webbase 0.0.18

webbase
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

use super::AccessToken;
use anyhow;
use jsonwebtoken::{decode, encode, Algorithm, DecodingKey, EncodingKey, Header, Validation};
use serde::{Deserialize, Serialize};

#[derive(Debug, Serialize, Deserialize, Clone)]
pub struct AccessTokenRsa {
    pub user_id: u64,         // 用户ID
    pub user_name: String,    // 用户姓名
    pub user_account: String, // 用户账户
    pub app_id: String,       // 租户信息
    pub platform: String,     // 平台信息
    pub is_admin: bool,       // 是否是对应租户下的Admin
    pub is_super: bool,       // 是否是超级管理员
    pub exp: u64,
}

impl AccessTokenRsa {
    pub fn to_token(&self) -> AccessToken {
        AccessToken {
            user_id: self.user_id.clone(),
            user_name: self.user_name.clone(),
            user_account: self.user_account.clone(),
            app_id: self.app_id.clone(),
            platform: self.platform.clone(),
            is_admin: self.is_admin,
            is_super: self.is_super,
            exp: self.exp.clone(),
        }
    }

    pub fn encode_token(
        user_id: u64,
        user_account: &String,
        user_name: &String,
        app_id: &String,
        platform: &String,
        is_admin: bool,
        is_super: bool,
        timeout_hour: u16,
        rsa_private: &String,
    ) -> anyhow::Result<String> {
        let header = Header::new(Algorithm::RS512);
        let my_claims = AccessTokenRsa {
            user_id: user_id.clone(),
            user_account: user_account.clone(),
            user_name: user_name.clone(),
            app_id: app_id.clone(),
            platform: platform.clone(),
            is_admin: is_admin,
            is_super: is_super,
            exp: (std::time::SystemTime::now()
                .duration_since(std::time::UNIX_EPOCH)
                .unwrap()
                .as_secs()
                + 60 * 60 * (timeout_hour as u64)),
        };
        if let Ok(token) = encode(
            &header,
            &my_claims,
            &EncodingKey::from_rsa_pem(rsa_private.as_ref())?,
        ) {
            return anyhow::Ok(token);
        } else {
            return Err(anyhow::anyhow!("encode_token with error"));
        }
    }

    pub fn decode_token(token: &String, rsa_public: &String) -> anyhow::Result<Self> {
        if let Ok(decode_data) = decode::<Self>(
            &token,
            &DecodingKey::from_rsa_pem(rsa_public.as_ref())?,
            &Validation::new(Algorithm::RS512),
        ) {
            return anyhow::Ok(decode_data.claims);
        } else {
            return Err(anyhow::anyhow!("decode_token with error"));
        }
    }

    pub fn is_expired(&self) -> bool {
        let cur_time = std::time::SystemTime::now()
            .duration_since(std::time::UNIX_EPOCH)
            .unwrap()
            .as_secs();
        if self.exp < cur_time {
            true
        } else {
            false
        }
    }
}