chainmail 0.2.0

Strategy based authentication middleware for Iron framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126

extern crate iron;

pub mod strategy;

use strategy::Strategy;
use std::collections::HashMap;
use iron::prelude::*;
use iron::{typemap, AroundMiddleware, Handler};
use iron::status::Status;
use std::any::Any;
use std::sync::Arc;

pub struct AuthedUser<T> {
    pub authed_by: String,
    pub user: T,
}

pub struct ChainmailMiddleware<T>
    where T: Send + Any
{
    strategies: HashMap<String, Arc<Box<Strategy<T> + Send + Sync>>>,
    pub failure_handler: Option<Box<Handler>>,
    pub intercept_401: bool,
    pub force: bool,
}

struct ChainmailHandler<T, H: Handler>
    where T: Send + Any
{
    chainmail_middleware: ChainmailMiddleware<T>,
    base_handler: H,
}

impl<T: Send + Any, H: Handler> Handler for ChainmailHandler<T, H> {
    fn handle(&self, req: &mut Request) -> IronResult<Response> {
        let auth_result: Option<AuthedUser<T>> = self.chainmail_middleware.auth(req);
        if auth_result.is_none() && self.chainmail_middleware.force {
            match self.chainmail_middleware.failure_handler {
                Some(ref hn) => return hn.handle(req),
                None => panic!("No failure handler"),
            }
        } else {
            req.extensions.insert::<ChainmailMiddleware<T>>(Arc::new(auth_result));
            let res = self.base_handler.handle(req);
            match res {
                Ok(resp) => {
                    match resp.status {
                        Some(Status::Unauthorized) if self.chainmail_middleware.intercept_401 => {
                            match self.chainmail_middleware.failure_handler {
                                Some(ref fhn) => fhn.handle(req),
                                None => panic!("No failureHandler to intercept 401"),
                            }
                        }
                        _ => Ok(resp),
                    }
                }
                Err(e) => return Err(e),
            }
        }
    }
}

impl<T> typemap::Key for ChainmailMiddleware<T>
    where T: Send + Any
{
    type Value = Arc<Option<AuthedUser<T>>>;
}

impl<T> ChainmailMiddleware<T>
    where T: Send + Any
{
    pub fn new(strategies: HashMap<String, Arc<Box<Strategy<T> + Send + Sync>>>)
               -> ChainmailMiddleware<T> {
        ChainmailMiddleware {
            strategies: strategies,
            failure_handler: None,
            intercept_401: false,
            force: false,
        }
    }

    pub fn auth(&self, req: &mut Request) -> Option<AuthedUser<T>> {
        for (st_name, strategy) in self.strategies.clone() {
            match strategy.authenticate(req) {
                Ok(u) => {
                    return Some(AuthedUser {
                        user: u,
                        authed_by: st_name,
                    })
                }
                Err(_) => {}
            }
        }
        return None;
    }
}

impl<T: Send + Any + 'static> AroundMiddleware for ChainmailMiddleware<T> {
    fn around(self, handler: Box<Handler>) -> Box<Handler> {
        Box::new(ChainmailHandler {
            chainmail_middleware: self,
            base_handler: handler,
        }) as Box<Handler>
    }
}

pub trait ChainmailReqExt<T>
    where T: Send + Any
{
    fn current_user(&self) -> Arc<Option<AuthedUser<T>>>;
    fn is_signed_in(&self) -> bool;
}

impl<'a, 'b, T: Send + Any + 'static> ChainmailReqExt<T> for Request<'a, 'b> {
    fn current_user(&self) -> Arc<Option<AuthedUser<T>>> {
        self.extensions.get::<ChainmailMiddleware<T>>().unwrap().clone()
    }

    fn is_signed_in(&self) -> bool {
        let cur_user: Arc<Option<AuthedUser<T>>> = self.current_user();
        match *cur_user {
            Some(_) => true,
            None => false,
        }
    }
}