1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
use crate::db::users::{Credentials, User};
use crate::db::{sessions, users};
use crate::DatabaseConnection;
use axum::extract::{FromRequest, RequestParts, TypedHeader};
use axum::headers::authorization::Bearer;
use axum::headers::Authorization;
use axum::http::StatusCode;
use axum::response::{Headers, IntoResponse, Response};
use axum::{async_trait, Json};
use serde::{Deserialize, Serialize};
type AuthorizationHeader = TypedHeader<Authorization<Bearer>>;
#[async_trait]
impl<B> FromRequest<B> for User
where
B: Send,
{
type Rejection = (StatusCode, String);
async fn from_request(req: &mut RequestParts<B>) -> Result<Self, Self::Rejection> {
let conn = DatabaseConnection::from_request(req).await?;
let TypedHeader(Authorization(bearer)) = AuthorizationHeader::from_request(req)
.await
.map_err(|_| (StatusCode::UNAUTHORIZED, "".to_string()))?;
let (_session, user) = sessions::find_user_by_session(bearer.token(), &conn)
.map_err(|_| (StatusCode::UNAUTHORIZED, "".to_string()))?;
Ok(user)
}
}
#[derive(Serialize, Deserialize)]
pub struct UserData {
pub user_id: i32,
pub username: String,
}
impl From<User> for UserData {
fn from(user: User) -> Self {
UserData {
user_id: user.id,
username: user.username,
}
}
}
#[derive(Deserialize)]
pub struct RegistrationParams {
pub username: String,
pub password: String,
}
pub async fn register(
conn: DatabaseConnection,
params: Json<RegistrationParams>,
) -> Json<UserData> {
let credentials = Credentials {
username: ¶ms.username,
password: ¶ms.password,
};
let user = users::create_user(&credentials, &conn).unwrap();
Json(user.into())
}
#[derive(Deserialize)]
pub struct LoginParams {
pub username: String,
pub password: String,
}
pub async fn login(conn: DatabaseConnection, params: Json<LoginParams>) -> Response {
let credentials = Credentials {
username: ¶ms.username,
password: ¶ms.password,
};
// TODO: handle failures
let authenticated = users::authenticate_user(&credentials, &conn);
match authenticated {
None => StatusCode::FORBIDDEN.into_response(),
Some(user) => {
let session = sessions::create_session(&user, &conn);
let user_data: UserData = user.into();
let headers = Headers(vec![("Token", &session.token)]);
(headers, Json(user_data)).into_response()
}
}
}
pub async fn current_user(user: User) -> Json<UserData> {
Json(user.into())
}
|
