cratery 1.11.1

Cratery -- a private cargo registry
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

/*******************************************************************************
 * Copyright (c) 2024 Cénotélie Opérations SAS (cenotelie.fr)
 ******************************************************************************/

//! Service for persisting information in the database
//! API related to administration of the registry itself

use chrono::Local;

use super::Database;
use crate::model::auth::{RegistryUserToken, RegistryUserTokenWithSecret};
use crate::utils::apierror::{error_invalid_request, specialize, ApiError};
use crate::utils::token::{generate_token, hash_token};

impl Database {
    /// Gets the global tokens for the registry, usually for CI purposes
    pub async fn get_global_tokens(&self) -> Result<Vec<RegistryUserToken>, ApiError> {
        let rows = sqlx::query!("SELECT id, name, lastUsed AS last_used FROM RegistryGlobalToken ORDER BY id",)
            .fetch_all(&mut *self.transaction.borrow().await)
            .await?;
        Ok(rows
            .into_iter()
            .map(|row| RegistryUserToken {
                id: row.id,
                name: row.name,
                last_used: row.last_used,
                can_write: false,
                can_admin: false,
            })
            .collect())
    }

    /// Creates a global token for the registry
    pub async fn create_global_token(&self, name: &str) -> Result<RegistryUserTokenWithSecret, ApiError> {
        let row = sqlx::query!("SELECT id FROM RegistryGlobalToken WHERE name = $1 LIMIT 1", name)
            .fetch_optional(&mut *self.transaction.borrow().await)
            .await?;
        if row.is_some() {
            return Err(specialize(
                error_invalid_request(),
                String::from("a token with the same name already exists"),
            ));
        }
        let token_secret = generate_token(64);
        let token_hash = hash_token(&token_secret);
        let now = Local::now().naive_local();
        let id = sqlx::query!(
            "INSERT INTO RegistryGlobalToken (name, token, lastUsed) VALUES ($1, $2, $3) RETURNING id",
            name,
            token_hash,
            now,
        )
        .fetch_one(&mut *self.transaction.borrow().await)
        .await?
        .id;
        Ok(RegistryUserTokenWithSecret {
            id,
            name: name.to_string(),
            secret: token_secret,
            last_used: now,
            can_write: false,
            can_admin: false,
        })
    }

    /// Revokes a globel token for the registry
    pub async fn revoke_global_token(&self, token_id: i64) -> Result<(), ApiError> {
        sqlx::query!("DELETE FROM RegistryGlobalToken WHERE id = $1", token_id)
            .execute(&mut *self.transaction.borrow().await)
            .await?;
        Ok(())
    }
}