t_rust_less_lib/secrets_store/
error.rs1use crate::block_store::StoreError;
2use serde::{Deserialize, Serialize};
3use thiserror::Error;
4use zeroize::Zeroize;
5
6#[derive(Debug, Error, PartialEq, Eq, Serialize, Deserialize, Zeroize, Clone)]
7#[cfg_attr(feature = "with_specta", derive(specta::Type))]
8#[zeroize(drop)]
9pub enum SecretStoreError {
10 #[error("Store is locked")]
11 Locked,
12 #[error("Forbidden user")]
13 Forbidden,
14 #[error("Invalid passphrase")]
15 InvalidPassphrase,
16 #[error("Already unlocked")]
17 AlreadyUnlocked,
18 #[error("Conflicting ids/id already taken")]
19 Conflict,
20 #[error("Key derivation error: {0}")]
21 KeyDerivation(String),
22 #[error("Cipher error: {0}")]
23 Cipher(String),
24 #[error("IO: {0}")]
25 IO(String),
26 #[error("User is not a recipient of this message")]
27 NoRecipient,
28 #[error("Invalid data padding")]
29 Padding,
30 #[error("Mutex: {0}")]
31 Mutex(String),
32 #[error("BlockStore: {0}")]
33 BlockStore(StoreError),
34 #[error("Invalid store url: {0}")]
35 InvalidStoreUrl(String),
36 #[error("Json error: {0}")]
37 Json(String),
38 #[error("Invalid recipient: {0}")]
39 InvalidRecipient(String),
40 #[error("Missing private key for cipher: {0}")]
41 MissingPrivateKey(String),
42 #[error("Secret not found")]
43 NotFound,
44}
45
46pub type SecretStoreResult<T> = Result<T, SecretStoreError>;
47
48error_convert_from!(argon2::Error, SecretStoreError, Cipher(display));
49#[cfg(feature = "openssl")]
50error_convert_from!(openssl::error::ErrorStack, SecretStoreError, Cipher(display));
51error_convert_from!(std::io::Error, SecretStoreError, IO(display));
52error_convert_from!(std::str::Utf8Error, SecretStoreError, IO(display));
53error_convert_from!(chacha20_poly1305_aead::DecryptError, SecretStoreError, Cipher(display));
54error_convert_from!(capnp::NotInSchema, SecretStoreError, IO(display));
55error_convert_from!(serde_json::Error, SecretStoreError, Json(display));
56error_convert_from!(StoreError, SecretStoreError, BlockStore(direct));
57#[cfg(feature = "rust_crypto")]
58error_convert_from!(rsa::errors::Error, SecretStoreError, Cipher(display));
59#[cfg(feature = "rust_crypto")]
60error_convert_from!(aes_gcm::Error, SecretStoreError, Cipher(display));
61#[cfg(feature = "rust_crypto")]
62error_convert_from!(rsa::pkcs1::Error, SecretStoreError, Cipher(display));
63#[cfg(feature = "rust_crypto")]
64error_convert_from!(rsa::pkcs8::Error, SecretStoreError, Cipher(display));
65#[cfg(feature = "rust_crypto")]
66error_convert_from!(rsa::pkcs1::der::Error, SecretStoreError, Cipher(display));
67error_convert_from!(rsa::pkcs8::spki::Error, SecretStoreError, Cipher(display));
68error_convert_from!(rmp_serde::encode::Error, SecretStoreError, IO(display));
69error_convert_from!(rmp_serde::decode::Error, SecretStoreError, IO(display));
70
71impl<T> From<std::sync::PoisonError<T>> for SecretStoreError {
72 fn from(error: std::sync::PoisonError<T>) -> Self {
73 SecretStoreError::Mutex(format!("{error}"))
74 }
75}
76
77impl From<capnp::Error> for SecretStoreError {
78 fn from(error: capnp::Error) -> Self {
79 match error.kind {
80 capnp::ErrorKind::Failed => {
81 match serde_json::from_str::<SecretStoreError>(error.extra.trim_start_matches("remote exception: ")) {
82 Ok(service_error) => service_error,
83 _ => SecretStoreError::IO(format!("{error}")),
84 }
85 }
86 _ => SecretStoreError::IO(format!("{error}")),
87 }
88 }
89}
90
91impl From<SecretStoreError> for capnp::Error {
92 fn from(error: SecretStoreError) -> capnp::Error {
93 match serde_json::to_string(&error) {
94 Ok(json) => capnp::Error {
95 kind: capnp::ErrorKind::Failed,
96 extra: json,
97 },
98 _ => capnp::Error {
99 kind: capnp::ErrorKind::Failed,
100 extra: format!("{error}"),
101 },
102 }
103 }
104}