salvo-csrf 0.90.0

use std::fmt::Debug;

use aead::generic_array::GenericArray;
use aead::{Aead, KeyInit};
use aes_gcm::Aes256Gcm;
use base64::Engine;
use base64::engine::general_purpose::URL_SAFE_NO_PAD;

use super::CsrfCipher;

/// CSRF protection implementation that uses AES-GCM.
#[derive(Debug, Clone)]
pub struct AesGcmCipher {
    aead_key: [u8; 32],
    token_size: usize,
}

impl AesGcmCipher {
    /// Given an aead key, return an `AesGcmCipher` instance.
    #[inline]
    #[must_use]
    pub fn new(aead_key: [u8; 32]) -> Self {
        Self {
            aead_key,
            token_size: 32,
        }
    }

    /// Sets the length of the token.
    #[inline]
    #[must_use]
    pub fn token_size(mut self, token_size: usize) -> Self {
        assert!(token_size >= 8, "length must be larger than 8");
        self.token_size = token_size;
        self
    }

    #[inline]
    fn aead(&self) -> Aes256Gcm {
        let key = GenericArray::clone_from_slice(&self.aead_key);
        Aes256Gcm::new(&key)
    }
}

impl CsrfCipher for AesGcmCipher {
    fn verify(&self, token: &str, proof: &str) -> bool {
        if let (Ok(token), Ok(proof)) = (
            URL_SAFE_NO_PAD.decode(token.as_bytes()),
            URL_SAFE_NO_PAD.decode(proof.as_bytes()),
        ) {
            if token.len() < 8 || proof.len() < 20 {
                false
            } else {
                let nonce = GenericArray::from_slice(&proof[0..12]);
                let aead = self.aead();
                aead.decrypt(nonce, &proof[12..])
                    .map(|p| p == token)
                    .unwrap_or(false)
            }
        } else {
            false
        }
    }
    fn generate(&self) -> (String, String) {
        let token = self.random_bytes(self.token_size);
        let aead = self.aead();
        let mut proof = self.random_bytes(12);
        let nonce = GenericArray::from_slice(&proof);
        proof.append(
            &mut aead
                .encrypt(nonce, token.as_slice())
                .expect("encryption failed"),
        );
        (URL_SAFE_NO_PAD.encode(token), URL_SAFE_NO_PAD.encode(proof))
    }
}

#[cfg(test)]
mod tests {
    use base64::Engine;
    use base64::engine::general_purpose::URL_SAFE_NO_PAD;

    use super::AesGcmCipher;
    use super::CsrfCipher;

    #[test]
    fn test_aes_gcm_cipher() {
        let aead_key = [0u8; 32];
        let cipher = AesGcmCipher::new(aead_key);

        let (token, proof) = cipher.generate();
        assert!(cipher.verify(&token, &proof));

        let invalid_proof = URL_SAFE_NO_PAD.encode(vec![0u8; proof.len()]);
        assert!(!cipher.verify(&token, &invalid_proof));

        let invalid_token = URL_SAFE_NO_PAD.encode(vec![0u8; token.len()]);
        assert!(!cipher.verify(&invalid_token, &proof));
    }
}