gateryx 0.1.6

Secure HTTP gateway for IoT and Industrial applications
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126

use std::{path::Path, sync::Arc, time::Duration};

use async_trait::async_trait;
use bma_ts::Timestamp;
use serde::Deserialize;
use tokio::task::JoinHandle;
use tracing::error;
use webauthn_rs::prelude::Passkey;
use zeroize::{Zeroize, ZeroizeOnDrop};

use crate::{
    ConfigCheckIssue, Error, Result,
    authenticator::{GroupInfo, UserInfo},
    util::{GDuration, Numeric},
};

mod dummy;
mod postgres;
mod sqlt;

#[async_trait]
pub trait Storage: Send + Sync {
    async fn init(&self) -> Result<()> {
        Ok(())
    }

    async fn cleanup(&self) -> Result<()> {
        Ok(())
    }

    fn spawn_cleanup_worker(self: Arc<Self>, int: Duration) -> JoinHandle<()>
    where
        Self: Send + Sync + 'static,
    {
        tokio::spawn(async move {
            let mut interval = tokio::time::interval(int);
            loop {
                interval.tick().await;
                if let Err(e) = self.cleanup().await {
                    error!(error = %e, "Storage cleanup failed" );
                }
            }
        })
    }

    async fn invalidate(&self, sub: &str) -> Result<()>;

    async fn is_token_revoked(&self, sub: &str, t_issued: Timestamp) -> Result<bool>;

    async fn lookup_passkey(&self, cred_id: &[u8]) -> Result<Option<(String, Passkey)>>;

    async fn save_passkey(&self, user: &str, passkey: Passkey) -> Result<()>;

    async fn has_passkey(&self, user: &str) -> Result<bool>;

    async fn delete_passkey(&self, user: &str) -> Result<()>;

    async fn create_user(&self, user: &str, _password_hash: &str) -> Result<()>;

    async fn set_user_password(&self, _user: &str, _password_hash: &str) -> Result<()>;

    async fn delete_user(&self, user: &str) -> Result<()>;

    // returns password hash
    async fn lookup_user(&self, user: &str) -> Result<Option<String>>;

    async fn touch_user(&self, user: &str) -> Result<()>;

    async fn list_users(&self) -> Result<Vec<UserInfo>>;

    async fn user_groups(&self, user: &str) -> Result<Vec<String>>;

    async fn list_groups(&self) -> Result<Vec<GroupInfo>>;

    async fn add_group(&self, group: &str) -> Result<()>;

    async fn delete_group(&self, group: &str) -> Result<()>;

    async fn add_user_to_group(&self, user: &str, group: &str) -> Result<()>;

    async fn remove_user_from_group(&self, user: &str, group: &str) -> Result<()>;
}

#[derive(Deserialize, Zeroize, ZeroizeOnDrop)]
pub struct Config {
    uri: String,
    #[zeroize(skip)]
    pool_size: Numeric,
    #[zeroize(skip)]
    timeout: GDuration,
}

impl Config {
    pub fn check(&self, _work_dir: &Path) -> Vec<ConfigCheckIssue> {
        let mut issues = Vec::new();
        if !self.uri.starts_with("sqlite://") && !self.uri.starts_with("postgres://") {
            issues.push(ConfigCheckIssue::Error(
                "Only sqlite and postgres storage are supported".to_string(),
            ));
        }
        if u32::from(self.pool_size) == 0 {
            issues.push(ConfigCheckIssue::Error(
                "Pool size must be greater than 0".to_string(),
            ));
        }
        if self.timeout.as_secs() == 0 {
            issues.push(ConfigCheckIssue::Error(
                "Timeout must be greater than 0".to_string(),
            ));
        }
        issues
    }
}

pub async fn create(config: Option<&Config>) -> Result<Arc<dyn Storage + Send + Sync + 'static>> {
    let Some(config) = config else {
        return Ok(Arc::new(dummy::Storage::default()));
    };
    if config.uri.starts_with("postgres://") {
        return Ok(Arc::new(postgres::Storage::create(config).await?));
    }
    if config.uri.starts_with("sqlite://") {
        return Ok(Arc::new(sqlt::Storage::create(config).await?));
    }
    Err(Error::failed("Unsupported storage type"))
}