loco-keycloak-auth 0.1.0

A plug-and-play Keycloak authentication layer for Loco.rs, powered by axum-keycloak-auth. This crate allows you to easily add secure Keycloak authentication to your Loco web app, with full control over protected routes and clean YAML-based config.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

pub mod initializer;
pub mod settings;

pub use axum_keycloak_auth::decode::KeycloakToken;
use axum_keycloak_auth::{
    Url,
    instance::{KeycloakAuthInstance, KeycloakConfig},
    layer::KeycloakAuthLayer,
};
use loco_rs::prelude::*;
use settings::{KeycloakSettings, Settings};

/// Keycloak is a struct that holds the Keycloak authentication layer.
/// ## Usage
/// ```rust
/// let keycloak = Keycloak::from_context(ctx).expect("Failed to create Keycloak layer");
/// let router = Router::new()
///     .route("/protected", get(protected_handler))
///    .layer(keycloak.layer);
/// ```
pub struct Keycloak {
    pub layer: KeycloakAuthLayer<String>,
}

impl Keycloak {
    pub fn from_context(ctx: &AppContext) -> Result<Self> {
        build_keycloak_layer(ctx).map(|layer| Keycloak { layer })
    }
}

/// This function builds the Keycloak authentication layer using the settings
/// from the application context.
pub fn build_keycloak_layer(ctx: &AppContext) -> Result<KeycloakAuthLayer<String>> {
    let full_settings: Settings = serde_json::from_value(
        ctx.config
            .settings
            .clone()
            .ok_or_else(|| Error::Message("Missing `settings` in config".into()))?,
    )
    .map_err(|err| Error::Message(format!("Invalid settings: {}", err)))?;

    let settings: KeycloakSettings = full_settings.keycloak_settings;

    let instance =
        KeycloakAuthInstance::new(
            KeycloakConfig::builder()
                .server(Url::parse(&settings.url).map_err(|err| {
                    Error::Message(format!("Invalid Keycloak server URL: {}", err))
                })?)
                .realm(settings.realm)
                .build(),
        );

    Ok(KeycloakAuthLayer::<String>::builder()
        .instance(instance)
        .passthrough_mode(settings.passthrough_mode.0)
        .persist_raw_claims(settings.persist_raw_claims)
        .expected_audiences(settings.expected_audiences)
        .build())
}