squigit-auth 0.1.0

OAuth profiles and encrypted provider credentials for Squigit
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

// Copyright 2026 a7mddra
// SPDX-License-Identifier: Apache-2.0

use chrono::{Duration, Utc};
use squigit_storage::ProfileStore;

use crate::Result;

const REVEAL_GRACE_SECONDS: i64 = 600;

#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum RevealAuthResult {
    Authorized,
    RequiresOsAuth,
    RequiresCaptcha,
}

pub fn check_reveal_authorization(store: &ProfileStore) -> Result<RevealAuthResult> {
    if let Some(ts) = store.get_last_trusted_reveal()? {
        if Utc::now().signed_duration_since(ts) < Duration::seconds(REVEAL_GRACE_SECONDS) {
            return Ok(RevealAuthResult::Authorized);
        }
    }

    if cfg!(target_os = "macos") || cfg!(target_os = "windows") {
        Ok(RevealAuthResult::RequiresOsAuth)
    } else {
        Ok(RevealAuthResult::RequiresCaptcha)
    }
}