vial-srv 0.2.0

Framework-agnostic server logic for Vial
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143

use chrono::{Duration, NaiveDateTime, Utc};
use diesel::prelude::*;
use diesel::result::Error;
use diesel_async::{AsyncPgConnection, RunQueryDsl};
use ulid::Ulid;
use vial_shared::EncryptedPayload;

use crate::errors::ServerError;
use crate::schema::secrets;

#[derive(Default, Debug, Clone, Insertable, Queryable, Selectable)]
pub struct Secret {
    id: String,
    ciphertext: Vec<u8>,
    expires_at: Option<NaiveDateTime>,
    remaining_views: Option<i32>,
    created_at: NaiveDateTime,
}

impl Secret {
    pub fn new(
        ciphertext: Vec<u8>,
        expires_at: Option<NaiveDateTime>,
        remaining_views: Option<i32>,
    ) -> Result<Self, ServerError> {
        if expires_at.is_none() && remaining_views.is_none() {
            return Err(ServerError::ViewAndExpireEmpty);
        }

        if let Some(expires_at) = expires_at {
            if expires_at <= Utc::now().naive_utc() {
                return Err(ServerError::InvalidExpire);
            }

            let now = Utc::now().naive_utc();

            if expires_at - now > Duration::days(30) {
                return Err(ServerError::InvalidExpire);
            }
        }

        if let Some(remaining_views) = remaining_views {
            if remaining_views < 1 {
                return Err(ServerError::InvalidViewCount);
            }

            if remaining_views > 1000 {
                return Err(ServerError::InvalidViewCount);
            }
        }

        Ok(Self {
            id: Ulid::new().to_string(),
            ciphertext,
            expires_at,
            remaining_views,
            created_at: Utc::now().naive_utc(),
        })
    }

    pub fn get_payload(self) -> EncryptedPayload {
        EncryptedPayload {
            payload: self.ciphertext,
        }
    }

    pub fn get_id(&self) -> String {
        self.id.clone()
    }

    pub async fn insert(self, conn: &mut AsyncPgConnection) -> Result<usize, Error> {
        use crate::schema::secrets::dsl::secrets;

        diesel::insert_into(secrets)
            .values(self)
            .execute(conn)
            .await
    }

    pub async fn get_secret(
        secret_id: &str,
        conn: &mut AsyncPgConnection,
    ) -> Result<Option<Self>, Error> {
        use crate::schema::secrets::dsl::{id, remaining_views, secrets};

        let to_return = secrets
            .filter(id.eq(secret_id))
            .select(Self::as_select())
            .first(conn)
            .await
            .optional()?;

        if to_return.is_none() {
            return Ok(None);
        }

        let to_return = to_return.unwrap();

        if let Some(view_count) = to_return.remaining_views {
            let new_count = view_count - 1;

            let is_expired = if let Some(expiration) = to_return.expires_at {
                expiration < Utc::now().naive_utc()
            } else {
                false
            };

            if new_count == 0 || is_expired {
                diesel::delete(secrets.filter(id.eq(secret_id)))
                    .execute(conn)
                    .await?;
            } else {
                diesel::update(secrets.filter(id.eq(secret_id)))
                    .set(remaining_views.eq(new_count))
                    .execute(conn)
                    .await?;
            }
        }

        Ok(Some(to_return))
    }

    pub async fn clear_expired(conn: &mut AsyncPgConnection) -> Result<usize, Error> {
        use crate::schema::secrets::dsl::{expires_at, secrets};

        diesel::delete(secrets.filter(expires_at.lt(Utc::now().naive_utc())))
            .execute(conn)
            .await
    }

    pub async fn clear_expired_days(
        days: i32,
        conn: &mut AsyncPgConnection,
    ) -> Result<usize, Error> {
        use crate::schema::secrets::dsl::{created_at, secrets};

        let cutoff = Utc::now() - Duration::days(days.into());

        diesel::delete(secrets.filter(created_at.lt(cutoff)))
            .execute(conn)
            .await
    }
}