aauth 0.0.2

Rust implementation of the AAuth authorization protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93

use std::sync::Arc;

use anyhow::anyhow;
use http::Extensions;
use reqwest::{Request, Response};
use reqwest_middleware::{Middleware, Next, Result as MiddlewareResult};

use crate::client::injector::AgentAuthAttempt;
use crate::client::keys::KeyMaterialProvider;
use crate::client::reqwest::signed::{
    SigningOptions, apply_capability_mission, apply_opaque_token, sign_request,
    sign_request_with_auth_token,
};
use crate::error::{AAuthError, Result};

#[derive(Clone)]
pub(crate) struct AgentAuthAttemptKey(pub AgentAuthAttempt);

pub(crate) struct SigningMiddleware {
    provider: Arc<dyn KeyMaterialProvider>,
    options: SigningOptions,
}

impl SigningMiddleware {
    pub(crate) fn new(provider: Arc<dyn KeyMaterialProvider>, options: SigningOptions) -> Self {
        Self { provider, options }
    }

    pub(crate) async fn sign_and_run(
        &self,
        mut req: Request,
        attempt: AgentAuthAttempt,
        extensions: &mut Extensions,
        next: Next<'_>,
    ) -> MiddlewareResult<Response> {
        let material = self
            .provider
            .key_material()
            .await
            .map_err(|e| reqwest_middleware::Error::Middleware(anyhow!(e.to_string())))?;

        apply_capability_mission(&mut req, &self.options);

        match &attempt {
            AgentAuthAttempt::AuthToken(token) => {
                sign_request_with_auth_token(&mut req, &material, token)
                    .map_err(|e| reqwest_middleware::Error::Middleware(anyhow!(e.to_string())))?;
            }
            AgentAuthAttempt::OpaqueToken(token) => {
                apply_opaque_token(&mut req, token);
                sign_request(&mut req, &material)
                    .map_err(|e| reqwest_middleware::Error::Middleware(anyhow!(e.to_string())))?;
            }
            AgentAuthAttempt::AgentSigned => {
                sign_request(&mut req, &material)
                    .map_err(|e| reqwest_middleware::Error::Middleware(anyhow!(e.to_string())))?;
            }
        }

        extensions.insert(AgentAuthAttemptKey(attempt));
        next.run(req, extensions).await
    }
}

#[async_trait::async_trait]
impl Middleware for SigningMiddleware {
    async fn handle(
        &self,
        req: Request,
        extensions: &mut Extensions,
        next: Next<'_>,
    ) -> MiddlewareResult<Response> {
        let attempt = extensions
            .get::<AgentAuthAttemptKey>()
            .cloned()
            .unwrap_or(AgentAuthAttemptKey(AgentAuthAttempt::AgentSigned))
            .0;
        self.sign_and_run(req, attempt, extensions, next).await
    }
}

pub(crate) async fn sign_and_run(
    signing: &SigningMiddleware,
    req: Request,
    attempt: AgentAuthAttempt,
    extensions: &mut Extensions,
    next: Next<'_>,
) -> Result<Response> {
    signing
        .sign_and_run(req, attempt, extensions, next)
        .await
        .map_err(|e| AAuthError::Message(e.to_string()))
}