Add token functions (create, refresh, validate)
Signed-off-by: trivernis <trivernis@protonmail.com>pull/1/head
parent
c189b4bef9
commit
31f99d77fb
GPG Key ID:
DFFFCC2C7A02DB45
@ -0,0 +1,10 @@
|
||||
<component name="InspectionProjectProfileManager">
|
||||
<profile version="1.0">
|
||||
<option name="myName" value="Project Default" />
|
||||
<inspection_tool class="DuplicatedCode" enabled="true" level="WEAK WARNING" enabled_by_default="true">
|
||||
<Languages>
|
||||
<language minSize="52" name="Rust" />
|
||||
</Languages>
|
||||
</inspection_tool>
|
||||
</profile>
|
||||
</component>
|
||||
@ -0,0 +1,5 @@
|
||||
pub const SET: &str = "SET";
|
||||
pub const EXPIRE: &str = "EXPIRE";
|
||||
pub const TTL: &str = "TTL";
|
||||
pub const EX: &str = "EX";
|
||||
pub const GET: &str = "GET";
|
||||
@ -0,0 +1,91 @@
|
||||
use crate::database::redis_operations::{EX, GET, SET};
|
||||
use crate::database::RedisConnection;
|
||||
use crate::utils::create_user_token;
|
||||
use byteorder::{BigEndian, ByteOrder};
|
||||
use redis::RedisResult;
|
||||
use zeroize::Zeroize;
|
||||
|
||||
const REQUEST_TOKEN_EXPIRE_SECONDS: usize = 60 * 10;
|
||||
const REFRESH_TOKEN_EXPIRE_SECONDS: usize = 60 * 60 * 24;
|
||||
|
||||
#[derive(Clone, Debug, Zeroize)]
|
||||
#[zeroize(drop)]
|
||||
pub struct SessionTokens {
|
||||
pub request_token: [u8; 32],
|
||||
pub refresh_token: [u8; 32],
|
||||
}
|
||||
|
||||
impl SessionTokens {
|
||||
pub fn new(user_id: i32) -> Self {
|
||||
Self {
|
||||
request_token: create_user_token(user_id),
|
||||
refresh_token: create_user_token(user_id),
|
||||
}
|
||||
}
|
||||
|
||||
pub fn from_tokens(request_token: [u8; 32], refresh_token: [u8; 32]) -> Self {
|
||||
Self {
|
||||
request_token,
|
||||
refresh_token,
|
||||
}
|
||||
}
|
||||
|
||||
pub fn retrieve(user_id: i32, redis_connection: &mut RedisConnection) -> RedisResult<Self> {
|
||||
let redis_request_key = format!("user-{}_request", user_id);
|
||||
let request_token_vec: Vec<u8> = redis::cmd(GET)
|
||||
.arg(redis_request_key)
|
||||
.query(redis_connection)?;
|
||||
let redis_refresh_key = format!("user-{}_refresh", user_id);
|
||||
let refresh_token_vec: Vec<u8> = redis::cmd(GET)
|
||||
.arg(redis_refresh_key)
|
||||
.query(redis_connection)?;
|
||||
|
||||
let mut request_token = [0u8; 32];
|
||||
let mut refresh_token = [0u8; 32];
|
||||
if request_token_vec.len() == 32 {
|
||||
request_token.copy_from_slice(&request_token_vec);
|
||||
}
|
||||
if refresh_token_vec.len() == 32 {
|
||||
refresh_token.copy_from_slice(&refresh_token_vec);
|
||||
}
|
||||
|
||||
Ok(Self {
|
||||
request_token,
|
||||
refresh_token,
|
||||
})
|
||||
}
|
||||
|
||||
pub fn refresh(&mut self) {
|
||||
self.request_token = create_user_token(self.get_user_id());
|
||||
self.refresh_token = create_user_token(self.get_user_id());
|
||||
}
|
||||
|
||||
/// Returns the user id that is stored in the first four bytes of the refresh token
|
||||
pub fn get_user_id(&self) -> i32 {
|
||||
BigEndian::read_i32(&self.refresh_token[0..4])
|
||||
}
|
||||
|
||||
/// Saves the tokens into the database
|
||||
pub fn store(&self, redis_connection: &mut RedisConnection) -> RedisResult<()> {
|
||||
let id = self.get_user_id();
|
||||
|
||||
let redis_request_key = format!("user-{}_request", id);
|
||||
redis::cmd(SET)
|
||||
.arg(&redis_request_key)
|
||||
.arg(&self.request_token)
|
||||
.arg(EX)
|
||||
.arg(REQUEST_TOKEN_EXPIRE_SECONDS)
|
||||
.query(&mut *redis_connection)?;
|
||||
|
||||
let redis_refresh_key = format!("user-{}_refresh", id);
|
||||
|
||||
redis::cmd(SET)
|
||||
.arg(&redis_refresh_key)
|
||||
.arg(&self.refresh_token)
|
||||
.arg(EX)
|
||||
.arg(REFRESH_TOKEN_EXPIRE_SECONDS)
|
||||
.query(&mut *redis_connection)?;
|
||||
|
||||
Ok(())
|
||||
}
|
||||
}
|
||||
@ -1,3 +1,4 @@
|
||||
#![allow(dead_code)]
|
||||
const NULL: [u8; 4] = [0x00, 0x00, 0x00, 0x00];
|
||||
const VALIDATE_TOKEN: [u8; 4] = [0x56, 0x41, 0x4c, 0x49];
|
||||
const GET_ROLES: [u8; 4] = [0x52, 0x4f, 0x4c, 0x45];
|
||||
|
||||
@ -1,9 +1,26 @@
|
||||
use byteorder::{BigEndian, ByteOrder};
|
||||
use rand::Rng;
|
||||
|
||||
pub fn create_salt(length: usize) -> [u8; 16] {
|
||||
pub const TOKEN_LENGTH: usize = 32;
|
||||
const SALT_LENGTH: usize = 16;
|
||||
|
||||
pub fn create_salt() -> [u8; SALT_LENGTH] {
|
||||
let mut rng = rand::thread_rng();
|
||||
let mut salt = [0u8; 16];
|
||||
let mut salt = [0u8; SALT_LENGTH];
|
||||
rng.fill(&mut salt);
|
||||
|
||||
salt
|
||||
}
|
||||
|
||||
pub fn create_user_token(user_id: i32) -> [u8; TOKEN_LENGTH] {
|
||||
let mut rng = rand::thread_rng();
|
||||
let mut value = [0u8; TOKEN_LENGTH];
|
||||
rng.fill(&mut value);
|
||||
BigEndian::write_i32(&mut value, user_id);
|
||||
|
||||
value
|
||||
}
|
||||
|
||||
pub fn get_user_id_from_token(token: &[u8]) -> i32 {
|
||||
BigEndian::read_i32(token)
|
||||
}
|
||||
|
||||
Loading…
Reference in New Issue