Gabriel Kaszewski
bf148902ab
server: - backup exporter, auth extractors, error shapes, CONTEXT (prior work) - spa assets served outside the rate limit via route_layer - requests_per_second went to per_second(), which takes an interval not a rate: 50 meant one request per 50s once burst was spent. now converted properly. 15/s, burst 60 spa fixes: - account delete cleared snake_case token keys that were never written - refresh interceptor could retry forever - date ranges used local day boundaries stamped +00:00 - "all" period trend plotted one page; calendar days fabricated mood 3 - chart grid invisible: hsl(var(--border)) against rgba tokens - blob url leak, orphaned media on failed save, devtools in prod bundle - pt-safe/safe-area-pb classes never existed spa features: - offline outbox: entries queue to IndexedDB, replay with backoff, only server refusals count against an entry - drafts persist, quick-log sheet, diary infinite scroll + filters - route error boundary, stale-chunk recovery, no service worker in dev a11y + perf: - mood picker is a radiogroup, activity picker keyboard-operable, text alternatives for colour/emoji, locale week start - dark glass over the bright photo: worst case 1.4:1 -> 4.9-9.6:1 - initial payload 1095->769kB raw, 306->230kB gzip; 38 unused components and 5 deps dropped; fonts 218->133kB 53 tests added (43 spa, 10 server)
53 lines
1.5 KiB
Rust
53 lines
1.5 KiB
Rust
use axum::extract::{FromRef, FromRequestParts};
|
|
use axum::http::request::Parts;
|
|
|
|
use domain::provider::ProviderName;
|
|
use domain::user::UserId;
|
|
|
|
use application::api_token::use_cases::authenticate_api_token;
|
|
|
|
use crate::state::AppState;
|
|
|
|
use domain::api_token::TokenScope;
|
|
|
|
use super::authentication::{AuthRejection, bearer_token};
|
|
|
|
pub struct ImportingProvider {
|
|
pub user_id: UserId,
|
|
pub provider: ProviderName,
|
|
}
|
|
|
|
impl<S> FromRequestParts<S> for ImportingProvider
|
|
where
|
|
S: Send + Sync,
|
|
AppState: FromRef<S>,
|
|
{
|
|
type Rejection = AuthRejection;
|
|
|
|
async fn from_request_parts(parts: &mut Parts, state: &S) -> Result<Self, Self::Rejection> {
|
|
let app_state = AppState::from_ref(state);
|
|
|
|
let presented = bearer_token(parts)
|
|
.ok_or_else(|| AuthRejection::new("missing or invalid authorization header"))?;
|
|
|
|
let deps = authenticate_api_token::Deps {
|
|
query: app_state.api_token_query,
|
|
command: app_state.api_token_command,
|
|
secrets: app_state.api_token_secrets,
|
|
};
|
|
|
|
let token = authenticate_api_token::execute(&presented, TokenScope::WriteMetrics, &deps)
|
|
.await
|
|
.map_err(|_| {
|
|
AuthRejection::new(
|
|
"importing needs an api token granting writeMetrics, minted in settings",
|
|
)
|
|
})?;
|
|
|
|
Ok(Self {
|
|
user_id: token.user_id().clone(),
|
|
provider: token.name().clone(),
|
|
})
|
|
}
|
|
}
|