t_rust_less_lib/secrets_store/
error.rs

1use crate::block_store::StoreError;
2use serde::{Deserialize, Serialize};
3use thiserror::Error;
4use zeroize::Zeroize;
5
6#[derive(Debug, Error, PartialEq, Eq, Serialize, Deserialize, Zeroize, Clone)]
7#[cfg_attr(feature = "with_specta", derive(specta::Type))]
8#[zeroize(drop)]
9pub enum SecretStoreError {
10  #[error("Store is locked")]
11  Locked,
12  #[error("Forbidden user")]
13  Forbidden,
14  #[error("Invalid passphrase")]
15  InvalidPassphrase,
16  #[error("Already unlocked")]
17  AlreadyUnlocked,
18  #[error("Conflicting ids/id already taken")]
19  Conflict,
20  #[error("Key derivation error: {0}")]
21  KeyDerivation(String),
22  #[error("Cipher error: {0}")]
23  Cipher(String),
24  #[error("IO: {0}")]
25  IO(String),
26  #[error("User is not a recipient of this message")]
27  NoRecipient,
28  #[error("Invalid data padding")]
29  Padding,
30  #[error("Mutex: {0}")]
31  Mutex(String),
32  #[error("BlockStore: {0}")]
33  BlockStore(StoreError),
34  #[error("Invalid store url: {0}")]
35  InvalidStoreUrl(String),
36  #[error("Json error: {0}")]
37  Json(String),
38  #[error("Invalid recipient: {0}")]
39  InvalidRecipient(String),
40  #[error("Missing private key for cipher: {0}")]
41  MissingPrivateKey(String),
42  #[error("Secret not found")]
43  NotFound,
44}
45
46pub type SecretStoreResult<T> = Result<T, SecretStoreError>;
47
48error_convert_from!(argon2::Error, SecretStoreError, Cipher(display));
49#[cfg(feature = "openssl")]
50error_convert_from!(openssl::error::ErrorStack, SecretStoreError, Cipher(display));
51error_convert_from!(std::io::Error, SecretStoreError, IO(display));
52error_convert_from!(std::str::Utf8Error, SecretStoreError, IO(display));
53error_convert_from!(chacha20_poly1305_aead::DecryptError, SecretStoreError, Cipher(display));
54error_convert_from!(capnp::NotInSchema, SecretStoreError, IO(display));
55error_convert_from!(serde_json::Error, SecretStoreError, Json(display));
56error_convert_from!(StoreError, SecretStoreError, BlockStore(direct));
57#[cfg(feature = "rust_crypto")]
58error_convert_from!(rsa::errors::Error, SecretStoreError, Cipher(display));
59#[cfg(feature = "rust_crypto")]
60error_convert_from!(aes_gcm::Error, SecretStoreError, Cipher(display));
61#[cfg(feature = "rust_crypto")]
62error_convert_from!(rsa::pkcs1::Error, SecretStoreError, Cipher(display));
63#[cfg(feature = "rust_crypto")]
64error_convert_from!(rsa::pkcs8::Error, SecretStoreError, Cipher(display));
65#[cfg(feature = "rust_crypto")]
66error_convert_from!(rsa::pkcs1::der::Error, SecretStoreError, Cipher(display));
67error_convert_from!(rsa::pkcs8::spki::Error, SecretStoreError, Cipher(display));
68error_convert_from!(rmp_serde::encode::Error, SecretStoreError, IO(display));
69error_convert_from!(rmp_serde::decode::Error, SecretStoreError, IO(display));
70
71impl<T> From<std::sync::PoisonError<T>> for SecretStoreError {
72  fn from(error: std::sync::PoisonError<T>) -> Self {
73    SecretStoreError::Mutex(format!("{error}"))
74  }
75}
76
77impl From<capnp::Error> for SecretStoreError {
78  fn from(error: capnp::Error) -> Self {
79    match error.kind {
80      capnp::ErrorKind::Failed => {
81        match serde_json::from_str::<SecretStoreError>(error.extra.trim_start_matches("remote exception: ")) {
82          Ok(service_error) => service_error,
83          _ => SecretStoreError::IO(format!("{error}")),
84        }
85      }
86      _ => SecretStoreError::IO(format!("{error}")),
87    }
88  }
89}
90
91impl From<SecretStoreError> for capnp::Error {
92  fn from(error: SecretStoreError) -> capnp::Error {
93    match serde_json::to_string(&error) {
94      Ok(json) => capnp::Error {
95        kind: capnp::ErrorKind::Failed,
96        extra: json,
97      },
98      _ => capnp::Error {
99        kind: capnp::ErrorKind::Failed,
100        extra: format!("{error}"),
101      },
102    }
103  }
104}