drogue-bazaar 0.3.0

A place to find tools for building your Rust application
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

//! OpenID Connect tools

mod authenticator;
mod config;
mod validate;

pub use self::config::*;
pub use authenticator::*;
pub use openid::CustomClaims;

use drogue_client::user::v1::UserDetails;
use openid::{CompactJson, StandardClaims};
use serde::{Deserialize, Serialize};

#[derive(Clone, Debug, Deserialize, Serialize)]
pub struct ExtendedClaims {
    #[serde(flatten)]
    standard_claims: StandardClaims,
    #[serde(flatten)]
    pub extended_claims: serde_json::Value,
}

impl CustomClaims for ExtendedClaims {
    fn standard_claims(&self) -> &StandardClaims {
        &self.standard_claims
    }
}

impl CompactJson for ExtendedClaims {}

impl From<ExtendedClaims> for UserDetails {
    fn from(claims: ExtendedClaims) -> Self {
        // TODO: This currently on works for Keycloak
        let mut roles = Vec::new();

        // realm access

        let r = &claims.extended_claims["realm_access"]["roles"];
        if let Some(r) = r.as_array() {
            roles.extend(r.iter().filter_map(|v| v.as_str()).map(Into::into));
        }

        for client in ["services", "drogue"] {
            let r = &claims.extended_claims["resource_access"][client]["roles"];
            if let Some(r) = r.as_array() {
                roles.extend(r.iter().filter_map(|v| v.as_str()).map(Into::into));
            }
        }

        Self {
            user_id: claims.standard_claims.sub,
            roles,
        }
    }
}