aviso-server 0.11.1

Notification service for data-driven workflows with live and replay APIs.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use serde::{Deserialize, Serialize};

/// Public links shown on the homepage. Omitted fields retain their defaults.
#[derive(Deserialize, Serialize, Clone, Debug, PartialEq)]
#[serde(default)]
pub struct HomepageSettings {
    pub client_documentation_url: String,
    pub client_repository_url: String,
    pub server_documentation_url: String,
    pub server_repository_url: String,
}

impl Default for HomepageSettings {
    fn default() -> Self {
        Self {
            client_documentation_url: "https://sites.ecmwf.int/docs/aviso-client/main/".into(),
            client_repository_url: "https://github.com/ecmwf/aviso-client".into(),
            server_documentation_url: "https://sites.ecmwf.int/docs/aviso-server/main/".into(),
            server_repository_url: "https://github.com/ecmwf/aviso-server".into(),
        }
    }
}

impl HomepageSettings {
    /// Require absolute HTTP(S) links without embedded credentials.
    pub fn validate(&self) -> Result<(), std::io::Error> {
        for (field, value) in [
            ("client_documentation_url", &self.client_documentation_url),
            ("client_repository_url", &self.client_repository_url),
            ("server_documentation_url", &self.server_documentation_url),
            ("server_repository_url", &self.server_repository_url),
        ] {
            // https://example.org/docs is valid; javascript:alert(1) is not.
            let valid = reqwest::Url::parse(value).is_ok_and(|url| {
                matches!(url.scheme(), "http" | "https")
                    && url.has_host()
                    && url.username().is_empty()
                    && url.password().is_none()
            });
            if !valid {
                return Err(std::io::Error::new(
                    std::io::ErrorKind::InvalidInput,
                    format!(
                        "application.homepage.{field} must be an absolute HTTP(S) URL with a host and no embedded credentials"
                    ),
                ));
            }
        }
        Ok(())
    }
}