axum-security 0.0.2

A security toolbox for the Axum library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

use axum::{Router, routing::MethodRouter};

use super::{
    OidcContext, OidcHandler,
    redirect::{OidcLoginService, OidcLogoutService, OidcRedirectService},
};

/// Extension trait on [`Router`] to register OIDC login, callback, and logout routes.
pub trait OidcExt {
    /// Add the OIDC login, callback, and (optionally) logout routes for the given [`OidcContext`].
    fn with_oidc<H: OidcHandler>(self, context: OidcContext<H>) -> Self;
}

impl<S> OidcExt for Router<S>
where
    S: Clone + Send + Sync + 'static,
{
    fn with_oidc<H: OidcHandler>(mut self, context: OidcContext<H>) -> Self {
        if let Some(start_challenge_path) = context.get_start_challenge_path() {
            let challenge_route =
                MethodRouter::new().get_service(OidcLoginService::new(context.clone()));

            self = self.route(start_challenge_path, challenge_route);
        }

        if let Some(logout_path) = context.get_logout_path() {
            let logout_route =
                MethodRouter::new().get_service(OidcLogoutService::new(context.clone()));

            self = self.route(logout_path, logout_route);
        }

        let route = MethodRouter::new().get_service(OidcRedirectService::new(context.clone()));

        self.route(context.callback_url(), route)
    }
}