1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

use actix_web::{web, HttpRequest, HttpResponse};
use sqlx::PgPool;
use tracing::field::Empty;

use crate::{auth::validate_request_with_basic_auth, db::NewUser, jwt::JwtClient};

use super::ApplicationResponse;

#[tracing::instrument(name = "handlers::auth::login", skip(request, pool, jwt_client), fields(username=Empty, user_id=Empty))]
/// Get(/login) attempts to log a user in, and if successful returns a JWT token
pub async fn login(
    request: web::HttpRequest,
    pool: web::Data<PgPool>,
    jwt_client: web::Data<JwtClient>,
) -> ApplicationResponse {
    let user = validate_request_with_basic_auth(request, &pool).await?;
    tracing::Span::current().record("username", &tracing::field::display(&user.username));
    tracing::Span::current().record("user_id", &tracing::field::display(&user.id));
    let token = jwt_client.encode_token(user.id)?;
    Ok(HttpResponse::Ok().body(token))
}

#[tracing::instrument(name = "handlers::auth::logout")]
/// Get(/logout) logs a user out if they are currently logged in
pub async fn logout() -> ApplicationResponse {
    Ok(HttpResponse::BadRequest().body("Logouts with JWT's are performed client-side"))
}

#[derive(serde::Deserialize)]
pub struct RegistrationRequest {
    pub username: String,
    pub password: String,
}

#[tracing::instrument(name = "handlers::auth::register", skip(pool, query), fields(username=%query.username, user_id=Empty))]
pub async fn register(
    pool: web::Data<PgPool>,
    query: web::Form<RegistrationRequest>,
) -> ApplicationResponse {
    let new_user = NewUser::new(query.username.clone(), query.password.clone());
    new_user.store(&pool).await?;
    tracing::Span::current().record("user_id", &tracing::field::display(&new_user.id));

    Ok(HttpResponse::Ok().body("New user stored.".to_string()))
}

#[tracing::instrument(name = "handlers::auth::whoami", skip(request, jwt_client), fields(username=Empty, user_id=Empty))]
pub async fn who_am_i(
    request: HttpRequest,
    jwt_client: web::Data<JwtClient>,
) -> ApplicationResponse {
    let user = jwt_client.user_or_403(request).await?;
    Ok(HttpResponse::Ok().body(user.username))
}