asx-rs 0.14.0

AS2 and AS4 B2B messaging library for Rust — signing, encryption, MDN, and ebMS3/AS4 profile support
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

use super::super::large_message::As4FragmentJoiner;
use super::super::types::{As4ReceivePushProgress, As4ReceivePushRequest};
use super::{
    As4PushReceiveCtx, As4Verifier, DedupStorage, EventBus, PayloadInput, Result, SessionContext,
};
#[cfg(not(feature = "testing"))]
use crate::core::{AsxError, ErrorCode, ErrorContext};

pub(super) fn receive_push_with_dedup_sync_fragment_aware_with_verifier(
    session: &SessionContext,
    event_bus: &EventBus,
    request: As4ReceivePushRequest,
    dedup_backend: &dyn DedupStorage,
    verifier: &(dyn As4Verifier + Send + Sync),
    fragment_joiner: Option<&mut As4FragmentJoiner>,
) -> Result<As4ReceivePushProgress> {
    crate::presets::enforce_strict_runtime_bootstrap_for_strict_interop(
        "as4_receive_push",
        session,
        request.policy.interop,
    )?;

    // Safety check: if freshness-window enforcement is disabled AND the dedup
    // backend is non-durable (e.g. in-process memory), there is effectively no
    // replay protection at all — a replayed message from hours earlier will
    // always pass once evicted from the in-memory store.  Require at least one
    // of the two controls to be active.  Tests may opt out via test_relaxed()
    // which sets both fields explicitly.
    #[cfg(not(feature = "testing"))]
    if request.policy.timestamp_freshness_window.is_none() && !dedup_backend.is_durable() {
        return Err(AsxError::new(
            ErrorCode::PolicyViolation,
            "insecure receive configuration: timestamp_freshness_window is None and the \
             dedup backend is non-durable; at least one replay protection mechanism must be active. \
             Set timestamp_freshness_window or use a durable backend.",
            ErrorContext::for_session("as4_receive_push_startup_check", session),
        ));
    }

    let As4ReceivePushRequest {
        payload,
        receipt_payload,
        policy,
        http_content_type,
        authenticated_sender_scope,
    } = request;

    let scope_ref = authenticated_sender_scope.as_deref();
    let ctx = As4PushReceiveCtx {
        session,
        event_bus,
        policy: &policy,
        dedup_backend,
        verifier,
    };

    super::receive_push_with_dedup_inner(
        &ctx,
        PayloadInput::Shared(payload),
        receipt_payload.as_deref(),
        &http_content_type,
        fragment_joiner,
        scope_ref,
    )
}