shield-axum 0.2.1

use axum::{
    Form,
    extract::{Path, Query},
    response::{IntoResponse, Redirect, Response},
};
use serde_json::Value;
use shield::{ActionPathParams, Request, ResponseType, User};

#[cfg(feature = "utoipa")]
use crate::error::ErrorBody;
use crate::{ExtractSession, ExtractShield, RouteError};

#[cfg_attr(
    feature = "utoipa",
    utoipa::path(
        get,
        post,
        path = "/{methodId}/{actionId}/{providerId}",
        operation_id = "callAction",
        summary = "Call action",
        description = "Call an action.",
        tags = ["auth"],
        params(
            ActionPathParams
        ),
        responses(
            (status = 302, description = "Redirect."),
            (status = 500, description = "Internal server error.", body = ErrorBody),
        )
    )
)]
pub async fn action<U: User>(
    Path(ActionPathParams {
        method_id,
        action_id,
        provider_id,
        ..
    }): Path<ActionPathParams>,
    ExtractShield(shield): ExtractShield<U>,
    ExtractSession(session): ExtractSession,
    Query(query): Query<Value>,
    Form(form_data): Form<Value>,
) -> Result<Response, RouteError> {
    // TODO: Check if this action supports the HTTP method (GET/POST)?

    let response = shield
        .call(
            &action_id,
            &method_id,
            provider_id.as_deref(),
            session,
            Request { query, form_data },
        )
        .await?;

    Ok(match response {
        ResponseType::Default => todo!(),
        ResponseType::Redirect(to) => Redirect::to(&to).into_response(),
        ResponseType::RedirectToAction { action_id } => {
            // TODO: Use actual frontend prefix instead of hardcoded `/auth`.
            Redirect::to(&format!("/auth/{action_id}")).into_response()
        }
    })
}