containerization-framework 0.4.0

Rust bindings for Apple's Containerization framework: Linux containers in lightweight VMs, in-process and without a daemon.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

use crate::error::Error;
use crate::platform;
use crate::platform::ffi;
use std::fmt;

/// An `Authentication`: a `BasicAuthentication`, or what
/// [`super::KeychainHelper::lookup`] returned. Swift's is a protocol, and its
/// conforming types keep their credentials internal, so Rust holds Swift's
/// value and can't read them.
pub struct Authentication {
  pub(crate) handle: ffi::CzAuthentication,
}

// Swift's `Authentication` is `Sendable`.
unsafe impl Send for Authentication {}
unsafe impl Sync for Authentication {}

impl Authentication {
  /// `BasicAuthentication(username:password:)`.
  pub fn basic(username: &str, password: &str) -> Result<Self, Error> {
    platform::outcome(
      ffi::cz_basic_authentication(username, password),
      "make a basic authentication",
    )
    .map(|outcome| Self {
      handle: outcome.authentication(),
    })
  }

  /// `Authentication.token()`.
  pub fn token(&self) -> Result<String, Error> {
    platform::outcome(self.handle.token(), "make an authentication token").map(|outcome| outcome.text())
  }
}

impl Clone for Authentication {
  fn clone(&self) -> Self {
    Self {
      handle: self.handle.duplicate(),
    }
  }
}

/// Without the credentials, which Rust can't read.
impl fmt::Debug for Authentication {
  fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
    formatter
      .debug_struct("Authentication")
      .finish_non_exhaustive()
  }
}

/// An `Authentication?`, as it crosses to Swift.
pub(crate) fn crossing(auth: Option<&Authentication>) -> Result<ffi::CzAuthentication, Error> {
  match auth {
    Some(auth) => Ok(auth.handle.duplicate()),
    None => {
      platform::outcome(ffi::cz_no_authentication(), "pass no authentication").map(|outcome| outcome.authentication())
    }
  }
}