minio-rsc 0.1.1

rust for minio
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126

//! Server-side encryption

use hyper::HeaderMap;

use crate::{errors::ValueError, utils::md5sum_hash};

/// Server-side encryption base trait.
pub trait Sse {
    /// Return headers.
    fn headers(&self) -> HeaderMap;

    /// Return copy headers.
    fn copy_headers(&self) -> HeaderMap {
        HeaderMap::new()
    }

    /// Return TLS required to use this server-side encryption.
    fn tls_required(&self) -> bool {
        true
    }
}

/// Server-side encryption - customer key type.
pub struct SseCustomerKey {
    headers: HeaderMap,
    copy_headers: HeaderMap,
}

impl SseCustomerKey {
    pub fn new(key: &str) -> Result<Self, ValueError> {
        if key.len() != 32 {
            return Err(ValueError::from(
                "SSE-C keys need to be 256 bit base64 encoded",
            ));
        }
        let b64_key = base64::encode(key);
        let md5_key = md5sum_hash(key.as_bytes());
        let mut headers = HeaderMap::new();
        headers.insert(
            "X-Amz-Server-Side-Encryption-Customer-Algorithm",
            "AES256".parse().unwrap(),
        );
        headers.insert(
            "X-Amz-Server-Side-Encryption-Customer-Key",
            b64_key.parse().unwrap(),
        );
        headers.insert(
            "X-Amz-Server-Side-Encryption-Customer-Key-MD5",
            md5_key.parse().unwrap(),
        );
        let mut copy_headers = HeaderMap::new();
        copy_headers.insert(
            "X-Amz-Copy-Source-Server-Side-Encryption-Customer-Algorithm",
            "AES256".parse().unwrap(),
        );
        copy_headers.insert(
            "X-Amz-Copy-Source-Server-Side-Encryption-Customer-Key",
            b64_key.parse().unwrap(),
        );
        copy_headers.insert(
            "X-Amz-Copy-Source-Server-Side-Encryption-Customer-Key-MD5",
            md5_key.parse().unwrap(),
        );
        Ok(Self {
            headers,
            copy_headers,
        })
    }
}

impl Sse for SseCustomerKey {
    fn headers(&self) -> HeaderMap {
        self.headers.clone()
    }

    fn copy_headers(&self) -> HeaderMap {
        self.copy_headers.clone()
    }
}

/// Server-side encryption - KMS type.
pub struct SseKMS(HeaderMap);

impl SseKMS {
    pub fn new(key: &str, content_json: Option<String>) -> Self {
        let mut header = HeaderMap::new();
        header.insert(
            "X-Amz-Server-Side-Encryption-Aws-Kms-Key-Id",
            key.parse().unwrap(),
        );
        if let Some(content) = content_json {
            header.insert(
                "X-Amz-Server-Side-Encryption-Context",
                base64::encode(content.as_bytes()).parse().unwrap(),
            );
        }
        Self(header)
    }
}

impl Sse for SseKMS {
    fn headers(&self) -> HeaderMap {
        self.0.clone()
    }
}

/// Server-side encryption - S3 type.
pub struct SseS3(HeaderMap);

impl SseS3 {
    pub fn new() -> Self {
        let mut header = HeaderMap::new();
        header.insert("X-Amz-Server-Side-Encryption", "AES256".parse().unwrap());
        Self(header)
    }
}

impl Sse for SseS3 {
    fn headers(&self) -> HeaderMap {
        self.0.clone()
    }

    fn tls_required(&self) -> bool {
        false
    }
}