1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
use async_graphql::{
dynamic::{Field, FieldFuture, InputValue, TypeRef},
Value,
};
use log::error;
use webauthn_rs::prelude::RegisterPublicKeyCredential;
use crate::{data_sources::DataSources, graphql::schema::ServiceSchema};
use super::ServiceUser;
impl ServiceSchema {
pub fn create_register_finish(mut self) -> Self {
let auth_config = match self.subgraph_config.service.auth.clone() {
Some(auth) => auth,
None => {
panic!("Auth config not found.");
}
};
let resolver = Field::new(
"register_finish",
TypeRef::named_nn(TypeRef::BOOLEAN),
move |ctx| {
let auth_config = auth_config.clone();
FieldFuture::new(async move {
let data_sources = ctx.data_unchecked::<DataSources>().clone();
let data_source = DataSources::get_data_source_by_name(
&data_sources,
&auth_config.data_source,
);
let identifier = match ctx.args.try_get("identifier") {
Ok(input) => input
.deserialize::<String>()
.expect("Failed to deserialize."),
Err(e) => {
return Err(async_graphql::Error::new(format!(
"Failed to get input: {:?}",
e
)));
}
};
let pub_key = match ctx.args.try_get("public_key") {
Ok(input) => input
.deserialize::<String>()
.expect("Failed to deserialize."),
Err(e) => {
ServiceSchema::delete_user(&data_source, &identifier).await?;
return Err(async_graphql::Error::new(format!(
"Failed to get input: {:?}",
e
)));
}
};
let user = ServiceSchema::get_user(&data_source, &identifier).await;
let user = match user {
Ok(user) => user,
Err(e) => {
return Err(async_graphql::Error::new(format!(
"Failed to get user: {:?}",
e
)))
}
};
if user.is_none() {
error!("User Not Found: {:?}", &identifier);
return Err(async_graphql::Error::new(format!(
"User Not Found: {:?}",
&identifier
)));
}
let webauthn = match ServiceSchema::build_webauthn(&auth_config) {
Ok(w) => Ok(w),
Err(e) => {
ServiceSchema::delete_user(&data_source, &identifier).await?;
Err(async_graphql::Error::new(format!(
"something went wrong when building webauthn: {:?}",
e
)))
}
}?;
let pub_key: Result<RegisterPublicKeyCredential, async_graphql::Error> =
serde_json::from_str(&pub_key).map_err(|e| {
async_graphql::Error::new(format!("Failed to deserialize: {:?}", e))
});
let pub_key = match pub_key {
Ok(pk) => pk,
Err(error) => {
ServiceSchema::delete_user(&data_source, &identifier).await?;
return Err(error);
}
};
let passkey = webauthn
.finish_passkey_registration(
&pub_key,
&user.clone().unwrap().registration_state,
)
.map_err(|e| {
async_graphql::Error::new(format!(
"Failed to finish registration: {:?}",
e
))
});
let passkey = match passkey {
Ok(pk) => pk,
Err(error) => {
ServiceSchema::delete_user(&data_source, &identifier).await?;
return Err(error);
}
};
// Update user with sk
let service_user = ServiceUser {
identifier: identifier.clone(),
registration_state: user.clone().unwrap().registration_state,
passkey: Some(passkey),
authentication_state: None,
uuid: user.unwrap().uuid,
};
let updated = ServiceSchema::update_user(&data_source, service_user).await;
match updated {
Ok(_) => (),
Err(e) => {
ServiceSchema::delete_user(&data_source, &identifier).await?;
return Err(e);
}
};
Ok(Some(Value::from(true)))
})
},
)
.argument(InputValue::new(
"identifier",
TypeRef::named_nn(TypeRef::STRING),
))
.argument(InputValue::new(
"public_key",
TypeRef::named_nn(TypeRef::STRING),
));
self.mutation = self.mutation.field(resolver);
self
}
}