crowbar 0.4.10

Securily generates temporary AWS credentials through Identity Providers using SAML
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

use crate::providers::okta::client::Client;
use crate::providers::okta::factors::Factor;
use crate::providers::okta::response::{Links, Response};

use anyhow::{anyhow, Result};
use serde::{Deserialize, Serialize};
use std::collections::HashMap;

#[derive(Deserialize, Debug, Serialize)]
#[serde(untagged)]
pub enum VerificationRequest {
    #[serde(rename_all = "camelCase")]
    Sms {
        state_token: String,
        #[serde(skip_serializing_if = "Option::is_none")]
        pass_code: Option<String>,
    },
    #[serde(rename_all = "camelCase")]
    Push { state_token: String },
    #[serde(rename_all = "camelCase")]
    Totp {
        state_token: String,
        pass_code: String,
    },
    #[serde(rename_all = "camelCase")]
    WebAuthn {
        state_token: String,
        #[serde(skip_serializing_if = "Option::is_none")]
        signature_data: Option<String>,
        #[serde(skip_serializing_if = "Option::is_none")]
        authenticator_data: Option<String>,
        #[serde(skip_serializing_if = "Option::is_none")]
        client_data: Option<String>,
    },
}

impl Client {
    pub fn verify(&self, factor: &Factor, request: &VerificationRequest) -> Result<Response> {
        match *factor {
            Factor::Sms { ref links, .. }
            | Factor::Totp { ref links, .. }
            | Factor::Push { ref links, .. }
            | Factor::WebAuthn { ref links, .. } => {
                if let Some(l) = links {
                    let url = match l.get("verify").unwrap() {
                        Links::Single(ref link) => link.href.clone(),
                        Links::Multi(ref links) => links.first().unwrap().href.clone(),
                    };

                    self.post(url, request)
                } else {
                    Err(anyhow!("Missing verification link in factor"))
                }
            }
            _ => Err(anyhow!(
                "The factor cannot be verified since it isn't implemented"
            )),
        }
    }

    pub fn poll(
        &self,
        links: &HashMap<String, Links>,
        request: &VerificationRequest,
    ) -> Result<Response> {
        let url = match links.get("next").unwrap() {
            Links::Single(ref link) => link.href.clone(),
            Links::Multi(ref links) => links.first().unwrap().href.clone(),
        };

        self.post(url, request)
    }
}