macaroons 0.1.1

Bearer credentials with caveats for distributed authorization
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

pub use token::Token;

pub use sodiumoxide::crypto::auth::hmacsha256::{Key, Tag};
use sodiumoxide::crypto::auth::hmacsha256::authenticate;

#[derive(Clone)]
pub struct Predicate(pub Vec<u8>);

#[derive(Clone)]
pub struct Caveat {
  pub predicate: Predicate
}

impl Caveat {
  pub fn new(predicate: Predicate) -> Caveat {
    Caveat {
      predicate: predicate
    }
  }

  pub fn append(self, token: &Token) -> Token {
    let Tag(key_bytes) = token.tag;
    let Predicate(predicate_bytes) = self.predicate.clone();
    let tag = authenticate(&predicate_bytes, &Key(key_bytes));

    let mut new_caveats = token.caveats.to_vec();
    new_caveats.push(self);

    Token {
      identifier: token.identifier.clone(),
      location:   token.location.clone(),
      caveats:    new_caveats,
      tag:        tag
    }
  }
}