mockserver 0.1.6

A lightweight, file-based mock API server written in Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use base64::{Engine as _, engine::{general_purpose}};
use serde_yaml::Value;
use warp::reject::Reject;

#[derive(Debug)]
pub struct Unauthorized;

impl Reject for Unauthorized {}

pub fn validate_auth(auth: &Value, auth_header: Option<String>) -> bool {
    if let Some(header) = auth_header {
        if let Some(basic) = auth.get("basic") {
            if let (Some(user), Some(password)) = (basic.get("user"), basic.get("password")) {
                if let Ok(decoded) = general_purpose::STANDARD
                    .decode(header.replace("Basic ", "")) {
                    let creds = String::from_utf8_lossy(&decoded);
                    let expected = format!("{}:{}", user.as_str().unwrap(), password.as_str().unwrap());
                    return creds == expected;
                }
            }
        }

        if let Some(bearer) = auth.get("bearer") {
            if let Some(token) = bearer.get("token") {
                let provided_token = header.replace("Bearer ", "");
                if provided_token == token.as_str().unwrap() {
                    return validate_claims(bearer, &provided_token);
                }
            }
        }
    }

    false
}

fn validate_claims(expected_claims: &Value, token: &str) -> bool {
    let decoded_claims: Value = serde_json::from_str(token).unwrap_or_default();

    if let Some(expected_map) = expected_claims.as_mapping() {
        for (key, expected_value) in expected_map.iter() {
            if let Some(key_str) = key.as_str() {
                if key_str == "token" {
                    continue;
                }
                if let Some(actual_value) = decoded_claims.get(key_str) {
                    if actual_value != expected_value {
                        return false;
                    }
                } else {
                    return false; // Expected claim is missing
                }
            }
        }
    }
    
    true
}