efi-bank 0.1.3

A SDK for interacting with the EFI Bank.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96

use std::time::{Duration, Instant};

use serde::Deserialize;
use serde_json::json;

use crate::client::Client;
use crate::error::EfiError;

const TOKEN_REFRESH_SKEW_SECS: u64 = 30;

#[derive(Debug)]
pub(crate) struct AccessToken {
    pub(crate) value: String,
    pub(crate) expires_at: Instant,
}

impl AccessToken {
    pub(crate) fn is_expired(&self) -> bool {
        let refresh_skew = Duration::from_secs(TOKEN_REFRESH_SKEW_SECS);
        Instant::now() + refresh_skew >= self.expires_at
    }
}

#[derive(Debug, Deserialize)]
struct OAuthResponse {
    access_token: String,
    expires_in: u64,
}

impl Client {
    pub fn authenticate(&self) -> Result<(), EfiError> {
        let endpoints = self.endpoints();
        self.authenticate_with_url(endpoints.pix_api_oauth_token_url)
    }

    pub fn authenticate_billing(&self) -> Result<(), EfiError> {
        let endpoints = self.endpoints();
        self.authenticate_with_url(endpoints.billing_api_oauth_token_url)
    }

    pub(crate) fn get_valid_access_token(&self) -> Result<String, EfiError> {
        self.get_valid_access_token_with(Self::authenticate)
    }

    pub(crate) fn get_valid_billing_access_token(&self) -> Result<String, EfiError> {
        self.get_valid_access_token_with(Self::authenticate_billing)
    }

    fn authenticate_with_url(&self, token_url: &str) -> Result<(), EfiError> {
        let response = self
            .http
            .post(token_url)
            .basic_auth(&self.id, Some(&self.secret))
            .json(&json!({ "grant_type": "client_credentials" }))
            .send()?;

        if !response.status().is_success() {
            let status = response.status();
            let body = response.text().unwrap_or_else(|_| String::new());
            return Err(EfiError::RequestFailed { status, body });
        }

        let oauth = response.json::<OAuthResponse>()?;
        let expires_at = Instant::now() + Duration::from_secs(oauth.expires_in);

        self.token
            .lock()
            .map_err(|_| EfiError::AuthUnavailable)?
            .replace(AccessToken {
                value: oauth.access_token,
                expires_at,
            });

        Ok(())
    }

    fn get_valid_access_token_with(
        &self,
        authenticate: fn(&Self) -> Result<(), EfiError>,
    ) -> Result<String, EfiError> {
        let needs_authentication = {
            let token = self.token.lock().map_err(|_| EfiError::AuthUnavailable)?;
            token.as_ref().is_none_or(AccessToken::is_expired)
        };

        if needs_authentication {
            authenticate(self)?;
        }

        let token = self.token.lock().map_err(|_| EfiError::AuthUnavailable)?;
        token
            .as_ref()
            .map(|cached| cached.value.clone())
            .ok_or(EfiError::AuthUnavailable)
    }
}