boxlite-cli 0.11.0

Command-line interface for BoxLite container runtime
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

//! `GET /v1/me` — identity for the calling credential.
//!
//! The local Axum reference server is unauthenticated, so this returns a
//! fixed "local-anonymous" principal regardless of the Bearer header. Useful
//! for exercising the CLI's `auth status` and login validation against a
//! local development target.
//!
//! Per the vendor-agnostic spec, `prefix: null` signals "this deployment
//! does not use a routing slot" — `boxlite serve` mounts routes at
//! `/v1/boxes/...` rather than `/v1/<prefix>/boxes/...`, the canonical
//! single-tenant deployment shape.

use axum::Json;
use serde::Serialize;

#[derive(Debug, Serialize)]
pub(in crate::commands::serve) struct Principal {
    sub: &'static str,
    principal_type: &'static str,
    email: &'static str,
    display_name: &'static str,
    prefix: Option<&'static str>,
    scopes: Vec<&'static str>,
    expires_at: Option<&'static str>,
}

pub(in crate::commands::serve) async fn get_me() -> Json<Principal> {
    Json(Principal {
        sub: "local-anonymous",
        principal_type: "service_account",
        email: "local@boxlite.local",
        display_name: "Local development",
        prefix: None,
        scopes: vec![
            "box:read",
            "box:write",
            "box:exec",
            "box:delete",
            "image:read",
            "image:write",
            "snapshot:read",
            "snapshot:write",
            "snapshot:delete",
            "me:read",
        ],
        expires_at: None,
    })
}