rototo 0.1.0-alpha.6

Control plane for runtime configuration of your application.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135

use std::path::Path;

use ring::digest;
use serde::Serialize;

use crate::error::{Result, RototoError};

/// Console principal identity.
///
/// GitHub identities come from OAuth or token introspection and are stable
/// enough for repository ownership. Git-config identities are local-mode
/// fallbacks derived from the package checkout. The value is stored on
/// sessions and serialized to the browser without exposing credentials.
#[derive(Clone, Debug, Serialize)]
#[serde(tag = "kind", rename_all = "camelCase")]
pub enum ActorIdentity {
    GitConfig {
        name: Option<String>,
        email: Option<String>,
    },
    GitHub {
        id: String,
        login: String,
        name: Option<String>,
        avatar_url: Option<String>,
    },
}

impl ActorIdentity {
    pub fn principal_id(&self) -> String {
        match self {
            Self::GitHub { id, .. } => format!("github:{id}"),
            Self::GitConfig { name, email } => {
                let material = format!(
                    "{}\0{}",
                    name.as_deref().unwrap_or_default(),
                    email.as_deref().unwrap_or_default()
                );
                if material != "\0" {
                    return format!("git:{}", short_hash(material.as_bytes()));
                }
                "local:unknown".to_owned()
            }
        }
    }

    pub fn display_login(&self) -> String {
        match self {
            Self::GitHub { login, .. } => login.clone(),
            Self::GitConfig { name, email } => name
                .clone()
                .or_else(|| email.clone())
                .unwrap_or_else(|| "local git".to_owned()),
        }
    }

    pub fn avatar_url(&self) -> Option<String> {
        match self {
            Self::GitHub { avatar_url, .. } => avatar_url.clone(),
            Self::GitConfig { .. } => None,
        }
    }
}

pub async fn resolve_git_config_identity(workdir: Option<&Path>) -> Result<ActorIdentity> {
    let name = git_config_value(workdir, "user.name").await?;
    let email = git_config_value(workdir, "user.email").await?;
    Ok(ActorIdentity::GitConfig { name, email })
}

async fn git_config_value(workdir: Option<&Path>, key: &str) -> Result<Option<String>> {
    let started = std::time::Instant::now();
    let mut command = tokio::process::Command::new("git");
    if let Some(workdir) = workdir {
        command.arg("-C").arg(workdir);
    }
    let cwd = workdir.map(|path| path.display().to_string());
    tracing::debug!(
        operation = "process.command",
        command = "git config --get",
        key,
        cwd = cwd.as_deref(),
        "console outbound process call started"
    );
    let output = command
        .args(["config", "--get", key])
        .output()
        .await
        .map_err(|err| {
            tracing::debug!(
                operation = "process.command",
                command = "git config --get",
                key,
                cwd = cwd.as_deref(),
                error = %err,
                latency_ms = started.elapsed().as_millis(),
                "console outbound process call failed to start"
            );
            RototoError::new(format!("failed to read git config {key}: {err}"))
        })?;
    if !output.status.success() {
        tracing::debug!(
            operation = "process.command",
            command = "git config --get",
            key,
            cwd = cwd.as_deref(),
            status = output.status.code(),
            latency_ms = started.elapsed().as_millis(),
            "console outbound process call returned non-zero status"
        );
        return Ok(None);
    }
    let value = String::from_utf8_lossy(&output.stdout).trim().to_owned();
    tracing::info!(
        operation = "process.command",
        command = "git config --get",
        key,
        cwd = cwd.as_deref(),
        status = output.status.code(),
        value_found = !value.is_empty(),
        latency_ms = started.elapsed().as_millis(),
        "console outbound process call completed"
    );
    Ok((!value.is_empty()).then_some(value))
}

fn short_hash(bytes: &[u8]) -> String {
    let digest = digest::digest(&digest::SHA256, bytes);
    digest
        .as_ref()
        .iter()
        .take(12)
        .map(|byte| format!("{byte:02x}"))
        .collect()
}