Mirrors/polaris
2
0
Fork 0
mirror of https://github.com/agersant/polaris synced 2024-12-02 09:39:09 +00:00
Code Issues Projects Releases Packages Wiki Activity

Added auth endpoint

Browse source
This commit is contained in:
Antoine Gersant 2018-10-28 10:33:54 -07:00
parent ed949b9678
commit bc9a3a461a
1 changed files with 28 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
src/rocket_api.rs
View file

@ -1,4 +1,4 @@
use rocket::http::{Cookies, Status};
use rocket::http::{Cookie, Cookies, Status};
use rocket::request::{self, FromRequest, Request};
use rocket::{Outcome, State};
use rocket_contrib::json::Json;
@ -12,9 +12,10 @@ use user;
const CURRENT_MAJOR_VERSION: i32 = 2;
const CURRENT_MINOR_VERSION: i32 = 2;
const SESSION_FIELD_USERNAME: &str = "username";
pub fn get_routes() -> Vec<rocket::Route> {
routes![version, initial_setup, get_settings, put_settings, trigger_index]
routes![version, initial_setup, get_settings, put_settings, trigger_index, auth]
}
struct Auth {
@ -26,12 +27,14 @@ impl<'a, 'r> FromRequest<'a, 'r> for Auth {
fn from_request(request: &'a Request<'r>) -> request::Outcome<Self, ()> {
let mut cookies = request.guard::<Cookies>().unwrap();
match cookies.get_private("username") {
match cookies.get_private(SESSION_FIELD_USERNAME) {
Some(u) => Outcome::Success(Auth {
username: u.to_string(),
}),
_ => Outcome::Failure((Status::Forbidden, ())),
}
// TODO allow auth via authorization header
}
}
@ -102,3 +105,25 @@ fn trigger_index(command_sender: State<Arc<index::CommandSender>>, _admin_rights
command_sender.trigger_reindex()?;
Ok(())
}
#[derive(Deserialize)]
struct AuthCredentials {
username: String,
password: String,
}
#[derive(Serialize)]
struct AuthOutput {
admin: bool,
}
#[post("/auth", data = "<credentials>")]
fn auth(db: State<DB>, credentials: Json<AuthCredentials>, mut cookies: Cookies) -> Result<(Json<AuthOutput>), errors::Error> {
user::auth::<DB>(&db, &credentials.username, &credentials.password)?;
cookies.add_private(Cookie::new(SESSION_FIELD_USERNAME, credentials.username.clone()));
let auth_output = AuthOutput {
admin: user::is_admin::<DB>(&db, &credentials.username)?,
};
Ok(Json(auth_output))
}