mcaptcha/api/v1/account/
secret.rs

1// Copyright (C) 2022  Aravinth Manivannan <realaravinth@batsense.net>
2// SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
3//
4// SPDX-License-Identifier: AGPL-3.0-or-later
5
6use actix_identity::Identity;
7use actix_web::{HttpResponse, Responder};
8use db_core::prelude::*;
9
10use crate::api::v1::mcaptcha::get_random;
11use crate::errors::*;
12use crate::AppData;
13
14#[my_codegen::get(
15    path = "crate::V1_API_ROUTES.account.get_secret",
16    wrap = "crate::api::v1::get_middleware()"
17)]
18async fn get_secret(id: Identity, data: AppData) -> ServiceResult<impl Responder> {
19    let username = id.identity().unwrap();
20    let secret = data.db.get_secret(&username).await?;
21    Ok(HttpResponse::Ok().json(secret))
22}
23
24#[my_codegen::post(
25    path = "crate::V1_API_ROUTES.account.update_secret",
26    wrap = "crate::api::v1::get_middleware()"
27)]
28async fn update_user_secret(
29    id: Identity,
30    data: AppData,
31) -> ServiceResult<impl Responder> {
32    let username = id.identity().unwrap();
33
34    let mut secret;
35
36    loop {
37        secret = get_random(32);
38
39        match data.db.update_secret(&username, &secret).await {
40            Ok(_) => break,
41            Err(DBError::SecretTaken) => continue,
42            Err(e) => return Err(e.into()),
43        }
44    }
45
46    Ok(HttpResponse::Ok())
47}
48
49pub fn services(cfg: &mut actix_web::web::ServiceConfig) {
50    cfg.service(get_secret);
51    cfg.service(update_user_secret);
52}