mirror of
https://github.com/OMGeeky/yup-oauth2.git
synced 2026-01-01 00:50:04 +01:00
c76ae18224
Update Authenticator to accept clients with custom connectors, rather than depending on the sealed hyper::client::connect::Connect trait, as recommended by hyper: https://docs.rs/hyper/0.13.8/src/hyper/client/connect/mod.rs.html#256-258 Closes #177.
53 lines
2.0 KiB
Rust
53 lines
2.0 KiB
Rust
use crate::error::Error;
|
|
use crate::types::TokenInfo;
|
|
use hyper::client::connect::Connection;
|
|
use std::error::Error as StdError;
|
|
use http::Uri;
|
|
use tokio::io::{AsyncRead, AsyncWrite};
|
|
use tower_service::Service;
|
|
|
|
/// Provide options for the Application Default Credential Flow, mostly used for testing
|
|
#[derive(Default, Clone, Debug)]
|
|
pub struct ApplicationDefaultCredentialsFlowOpts {
|
|
/// Used as base to build the url during token request from GCP metadata server
|
|
pub metadata_url: Option<String>,
|
|
}
|
|
|
|
pub struct ApplicationDefaultCredentialsFlow {
|
|
metadata_url: String,
|
|
}
|
|
|
|
impl ApplicationDefaultCredentialsFlow {
|
|
pub(crate) fn new(opts: ApplicationDefaultCredentialsFlowOpts) -> Self {
|
|
let metadata_url = opts.metadata_url.unwrap_or_else(|| "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token".to_string());
|
|
ApplicationDefaultCredentialsFlow { metadata_url }
|
|
}
|
|
|
|
pub(crate) async fn token<S, T>(
|
|
&self,
|
|
hyper_client: &hyper::Client<S>,
|
|
scopes: &[T],
|
|
) -> Result<TokenInfo, Error>
|
|
where
|
|
T: AsRef<str>,
|
|
S: Service<Uri> + Clone + Send + Sync + 'static,
|
|
S::Response: Connection + AsyncRead + AsyncWrite + Send + Unpin + 'static,
|
|
S::Future: Send + Unpin + 'static,
|
|
S::Error: Into<Box<dyn StdError + Send + Sync>>,
|
|
{
|
|
let scope = crate::helper::join(scopes, ",");
|
|
let token_uri = format!("{}?scopes={}", self.metadata_url, scope);
|
|
let request = hyper::Request::get(token_uri)
|
|
.header("Metadata-Flavor", "Google")
|
|
.body(hyper::Body::from(String::new())) // why body is needed?
|
|
.unwrap();
|
|
log::debug!("requesting token from metadata server: {:?}", request);
|
|
let (head, body) = hyper_client.request(request).await?.into_parts();
|
|
let body = hyper::body::to_bytes(body).await?;
|
|
log::debug!("received response; head: {:?}, body: {:?}", head, body);
|
|
TokenInfo::from_json(&body)
|
|
}
|
|
}
|
|
|
|
// eof
|