openauth-plugins 0.0.3

Official OpenAuth plugin modules.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

//! Email OTP plugin.

mod change_email;
mod endpoints;
mod errors;
mod helpers;
mod hooks;
mod otp;
mod password;
mod registry;
mod response;
mod schema;
mod server;
mod types;

pub use types::{
    ChangeEmailOptions, EmailOtpEncryptor, EmailOtpGenerator, EmailOtpHasher, EmailOtpOptions,
    EmailOtpPayload, EmailOtpType, OtpStorage, ResendStrategy, SendEmailOtp,
};

use openauth_core::db::DbAdapter;
use openauth_core::options::RateLimitRule;
use openauth_core::plugin::{AuthPlugin, PluginRateLimitRule};
use std::sync::Arc;

pub const UPSTREAM_PLUGIN_ID: &str = "email-otp";

/// Build the Email OTP plugin.
pub fn email_otp(adapter: Arc<dyn DbAdapter>, options: EmailOtpOptions) -> AuthPlugin {
    let rate_limit = options
        .rate_limit
        .clone()
        .unwrap_or(RateLimitRule { window: 60, max: 3 });
    let hook_options = Arc::new(options.clone());
    let plugin = errors::error_codes().fold(
        registry::register(
            AuthPlugin::new(UPSTREAM_PLUGIN_ID).with_version(crate::VERSION),
            Arc::clone(&adapter),
            options,
        ),
        AuthPlugin::with_error_code,
    );
    let plugin = if hook_options.send_verification_on_sign_up
        && !hook_options.override_default_email_verification
    {
        let adapter = Arc::clone(&adapter);
        let options = Arc::clone(&hook_options);
        plugin.with_async_after_hook("/sign-up/email", move |context, request, response| {
            hooks::send_verification_after_sign_up(
                context,
                request,
                response,
                Arc::clone(&adapter),
                Arc::clone(&options),
            )
        })
    } else {
        plugin
    };
    let plugin = if hook_options.override_default_email_verification {
        let adapter = Arc::clone(&adapter);
        let options = Arc::clone(&hook_options);
        plugin.with_async_after_hook(
            "/send-verification-email",
            move |context, request, response| {
                hooks::override_send_verification_email(
                    context,
                    request,
                    response,
                    Arc::clone(&adapter),
                    Arc::clone(&options),
                )
            },
        )
    } else {
        plugin
    };
    registry::paths()
        .iter()
        .fold(plugin, |plugin: AuthPlugin, path| {
            plugin.with_rate_limit(PluginRateLimitRule::new(*path, rate_limit.clone()))
        })
}