annil 0.2.0

A basic implementation of annil protocol.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

use crate::extractor::token::{AnnilClaim, ShareToken, UserClaim};
use crate::state::AnnilKeys;
use axum::{Extension, Json};
use jwt_simple::prelude::*;
use std::sync::Arc;

#[derive(Deserialize, Clone)]
pub struct SignPayload {
    user_id: String,
    #[serde(default)]
    share: bool,
}

pub async fn sign(
    Extension(keys): Extension<Arc<AnnilKeys>>,
    Json(info): Json<SignPayload>,
) -> String {
    let custom = AnnilClaim::User(UserClaim {
        user_id: info.user_id,
        share: if info.share {
            Some(ShareToken {
                key_id: keys.share_key.key_id().as_deref().unwrap().to_string(),
                secret: unsafe { String::from_utf8_unchecked(keys.share_key.to_bytes().to_vec()) },
                allowed: None,
            })
        } else {
            None
        },
    });

    let now = Some(Clock::now_since_epoch());
    let claim = JWTClaims {
        issued_at: now,
        expires_at: None,
        invalid_before: None,
        issuer: None,
        subject: None,
        audiences: None,
        jwt_id: None,
        nonce: None,
        custom,
    };
    keys.sign_key
        .authenticate(claim)
        .expect("Failed to sign user token")
}