pubky-homeserver 0.12.0

A Pubky homeserver implementation.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! Grant-based session — the resolved session attached to authenticated requests.

use pubky_common::auth::jws::GrantId;
use pubky_common::capabilities::Capabilities;
use pubky_common::crypto::PublicKey;

#[cfg(test)]
use super::crypto::session_token::SessionBearer;
use super::crypto::session_token::SessionTokenHash;

/// Grant-based session data.
///
/// Constructed by [`AuthService::resolve_grant_session_by_bearer`](super::service::AuthService::resolve_grant_session_by_bearer)
/// and wrapped in [`AuthSession::Grant`](crate::client_server::auth::AuthSession::Grant)
/// by the authentication middleware.
#[derive(Clone, Debug)]
pub struct GrantSession {
    /// User public key.
    pub user_key: PublicKey,
    /// Capabilities from the underlying grant.
    pub capabilities: Capabilities,
    /// Grant ID (for revocation).
    pub grant_id: GrantId,
    /// When the bearer expires (Unix seconds).
    pub token_expires_at: u64,
    /// Hash identifying the exact persisted bearer session.
    pub(super) token_hash: SessionTokenHash,
}

#[cfg(test)]
impl GrantSession {
    pub(crate) fn test(
        user_key: PublicKey,
        capabilities: Capabilities,
        grant_id: GrantId,
        token_expires_at: u64,
    ) -> Self {
        Self {
            user_key,
            capabilities,
            grant_id,
            token_expires_at,
            token_hash: SessionBearer::generate().hash(),
        }
    }
}