`@@ -232,7 +233,7 @@ func (r *Repository) ListManagedGroupMembershipsByGroup(ctx context.Context, wit`
`232`	`233`	`limit = opts.withLimit`
`233`	`234`	`}`
`234`	`235`	`reader := r.reader`
`235`		`- if opts.withReader != nil {`
	`236`	`+ if !util.IsNil(opts.withReader) {`
`236`	`237`	`reader = opts.withReader`
`237`	`238`	`}`
`238`	`239`	`var mgs []*ManagedGroupMemberAccount`
Original file line number	Diff line number	Diff line change
`@@ -147,7 +147,7 @@ func (amr *AuthMethodRepository) ListDeletedIds(ctx context.Context, since time.`
`147`	`147`	`var deletedAuthMethodIDs []string`
`148`	`148`	`var transactionTimestamp time.Time`
`149`	`149`	`if _, err := amr.writer.DoTx(ctx, db.StdRetryCnt, db.ExpBackoff{}, func(r db.Reader, w db.Writer) error {`
`150`		`- rows, err := amr.writer.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})`
	`150`	`+ rows, err := w.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})`
`151`	`151`	`if err != nil {`
`152`	`152`	`return errors.Wrap(ctx, err, op)`
`153`	`153`	`}`
Original file line number	Diff line number	Diff line change
`@@ -118,7 +118,7 @@ func (s *StoreRepository) ListDeletedIds(ctx context.Context, since time.Time) (`
`118`	`118`	`var deletedStoreIDs []string`
`119`	`119`	`var transactionTimestamp time.Time`
`120`	`120`	`if _, err := s.writer.DoTx(ctx, db.StdRetryCnt, db.ExpBackoff{}, func(r db.Reader, w db.Writer) error {`
`121`		`- rows, err := s.writer.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})`
	`121`	`+ rows, err := w.Query(ctx, listDeletedIdsQuery, []any{sql.Named("since", since)})`
`122`	`122`	`if err != nil {`
`123`	`123`	`return errors.Wrap(ctx, err, op)`
`124`	`124`	`}`
Original file line number	Diff line number	Diff line change
`@@ -264,7 +264,7 @@ func nextRenewal(ctx context.Context, j scheduler.Job) (time.Duration, error) {`
`264`	`264`	`return 0, errors.New(ctx, errors.Unknown, op, "unknown job")`
`265`	`265`	`}`
`266`	`266`
`267`		`- rows, err := r.Query(context.Background(), query, nil)`
	`267`	`+ rows, err := r.Query(ctx, query, nil)`
`268`	`268`	`if err != nil {`
`269`	`269`	`return 0, errors.Wrap(ctx, err, op)`
`270`	`270`	`}`
Original file line number	Diff line number	Diff line change
`@@ -75,7 +75,7 @@ func newToken(ctx context.Context, storeId string, token TokenSecret, accessor [`
`75`	`75`	`accessorCopy := make([]byte, len(accessor))`
`76`	`76`	`copy(accessorCopy, accessor)`
`77`	`77`
`78`		`- hmac, err := crypto.HmacSha256WithPrk(context.Background(), tokenCopy, accessorCopy)`
	`78`	`+ hmac, err := crypto.HmacSha256WithPrk(ctx, tokenCopy, accessorCopy)`
`79`	`79`	`if err != nil {`
`80`	`80`	`return nil, errors.Wrap(ctx, err, op, errors.WithCode(errors.Encrypt))`
`81`	`81`	`}`