aauth 0.0.2

Rust implementation of the AAuth authorization protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

use std::collections::HashMap;
use std::sync::{Arc, Mutex};

use base64::{Engine as _, engine::general_purpose::URL_SAFE_NO_PAD};

pub trait OpaqueAccessStore: Send + Sync {
    fn issue(&self, agent_iss: &str) -> String;
    fn validate(&self, token: &str, agent_iss: &str) -> bool;
    fn revoke(&self, token: &str);
}

#[derive(Clone)]
pub struct InMemoryOpaqueAccessStore {
    tokens: Arc<Mutex<HashMap<String, String>>>,
}

impl InMemoryOpaqueAccessStore {
    pub fn new() -> Self {
        Self {
            tokens: Arc::new(Mutex::new(HashMap::new())),
        }
    }
}

impl Default for InMemoryOpaqueAccessStore {
    fn default() -> Self {
        Self::new()
    }
}

impl OpaqueAccessStore for InMemoryOpaqueAccessStore {
    fn issue(&self, agent_iss: &str) -> String {
        let token: String = (0..32)
            .map(|_| format!("{:02x}", rand::random::<u8>()))
            .collect();
        let encoded = URL_SAFE_NO_PAD.encode(token.as_bytes());
        self.tokens
            .lock()
            .unwrap()
            .insert(encoded.clone(), agent_iss.to_string());
        encoded
    }

    fn validate(&self, token: &str, agent_iss: &str) -> bool {
        self.tokens
            .lock()
            .unwrap()
            .get(token)
            .is_some_and(|iss| iss == agent_iss)
    }

    fn revoke(&self, token: &str) {
        self.tokens.lock().unwrap().remove(token);
    }
}