fusio 0.2.0

Fusio provides lean, minimal cost abstraction and extensible Read / Write trait to multiple storage on multiple poll-based / completion-based async runtime.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63

use base64::{prelude::BASE64_STANDARD, Engine};
use bytes::Bytes;
use http::Request;
use http_body::Body;
use http_body_util::BodyExt;
use ring::digest::{self, Context};

use super::{credential::AuthorizeError, options::S3Options, CHECKSUM_HEADER};
use crate::remotes::aws::credential::AwsAuthorizer;

pub(crate) trait Sign {
    async fn checksum(&mut self, options: &S3Options) -> Result<(), AuthorizeError>;

    async fn sign(&mut self, options: &S3Options) -> Result<(), AuthorizeError>;
}

impl<B> Sign for Request<B>
where
    B: Body<Data = Bytes> + Clone + Unpin,
    B::Error: std::error::Error + Send + Sync + 'static,
{
    async fn checksum(&mut self, options: &S3Options) -> Result<(), AuthorizeError> {
        if options.credential.is_some() && options.checksum {
            let mut sha256 = Context::new(&digest::SHA256);
            sha256.update(
                &self
                    .body()
                    .clone()
                    .collect()
                    .await
                    .map_err(|e| AuthorizeError::SignHashFailed(e.into()))?
                    .to_bytes(),
            );
            let payload_sha256 = sha256.finish();
            self.headers_mut().insert(
                CHECKSUM_HEADER,
                BASE64_STANDARD.encode(payload_sha256).parse().unwrap(),
            );
        }
        Ok(())
    }

    async fn sign(&mut self, options: &S3Options) -> Result<(), AuthorizeError> {
        self.checksum(options).await?;

        let credential = if let Some(credential) = options.credential.as_ref() {
            credential
        } else {
            return Ok(());
        };

        let authorizer = AwsAuthorizer::new(credential, "s3", &options.region).with_sign_payload(
            if options.checksum {
                false
            } else {
                options.sign_payload
            },
        );
        authorizer.authorize(self).await?;

        Ok(())
    }
}