alibi-plugins 0.9.0

Built-in authentication plugins and API metadata for Alibi
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

//! Retire a provider's identity namespace under the caller's real authority.
use super::{
    AuthContext, AuthResult, AuthSchema, EndpointResponse, JsValue, ServerEndpoint, SessionRequest,
    SsoPlugin, Value, api, json,
};
impl SsoPlugin {
    pub fn delete_sso_provider_endpoint(provider_id: &str) -> AuthResult<ServerEndpoint<Value>> {
        ServerEndpoint::new("sso", "deleteSSOProvider")
            .with_body(&json!({"providerId":provider_id}))
    }
    pub(super) async fn delete<S: AuthSchema>(
        &self,
        input: &JsValue,
        request: &impl SessionRequest,
        ctx: &AuthContext<S>,
    ) -> AuthResult<EndpointResponse> {
        let provider = self.authorized_provider(input, request, ctx).await?;
        let guard = self
            .config
            .guard_provider_mutation
            .as_ref()
            .map(super::SsoMutationGuard::resolve::<S>)
            .transpose()?;
        let deleted = if let Some(guard) = guard {
            let verified = self.config.domain_verification;
            alibi_core::store::transaction(ctx.database.as_ref(), move |database| {
                Box::pin(async move {
                    let existing = database
                        .lock_sso_provider(&provider.id, &provider.provider_id)
                        .await?
                        .ok_or_else(|| api(404, "Provider not found"))?;
                    super::mutation_guard::run(
                        guard.as_ref(),
                        &existing,
                        super::SsoMutationAction::Delete,
                        None,
                        verified,
                        database,
                    )
                    .await?;
                    database
                        .delete_sso_provider_and_accounts(&existing.id, &existing.provider_id)
                        .await
                })
            })
            .await?
        } else {
            ctx.database
                .delete_sso_provider_and_accounts(&provider.id, &provider.provider_id)
                .await?
        };
        if !deleted {
            return Err(api(404, "Provider not found"));
        }
        EndpointResponse::json(&json!({"success":true}))
    }
    pub(super) fn validate_delete(input: Option<&JsValue>) -> AuthResult<JsValue> {
        super::super::endpoint::validate_fields(
            input,
            "body",
            &[super::super::authentication_helpers::JsonField::string(
                "providerId",
                true,
            )],
        )
    }
}