julien-me/rocket_auth

An implementation for an authentication API for Rocket applications.

rocket_auth

rocket_auth provides a ready-to-use backend agnostic API for authentication management. It supports connections for SQLite and Postgresql. It lets you create, delete, and authenticate users. The available features are:

• sqlx-sqlite: for interacting with a SQLite database using sqlx.
• sqlx-postgres: for interacting with a Postgresql database with sqlx.
• sqlx-mysql: for interacting with a MySql database with sqlx.
• redis: for storing sessions on a redis server using redis.
• rusqlite: for interacting with a SQLite database using rusqlite.
• tokio-postgres: for interacting with a Postgresql database with tokio-postgres.

rocket_auth uses private cookies to store session data. This means that in order for cookies to be properly decrypted between launches, a secret_key must be set. For more information visit rocket's configuration guide.

To use rocket_auth include it as a dependency in your Cargo.toml file:

[dependencies.rocket_auth]
version = "0.4.0"
features = ["sqlx-sqlite"]

Quick overview

This crate provides three guards:

• Auth: Manages authentication.
• Session: It's used to retrieve session data from client cookies.
• User: It restricts content, so it can be viewed by authenticated clients only.

It also includes two structs to be parsed from forms and json data:

• Signup: Used to create new users.
• Login: Used to authenticate users.

Finally it has two structures for queries:

• Users: It allows to query users to the database.
• User: It is the response of a query.

The Auth guard allows to log in, log out, sign up, modify, and delete the currently (un)authenticated user. For more information see Auth. A working example:

use rocket::{get, post, form::Form, routes};
use rocket_auth::{Users, Error, Auth, Signup, Login};

#[post("/signup", data="<form>")]
async fn signup(form: Form<Signup>, auth: Auth<'_>) -> Result<&'static str, Error> {
    auth.signup(&form).await?;
    auth.login(&form.into());
    Ok("You signed up.")
}

#[post("/login", data="<form>")]
async fn login(form: Form<Login>, auth: Auth<'_>) -> Result<&'static str, Error>{
    auth.login(&form).await?;
    Ok("You're logged in.")
}

#[get("/logout")]
fn logout(auth: Auth<'_>) {
    auth.logout();
}
#[tokio::main]
async fn main() -> Result<(), Error>{
    let users = Users::open_sqlite("mydb.db").await?;

    rocket::build()
        .mount("/", routes![signup, login, logout])
        .manage(users)
        .launch();
    Ok(())
}

Users struct

The Users struct administers interactions with the database. It lets you query, create, modify and delete users. Unlike the Auth guard, a Users instance can manage any user in the database. Note that the Auth guards includes a Users instance stored on the public users field. So it is not necessary to retrieve Users when using Auth. A simple example of how to query a user with the Users struct:

use rocket_auth::Users;

#[get("/see-user/<id>")]
async fn see_user(id: i32, users: &State<Users>) -> String {
    let user = users.get_by_id(id).await.unwrap();
    format!("{}", json!(user))
}

A Users instance can be constructed by connecting it to the database with the methods open_sqlite, open_postgres. Furthermore, it can be constructed from a working connection.

User guard

The User guard can be used to restrict content so it can only be viewed by authenticated users. Additionally, you can use it to render special content if the client is authenticated or not.

#[get("/private-content")]
fn private_content(user: User) -> &'static str {
    "If you can see this, you are logged in."
}

#[get("/special-content")]
fn special_content(option: Option<User>) -> String {
    if let Some(user) = option {
        format!("hello, {}.", user.email())
    } else {
        "hello, anonymous user".into()
    }
}
#[get("/admins-only")]
fn admins_only(user: AdminUser) -> &'static str {
   "Hello administrator."
}

AdminUser guard

The AdminUser guard can be used analogously to User. It will restrict content so it can be viewed by admins only.

# use rocket::*;
# use rocket_auth::AdminUser;
#[get("/admin-panel")]
fn admin_panel(user: AdminUser) -> String {
   format!("Hello {}.", user.email());
}