use super::{error::*, handler::*, sql_tables::*}; use crate::infra::configuration::Configuration; use async_trait::async_trait; use futures_util::StreamExt; use sea_query::{Expr, Iden, Order, Query, SimpleExpr}; use sqlx::Row; use std::collections::HashSet; #[derive(Debug, Clone)] pub struct SqlBackendHandler { pub(crate) config: Configuration, pub(crate) sql_pool: Pool, } impl SqlBackendHandler { pub fn new(config: Configuration, sql_pool: Pool) -> Self { SqlBackendHandler { config, sql_pool } } } fn get_filter_expr(filter: RequestFilter) -> SimpleExpr { use RequestFilter::*; fn get_repeated_filter( fs: Vec, field: &dyn Fn(SimpleExpr, SimpleExpr) -> SimpleExpr, ) -> SimpleExpr { let mut it = fs.into_iter(); let first_expr = match it.next() { None => return Expr::value(true), Some(f) => get_filter_expr(f), }; it.fold(first_expr, |e, f| field(e, get_filter_expr(f))) } match filter { And(fs) => get_repeated_filter(fs, &SimpleExpr::and), Or(fs) => get_repeated_filter(fs, &SimpleExpr::or), Not(f) => Expr::not(Expr::expr(get_filter_expr(*f))), Equality(s1, s2) => Expr::expr(Expr::cust(&s1)).eq(s2), } } #[async_trait] impl BackendHandler for SqlBackendHandler { async fn list_users(&self, filters: Option) -> Result> { let query = { let mut query_builder = Query::select() .column(Users::UserId) .column(Users::Email) .column(Users::DisplayName) .column(Users::FirstName) .column(Users::LastName) .column(Users::Avatar) .column(Users::CreationDate) .from(Users::Table) .order_by(Users::UserId, Order::Asc) .to_owned(); if let Some(filter) = filters { if filter != RequestFilter::And(Vec::new()) && filter != RequestFilter::Or(Vec::new()) { query_builder.and_where(get_filter_expr(filter)); } } query_builder.to_string(DbQueryBuilder {}) }; let results = sqlx::query_as::<_, User>(&query) .fetch(&self.sql_pool) .collect::>>() .await; Ok(results.into_iter().collect::>>()?) } async fn list_groups(&self) -> Result> { let query: String = Query::select() .column((Groups::Table, Groups::GroupId)) .column(Groups::DisplayName) .column(Memberships::UserId) .from(Groups::Table) .left_join( Memberships::Table, Expr::tbl(Groups::Table, Groups::GroupId) .equals(Memberships::Table, Memberships::GroupId), ) .order_by(Groups::DisplayName, Order::Asc) .order_by(Memberships::UserId, Order::Asc) .to_string(DbQueryBuilder {}); // For group_by. use itertools::Itertools; let mut groups = Vec::new(); // The rows are returned sorted by display_name, equivalent to group_id. We group them by // this key which gives us one element (`rows`) per group. for ((group_id, display_name), rows) in &sqlx::query(&query) .fetch_all(&self.sql_pool) .await? .into_iter() .group_by(|row| { ( GroupId(row.get::(&*Groups::GroupId.to_string())), row.get::(&*Groups::DisplayName.to_string()), ) }) { groups.push(Group { id: group_id, display_name, users: rows .map(|row| row.get::(&*Memberships::UserId.to_string())) // If a group has no users, an empty string is returned because of the left // join. .filter(|s| !s.is_empty()) .collect(), }); } Ok(groups) } async fn get_user_details(&self, user_id: &str) -> Result { let query = Query::select() .column(Users::UserId) .column(Users::Email) .column(Users::DisplayName) .column(Users::FirstName) .column(Users::LastName) .column(Users::Avatar) .column(Users::CreationDate) .from(Users::Table) .and_where(Expr::col(Users::UserId).eq(user_id)) .to_string(DbQueryBuilder {}); Ok(sqlx::query_as::<_, User>(&query) .fetch_one(&self.sql_pool) .await?) } async fn get_user_groups(&self, user: &str) -> Result> { if user == self.config.ldap_user_dn { let mut groups = HashSet::new(); groups.insert(GroupIdAndName(GroupId(1), "lldap_admin".to_string())); return Ok(groups); } let query: String = Query::select() .column((Groups::Table, Groups::GroupId)) .column(Groups::DisplayName) .from(Groups::Table) .inner_join( Memberships::Table, Expr::tbl(Groups::Table, Groups::GroupId) .equals(Memberships::Table, Memberships::GroupId), ) .and_where(Expr::col(Memberships::UserId).eq(user)) .to_string(DbQueryBuilder {}); sqlx::query(&query) // Extract the group id from the row. .map(|row: DbRow| { GroupIdAndName( row.get::(&*Groups::GroupId.to_string()), row.get::(&*Groups::DisplayName.to_string()), ) }) .fetch(&self.sql_pool) // Collect the vector of rows, each potentially an error. .collect::>>() .await .into_iter() // Transform it into a single result (the first error if any), and group the group_ids // into a HashSet. .collect::>>() // Map the sqlx::Error into a DomainError. .map_err(DomainError::DatabaseError) } async fn create_user(&self, request: CreateUserRequest) -> Result<()> { let columns = vec![ Users::UserId, Users::Email, Users::DisplayName, Users::FirstName, Users::LastName, Users::CreationDate, ]; let values = vec![ request.user_id.clone().into(), request.email.into(), request.display_name.unwrap_or_default().into(), request.first_name.unwrap_or_default().into(), request.last_name.unwrap_or_default().into(), chrono::Utc::now().naive_utc().into(), ]; let query = Query::insert() .into_table(Users::Table) .columns(columns) .values_panic(values) .to_string(DbQueryBuilder {}); sqlx::query(&query).execute(&self.sql_pool).await?; Ok(()) } async fn update_user(&self, request: UpdateUserRequest) -> Result<()> { let mut values = Vec::new(); if let Some(email) = request.email { values.push((Users::Email, email.into())); } if let Some(display_name) = request.display_name { values.push((Users::DisplayName, display_name.into())); } if let Some(first_name) = request.first_name { values.push((Users::FirstName, first_name.into())); } if let Some(last_name) = request.last_name { values.push((Users::LastName, last_name.into())); } if values.is_empty() { return Ok(()); } let query = Query::update() .table(Users::Table) .values(values) .and_where(Expr::col(Users::UserId).eq(request.user_id)) .to_string(DbQueryBuilder {}); sqlx::query(&query).execute(&self.sql_pool).await?; Ok(()) } async fn update_group(&self, request: UpdateGroupRequest) -> Result<()> { let mut values = Vec::new(); if let Some(display_name) = request.display_name { values.push((Groups::DisplayName, display_name.into())); } if values.is_empty() { return Ok(()); } let query = Query::update() .table(Groups::Table) .values(values) .and_where(Expr::col(Groups::GroupId).eq(request.group_id)) .to_string(DbQueryBuilder {}); sqlx::query(&query).execute(&self.sql_pool).await?; Ok(()) } async fn delete_user(&self, user_id: &str) -> Result<()> { let delete_query = Query::delete() .from_table(Users::Table) .and_where(Expr::col(Users::UserId).eq(user_id)) .to_string(DbQueryBuilder {}); sqlx::query(&delete_query).execute(&self.sql_pool).await?; Ok(()) } async fn create_group(&self, group_name: &str) -> Result { let query = Query::insert() .into_table(Groups::Table) .columns(vec![Groups::DisplayName]) .values_panic(vec![group_name.into()]) .to_string(DbQueryBuilder {}); sqlx::query(&query).execute(&self.sql_pool).await?; let query = Query::select() .column(Groups::GroupId) .from(Groups::Table) .and_where(Expr::col(Groups::DisplayName).eq(group_name)) .to_string(DbQueryBuilder {}); let row = sqlx::query(&query).fetch_one(&self.sql_pool).await?; Ok(GroupId(row.get::(&*Groups::GroupId.to_string()))) } async fn delete_group(&self, group_id: GroupId) -> Result<()> { let delete_query = Query::delete() .from_table(Groups::Table) .and_where(Expr::col(Groups::GroupId).eq(group_id)) .to_string(DbQueryBuilder {}); sqlx::query(&delete_query).execute(&self.sql_pool).await?; Ok(()) } async fn add_user_to_group(&self, user_id: &str, group_id: GroupId) -> Result<()> { let query = Query::insert() .into_table(Memberships::Table) .columns(vec![Memberships::UserId, Memberships::GroupId]) .values_panic(vec![user_id.into(), group_id.into()]) .to_string(DbQueryBuilder {}); sqlx::query(&query).execute(&self.sql_pool).await?; Ok(()) } async fn remove_user_from_group(&self, user_id: &str, group_id: GroupId) -> Result<()> { let query = Query::delete() .from_table(Memberships::Table) .and_where(Expr::col(Memberships::GroupId).eq(group_id)) .and_where(Expr::col(Memberships::UserId).eq(user_id)) .to_string(DbQueryBuilder {}); sqlx::query(&query).execute(&self.sql_pool).await?; Ok(()) } } #[cfg(test)] mod tests { use super::*; use crate::domain::sql_tables::init_table; use crate::infra::configuration::ConfigurationBuilder; use lldap_auth::{opaque, registration}; fn get_default_config() -> Configuration { ConfigurationBuilder::default() .verbose(true) .build() .unwrap() } async fn get_in_memory_db() -> Pool { PoolOptions::new().connect("sqlite::memory:").await.unwrap() } async fn get_initialized_db() -> Pool { let sql_pool = get_in_memory_db().await; init_table(&sql_pool).await.unwrap(); sql_pool } async fn insert_user(handler: &SqlBackendHandler, name: &str, pass: &str) { use crate::domain::opaque_handler::OpaqueHandler; insert_user_no_password(handler, name).await; let mut rng = rand::rngs::OsRng; let client_registration_start = opaque::client::registration::start_registration(pass, &mut rng).unwrap(); let response = handler .registration_start(registration::ClientRegistrationStartRequest { username: name.to_string(), registration_start_request: client_registration_start.message, }) .await .unwrap(); let registration_upload = opaque::client::registration::finish_registration( client_registration_start.state, response.registration_response, &mut rng, ) .unwrap(); handler .registration_finish(registration::ClientRegistrationFinishRequest { server_data: response.server_data, registration_upload: registration_upload.message, }) .await .unwrap(); } async fn insert_user_no_password(handler: &SqlBackendHandler, name: &str) { handler .create_user(CreateUserRequest { user_id: name.to_string(), email: "bob@bob.bob".to_string(), ..Default::default() }) .await .unwrap(); } async fn insert_group(handler: &SqlBackendHandler, name: &str) -> GroupId { handler.create_group(name).await.unwrap() } async fn insert_membership(handler: &SqlBackendHandler, group_id: GroupId, user_id: &str) { handler.add_user_to_group(user_id, group_id).await.unwrap(); } #[tokio::test] async fn test_bind_admin() { let sql_pool = get_in_memory_db().await; let config = ConfigurationBuilder::default() .ldap_user_dn("admin".to_string()) .ldap_user_pass("test".to_string()) .build() .unwrap(); let handler = SqlBackendHandler::new(config, sql_pool); handler .bind(BindRequest { name: "admin".to_string(), password: "test".to_string(), }) .await .unwrap(); } #[tokio::test] async fn test_bind_user() { let sql_pool = get_initialized_db().await; let config = get_default_config(); let handler = SqlBackendHandler::new(config, sql_pool.clone()); insert_user(&handler, "bob", "bob00").await; handler .bind(BindRequest { name: "bob".to_string(), password: "bob00".to_string(), }) .await .unwrap(); handler .bind(BindRequest { name: "andrew".to_string(), password: "bob00".to_string(), }) .await .unwrap_err(); handler .bind(BindRequest { name: "bob".to_string(), password: "wrong_password".to_string(), }) .await .unwrap_err(); } #[tokio::test] async fn test_user_no_password() { let sql_pool = get_initialized_db().await; let config = get_default_config(); let handler = SqlBackendHandler::new(config, sql_pool.clone()); insert_user_no_password(&handler, "bob").await; handler .bind(BindRequest { name: "bob".to_string(), password: "bob00".to_string(), }) .await .unwrap_err(); } #[tokio::test] async fn test_list_users() { let sql_pool = get_initialized_db().await; let config = get_default_config(); let handler = SqlBackendHandler::new(config, sql_pool); insert_user(&handler, "bob", "bob00").await; insert_user(&handler, "patrick", "pass").await; insert_user(&handler, "John", "Pa33w0rd!").await; { let users = handler .list_users(None) .await .unwrap() .into_iter() .map(|u| u.user_id) .collect::>(); assert_eq!(users, vec!["John", "bob", "patrick"]); } { let users = handler .list_users(Some(RequestFilter::Equality( "user_id".to_string(), "bob".to_string(), ))) .await .unwrap() .into_iter() .map(|u| u.user_id) .collect::>(); assert_eq!(users, vec!