sos-migrate 0.17.1

Import and export for the Save Our Secrets SDK
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

use super::{AuthenticatorUrls, OTP_AUTH_URLS};
use crate::{Error, Result};
use async_zip::tokio::read::seek::ZipFileReader;
use sos_backend::AccessPoint;
use sos_vault::{
    secret::{Secret, SecretMeta, SecretRow},
    SecretAccess,
};
use sos_vfs as vfs;
use std::path::Path;
use tokio::io::BufReader;
use totp_rs::TOTP;

/// Import an authenticator vault from a zip archive.
pub async fn import_authenticator(
    path: impl AsRef<Path>,
    keeper: &mut AccessPoint,
) -> Result<()> {
    let inner = BufReader::new(vfs::File::open(path.as_ref()).await?);
    let mut reader = ZipFileReader::with_tokio(inner).await?;

    let mut urls: Option<AuthenticatorUrls> = None;

    for index in 0..reader.file().entries().len() {
        let entry = reader.file().entries().get(index).unwrap();
        let file_name = entry.filename();
        let file_name = file_name.as_str()?;
        if file_name == OTP_AUTH_URLS {
            let mut entry = reader.reader_with_entry(index).await?;

            let mut buffer = Vec::new();
            entry.read_to_end_checked(&mut buffer).await?;

            let auth_urls: AuthenticatorUrls =
                serde_json::from_slice(&buffer)?;

            urls = Some(auth_urls);
            break;
        }
    }

    let urls = urls.ok_or(Error::NoAuthenticatorUrls(
        path.as_ref().display().to_string(),
    ))?;

    for (id, url) in urls.otp {
        let totp = TOTP::from_url(url.to_string())?;
        let label = totp.account_name.clone();
        let secret = Secret::Totp {
            totp,
            user_data: Default::default(),
        };
        let meta = SecretMeta::new(label, secret.kind());
        let secret_data = SecretRow::new(id, meta, secret);
        keeper.create_secret(&secret_data).await?;
    }

    Ok(())
}