galata-vault 0.4.0

End-to-end-encrypted secrets and config documents with no accounts: the galata-vault Rust SDK. A token client and the owner API over a pluggable transport, with an optional in-process backend.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

//! Answers as HTTP responses: a core answer, or an error the shell raises
//! itself (a body over the limit, a credential in the query string). Either
//! way: a stable code, a human message, never the request body, a token,
//! ciphertext or a client address.

use std::borrow::Cow;

use crate::proto::api::ErrorCode;
use crate::server_core::{CoreError, CoreResponse};
use axum::http::header::{CONTENT_TYPE, ETAG, RETRY_AFTER};
use axum::http::{HeaderValue, StatusCode};
use axum::response::{IntoResponse, Response};

use crate::server::EXPIRES_HEADER;

/// An error the shell answers with.
#[derive(Debug, Clone, PartialEq, Eq)]
pub struct ApiError(pub CoreError);

impl ApiError {
    pub fn new(code: ErrorCode, message: impl Into<Cow<'static, str>>) -> ApiError {
        ApiError(CoreError::new(code, message))
    }
}

impl From<CoreError> for ApiError {
    fn from(e: CoreError) -> ApiError {
        ApiError(e)
    }
}

impl IntoResponse for ApiError {
    fn into_response(self) -> Response {
        if let Some(detail) = self.0.detail() {
            tracing::error!("{detail}");
        }
        into_http(self.0.to_response())
    }
}

/// A core answer as an HTTP response: the status, a JSON body, and the
/// headers the protocol reads.
pub(crate) fn into_http(answer: CoreResponse) -> Response {
    let status = StatusCode::from_u16(answer.status).unwrap_or(StatusCode::INTERNAL_SERVER_ERROR);
    let mut response = (
        status,
        [(CONTENT_TYPE, HeaderValue::from_static("application/json"))],
        answer.body,
    )
        .into_response();
    let headers = response.headers_mut();
    if let Some(version) = answer.etag {
        headers.insert(ETAG, version_tag(version));
    }
    if let Some(at) = answer.expires_at {
        headers.insert(EXPIRES_HEADER, HeaderValue::from(at));
    }
    if let Some(secs) = answer.retry_after {
        headers.insert(RETRY_AFTER, HeaderValue::from(secs));
    }
    response
}

/// `"<version>"`: digits and quotes, always a valid header value.
fn version_tag(version: u64) -> HeaderValue {
    HeaderValue::from_str(&format!("\"{version}\"")).expect("digits and quotes are a valid header")
}