["bob"]); } { let users = handler .list_users(Some(RequestFilter::Or(vec![ RequestFilter::Equality("user_id".to_string(), "bob".to_string()), RequestFilter::Equality("user_id".to_string(), "John".to_string()), ]))) .await .unwrap() .into_iter() .map(|u| u.user_id) .collect::>(); assert_eq!(users, vec!["John", "bob"]); } { let users = handler .list_users(Some(RequestFilter::Not(Box::new(RequestFilter::Equality( "user_id".to_string(), "bob".to_string(), ))))) .await .unwrap() .into_iter() .map(|u| u.user_id) .collect::>(); assert_eq!(users, vec!["John", "patrick"]); } } #[tokio::test] async fn test_list_groups() { let sql_pool = get_initialized_db().await; let config = get_default_config(); let handler = SqlBackendHandler::new(config, sql_pool.clone()); insert_user(&handler, "bob", "bob00").await; insert_user(&handler, "patrick", "pass").await; insert_user(&handler, "John", "Pa33w0rd!").await; let group_1 = insert_group(&handler, "Best Group").await; let group_2 = insert_group(&handler, "Worst Group").await; let group_3 = insert_group(&handler, "Empty Group").await; insert_membership(&handler, group_1, "bob").await; insert_membership(&handler, group_1, "patrick").await; insert_membership(&handler, group_2, "patrick").await; insert_membership(&handler, group_2, "John").await; assert_eq!( handler.list_groups().await.unwrap(), vec![ Group { id: group_1, display_name: "Best Group".to_string(), users: vec!["bob".to_string(), "patrick".to_string()] }, Group { id: group_3, display_name: "Empty Group".to_string(), users: vec![] }, Group { id: group_2, display_name: "Worst Group".to_string(), users: vec!["John".to_string(), "patrick".to_string()] }, ] ); } #[tokio::test] async fn test_get_user_details() { let sql_pool = get_initialized_db().await; let config = get_default_config(); let handler = SqlBackendHandler::new(config, sql_pool); insert_user(&handler, "bob", "bob00").await; { let user = handler.get_user_details("bob").await.unwrap(); assert_eq!(user.user_id, "bob".to_string()); } { handler.get_user_details("John").await.unwrap_err(); } } #[tokio::test] async fn test_get_user_groups() { let sql_pool = get_initialized_db().await; let config = get_default_config(); let handler = SqlBackendHandler::new(config, sql_pool.clone()); insert_user(&handler, "bob", "bob00").await; insert_user(&handler, "patrick", "pass").await; insert_user(&handler, "John", "Pa33w0rd!").await; let group_1 = insert_group(&handler, "Group1").await; let group_2 = insert_group(&handler, "Group2").await; insert_membership(&handler, group_1, "bob").await; insert_membership(&handler, group_1, "patrick").await; insert_membership(&handler, group_2, "patrick").await; let mut bob_groups = HashSet::new(); bob_groups.insert(GroupIdAndName(group_1, "Group1".to_string())); let mut patrick_groups = HashSet::new(); patrick_groups.insert(GroupIdAndName(group_1, "Group1".to_string())); patrick_groups.insert(GroupIdAndName(group_2, "Group2".to_string())); assert_eq!(handler.get_user_groups("bob").await.unwrap(), bob_groups); assert_eq!( handler.get_user_groups("patrick").await.unwrap(), patrick_groups ); assert_eq!( handler.get_user_groups("John").await.unwrap(), HashSet::new() ); } #[tokio::test] async fn test_delete_user() { let sql_pool = get_initialized_db().await; let config = get_default_config(); let handler = SqlBackendHandler::new(config, sql_pool.clone()); insert_user(&handler, "val", "s3np4i").await; insert_user(&handler, "Hector", "Be$t").await; insert_user(&handler, "Jennz", "boupBoup").await; // Remove a user let _request_result = handler.delete_user("Jennz").await.unwrap(); let users = handler .list_users(None) .await .unwrap() .into_iter() .map(|u| u.user_id) .collect::>(); assert_eq!(users, vec!["Hector", "val"]); // Insert new user and remove two insert_user(&handler, "NewBoi", "Joni").await; let _request_result = handler.delete_user("Hector").await.unwrap(); let _request_result = handler.delete_user("NewBoi").await.unwrap(); let users = handler .list_users(None) .await .unwrap() .into_iter() .map(|u| u.user_id) .collect::>(); assert_eq!(users, vec!["val"]); } }