ockam_api 0.93.0

Ockam's request-response API
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108

use ockam::identity::models::CredentialAndPurposeKey;
use ockam::identity::{CredentialRetrieverCreator, Identifier, RemoteCredentialRetrieverInfo};
use ockam_core::errcode::{Kind, Origin};
use std::fmt::Display;
use std::str::FromStr;
use std::sync::Arc;

pub const PROJECT_MEMBER_SCOPE_PREFIX: &str = "project-member-";
pub const PROJECT_ADMIN_SCOPE_PREFIX: &str = "project-admin-";
pub const ACCOUNT_ADMIN_SCOPE_PREFIX: &str = "account-admin-";

#[derive(Clone)]
pub struct CredentialRetrieverCreators {
    pub(crate) project_member: Option<Arc<dyn CredentialRetrieverCreator>>,
    pub(crate) project_admin: Option<Arc<dyn CredentialRetrieverCreator>>,
    pub(crate) _account_admin: Option<Arc<dyn CredentialRetrieverCreator>>,
}

#[derive(Debug)]
pub enum CredentialScope {
    ProjectMember { project_id: String },
    ProjectAdmin { project_id: String },
    AccountAdmin { account_id: String },
}

impl FromStr for CredentialScope {
    type Err = ockam_core::Error;

    fn from_str(s: &str) -> Result<Self, Self::Err> {
        if let Some(project_id) = s.strip_prefix(PROJECT_MEMBER_SCOPE_PREFIX) {
            return Ok(CredentialScope::ProjectMember {
                project_id: project_id.to_string(),
            });
        }

        if let Some(project_id) = s.strip_prefix(PROJECT_ADMIN_SCOPE_PREFIX) {
            return Ok(CredentialScope::ProjectAdmin {
                project_id: project_id.to_string(),
            });
        }

        if let Some(account_id) = s.strip_prefix(ACCOUNT_ADMIN_SCOPE_PREFIX) {
            return Ok(CredentialScope::AccountAdmin {
                account_id: account_id.to_string(),
            });
        }

        Err(ockam_core::Error::new(
            Origin::Api,
            Kind::Invalid,
            "Invalid credential scope format",
        ))
    }
}

impl Display for CredentialScope {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        let str = match self {
            CredentialScope::ProjectMember { project_id } => {
                format!("{}{}", PROJECT_MEMBER_SCOPE_PREFIX, project_id)
            }
            CredentialScope::ProjectAdmin { project_id } => {
                format!("{}{}", PROJECT_ADMIN_SCOPE_PREFIX, project_id)
            }
            CredentialScope::AccountAdmin { account_id } => {
                format!("{}{}", ACCOUNT_ADMIN_SCOPE_PREFIX, account_id)
            }
        };
        write!(f, "{}", str)
    }
}

#[derive(Debug)]
pub enum NodeManagerCredentialRetrieverOptions {
    None,
    CacheOnly {
        issuer: Identifier,
        scope: String,
    },
    Remote {
        info: RemoteCredentialRetrieverInfo,
        scope: String,
    },
    InMemory(CredentialAndPurposeKey),
}

pub struct NodeManagerTrustOptions {
    pub(super) project_member_credential_retriever_options: NodeManagerCredentialRetrieverOptions,
    pub(super) project_authority: Option<Identifier>,
    pub(super) project_admin_credential_retriever_options: NodeManagerCredentialRetrieverOptions,
    pub(super) _account_admin_credential_retriever_options: NodeManagerCredentialRetrieverOptions,
}

impl NodeManagerTrustOptions {
    pub fn new(
        project_member_credential_retriever_options: NodeManagerCredentialRetrieverOptions,
        project_admin_credential_retriever_options: NodeManagerCredentialRetrieverOptions,
        project_authority: Option<Identifier>,
        account_admin_credential_retriever_options: NodeManagerCredentialRetrieverOptions,
    ) -> Self {
        Self {
            project_member_credential_retriever_options,
            project_admin_credential_retriever_options,
            project_authority,
            _account_admin_credential_retriever_options: account_admin_credential_retriever_options,
        }
    }
}