csm-rs 0.102.0

A library for Shasta
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use manta_backend_dispatcher::{
  error::Error, interfaces::authentication::AuthenticationTrait,
};

use super::Csm;
use crate::common::authentication::{self, get_token_from_shasta_endpoint};

impl AuthenticationTrait for Csm {
  async fn get_api_token(
    &self,
    username: &str,
    password: &str,
  ) -> Result<String, Error> {
    // FIXME: this is not nice but authentication/authorization will potentially move out to an
    // external crate since this is type of logic is external to each site ...
    let base_url = self
      .base_url
      .strip_suffix("/apis")
      .unwrap_or(&self.base_url);

    let keycloak_base_url = base_url.to_string() + "/keycloak";

    /* authentication::get_api_token(
      &self.base_url,
      &self.root_cert,
      &keycloak_base_url,
      site_name,
    )
    .await
    .map_err(|e| Error::Message(e.to_string())) */

    let token = get_token_from_shasta_endpoint(
      &keycloak_base_url,
      &self.root_cert,
      username,
      password,
    )
    .await
    .map_err(|e| Error::Message(e.to_string()))?;

    self.validate_api_token(&token).await?;

    Ok(token)
  }

  async fn validate_api_token(&self, token: &str) -> Result<(), Error> {
    authentication::validate_api_token(&self.base_url, token, &self.root_cert)
      .await
      .map_err(|e| Error::Message(e.to_string()))
  }
}