//! Authentication via a static ticket file use std::fs::File; use std::io::prelude::*; use std::future::Future; use std::pin::Pin; use anyhow::{bail, format_err, Error}; use hyper::{Body, Response, Method, StatusCode}; use http::request::Parts; use http::HeaderMap; use proxmox::api::UserInformation; use proxmox_rest_server::{ServerAdapter, AuthError, RestEnvironment}; const TICKET_FILE: &str = "/ticket"; struct SimpleUserInformation {} impl UserInformation for SimpleUserInformation { fn is_superuser(&self, userid: &str) -> bool { userid == "root@pam" } fn is_group_member(&self, _userid: &str, _group: &str) -> bool { false } fn lookup_privs(&self, _userid: &str, _path: &[&str]) -> u64 { 0 } } pub struct StaticAuthAdapter { ticket: String, } impl StaticAuthAdapter { pub fn new() -> Result { let mut ticket_file = File::open(TICKET_FILE)?; let mut ticket = String::new(); let len = ticket_file.read_to_string(&mut ticket)?; if len <= 0 { bail!("invalid ticket: cannot be empty"); } Ok(StaticAuthAdapter { ticket }) } } impl ServerAdapter for StaticAuthAdapter { fn check_auth<'a>( &'a self, headers: &'a HeaderMap, _method: &'a Method, ) -> Pin), AuthError>> + Send + 'a>> { Box::pin(async move { match headers.get(hyper::header::AUTHORIZATION) { Some(header) if header.to_str().unwrap_or("") == &self.ticket => { let user_info: Box = Box::new(SimpleUserInformation {}); Ok((String::from("root@pam"), user_info)) } _ => { return Err(AuthError::Generic(format_err!( "invalid file restore ticket provided" ))); } } }) } fn get_index( &self, _env: RestEnvironment, _parts: Parts, ) -> Pin> + Send>> { Box::pin(async move { let index = "

Proxmox Backup Restore Daemon/h1>

"; Response::builder() .status(StatusCode::OK) .header(hyper::header::CONTENT_TYPE, "text/html") .body(index.into()) .unwrap() }) } }