doido-auth 0.0.17

Unified authentication for Doido — AuthUser trait, extractors, strategies, and auth generators.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

//! Pluggable authentication strategies.

use crate::error::AuthError;
use crate::identity::AuthIdentity;
use async_trait::async_trait;
use doido_core::Result;
use doido_model::sea_orm::DatabaseConnection;
use http::request::Parts;

/// A pluggable auth backend (cookie session, JWT bearer, LDAP, …).
#[async_trait]
pub trait AuthStrategy: Send + Sync {
    fn name(&self) -> &str;

    async fn authenticate(
        &self,
        parts: &Parts,
        db: &DatabaseConnection,
    ) -> Result<Option<AuthIdentity>>;
}

/// Read the resolved identity from request extensions, if any.
pub fn identity_from_parts(parts: &Parts) -> Option<AuthIdentity> {
    parts.extensions.get::<AuthIdentity>().cloned()
}

/// Read the resolved identity or return [`AuthError::Unauthorized`].
pub fn require_identity(parts: &Parts) -> Result<AuthIdentity, AuthError> {
    identity_from_parts(parts).ok_or(AuthError::Unauthorized)
}