Split the service in multiple crates

crates/core/src/handlers/views/reauth.rs

@@ -0,0 +1,85 @@
+// Copyright 2021 The Matrix.org Foundation C.I.C.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+use serde::Deserialize;
+use sqlx::{pool::PoolConnection, PgPool, Postgres};
+use warp::{hyper::Uri, reply::html, Filter, Rejection, Reply};
+
+use crate::{
+    config::{CookiesConfig, CsrfConfig},
+    errors::WrapError,
+    filters::{
+        cookies::{with_cookie_saver, EncryptedCookieSaver},
+        csrf::{protected_form, updated_csrf_token},
+        database::with_connection,
+        session::with_session,
+        with_templates, CsrfToken,
+    },
+    storage::SessionInfo,
+    templates::{TemplateContext, Templates},
+};
+
+#[derive(Deserialize, Debug)]
+struct ReauthForm {
+    password: String,
+}
+
+pub(super) fn filter(
+    pool: &PgPool,
+    templates: &Templates,
+    csrf_config: &CsrfConfig,
+    cookies_config: &CookiesConfig,
+) -> impl Filter<Extract = (impl Reply,), Error = Rejection> + Clone + Send + Sync + 'static {
+    let get = warp::get()
+        .and(with_templates(templates))
+        .and(with_cookie_saver(cookies_config))
+        .and(updated_csrf_token(cookies_config, csrf_config))
+        .and(with_session(pool, cookies_config))
+        .and_then(get);
+
+    let post = warp::post()
+        .and(with_session(pool, cookies_config))
+        .and(with_connection(pool))
+        .and(protected_form(cookies_config))
+        .and_then(post);
+
+    warp::path!("reauth").and(get.or(post))
+}
+
+async fn get(
+    templates: Templates,
+    cookie_saver: EncryptedCookieSaver,
+    csrf_token: CsrfToken,
+    session: SessionInfo,
+) -> Result<impl Reply, Rejection> {
+    let ctx = ().with_session(session).with_csrf(&csrf_token);
+
+    let content = templates.render_reauth(&ctx)?;
+    let reply = html(content);
+    let reply = cookie_saver.save_encrypted(&csrf_token, reply)?;
+    Ok(reply)
+}
+
+async fn post(
+    session: SessionInfo,
+    mut conn: PoolConnection<Postgres>,
+    form: ReauthForm,
+) -> Result<impl Reply, Rejection> {
+    let _session = session
+        .reauth(&mut conn, form.password)
+        .await
+        .wrap_error()?;
+
+    Ok(warp::redirect(Uri::from_static("/")))
+}