runx-receipts 0.6.19

Pure Rust receipt model, canonicalization, and verification parity for runx.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

use runx_contracts::Receipt;

use super::ReceiptVerification;

#[derive(Clone, Debug, PartialEq, Eq)]
pub enum ReceiptProofStatusKind {
    Verified,
    Failed,
}

#[derive(Clone, Debug, PartialEq, Eq)]
pub struct ReceiptProofFindingSummary {
    pub code: String,
    pub path: String,
    pub message: String,
}

#[derive(Clone, Debug, PartialEq, Eq)]
pub struct ReceiptProofStatus {
    pub receipt_id: String,
    pub status: ReceiptProofStatusKind,
    pub finding_summaries: Vec<ReceiptProofFindingSummary>,
}

#[must_use]
pub fn receipt_proof_status(
    receipt: &Receipt,
    verification: &ReceiptVerification,
) -> ReceiptProofStatus {
    ReceiptProofStatus {
        receipt_id: receipt.id.to_string(),
        status: if verification.valid {
            ReceiptProofStatusKind::Verified
        } else {
            ReceiptProofStatusKind::Failed
        },
        finding_summaries: verification
            .findings
            .iter()
            .map(|finding| ReceiptProofFindingSummary {
                code: format!("{:?}", finding.code),
                path: public_text(&finding.path),
                message: public_text(&finding.message),
            })
            .collect(),
    }
}

fn public_text(value: &str) -> String {
    value
        .split_whitespace()
        .map(redact_public_token)
        .collect::<Vec<_>>()
        .join(" ")
}

fn redact_public_token(token: &str) -> &str {
    let core = token.trim_matches(|character: char| {
        matches!(
            character,
            '(' | ')' | '[' | ']' | '{' | '}' | '"' | '\'' | ',' | ';'
        )
    });
    if looks_like_local_path(core) {
        "[local-path]"
    } else if looks_like_secret_value(core) {
        "[secret]"
    } else {
        token
    }
}

fn looks_like_local_path(token: &str) -> bool {
    token.starts_with('/') || token.as_bytes().get(1..3) == Some(b":\\")
}

fn looks_like_secret_value(token: &str) -> bool {
    token.len() >= 32
        && token
            .bytes()
            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'+' | b'/' | b'='))
        && token.bytes().any(|byte| matches!(byte, b'+' | b'/' | b'='))
}