anzar-cli 0.9.11

Anzar is a lightweight authentication and authorization framework that runs as a separate microservice
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

use dialoguer::Confirm;
use owo_colors::OwoColorize;
use shared::{domain::model::SigningKey, intern::key::KeyService};

use crate::error::Result;

pub async fn run(key_service: KeyService, kid: Option<String>) -> Result<()> {
    println!();

    if let Some(id) = kid {
        println!(
            "  {} Hard revoking key {}. All tokens signed with this key will be immediately rejected. This cannot be undone.",
            "⚠".yellow().bold(),
            id,
        );
        println!();

        let confirmation = Confirm::new().with_prompt("Confirm?").interact().unwrap();
        if !confirmation {
            return Ok(());
        }

        let keys = key_service.list_keys().await?;
        if keys
            .into_iter()
            .filter(|k| k.kid == id)
            .collect::<Vec<SigningKey>>()
            .is_empty()
        {
            println!("  {} Key {} is invalid.", "✖  Error:".red().bold(), id);
            println!();
            println!(
                "  Tip: run {} to inspect all signing keys.",
                "`anzar keys`".red().bold()
            );

            return Ok(());
        }

        let revoked_key = key_service.revoke(&id).await?;

        println!();
        println!("  {} Key {} revoked", "✔".green().bold(), revoked_key.kid);
        println!("  {} JWKS endpoint updated", "✔".green().bold());
    } else {
        println!(
            "  {} You must specify a key ID to revoke.",
            "✖  Error:".red().bold()
        );
        println!();
        println!("  Usage: {}", "`anzar keys revoke <ID>`".red().bold());
    }

    Ok(())
}