wrangler 1.21.0

Command-line interface for all things Cloudflare Workers
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115

use anyhow::Result;

use hyper::server::conn::AddrStream;
use hyper::service::{make_service_fn, service_fn};
use hyper::{Body, Request, Response, Server, StatusCode};

use tokio::sync::mpsc;

use crate::login::display_error_info;

static CONSENT_GRANTED_URL: &str =
    "https://welcome.developers.workers.dev/wrangler-oauth-consent-granted";
static CONSENT_DENIED_URL: &str =
    "https://welcome.developers.workers.dev/wrangler-oauth-consent-denied";

// HTTP Server request handler
async fn handle_callback(req: Request<Body>, tx: mpsc::Sender<String>) -> Result<Response<Body>> {
    match req.uri().path() {
        // Endpoint given when registering oauth client
        "/oauth/callback" => {
            // Get authorization code from request
            let params = match req
                .uri()
                .query()
                .map(|v| url::form_urlencoded::parse(v.as_bytes()))
            {
                Some(values) => values,
                None => anyhow::bail!("Failed to map params from HTTP response"),
            };

            // Get authorization code and csrf state
            let mut params_values: Vec<String> = Vec::with_capacity(2);
            for (key, value) in params {
                if key == "code" || key == "state" {
                    params_values.push(value.to_string());
                }
            }

            if params_values.len() != 2 {
                // User denied consent
                let params_response = "denied".to_string();
                tx.send(params_response).await?;

                let response = Response::builder()
                    .status(StatusCode::PERMANENT_REDIRECT)
                    .header("Location", CONSENT_DENIED_URL)
                    .body(Body::empty())?;
                return Ok(response);
            }

            // User granted consent. Send authorization code back
            let params_response = format!("ok {} {}", params_values[0], params_values[1]);
            tx.send(params_response).await?;

            let response = Response::builder()
                .status(StatusCode::PERMANENT_REDIRECT)
                .header("Location", CONSENT_GRANTED_URL)
                .body(Body::empty())?;

            Ok(response)
        }
        _ => {
            let params_response = "error".to_string();
            tx.send(params_response).await?;

            let response = Response::builder()
                .status(StatusCode::NOT_FOUND)
                .body(Body::empty())?;

            Ok(response)
        }
    }
}

// Get results (i.e. authorization code and CSRF state) back from local HTTP server
pub async fn http_server_get_params() -> Result<String> {
    let (tx, mut rx) = tokio::sync::mpsc::channel::<String>(1);

    // Create and start listening for authorization redirect on local HTTP server
    let server_fn_gen = |tx: mpsc::Sender<String>| {
        service_fn(move |req: Request<Body>| {
            let tx_clone = tx.clone();
            handle_callback(req, tx_clone)
        })
    };

    let service = make_service_fn(move |_socket: &AddrStream| {
        let tx_clone = tx.clone();
        async move { Ok::<_, hyper::Error>(server_fn_gen(tx_clone)) }
    });

    let _handle: tokio::task::JoinHandle<Result<(), anyhow::Error>> = tokio::task::spawn(async {
        let addr = ([127, 0, 0, 1], 8976).into();

        let server = Server::bind(&addr).serve(service);
        match server.await {
            Ok(_) => Ok(()),
            Err(_) => anyhow::bail!(display_error_info("Local HTTP Server binding failed.")),
        }
    });

    // Receive authorization code and csrf state from HTTP server
    let params = tokio::task::spawn(async move {
        match rx.recv().await {
            Some(values) => values,
            None => {
                log::debug!("Sender side of the channel has been closed. Cannot read any values on the receiver side.");
                "error".to_string()
            },
        }
    })
    .await?;

    Ok(params)
}