fr-rust 0.2.0

A comprehensive framework/utility library for Actix-web, Postgres, Redis, and authentication.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

use crate::prelude::*;
use rand::Rng;
use deadpool_redis::redis::AsyncCommands;
use crate::crypto::crypto::CryptoError;

// --- ERROR HANDLING ---
#[derive(thiserror::Error, Debug)]
pub enum OtpError {
    #[error("Redis manager error: {0}")]
    RedisManager(#[from] RedisManagerError),

    #[error("Redis error: {0}")]
    Redis(#[from] deadpool_redis::redis::RedisError),

    #[error("Redis pool error: {0}")]
    RedisPool(#[from] deadpool_redis::PoolError),

    #[error("Crypto error: {0}")]
    Crypto(#[from] CryptoError),
}


pub type Result<T> = std::result::Result<T, OtpError>;

// --- SERVICE IMPLEMENTATION ---

#[derive(Clone)]
pub struct OtpConfig {
    pub secret: String,
    pub crypto: CryptoService,
    pub redis: RedisManager,
}

#[derive(Clone)]
pub struct OtpService {
    config: OtpConfig,
}

impl OtpService {
    pub fn new(config: OtpConfig) -> Self {
        Self { config }
    }

    pub async fn generate_otp(&self, user_id: &str, digits: u32, expiry_time: u64) -> Result<String> {
        let otp = Self::random_digits(digits);
        let content_to_hash = format!("{}:{}", self.config.secret, otp);
        let hash = self.config.crypto.sha_hash(&content_to_hash)?;
        let redis_key = format!("otp:{}", user_id);
        
        let mut con = self.config.redis.get_connection().await?;
        
        let _res: () = con.set_ex(&redis_key, &hash, expiry_time).await?;
        
        Ok(otp)
    }

    pub async fn verify_otp(&self, user_id: &str, otp: &str) -> Result<bool> {
        let redis_key = format!("otp:{}", user_id);
        
        let mut con = self.config.redis.get_connection().await?;
        let stored_hash: Option<String> = con.get(&redis_key).await?;
        
        let hash_to_check = match stored_hash {
            Some(h) => h,
            None => return Ok(false),
        };
        
        let content_to_hash = format!("{}:{}", self.config.secret, otp);
        let calculated_hash = self.config.crypto.sha_hash(&content_to_hash)?;
        let ok = calculated_hash == hash_to_check;
        
        if ok {
            let _res: () = con.del(&redis_key).await?;
        }
        
        Ok(ok)
    }

    fn random_digits(digits: u32) -> String {
        let mut bytes = [0u8; 8];

        rand::rng().fill_bytes(&mut bytes);
        
        let num = u64::from_le_bytes(bytes);
        let otp = num % 10u64.pow(digits);
        format!("{:0width$}", otp, width = digits as usize)
    }
}