mycelium-api 9.0.0

Provide API ports to the mycelium project.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105

use crate::dtos::{MyceliumProfileData, TenantData};

use crate::models::active_backend_modules::SqlAppModule;
use actix_web::{post, web, HttpResponse, Responder};
use myc_core::{
    domain::entities::TenantRegistration, models::AccountLifeCycle,
    use_cases::gateway::telegram::set_telegram_config,
};
use myc_http_tools::{
    utils::HttpJsonResponse,
    wrappers::default_response_to_http_response::handle_mapped_error,
};
use serde::Deserialize;
use shaku::HasComponent;
use utoipa::ToSchema;

// ? ---------------------------------------------------------------------------
// ? Configure application
// ? ---------------------------------------------------------------------------

pub fn configure(config: &mut web::ServiceConfig) {
    config.service(set_telegram_config_url);
}

// ? ---------------------------------------------------------------------------
// ? Define API structs
// ? ---------------------------------------------------------------------------

#[derive(Deserialize, ToSchema)]
#[serde(rename_all = "camelCase")]
pub struct SetTelegramConfigBody {
    bot_token: String,
    webhook_secret: String,
}

// ? ---------------------------------------------------------------------------
// ? Define API paths
// ? ---------------------------------------------------------------------------

/// Configure Telegram bot credentials for a tenant
///
/// Accepts plain bot token and webhook secret, encrypts both with
/// AES-256-GCM, and stores the ciphertexts in tenant meta. Only the tenant
/// owner may call this endpoint.
///
/// After this call succeeds, `POST /auth/telegram/link` and
/// `POST /auth/telegram/login/{tenant_id}` become operational for the tenant.
///
#[utoipa::path(
    post,
    path = "/tenant-owner/telegram/config",
    operation_id = "set_telegram_config",
    params(
        (
            "x-mycelium-tenant-id" = Uuid,
            Header,
            description = "The tenant unique id.",
        )
    ),
    request_body = SetTelegramConfigBody,
    responses(
        (
            status = 204,
            description = "Telegram credentials configured successfully.",
        ),
        (
            status = 401,
            description = "Unauthorized.",
            body = HttpJsonResponse,
        ),
        (
            status = 403,
            description = "Forbidden — caller is not a tenant owner.",
            body = HttpJsonResponse,
        ),
        (
            status = 500,
            description = "Unknown internal server error.",
            body = HttpJsonResponse,
        ),
    ),
)]
#[post("")]
pub async fn set_telegram_config_url(
    profile: MyceliumProfileData,
    tenant: TenantData,
    body: web::Json<SetTelegramConfigBody>,
    life_cycle_settings: web::Data<AccountLifeCycle>,
    app_module: web::Data<SqlAppModule>,
) -> impl Responder {
    match set_telegram_config(
        profile.to_profile(),
        tenant.tenant_id().to_owned(),
        body.bot_token.clone(),
        body.webhook_secret.clone(),
        life_cycle_settings.get_ref().clone(),
        Box::new(&*app_module.resolve_ref() as &dyn TenantRegistration),
        Box::new(&*app_module.resolve_ref()),
    )
    .await
    {
        Ok(_) => HttpResponse::NoContent().finish(),
        Err(err) => handle_mapped_error(err),
    }
}