use std::{convert::Infallible, sync::Arc}; mod booking; mod permission; mod sales_person; mod slot; use axum::http::Uri; use axum::response::{IntoResponse, Redirect}; use axum::routing::get; use axum::{body::Body, error_handling::HandleErrorLayer, response::Response, Router}; use service::ServiceError; use thiserror::Error; use time::Duration; use tower::ServiceBuilder; use tower_sessions::{cookie::SameSite, Expiry, MemoryStore, SessionManagerLayer}; use uuid::Uuid; // TODO: In prod, it must be a different type than in dev mode. type Context = (); pub struct RoString(Arc, bool); impl http_body::Body for RoString { type Data = bytes::Bytes; type Error = Infallible; fn poll_frame( mut self: std::pin::Pin<&mut Self>, _cx: &mut std::task::Context<'_>, ) -> std::task::Poll, Self::Error>>> { std::task::Poll::Ready(if self.1 { None } else { self.1 = true; Some(Ok(http_body::Frame::data(bytes::Bytes::copy_from_slice( self.0.as_bytes(), )))) }) } fn is_end_stream(&self) -> bool { self.1 } } impl From> for RoString { fn from(s: Arc) -> Self { RoString(s, false) } } impl From for Response { fn from(s: RoString) -> Self { Response::builder().status(200).body(Body::new(s)).unwrap() } } #[derive(Debug, Error)] pub enum RestError { #[error("Service error")] ServiceError(#[from] service::ServiceError), #[error("Inconsistent id. Got {0} in path but {1} in body")] InconsistentId(Uuid, Uuid), } fn error_handler(result: Result) -> Response { if result.is_err() { println!("REST error mapping: {:?}", result); } match result { Ok(response) => response, Err(err @ RestError::InconsistentId(_, _)) => Response::builder() .status(400) .body(Body::new(err.to_string())) .unwrap(), Err(RestError::ServiceError(service::ServiceError::Forbidden)) => { Response::builder().status(403).body(Body::empty()).unwrap() } Err(RestError::ServiceError(service::ServiceError::DatabaseQueryError(e))) => { Response::builder() .status(500) .body(Body::new(e.to_string())) .unwrap() } Err(RestError::ServiceError(service::ServiceError::EntityAlreadyExists(id))) => { Response::builder() .status(409) .body(Body::new(id.to_string())) .unwrap() } Err(RestError::ServiceError(service::ServiceError::EntityNotFound(id))) => { Response::builder() .status(404) .body(Body::new(id.to_string())) .unwrap() } Err(RestError::ServiceError(err @ service::ServiceError::EntityConflicts(_, _, _))) => { Response::builder() .status(409) .body(Body::new(err.to_string())) .unwrap() } Err(RestError::ServiceError(err @ service::ServiceError::ValidationError(_))) => { Response::builder() .status(422) .body(Body::new(err.to_string())) .unwrap() } Err(RestError::ServiceError(err @ service::ServiceError::IdSetOnCreate)) => { Response::builder() .status(422) .body(Body::new(err.to_string())) .unwrap() } Err(RestError::ServiceError(err @ service::ServiceError::VersionSetOnCreate)) => { Response::builder() .status(422) .body(Body::new(err.to_string())) .unwrap() } Err(RestError::ServiceError(err @ service::ServiceError::OverlappingTimeRange)) => { Response::builder() .status(409) .body(Body::new(err.to_string())) .unwrap() } Err(RestError::ServiceError(err @ service::ServiceError::TimeOrderWrong(_, _))) => { Response::builder() .status(422) .body(Body::new(err.to_string())) .unwrap() } Err(RestError::ServiceError(err @ service::ServiceError::DateOrderWrong(_, _))) => { Response::builder() .status(422) .body(Body::new(err.to_string())) .unwrap() } Err(RestError::ServiceError(ServiceError::InternalError)) => Response::builder() .status(500) .body(Body::new("Internal server error".to_string())) .unwrap(), } } pub trait RestStateDef: Clone + Send + Sync + 'static { type PermissionService: service::PermissionService + Send + Sync + 'static; type SlotService: service::slot::SlotService + Send + Sync + 'static; type SalesPersonService: service::sales_person::SalesPersonService + Send + Sync + 'static; type BookingService: service::booking::BookingService + Send + Sync + 'static; fn permission_service(&self) -> Arc; fn slot_service(&self) -> Arc; fn sales_person_service(&self) -> Arc; fn booking_service(&self) -> Arc; } pub struct OidcConfig { pub app_url: String, pub issuer: String, pub client_id: String, pub client_secret: Option, } pub fn oidc_config() -> OidcConfig { let app_url = std::env::var("APP_URL").expect("APP_URL env variable"); let issuer = std::env::var("ISSUER").expect("ISSUER env variable"); let client_id = std::env::var("CLIENT_ID").expect("CLIENT_ID env variable"); let client_secret = std::env::var("CLIENT_SECRET").ok(); OidcConfig { app_url: app_url.into(), issuer: issuer.into(), client_id: client_id.into(), client_secret: client_secret.unwrap_or_default().into(), } } pub fn bind_address() -> Arc { std::env::var("SERVER_ADDRESS") .unwrap_or("127.0.0.1:3000".into()) .into() } pub async fn login() -> Redirect { Redirect::to("/") } pub async fn start_server(rest_state: RestState) { let app = Router::new(); #[cfg(feature = "oidc")] let app = { use axum_oidc::error::MiddlewareError; use axum_oidc::{EmptyAdditionalClaims, OidcAuthLayer, OidcLoginLayer}; let oidc_config = oidc_config(); let session_store = MemoryStore::default(); let session_layer = SessionManagerLayer::new(session_store) .with_secure(false) .with_same_site(SameSite::Lax) .with_expiry(Expiry::OnInactivity(Duration::seconds(120))); let oidc_login_service = ServiceBuilder::new() .layer(HandleErrorLayer::new(|e: MiddlewareError| async { e.into_response() })) .layer(OidcLoginLayer::::new()); let oidc_auth_service = ServiceBuilder::new() .layer(HandleErrorLayer::new(|e: MiddlewareError| async { e.into_response() })) .layer( OidcAuthLayer::::discover_client( Uri::from_maybe_shared(oidc_config.app_url).expect("valid APP_URL"), oidc_config.issuer, oidc_config.client_id, oidc_config.client_secret, vec![], ) .await .unwrap(), ); app.layer(oidc_login_service) .route("/authenticate", get(login)) .layer(oidc_auth_service) .layer(session_layer) }; let app = app .nest("/permission", permission::generate_route()) .nest("/slot", slot::generate_route()) .nest("/sales-person", sales_person::generate_route()) .nest("/booking", booking::generate_route()) .with_state(rest_state); let listener = tokio::net::TcpListener::bind(bind_address().as_ref()) .await .expect("Could not bind server"); axum::serve(listener, app) .await .expect("Could not start server"); }