doido-auth 0.0.20

Unified authentication for Doido — AuthUser trait, extractors, strategies, and auth generators.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

//! Generic authenticated subject contract — apps implement this on their User model.

use doido_core::Result;
use doido_model::password::HasSecurePassword;
use doido_model::sea_orm::DatabaseConnection;
use serde::de::DeserializeOwned;
use serde::Serialize;
use std::future::Future;

/// The contract your User SeaORM model implements (manually or via `#[auth_user]`).
pub trait AuthUser: Clone + Send + Sync + 'static {
    /// Primary key type (`i64`, `Uuid`, …).
    type Id: Clone
        + Send
        + Sync
        + std::fmt::Debug
        + Serialize
        + DeserializeOwned
        + Into<serde_json::Value>
        + 'static;

    fn id(&self) -> Self::Id;
    fn email(&self) -> &str;
    fn password_digest(&self) -> Option<&str>;

    fn find_by_email(
        db: &DatabaseConnection,
        email: &str,
    ) -> impl Future<Output = Result<Option<Self>>> + Send;

    fn find_by_id(
        db: &DatabaseConnection,
        id: Self::Id,
    ) -> impl Future<Output = Result<Option<Self>>> + Send;
}

/// Verify `password` against `user`'s stored digest when present.
pub fn authenticate_password<U: AuthUser + HasSecurePassword>(user: &U, password: &str) -> bool {
    user.authenticate(password)
}