You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
60 lines
1.3 KiB
Rust
60 lines
1.3 KiB
Rust
use plume_models::{self, api_tokens::ApiToken};
|
|
use rocket::{
|
|
http::Status,
|
|
request::{self, FromRequest, Request},
|
|
Outcome,
|
|
};
|
|
use std::marker::PhantomData;
|
|
|
|
// Actions
|
|
pub trait Action {
|
|
fn to_str() -> &'static str;
|
|
}
|
|
pub struct Read;
|
|
impl Action for Read {
|
|
fn to_str() -> &'static str {
|
|
"read"
|
|
}
|
|
}
|
|
pub struct Write;
|
|
impl Action for Write {
|
|
fn to_str() -> &'static str {
|
|
"write"
|
|
}
|
|
}
|
|
|
|
// Scopes
|
|
pub trait Scope {
|
|
fn to_str() -> &'static str;
|
|
}
|
|
impl Scope for plume_models::posts::Post {
|
|
fn to_str() -> &'static str {
|
|
"posts"
|
|
}
|
|
}
|
|
|
|
pub struct Authorization<A, S>(pub ApiToken, PhantomData<(A, S)>);
|
|
|
|
#[rocket::async_trait]
|
|
impl<'a, 'r, A, S> FromRequest<'a, 'r> for Authorization<A, S>
|
|
where
|
|
A: Action,
|
|
S: Scope,
|
|
{
|
|
type Error = ();
|
|
|
|
async fn from_request(request: &'a Request<'r>) -> request::Outcome<Authorization<A, S>, ()> {
|
|
request
|
|
.guard::<ApiToken>()
|
|
.await
|
|
.map_failure(|_| (Status::Unauthorized, ()))
|
|
.and_then(|token| {
|
|
if token.can(A::to_str(), S::to_str()) {
|
|
Outcome::Success(Authorization(token, PhantomData))
|
|
} else {
|
|
Outcome::Failure((Status::Unauthorized, ()))
|
|
}
|
|
})
|
|
}
|
|
}
|