oauth2-passkey 0.6.0

OAuth2 and Passkey authentication library for Rust web applications
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122

//! Test utilities for session module tests

use super::user_sessions::add_session_to_user_mapping;
use crate::session::errors::SessionError;
use crate::session::types::{SessionId, StoredSession, UserId};
use crate::storage::{CacheData, CacheErrorConversion, CacheKey, CachePrefix, GENERIC_CACHE_STORE};
use crate::userdb::User;
use crate::userdb::UserStore;
use chrono::{Duration, Utc};

/// Insert a test user in the database for testing
#[cfg(test)]
pub(crate) async fn insert_test_user(
    user_id: UserId,
    account: &str,
    label: &str,
    is_admin: bool,
) -> Result<User, SessionError> {
    let user = User {
        sequence_number: None,
        id: user_id.as_str().to_string(),
        account: account.to_string(),
        label: label.to_string(),
        is_admin,
        created_at: Utc::now(),
        updated_at: Utc::now(),
    };

    UserStore::upsert_user(user)
        .await
        .map_err(|e| SessionError::Storage(e.to_string()))
}

/// Insert a test session in the cache for testing
#[cfg(test)]
pub(crate) async fn insert_test_session(
    session_id: SessionId,
    user_id: UserId,
    csrf_token: &str,
    ttl: u64,
) -> Result<(), SessionError> {
    let expires_at = Utc::now() + Duration::seconds(ttl as i64);

    let stored_session = StoredSession {
        user_id: user_id.as_str().to_string(),
        csrf_token: csrf_token.to_string(),
        expires_at,
        ttl,
    };

    let cache_data = CacheData {
        value: serde_json::to_string(&stored_session)
            .map_err(|e| SessionError::Storage(e.to_string()))?,
    };

    let cache_key = CacheKey::new(session_id.as_str().to_string())
        .map_err(SessionError::convert_storage_error)?;

    GENERIC_CACHE_STORE
        .lock()
        .await
        .put_with_ttl(CachePrefix::session(), cache_key, cache_data, ttl as usize)
        .await
        .map_err(SessionError::convert_storage_error)?;

    // Also update the user_sessions mapping for session count tracking
    add_session_to_user_mapping(user_id.as_str(), session_id.as_str()).await?;

    Ok(())
}

/// Create a test user and session for testing
#[cfg(test)]
pub(crate) async fn create_test_user_and_session(
    user_id: UserId,
    account: &str,
    label: &str,
    is_admin: bool,
    session_id: SessionId,
    csrf_token: &str,
    ttl: u64,
) -> Result<(User, ()), SessionError> {
    let user = insert_test_user(user_id.clone(), account, label, is_admin).await?;
    insert_test_session(session_id, user_id, csrf_token, ttl).await?;
    Ok((user, ()))
}

/// Delete a test session from cache for cleanup
#[cfg(test)]
pub(crate) async fn delete_test_session(session_id: SessionId) -> Result<(), SessionError> {
    let cache_key = CacheKey::new(session_id.as_str().to_string())
        .map_err(SessionError::convert_storage_error)?;

    GENERIC_CACHE_STORE
        .lock()
        .await
        .remove(CachePrefix::session(), cache_key)
        .await
        .map_err(SessionError::convert_storage_error)?;
    Ok(())
}

/// Delete a test user from database for cleanup
#[cfg(test)]
pub(crate) async fn delete_test_user(user_id: UserId) -> Result<(), SessionError> {
    UserStore::delete_user(user_id)
        .await
        .map_err(|e| SessionError::Storage(e.to_string()))?;
    Ok(())
}

/// Clean up test resources (user and session) for testing
#[cfg(test)]
pub(crate) async fn cleanup_test_resources(
    user_id: UserId,
    session_id: SessionId,
) -> Result<(), SessionError> {
    // Delete session first, then user (order matters for referential integrity)
    delete_test_session(session_id).await.ok(); // Ignore errors since session might not exist
    delete_test_user(user_id).await.ok(); // Ignore errors since user might not exist
    Ok(())
}