runegate 0.3.1

Lightweight Rust-based identity proxy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113

// SPDX-License-Identifier: Apache-2.0
use runegate::auth::{create_token, get_jwt_secret, get_magic_link_expiry, verify_token};
use std::env;

/// Load environment file from multiple possible locations
fn load_env_file() {
    // Try multiple locations for the environment file
    // 1. First try the system-installed location (for deployed environments)
    // 2. Then try the local development path
    let env_paths = [
        "/etc/runegate/runegate.env", // System-installed path
        ".env",                       // Development path
    ];

    // Try each path until one works
    for path in &env_paths {
        match dotenvy::from_path(path) {
            Ok(_) => {
                println!("DEBUG: Loaded environment configuration from {}", path);
                return;
            }
            Err(_) => {
                // Silent - we'll try the next path
            }
        }
    }

    // If no .env file found, that's okay - environment variables can still be set directly
    println!("DEBUG: No .env file found, using system environment variables only");
}

// A simple test script to generate and validate JWT tokens for testing
fn main() {
    // Load .env file from multiple locations (essential for consistent JWT secrets)
    load_env_file();

    // Parse command-line arguments
    let args: Vec<String> = env::args().collect();

    if args.len() < 2 {
        println!("Usage: cargo run --example test_jwt_validation <email> [action]");
        println!("Actions:");
        println!("  - create: Generate a token for the email (default)");
        println!("  - verify: Verify a token");
        return;
    }

    let email = &args[1];
    let action = if args.len() > 2 { &args[2] } else { "create" };

    // Print JWT secret info for debugging
    let secret = get_jwt_secret();
    println!("DEBUG: Using JWT secret length: {} bytes", secret.len());

    match action.as_ref() {
        "create" => {
            // Create a token with configured expiry
            let expiry_minutes = get_magic_link_expiry();
            match create_token(email, expiry_minutes) {
                Ok(token) => {
                    println!("✅ JWT Token generated for {}", email);
                    println!("\nToken: {}", token);

                    // Generate auth URL for testing
                    let auth_url = format!("http://localhost:7870/auth?token={}", token);
                    println!("\n🔐 Authentication URL:");
                    println!("{}", auth_url);

                    println!("\n📋 For testing with curl:");
                    println!("curl -v \"{}\"", auth_url);
                    println!(
                        "\n⚠️ Note: This token will expire in {} minutes.",
                        expiry_minutes
                    );

                    // Immediately verify the token for debugging
                    println!("\n🔍 Attempting immediate verification:");
                    match verify_token(&token) {
                        Ok(verified_email) => {
                            println!("  ✅ Token verified! Email: {}", verified_email);
                        }
                        Err(e) => {
                            println!("  ❌ Verification failed: {}", e);
                        }
                    }
                }
                Err(err) => {
                    println!("❌ Error generating token: {}", err);
                }
            }
        }
        "verify" => {
            if args.len() < 3 {
                println!("Error: Token required for verification");
                return;
            }

            let token = &args[2];

            match verify_token(token) {
                Ok(email) => {
                    println!("✅ Token is valid for user: {}", email);
                }
                Err(e) => {
                    println!("❌ Invalid token: {}", e);
                }
            }
        }
        _ => {
            println!("Unknown action: {}", action);
        }
    }
}