86 lines
2 KiB
Rust
86 lines
2 KiB
Rust
use actix_web::{http::StatusCode, web, App, HttpResponse, HttpServer, ResponseError};
|
|
use futures::future::{err, ok, Ready};
|
|
use http_signature_normalization_actix::prelude::*;
|
|
use sha2::{Digest, Sha256};
|
|
|
|
#[derive(Clone, Debug)]
|
|
struct MyVerify;
|
|
|
|
impl SignatureVerify for MyVerify {
|
|
type Error = MyError;
|
|
type Future = Ready<Result<bool, Self::Error>>;
|
|
|
|
fn signature_verify(
|
|
&mut self,
|
|
algorithm: Option<Algorithm>,
|
|
key_id: &str,
|
|
signature: &str,
|
|
signing_string: &str,
|
|
) -> Self::Future {
|
|
match algorithm {
|
|
Some(Algorithm::Hs2019) => (),
|
|
_ => return err(MyError::Algorithm),
|
|
};
|
|
|
|
if key_id != "my-key-id" {
|
|
return err(MyError::Key);
|
|
}
|
|
|
|
let decoded = match base64::decode(signature) {
|
|
Ok(decoded) => decoded,
|
|
Err(_) => return err(MyError::Decode),
|
|
};
|
|
|
|
ok(decoded == signing_string.as_bytes())
|
|
}
|
|
}
|
|
|
|
async fn index(_: (DigestVerified, SignatureVerified)) -> &'static str {
|
|
"Eyyyyup"
|
|
}
|
|
|
|
#[actix_rt::main]
|
|
async fn main() -> Result<(), Box<dyn std::error::Error>> {
|
|
let config = Config::default();
|
|
|
|
HttpServer::new(move || {
|
|
App::new()
|
|
.wrap(VerifyDigest::new(Sha256::new()).optional())
|
|
.wrap(
|
|
VerifySignature::new(MyVerify, config.clone())
|
|
.authorization()
|
|
.optional(),
|
|
)
|
|
.route("/", web::post().to(index))
|
|
})
|
|
.bind("127.0.0.1:8010")?
|
|
.run()
|
|
.await?;
|
|
|
|
Ok(())
|
|
}
|
|
|
|
#[derive(Debug, thiserror::Error)]
|
|
enum MyError {
|
|
#[error("Failed to verify, {}", _0)]
|
|
Verify(#[from] PrepareVerifyError),
|
|
|
|
#[error("Unsupported algorithm")]
|
|
Algorithm,
|
|
|
|
#[error("Couldn't decode signature")]
|
|
Decode,
|
|
|
|
#[error("Invalid key")]
|
|
Key,
|
|
}
|
|
|
|
impl ResponseError for MyError {
|
|
fn status_code(&self) -> StatusCode {
|
|
StatusCode::BAD_REQUEST
|
|
}
|
|
|
|
fn error_response(&self) -> HttpResponse {
|
|
HttpResponse::BadRequest().finish()
|
|
}
|
|
}
|