tayvo_rocket_authifier 1.0.15

rocket.rs implementation of authifier
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109

//! Revoke all sessions
//! DELETE /session/all
use tayvo_authifier::{
    models::{Account, Session},
    Authifier, Result,
};
use rocket::State;
use tayvo_rocket_empty::EmptyResponse;

/// # Delete All Sessions
///
/// Delete all active sessions, optionally including current one.
#[openapi(tag = "Session")]
#[delete("/all?<revoke_self>")]
pub async fn revoke_all(
    authifier: &State<Authifier>,
    session: Session,
    account: Account,
    revoke_self: Option<bool>,
) -> Result<EmptyResponse> {
    let ignore = if revoke_self.unwrap_or(false) {
        None
    } else {
        Some(session.id)
    };

    account
        .delete_all_sessions(authifier, ignore)
        .await
        .map(|_| EmptyResponse)
}

#[cfg(test)]
#[cfg(feature = "test")]
mod tests {
    use crate::test::*;

    #[async_std::test]
    async fn success() {
        use rocket::http::Header;

        let (authifier, session, account, _) = for_test_authenticated("revoke_all::success").await;

        for i in 1..=3 {
            account
                .create_session(&authifier, format!("session{}", i))
                .await
                .unwrap();
        }

        let client = bootstrap_rocket_with_auth(
            authifier.clone(),
            routes![crate::routes::session::revoke_all::revoke_all],
        )
        .await;

        let res = client
            .delete("/all?revoke_self=true")
            .header(Header::new("X-Session-Token", session.token))
            .dispatch()
            .await;

        assert_eq!(res.status(), Status::NoContent);
        assert!(authifier
            .database
            .find_sessions(&session.user_id)
            .await
            .unwrap()
            .is_empty());
    }

    #[async_std::test]
    async fn success_not_including_self() {
        use rocket::http::Header;

        let (authifier, session, account, _) =
            for_test_authenticated("revoke_all::success_not_including_self").await;

        for i in 1..=3 {
            account
                .create_session(&authifier, format!("session{}", i))
                .await
                .unwrap();
        }

        let client = bootstrap_rocket_with_auth(
            authifier.clone(),
            routes![crate::routes::session::revoke_all::revoke_all],
        )
        .await;

        let res = client
            .delete("/all?revoke_self=false")
            .header(Header::new("X-Session-Token", session.token))
            .dispatch()
            .await;

        assert_eq!(res.status(), Status::NoContent);
        assert_eq!(
            authifier
                .database
                .find_sessions(&session.user_id)
                .await
                .unwrap()
                .len(),
            1
        );
    }
}