anzar-shared 0.9.21

Anzar is a lightweight authentication and authorization framework that runs as a separate microservice
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use crate::error::{CoreError, InternalError, Result};
use base64::{Engine, prelude::BASE64_URL_SAFE_NO_PAD};
use rand::TryRngCore;
use sha2::{Digest, Sha256};

#[derive(Clone)]
pub struct SecureToken {
    size: usize,
}

impl Default for SecureToken {
    fn default() -> Self {
        Self::with_size32()
    }
}

impl SecureToken {
    pub fn with_size32() -> Self {
        Self { size: 32 }
    }
    pub fn with_size64() -> Self {
        Self { size: 64 }
    }
}

impl SecureToken {
    pub fn generate(&self) -> Result<String> {
        let mut bytes = vec![0u8; self.size];

        rand::rngs::OsRng
            .try_fill_bytes(&mut bytes)
            .map_err(|_| CoreError::Internal(InternalError::Hashing))?;

        Ok(BASE64_URL_SAFE_NO_PAD.encode(&bytes))
    }
    pub fn hash(&self, token: &str) -> String {
        let mut hasher = Sha256::new();
        hasher.update(token.as_bytes());

        format!("{:x}", hasher.finalize())
    }

    pub fn verify(&self, a: &str, b: &str) -> bool {
        if a.len() != b.len() {
            return false;
        }

        a.bytes()
            .zip(b.bytes())
            .fold(0, |acc, (a, b)| acc | (a ^ b))
            == 0
    }
}