rwf 0.2.1

Framework for building web applications in the Rust programming language
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

//! Handle (de)serialization using serde for our own primitives.
//!
//! Currently handles (de)serialization of secure IDs.
use serde::de::{self, Deserializer, Visitor};
use serde::ser::{self, Serializer};

/// Secure IDs are integers encrypted with AES-128 to prevent them from leaking internal information,
/// e.g. how many users your application has.
pub mod secure_id {
    use super::*;
    use crate::crypto::{decrypt_number, encrypt_number};

    struct SecureIdVisitor;

    impl<'de> Visitor<'de> for SecureIdVisitor {
        type Value = Option<String>;

        fn expecting(&self, formatter: &mut std::fmt::Formatter) -> std::fmt::Result {
            write!(formatter, "a secure id to be a string")
        }

        fn visit_str<E>(self, s: &str) -> Result<Self::Value, E>
        where
            E: de::Error,
        {
            Ok(Some(s.to_string()))
        }

        fn visit_none<E>(self) -> Result<Self::Value, E>
        where
            E: de::Error,
        {
            Ok(None)
        }
    }

    pub fn serialize<S>(value: &Option<i64>, serializer: S) -> Result<S::Ok, S::Error>
    where
        S: Serializer,
    {
        if let Some(value) = value {
            let value = encrypt_number(*value).map_err(ser::Error::custom)?;
            serializer.serialize_str(&value)
        } else {
            serializer.serialize_none()
        }
    }

    pub fn deserialize<'de, D>(deserializer: D) -> Result<Option<i64>, D::Error>
    where
        D: Deserializer<'de>,
    {
        let value = deserializer.deserialize_string(SecureIdVisitor)?;

        if let Some(value) = value {
            if let Ok(value) = value.parse::<i64>() {
                Ok(Some(value))
            } else {
                let value = decrypt_number(&value).map_err(de::Error::custom)?;
                Ok(Some(value))
            }
        } else {
            Ok(None)
        }
    }
}