modo-rs 0.8.0

Rust web framework for small monolithic apps
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85

//! [`Session`] — transport-agnostic session data type and axum extractor.
//!
//! Populated into request extensions by [`super::cookie::CookieSessionLayer`]
//! (cookie transport) or [`super::jwt::JwtLayer`] (JWT transport). Handlers
//! extract it the same way regardless of which transport is active.

use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};

/// One authenticated session, regardless of transport.
///
/// Populated into request extensions by `CookieSessionLayer` (cookie transport)
/// or `JwtLayer` (JWT transport). Handlers extract it directly:
///
/// ```rust,ignore
/// async fn me(session: Session) -> String {
///     session.user_id
/// }
/// ```
///
/// Returns `401 auth:session_not_found` when no row is loaded. Use
/// `Option<Session>` for routes that serve both authenticated and
/// unauthenticated callers.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Session {
    pub id: String,
    pub user_id: String,
    pub ip_address: String,
    pub user_agent: String,
    pub device_name: String,
    pub device_type: String,
    pub fingerprint: String,
    pub data: serde_json::Value,
    pub created_at: DateTime<Utc>,
    pub last_active_at: DateTime<Utc>,
    pub expires_at: DateTime<Utc>,
}

use super::store::SessionData;

impl From<SessionData> for Session {
    fn from(raw: SessionData) -> Self {
        Self {
            id: raw.id,
            user_id: raw.user_id,
            ip_address: raw.ip_address,
            user_agent: raw.user_agent,
            device_name: raw.device_name,
            device_type: raw.device_type,
            fingerprint: raw.fingerprint,
            data: raw.data,
            created_at: raw.created_at,
            last_active_at: raw.last_active_at,
            expires_at: raw.expires_at,
        }
    }
}

use axum::extract::{FromRequestParts, OptionalFromRequestParts};
use http::request::Parts;

use crate::Error;

impl<S: Send + Sync> FromRequestParts<S> for Session {
    type Rejection = Error;

    async fn from_request_parts(parts: &mut Parts, _state: &S) -> Result<Self, Self::Rejection> {
        parts
            .extensions
            .get::<Session>()
            .cloned()
            .ok_or_else(|| Error::unauthorized("unauthorized").with_code("auth:session_not_found"))
    }
}

impl<S: Send + Sync> OptionalFromRequestParts<S> for Session {
    type Rejection = Error;

    async fn from_request_parts(
        parts: &mut Parts,
        _state: &S,
    ) -> Result<Option<Self>, Self::Rejection> {
        Ok(parts.extensions.get::<Session>().cloned())
    }
}