monadicsystems/okapi
1
1
Fork 0
mirror of https://github.com/monadicsystems/okapi.git synced 2024-11-22 08:54:32 +03:00
Code Issues Projects Releases Wiki Activity

Implement Security

Browse Source
This commit is contained in:
Rashad Gover 2023-04-24 05:25:45 +00:00
parent 361f6aa82d
commit ea64c755dd
3 changed files with 47 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/okapi.cabal
View File

@ -164,6 +164,7 @@ executable realworld
, http-api-data
, pretty-simple
, aeson
, bytestring
, jose
, openapi3
, sqlite-simple

25
lib/realworld/API.hs
View File

@ -1,4 +1,25 @@
{-# LANGUAGE ApplicativeDo #-}
{-# LANGUAGE BlockArguments #-}
{-# LANGUAGE DerivingStrategies #-}
{-# LANGUAGE GeneralizedNewtypeDeriving #-}
{-# LANGUAGE ImportQualifiedPost #-}
{-# LANGUAGE OverloadedStrings #-}
{-# LANGUAGE TypeApplications #-}
{-# LANGUAGE UndecidableInstances #-}
module API where
auth :: Headers.Script a
auth = undefined
import Data.Aeson qualified as Aeson
import Data.ByteString qualified as BS
import Data.OpenApi qualified as OAPI
import Data.Text qualified as Text
import GHC.Generics (Generic)
import Okapi.Script.Security
import Okapi.Script.Security qualified as Security
import Web.HttpApiData qualified as Web
newtype Token = Token {bytes :: Text.Text}
deriving newtype (Eq, Show, Web.FromHttpApiData, OAPI.ToSchema, Aeson.ToJSON)
tokenAuth :: Security Token
tokenAuth = Secure $ Security.apiKey @Token Header "Authorization"

33
lib/src/Okapi/Script/Security.hs
View File

@ -13,6 +13,7 @@ import Data.Aeson qualified as Aeson
import Data.ByteString qualified as BS
import Data.ByteString.Builder qualified as Builder
import Data.ByteString.Lazy qualified as LBS
import Data.CaseInsensitive qualified as CI
import Data.List qualified as List
import Data.OpenApi qualified as OAPI
import Data.Text qualified as Text
@ -26,10 +27,8 @@ import Web.HttpApiData qualified as Web
data Error
= ParseFail
| ParamNotFound
| CookieHeaderNotFound
| CookieNotFound
| HeaderValueParseFail
| CookieValueParseFail
| APIKeyParseFailIn In
| APIKeyNotFoundIn In BS.ByteString
deriving (Eq, Show, Generics.Generic)
data In
@ -90,11 +89,25 @@ eval op state = case op of
(err@(Fail e), _) -> (err, state)
(ok, newCookies) -> (ok, state {cookies = newCookies})
findAPIKeyInCookie :: Web.Cookies -> BS.ByteString -> (Result Error a, Web.Cookies)
findAPIKeyInCookie cookies name = undefined
findAPIKeyInCookie :: (Web.FromHttpApiData a, OAPI.ToSchema a, Aeson.ToJSON a) => Web.Cookies -> BS.ByteString -> (Result Error a, Web.Cookies)
findAPIKeyInCookie cookies name = case lookup name cookies of
Nothing -> (Fail $ APIKeyNotFoundIn Cookie name, cookies)
Just bs -> case Web.parseHeaderMaybe bs of
Nothing -> (Fail $ APIKeyParseFailIn Cookie, cookies)
Just value -> (Ok value, List.delete (name, bs) cookies)
findAPIKeyInHeader :: HTTP.RequestHeaders -> BS.ByteString -> (Result Error a, HTTP.RequestHeaders)
findAPIKeyInHeader headers name = undefined
findAPIKeyInHeader :: (Web.FromHttpApiData a, OAPI.ToSchema a, Aeson.ToJSON a) => HTTP.RequestHeaders -> BS.ByteString -> (Result Error a, HTTP.RequestHeaders)
findAPIKeyInHeader headers name = case lookup (CI.mk name) headers of
Nothing -> (Fail $ APIKeyNotFoundIn Header name, headers)
Just bs -> case Web.parseHeaderMaybe bs of
Nothing -> (Fail $ APIKeyParseFailIn Header, headers)
Just value -> (Ok value, List.delete (CI.mk name, bs) headers)
findAPIKeyInQuery :: HTTP.Query -> BS.ByteString -> (Result Error a, HTTP.Query)
findAPIKeyInQuery query name = undefined
findAPIKeyInQuery :: (Web.FromHttpApiData a, OAPI.ToSchema a, Aeson.ToJSON a) => HTTP.Query -> BS.ByteString -> (Result Error a, HTTP.Query)
findAPIKeyInQuery query name = case lookup name query of
Nothing -> (Fail $ APIKeyNotFoundIn Header name, query)
Just maybeBS -> case maybeBS of
Nothing -> undefined
Just bs -> case Web.parseHeaderMaybe bs of
Nothing -> (Fail $ APIKeyParseFailIn Header, query)
Just value -> (Ok value, List.delete (name, Just bs) query)