potree-auth 0.1.0

Authentication and project management for `potree` point clouds.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

use std::sync::Arc;

use super::super::domain::AuthorizeData;
use super::super::domain::CallbackRequestParams;
use super::super::domain::OidcSessionPersisted;
use super::super::ports::authentication_engine::AuthenticationEngine;
use super::error::AuthenticationServiceError;
use crate::user::domain::User;

/// A service for handling user authentication with OIDC.
#[derive(Debug, Clone)]
pub struct AuthenticationService {
    authentication_engine: Arc<dyn AuthenticationEngine>,
}

impl AuthenticationService {
    pub fn new(authentication_engine: Arc<dyn AuthenticationEngine>) -> Self {
        Self {
            authentication_engine,
        }
    }

    //// Called as part of the OIDC [`/authorize`] endpoint.
    ///
    /// [`/authorize`]: https://openid.net/specs/openid-connect-core-1_0.html#AuthorizationEndpoint
    pub async fn authorize(&self) -> Result<AuthorizeData, AuthenticationServiceError> {
        Ok(self.authentication_engine.authorize().await?)
    }

    /// After authentication, the IdP would redirect the user agent to the
    /// callback route. This would handle the finalizing the OIDC flow to return
    /// the validated user.
    ///
    /// The `persisted_data` would be extracted from the web session; it
    /// should have been stored as part of the `/authorize` endpoint. The
    /// `callback_params` would have come from the query params of the callback
    /// handler.
    pub async fn callback(
        &self,
        callback_params: CallbackRequestParams,
        persisted_data: OidcSessionPersisted,
    ) -> Result<User, AuthenticationServiceError> {
        Ok(self
            .authentication_engine
            .callback(callback_params, persisted_data)
            .await?)
    }
}