passless-rs 0.17.0

FIDO2 security token emulator
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

use passless_core::Result;

use crate::storage::tpm::migrate;

pub fn migrate(
    credential_id: Option<String>,
    all: bool,
    dry_run: bool,
    backup_dir: Option<String>,
    path: Option<String>,
    tcti: Option<String>,
) -> Result<()> {
    let report =
        migrate::migrate_credentials(credential_id.clone(), all, dry_run, backup_dir, path, tcti)?;

    if report.migrated.is_empty() && report.skipped.is_empty() && report.failed.is_empty() {
        if credential_id.is_some() {
            println!("No credential found with the specified ID.");
        } else {
            println!("No credentials found to migrate.");
        }
        return Ok(());
    }

    for id in &report.migrated {
        if dry_run {
            println!("WOULD MIGRATE: {} (ES256, software key)", id);
        } else {
            println!("MIGRATED: {}", id);
        }
    }

    for (id, reason) in &report.skipped {
        if reason != "already portable" {
            println!("SKIP: {}: {}", id, reason);
        }
    }

    for (id, reason) in &report.failed {
        println!("FAIL: {}: {}", id, reason);
    }

    println!();
    println!("Migration summary:");
    println!("  Migrated:              {}", report.migrated.len());
    println!(
        "  Skipped (already portable): {}",
        report.already_portable_count()
    );
    println!("  Skipped (non-ES256):   {}", report.non_es256_skip_count());
    println!("  Failed:                {}", report.failed.len());

    let has_details = report.non_es256_skip_count() > 0 || !report.failed.is_empty();
    if has_details {
        println!("  Details:");
        for (id, reason) in report
            .skipped
            .iter()
            .chain(report.failed.iter())
            .filter(|(_, r)| r != "already portable")
        {
            println!("    - {}: {}", id, reason);
        }
    }

    if dry_run {
        println!();
        println!("(dry run — no changes were made)");
    }

    Ok(())
}