Initial commit
This commit is contained in:
Alex Wright
commit
9f8c47712a
|
|
@ -0,0 +1,2 @@
|
|||
/target
|
||||
**/*.rs.bk
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,15 @@
|
|||
[package]
|
||||
name = "auth"
|
||||
version = "0.1.0"
|
||||
authors = ["alex"]
|
||||
edition = "2018"
|
||||
|
||||
[dependencies]
|
||||
futures = "0.1.21"
|
||||
hyper = "0.12.25"
|
||||
hyper-router = "0.5"
|
||||
ldap3 = "0.6"
|
||||
tokio = "0.1.0"
|
||||
base64 = "0.10.0"
|
||||
#[dependencies.ldap3]
|
||||
# version = "0.6"
|
||||
|
|
@ -0,0 +1,148 @@
|
|||
// #![deny(warnings)]
|
||||
// extern crate futures;
|
||||
extern crate base64;
|
||||
extern crate hyper;
|
||||
extern crate ldap3;
|
||||
extern crate tokio;
|
||||
|
||||
use std::str::{
|
||||
FromStr,
|
||||
from_utf8,
|
||||
};
|
||||
use std::thread;
|
||||
|
||||
use hyper::rt::{Future};
|
||||
use hyper::{Body, Request, Response, Server, StatusCode};
|
||||
use hyper::header::{AUTHORIZATION};
|
||||
use hyper_router::{Route, RouterBuilder, RouterService};
|
||||
use base64::decode;
|
||||
|
||||
use ldap3::{ LdapConn, Scope, SearchEntry };
|
||||
|
||||
#[derive(Debug)]
|
||||
struct BasicAuthentication {
|
||||
pub username: String,
|
||||
pub password: String,
|
||||
}
|
||||
|
||||
#[derive(Debug)]
|
||||
pub enum AuthError {
|
||||
Parse,
|
||||
Decode,
|
||||
}
|
||||
|
||||
impl FromStr for BasicAuthentication {
|
||||
type Err = AuthError;
|
||||
fn from_str(s: &str) -> Result<BasicAuthentication, AuthError> {
|
||||
match decode(s) {
|
||||
Ok(bytes) => match from_utf8(&bytes) {
|
||||
Ok(text) => {
|
||||
let mut pair = text.splitn(2, ":");
|
||||
Ok(BasicAuthentication {
|
||||
username: pair.next().unwrap().to_string(),
|
||||
password: pair.next().unwrap().to_string(),
|
||||
})
|
||||
},
|
||||
Err(_) => Err(AuthError::Parse)
|
||||
},
|
||||
Err(_) => Err(AuthError::Decode)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
#[derive(Debug)]
|
||||
struct LdapUser {
|
||||
pub dn: String,
|
||||
pub services: Vec<String>,
|
||||
}
|
||||
|
||||
fn auth_user(auth: &BasicAuthentication) -> Result<LdapUser, AuthError> {
|
||||
let ldap = match LdapConn::new("ldap://192.168.122.61:389") {
|
||||
Ok(conn) => conn,
|
||||
Err(err) => panic!(err),
|
||||
};
|
||||
|
||||
let base = format!("uid={},ou=people,dc=xeentech,dc=com", auth.username);
|
||||
match ldap.simple_bind(&base, &auth.password).unwrap().success() {
|
||||
Ok(ldap) => println!("Connected and authenticated"),
|
||||
Err(err) => panic!("Failed to bind with dn+password"),
|
||||
};
|
||||
|
||||
let filter = format!("(uid={})", auth.username);
|
||||
let s = match ldap.search(&base, Scope::Subtree, &filter, vec!["mail", "enabledService"]) {
|
||||
Ok(result) => {
|
||||
let (rs, _) = result.success().unwrap();
|
||||
rs
|
||||
},
|
||||
Err(err) => panic!("Search failed? {:?}", err),
|
||||
};
|
||||
|
||||
// Grab the first, if any, result and discard the rest
|
||||
let se = SearchEntry::construct(s.first().unwrap().to_owned());
|
||||
let services = match se.attrs.get("enabledService") {
|
||||
Some(services) => services.to_vec(),
|
||||
None => [].to_vec(),
|
||||
};
|
||||
let mail = match se.attrs.get("mail") {
|
||||
Some(mail) => mail.to_vec(),
|
||||
None => [].to_ved(),
|
||||
};
|
||||
|
||||
Ok(LdapUser {
|
||||
dn: base,
|
||||
services: services,
|
||||
})
|
||||
}
|
||||
|
||||
fn auth_handler(req: Request<Body>) -> Response<Body> {
|
||||
let header = match req.headers().get(AUTHORIZATION) {
|
||||
Some(auth_value) => auth_value.to_str().unwrap(),
|
||||
None => return Response::builder()
|
||||
.status(StatusCode::UNAUTHORIZED)
|
||||
.body(Body::from("Authentication header missing"))
|
||||
.unwrap(),
|
||||
};
|
||||
let (auth_type, credentials) = {
|
||||
let mut split = header.split_ascii_whitespace();
|
||||
let auth_type = split.next().unwrap();
|
||||
let credentials = split.next().unwrap();
|
||||
(auth_type, credentials)
|
||||
};
|
||||
|
||||
if auth_type != "Basic" {
|
||||
return Response::builder()
|
||||
.status(StatusCode::UNAUTHORIZED)
|
||||
.body(Body::from("Basic Authentication was expected"))
|
||||
.unwrap();
|
||||
}
|
||||
let auth = BasicAuthentication::from_str(credentials).unwrap();
|
||||
let worker = thread::spawn(move || {
|
||||
let user = auth_user(&auth);
|
||||
user
|
||||
});
|
||||
let user = worker.join().expect("ldap thread threw?");
|
||||
|
||||
Response::new(Body::from(format!("BasicAuthentication {:?}", user)))
|
||||
}
|
||||
|
||||
fn hello(req: Request<Body>) -> Response<Body> {
|
||||
Response::new(Body::from("Hi!"))
|
||||
}
|
||||
|
||||
fn router_service() -> Result<RouterService, std::io::Error> {
|
||||
let router = RouterBuilder::new()
|
||||
.add(Route::get("/hello").using(hello))
|
||||
.add(Route::post("/auth").using(auth_handler))
|
||||
.build();
|
||||
Ok(RouterService::new(router))
|
||||
}
|
||||
|
||||
fn main() {
|
||||
let addr = "0.0.0.0:3000".parse().expect("Bad Address");
|
||||
let server = Server::bind(&addr)
|
||||
.serve(router_service)
|
||||
.map_err(|e| eprintln!("server error: {}", e));
|
||||
|
||||
println!("Listening on http://{}", addr);
|
||||
tokio::run(server);
|
||||
}
|
||||
Loading…
Reference in New Issue