junobuild-satellite 0.6.0

Core implementation of a Juno Satellite.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

use crate::auth::strategy_impls::AuthHeap;
use crate::certification::strategy_impls::AuthCertificate;
use junobuild_auth::delegation;
use junobuild_auth::delegation::types::{
    GetDelegationError, GetDelegationResult, OpenIdGetDelegationArgs, OpenIdPrepareDelegationArgs,
    PrepareDelegationError, PreparedDelegation,
};
use junobuild_auth::openid::credentials;
use junobuild_auth::openid::credentials::delegation::types::interface::OpenIdDelegationCredential;
use junobuild_auth::openid::types::provider::OpenIdDelegationProvider;
use junobuild_auth::state::types::config::OpenIdAuthProviders;

pub type OpenIdPrepareDelegationResult = Result<
    (
        PreparedDelegation,
        OpenIdDelegationProvider,
        OpenIdDelegationCredential,
    ),
    PrepareDelegationError,
>;

pub async fn openid_prepare_delegation(
    args: &OpenIdPrepareDelegationArgs,
    providers: &OpenIdAuthProviders,
) -> OpenIdPrepareDelegationResult {
    let (credential, provider) =
        match credentials::delegation::verify_openid_credentials_with_jwks_renewal(
            &args.jwt, &args.salt, providers, &AuthHeap,
        )
        .await
        {
            Ok(value) => value,
            Err(err) => return Err(PrepareDelegationError::from(err)),
        };

    let result = delegation::openid_prepare_delegation(
        &args.session_key,
        &credential,
        &provider,
        &AuthHeap,
        &AuthCertificate,
    );

    result.map(|prepared_delegation| (prepared_delegation, provider, credential))
}

pub fn openid_get_delegation(
    args: &OpenIdGetDelegationArgs,
    providers: &OpenIdAuthProviders,
) -> GetDelegationResult {
    let (credential, provider) =
        match credentials::delegation::verify_openid_credentials_with_cached_jwks(
            &args.jwt, &args.salt, providers, &AuthHeap,
        ) {
            Ok(value) => value,
            Err(err) => return Err(GetDelegationError::from(err)),
        };

    delegation::openid_get_delegation(
        &args.session_key,
        args.expiration,
        &credential,
        &provider,
        &AuthHeap,
        &AuthCertificate,
    )
}