bucketwarden-auth 0.1.0

BucketWarden local identity, access key, and session credential store.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use super::*;

impl AuthStore {
    pub fn record_login_success(&mut self, principal_id: &str, now_epoch_seconds: u64) {
        let record = self
            .login_attempts
            .entry(principal_id.to_string())
            .or_insert_with(|| LoginAttemptRecord {
                principal_id: principal_id.to_string(),
                ..LoginAttemptRecord::default()
            });
        record.consecutive_failed_attempts = 0;
        record.last_success_epoch_seconds = Some(now_epoch_seconds);
        record.last_failure_detail = None;
    }

    pub fn record_login_failure(
        &mut self,
        principal_id: &str,
        now_epoch_seconds: u64,
        detail: impl Into<String>,
    ) {
        let record = self
            .login_attempts
            .entry(principal_id.to_string())
            .or_insert_with(|| LoginAttemptRecord {
                principal_id: principal_id.to_string(),
                ..LoginAttemptRecord::default()
            });
        record.consecutive_failed_attempts = record.consecutive_failed_attempts.saturating_add(1);
        record.last_failed_epoch_seconds = Some(now_epoch_seconds);
        record.last_failure_detail = Some(detail.into());
    }

    pub fn login_attempt_record(&self, principal_id: &str) -> Option<&LoginAttemptRecord> {
        self.login_attempts.get(principal_id)
    }

    pub fn enforce_login_attempt_limit(
        &self,
        principal_id: &str,
        max_consecutive_failures: u32,
    ) -> Result<(), AuthError> {
        let blocked = self
            .login_attempt_record(principal_id)
            .is_some_and(|record| record.consecutive_failed_attempts >= max_consecutive_failures);
        if blocked {
            Err(AuthError::TooManyLoginAttempts(principal_id.to_string()))
        } else {
            Ok(())
        }
    }
}