Struct AuthAwareService 

pub struct AuthAwareService { /* private fields */ }

Wrapper around [StorageService] that ensures each operation is authorized.

Authorization is performed according to the request’s authorization details, see also AuthContext. When crate::config::AuthZ::enforce is false, authorization failures are logged but any unauthorized operations are still allowed to proceed.

Objectstore API endpoints can use AuthAwareService simply by adding it to their handler function’s argument list like so:

use axum::http::StatusCode;
use objectstore_server::auth::AuthAwareService;

async fn my_endpoint(service: AuthAwareService) -> Result<StatusCode, StatusCode> {
    service.delete_object(todo!("pass some ID"))
        .await
        .map_err(|_| StatusCode::INTERNAL_SERVER_ERROR)?;

    Ok(StatusCode::NO_CONTENT)
}

Implementations

impl AuthAwareService

pub fn new(service: StorageService, context: Option<AuthContext>) -> Self

Creates a new AuthAwareService using the given service and auth context.

If no auth context is provided, authorization is disabled and all operations will be permitted.

pub async fn insert_object( &self, context: ObjectContext, key: Option<String>, metadata: &Metadata, stream: PayloadStream, ) -> Result<ObjectId>

Auth-aware wrapper around [StorageService::insert_object].

pub async fn get_object( &self, id: &ObjectId, ) -> Result<Option<(Metadata, PayloadStream)>>

Auth-aware wrapper around [StorageService::get_object].

pub async fn delete_object(&self, id: &ObjectId) -> Result<()>

Auth-aware wrapper around [StorageService::delete_object].

Trait Implementations

impl Debug for AuthAwareService

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromRequestParts<Arc<Services>> for AuthAwareService

type Rejection = StatusCode

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, state: &ServiceState, ) -> Result<Self, Self::Rejection>

Perform the extraction.