securitydept-creds-manage 0.2.0

Credentials Management of SecurityDept, a layered authentication and authorization toolkit built as reusable Rust crates.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use securitydept_creds::{
    BasicAuthCred, BasicAuthCredsConfig, BasicAuthCredsValidator, MapBasicAuthCredsValidator,
    MapStaticTokenAuthCredsValidator, StaticTokenAuthCredsConfig, token::TokenAuthCred,
};
pub use securitydept_creds::{
    hash_password_argon2, hash_token_sha256, parse_basic_auth_header_opt,
    parse_bearer_auth_header_opt, verify_password_argon2, verify_token_sha256,
};

use crate::{
    error::CredsManageResult,
    models::{BasicAuthEntry, TokenAuthEntry},
};

/// Check basic auth credentials against a list of entries in a group.
pub fn check_basic_auth(
    entries: &[BasicAuthEntry],
    username: &str,
    password: &str,
) -> CredsManageResult<Option<String>> {
    let validator = MapBasicAuthCredsValidator::from_config(&BasicAuthCredsConfig {
        users: entries.to_vec(),
    })?;

    if let Some(entry) = validator.get_cred(username)?
        && entry.verify_password(password)?
    {
        return Ok(Some(entry.meta.name.clone()));
    }

    Ok(None)
}

/// Check bearer token against a list of entries in a group.
pub fn check_token_auth(
    entries: &[TokenAuthEntry],
    token: &str,
) -> CredsManageResult<Option<String>> {
    let validator = MapStaticTokenAuthCredsValidator::from_config(&StaticTokenAuthCredsConfig {
        tokens: entries.to_vec(),
    })?;

    let token_hash = hash_token_sha256(token);
    if let Some(entry) = validator.creds.get(&token_hash)
        && entry.verify_token(token)?
    {
        return Ok(Some(entry.meta.name.clone()));
    }

    Ok(None)
}