securitydept-token-set-context 0.2.0

Token Set Context of SecurityDept, a layered authentication and authorization toolkit built as reusable Rust crates.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115

use std::time::Duration;

use chrono::{DateTime, Utc};
use moka::sync::Cache;
use serde::{Deserialize, Serialize};

use super::{
    MetadataRedemptionId, PendingAuthStateMetadataRedemption,
    PendingAuthStateMetadataRedemptionConfig, PendingAuthStateMetadataRedemptionPayload,
    PendingAuthStateMetadataRedemptionStore, PendingAuthStateMetadataRedemptionStoreError,
    SerializedPendingAuthStateMetadataRedemption,
};

#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
pub struct MokaPendingAuthStateMetadataRedemptionConfig {
    #[serde(default = "default_metadata_redemption_ttl", with = "humantime_serde")]
    pub ttl: Duration,
    #[serde(default = "default_metadata_redemption_max_capacity")]
    pub max_capacity: u64,
}

impl Default for MokaPendingAuthStateMetadataRedemptionConfig {
    fn default() -> Self {
        Self {
            ttl: default_metadata_redemption_ttl(),
            max_capacity: default_metadata_redemption_max_capacity(),
        }
    }
}

fn default_metadata_redemption_ttl() -> Duration {
    Duration::from_secs(60)
}

fn default_metadata_redemption_max_capacity() -> u64 {
    1000
}

impl PendingAuthStateMetadataRedemptionConfig for MokaPendingAuthStateMetadataRedemptionConfig {}

#[derive(Debug, Clone)]
pub struct MokaPendingAuthStateMetadataRedemptionStore {
    config: MokaPendingAuthStateMetadataRedemptionConfig,
    entries: Cache<String, SerializedPendingAuthStateMetadataRedemption>,
}

impl PendingAuthStateMetadataRedemptionStore for MokaPendingAuthStateMetadataRedemptionStore {
    type Config = MokaPendingAuthStateMetadataRedemptionConfig;

    fn from_config(
        config: &Self::Config,
    ) -> Result<Self, PendingAuthStateMetadataRedemptionStoreError> {
        Ok(Self {
            config: config.clone(),
            entries: Cache::builder()
                .time_to_live(config.ttl)
                .max_capacity(config.max_capacity)
                .build(),
        })
    }

    fn issue(
        &self,
        payload: PendingAuthStateMetadataRedemptionPayload,
        now: DateTime<Utc>,
    ) -> Result<PendingAuthStateMetadataRedemption, PendingAuthStateMetadataRedemptionStoreError>
    {
        let redemption = PendingAuthStateMetadataRedemption {
            id: MetadataRedemptionId::generate(),
            payload,
            expires_at: now
                + chrono::TimeDelta::from_std(self.config.ttl).map_err(|e| {
                    PendingAuthStateMetadataRedemptionStoreError::StoreOperation {
                        message: format!("failed to compute metadata redemption expiration: {e}"),
                    }
                })?,
        };
        let serialized = SerializedPendingAuthStateMetadataRedemption {
            id: redemption.id.clone(),
            payload: serde_json::to_value(&redemption.payload).map_err(|e| {
                PendingAuthStateMetadataRedemptionStoreError::StoreOperation {
                    message: format!("failed to serialize metadata redemption payload: {e}"),
                }
            })?,
            expires_at: redemption.expires_at,
        };

        self.entries
            .insert(redemption.id.expose().to_string(), serialized);
        Ok(redemption)
    }

    fn redeem(
        &self,
        id: &MetadataRedemptionId,
        _now: DateTime<Utc>,
    ) -> Result<
        Option<PendingAuthStateMetadataRedemptionPayload>,
        PendingAuthStateMetadataRedemptionStoreError,
    > {
        let redemption = match self.entries.get(id.expose()) {
            Some(redemption) => redemption,
            None => return Ok(None),
        };
        self.entries.invalidate(id.expose());

        serde_json::from_value(redemption.payload.clone())
            .map(Some)
            .map_err(
                |e| PendingAuthStateMetadataRedemptionStoreError::StoreOperation {
                    message: format!("failed to deserialize metadata redemption payload: {e}"),
                },
            )
    }
}