micron 0.1.0

Build web apps fast. Repeat.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

use axum::body::HttpBody;
use axum::http::Uri;
use axum::response::{AppendHeaders, Html, IntoResponse, Redirect, Response};
use axum::Json;
use http::header::SET_COOKIE;
use http::StatusCode;

use crate::{routes, Error, ErrorKind};

/// Implements conversion into html response for all possible error variants.
///
/// # Error message stripping in production
///
/// When compiled with optimizations ("release mode"), responses are stripped
/// or even modified to enhance security.
///
/// Backtrace and additional context information (e.g. user information) are
/// never part of the response and always only available through the
/// application logs.
impl IntoResponse for Error {
    fn into_response(self) -> Response {
        match &self.kind {
            ErrorKind::Forbidden => StatusCode::FORBIDDEN.into_response(),
            ErrorKind::AuthFailed { .. } => {
                tracing::debug!("{}", self.to_string());
                if cfg!(debug_assertions) {
                    (StatusCode::FORBIDDEN, Html(self.to_string())).into_response()
                } else {
                    Redirect::to("/login").into_response()
                }
            }
            ErrorKind::InvalidCredentials => {
                tracing::debug!("{}", self.to_string());
                (StatusCode::FORBIDDEN, Html(self.to_string())).into_response()
            }
            ErrorKind::PasswordNotSet { .. } => {
                tracing::debug!("{}", self.to_string());
                let msg = if cfg!(debug_assertions) {
                    self.kind.to_string()
                } else {
                    // Don't make it possible for anyone to check if user has
                    // their password set. Return a standard error response
                    // instead.
                    "Invalid credentials".to_string()
                };
                // TODO: immediately send email to the user with a link to set
                // a new password
                (StatusCode::FORBIDDEN, Html(msg)).into_response()
            }
            ErrorKind::AccountDisabled => {
                tracing::debug!("{}", self.to_string());
                // TODO: send email to the user with a link to set password
                (StatusCode::FORBIDDEN, Html(self.to_string())).into_response()
            }

            ErrorKind::FailedGettingTokenCookie(target_url) => {
                tracing::debug!("{}", self.to_string());
                // Save redirection target to a cookie so that we can perform
                // the final redirection after successful login
                (
                    AppendHeaders([(
                        SET_COOKIE,
                        format!("next={};SameSite=Lax;Secure;Path=/", target_url.to_string()),
                    )]),
                    Redirect::to("/login"),
                )
                    .into_response()
            }
            ErrorKind::RegistrationClosed(e) => {
                tracing::trace!("{}", self.to_string());
                Redirect::to(&format!("{}?msg=Registration closed", routes::LOGIN)).into_response()
            }
            ErrorKind::BadInput(e) => {
                tracing::trace!("{}", self.to_string());
                (StatusCode::BAD_REQUEST, Html(self.to_string())).into_response()
            }
            _ => {
                tracing::error!("{}", self.to_string());
                // let id = tracing::Span::current().field("id").unwrap().to_string();
                let span = tracing::Span::current();
                println!("current span: {:?}", span);
                if let Some(id) = span.field("id") {
                    println!("id: {}", id.to_string());
                    (StatusCode::INTERNAL_SERVER_ERROR, id.to_string()).into_response()
                } else {
                    (StatusCode::INTERNAL_SERVER_ERROR, "").into_response()
                }
            }
        }
    }
}