pubky-homeserver 0.11.0

A Pubky homeserver implementation.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

//! Shared authentication session type.
//!
//! [`AuthSession`] is the unified enum that bridges cookie-based and grant-based
//! authentication. It is inserted into request extensions by the authentication
//! middleware and extracted by route handlers.

use pubky_common::capabilities::Capabilities;
use pubky_common::crypto::PublicKey;

use super::cookie::persistence::SessionEntity;
use super::grant::session::GrantSession;

/// Resolved authentication context — inserted into request extensions by the
/// authentication middleware. Handlers just add `auth: AuthSession` as a parameter.
#[derive(Clone, Debug)]
pub enum AuthSession {
    /// Deprecated cookie-based session.
    Cookie(SessionEntity),
    /// Grant-based bearer session.
    Grant(GrantSession),
}

impl AuthSession {
    /// Capabilities regardless of auth method.
    pub fn capabilities(&self) -> &Capabilities {
        match self {
            AuthSession::Cookie(c) => &c.capabilities,
            AuthSession::Grant(b) => &b.capabilities,
        }
    }

    /// User public key regardless of auth method.
    pub fn user_key(&self) -> &PublicKey {
        match self {
            AuthSession::Cookie(c) => &c.user_pubkey,
            AuthSession::Grant(b) => &b.user_key,
        }
    }
}