alibi-plugins 0.7.0

Built-in authentication plugins and API metadata for Alibi
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96

//! Cookies published by HTTP and logical impersonation calls.
use alibi_core::utils::cookie_utils::{
    create_clear_cookie, create_derived_session_cookie, create_session_cookie_with_max_age,
    create_session_like_cookie, related_cookie_name, sign_cookie_value, verify_cookie_value,
};
use alibi_core::{AuthConfig, AuthResult, Headers};
use std::collections::HashMap;

pub(super) fn impersonation_cookie_headers(
    config: &AuthConfig,
    headers: &HashMap<String, String>,
    admin_token: &str,
    token: &str,
) -> AuthResult<Headers> {
    let name = related_cookie_name(config, "dont_remember");
    let remembered = headers
        .iter()
        .find(|(key, _)| key.eq_ignore_ascii_case("cookie"))
        .map(|(_, value)| value)
        .and_then(|cookies| {
            cookies.split(';').find_map(|cookie| {
                let (key, value) = cookie.trim().split_once('=')?;
                (key == name)
                    .then(|| verify_cookie_value(value, config.current_secret()))
                    .flatten()
            })
        })
        .unwrap_or_default();
    let admin = sign_cookie_value(
        &format!("{admin_token}:{remembered}"),
        config.current_secret(),
    );
    let mut result = Headers::new();
    for cookie in crate::helpers::delete_session_cookie_headers(config)? {
        result.append("set-cookie", cookie);
    }
    result.append(
        "set-cookie",
        create_derived_session_cookie(
            &related_cookie_name(config, "admin_session"),
            &admin,
            false,
            config,
        )?,
    );
    result.append(
        "set-cookie",
        create_session_cookie_with_max_age(Some(token), None, config)?,
    );
    result.append(
        "set-cookie",
        create_session_like_cookie(
            &name,
            &sign_cookie_value("true", config.current_secret()),
            None,
            config,
        )?,
    );
    Ok(result)
}

pub(super) fn restoration_cookie_headers(
    config: &AuthConfig,
    token: &str,
    dont_remember: bool,
) -> AuthResult<Headers> {
    let mut headers = Headers::new();
    headers.append(
        "set-cookie",
        create_session_cookie_with_max_age(
            Some(token),
            if dont_remember {
                None
            } else {
                Some(config.session.expires_in.num_seconds())
            },
            config,
        )?,
    );
    if dont_remember {
        headers.append(
            "set-cookie",
            create_session_like_cookie(
                &related_cookie_name(config, "dont_remember"),
                &sign_cookie_value("true", config.current_secret()),
                None,
                config,
            )?,
        );
    }
    headers.append(
        "set-cookie",
        create_clear_cookie(&related_cookie_name(config, "admin_session"), config)?,
    );
    Ok(headers)
}