rs-firebase-admin-sdk 5.0.0

Firebase Admin SDK for Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129

pub mod api_uri;
pub mod auth;
pub mod client;
pub mod credentials;
#[cfg(feature = "tokens")]
pub mod jwt;
pub mod util;

use auth::FirebaseAuth;
use client::ReqwestApiClient;
use credentials::{GCPCredentialsError, emulator::EmulatorCredentials, get_project_id};
use error_stack::{Report, ResultExt};
use google_cloud_auth::credentials::Builder;
pub use google_cloud_auth::credentials::{Credentials, CredentialsProvider};
use std::sync::Arc;

const FIREBASE_AUTH_SCOPES: [&str; 2] = [
    "https://www.googleapis.com/auth/cloud-platform",
    "https://www.googleapis.com/auth/userinfo.email",
];

#[derive(Debug, Clone, thiserror::Error)]
#[error("Failed to create Firebase token validator")]
pub struct FirebaseAppValidatorError;

pub enum App {
    Live {
        credentials: Credentials,
        project_id: String,
    },
    Emulated {
        credentials: EmulatorCredentials,
        url: String,
    },
}

impl App {
    pub async fn live() -> Result<Self, Report<GCPCredentialsError>> {
        let credentials: Credentials = Builder::default()
            .with_scopes(FIREBASE_AUTH_SCOPES)
            .build_access_token_credentials()
            .change_context(GCPCredentialsError)?
            .into();

        let project_id = get_project_id(&credentials)
            .await
            .change_context(GCPCredentialsError)?;

        Ok(Self::Live {
            credentials,
            project_id,
        })
    }

    pub fn live_with_project_id(project_id: String) -> Result<Self, Report<GCPCredentialsError>> {
        let credentials: Credentials = Builder::default()
            .with_scopes(FIREBASE_AUTH_SCOPES)
            .build_access_token_credentials()
            .change_context(GCPCredentialsError)?
            .into();

        Ok(Self::Live {
            credentials,
            project_id,
        })
    }

    pub fn emulated(url: String) -> Self {
        Self::Emulated {
            credentials: EmulatorCredentials::default(),
            url,
        }
    }

    pub fn auth(&self) -> FirebaseAuth<ReqwestApiClient> {
        match self {
            Self::Live {
                credentials,
                project_id,
            } => {
                let client = ReqwestApiClient::new(reqwest::Client::new(), credentials.clone());

                FirebaseAuth::live(project_id, client)
            }
            Self::Emulated { credentials, url } => {
                let client =
                    ReqwestApiClient::new(reqwest::Client::new(), credentials.clone().into());

                FirebaseAuth::emulated(url.clone(), &credentials.project_id, client)
            }
        }
    }

    #[cfg(feature = "tokens")]
    pub fn token_validator(
        &self,
    ) -> Result<Arc<dyn jwt::TokenValidator>, Report<FirebaseAppValidatorError>> {
        match self {
            Self::Live {
                credentials: _,
                project_id,
            } => jwt::LiveValidator::new_jwt_validator(project_id.clone())
                .change_context(FirebaseAppValidatorError)
                .map(|s| Arc::new(s) as Arc<dyn jwt::TokenValidator>),
            Self::Emulated {
                credentials: _,
                url: _,
            } => Ok(Arc::new(jwt::EmulatorValidator) as Arc<dyn jwt::TokenValidator>),
        }
    }

    #[cfg(feature = "tokens")]
    pub fn cookie_validator(
        &self,
    ) -> Result<Arc<dyn jwt::TokenValidator>, Report<FirebaseAppValidatorError>> {
        match self {
            Self::Live {
                credentials: _,
                project_id,
            } => jwt::LiveValidator::new_cookie_validator(project_id.clone())
                .change_context(FirebaseAppValidatorError)
                .map(|s| Arc::new(s) as Arc<dyn jwt::TokenValidator>),
            Self::Emulated {
                credentials: _,
                url: _,
            } => Ok(Arc::new(jwt::EmulatorValidator) as Arc<dyn jwt::TokenValidator>),
        }
    }
}