123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184
// Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.
use deno_core::ModuleSpecifier;use log::debug;use log::error;use std::fmt;
#[derive(Debug, Clone, PartialEq, Eq)]pub enum AuthTokenData {  Bearer(String),  Basic { username: String, password: String },}
#[derive(Debug, Clone, PartialEq, Eq)]pub struct AuthToken {  host: String,  token: AuthTokenData,}
impl fmt::Display for AuthToken {  fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {    match &self.token {      AuthTokenData::Bearer(token) => write!(f, "Bearer {}", token),      AuthTokenData::Basic { username, password } => {        let credentials = format!("{}:{}", username, password);        write!(f, "Basic {}", base64::encode(credentials))      }    }  }}
/// A structure which contains bearer tokens that can be used when sending/// requests to websites, intended to authorize access to private resources/// such as remote modules.#[derive(Debug, Clone)]pub struct AuthTokens(Vec<AuthToken>);
impl AuthTokens {  /// Create a new set of tokens based on the provided string. It is intended  /// that the string be the value of an environment variable and the string is  /// parsed for token values.  The string is expected to be a semi-colon  /// separated string, where each value is `{token}@{hostname}`.  pub fn new(maybe_tokens_str: Option<String>) -> Self {    let mut tokens = Vec::new();    if let Some(tokens_str) = maybe_tokens_str {      for token_str in tokens_str.split(';') {        if token_str.contains('@') {          let pair: Vec<&str> = token_str.rsplitn(2, '@').collect();          let token = pair[1];          let host = pair[0].to_lowercase();          if token.contains(':') {            let pair: Vec<&str> = token.rsplitn(2, ':').collect();            let username = pair[1].to_string();            let password = pair[0].to_string();            tokens.push(AuthToken {              host,              token: AuthTokenData::Basic { username, password },            })          } else {            tokens.push(AuthToken {              host,              token: AuthTokenData::Bearer(token.to_string()),            });          }        } else {          error!("Badly formed auth token discarded.");        }      }      debug!("Parsed {} auth token(s).", tokens.len());    }
    Self(tokens)  }
  /// Attempt to match the provided specifier to the tokens in the set.  The  /// matching occurs from the right of the hostname plus port, irrespective of  /// scheme.  For example `https://www.deno.land:8080/` would match a token  /// with a host value of `deno.land:8080` but not match `www.deno.land`.  The  /// matching is case insensitive.  pub fn get(&self, specifier: &ModuleSpecifier) -> Option<AuthToken> {    self.0.iter().find_map(|t| {      let hostname = if let Some(port) = specifier.port() {        format!("{}:{}", specifier.host_str()?, port)      } else {        specifier.host_str()?.to_string()      };      if hostname.to_lowercase().ends_with(&t.host) {        Some(t.clone())      } else {        None      }    })  }}
#[cfg(test)]mod tests {  use super::*;  use deno_core::resolve_url;
  #[test]  fn test_auth_token() {    let auth_tokens = AuthTokens::new(Some("abc123@deno.land".to_string()));    let fixture = resolve_url("https://deno.land/x/mod.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Bearer abc123"    );    let fixture = resolve_url("https://www.deno.land/x/mod.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Bearer abc123".to_string()    );    let fixture = resolve_url("http://127.0.0.1:8080/x/mod.ts").unwrap();    assert_eq!(auth_tokens.get(&fixture), None);    let fixture =      resolve_url("https://deno.land.example.com/x/mod.ts").unwrap();    assert_eq!(auth_tokens.get(&fixture), None);    let fixture = resolve_url("https://deno.land:8080/x/mod.ts").unwrap();    assert_eq!(auth_tokens.get(&fixture), None);  }
  #[test]  fn test_auth_tokens_multiple() {    let auth_tokens =      AuthTokens::new(Some("abc123@deno.land;def456@example.com".to_string()));    let fixture = resolve_url("https://deno.land/x/mod.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Bearer abc123".to_string()    );    let fixture = resolve_url("http://example.com/a/file.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Bearer def456".to_string()    );  }
  #[test]  fn test_auth_tokens_port() {    let auth_tokens =      AuthTokens::new(Some("abc123@deno.land:8080".to_string()));    let fixture = resolve_url("https://deno.land/x/mod.ts").unwrap();    assert_eq!(auth_tokens.get(&fixture), None);    let fixture = resolve_url("http://deno.land:8080/x/mod.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Bearer abc123".to_string()    );  }
  #[test]  fn test_auth_tokens_contain_at() {    let auth_tokens = AuthTokens::new(Some("abc@123@deno.land".to_string()));    let fixture = resolve_url("https://deno.land/x/mod.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Bearer abc@123".to_string()    );  }
  #[test]  fn test_auth_token_basic() {    let auth_tokens = AuthTokens::new(Some("abc:123@deno.land".to_string()));    let fixture = resolve_url("https://deno.land/x/mod.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Basic YWJjOjEyMw=="    );    let fixture = resolve_url("https://www.deno.land/x/mod.ts").unwrap();    assert_eq!(      auth_tokens.get(&fixture).unwrap().to_string(),      "Basic YWJjOjEyMw==".to_string()    );    let fixture = resolve_url("http://127.0.0.1:8080/x/mod.ts").unwrap();    assert_eq!(auth_tokens.get(&fixture), None);    let fixture =      resolve_url("https://deno.land.example.com/x/mod.ts").unwrap();    assert_eq!(auth_tokens.get(&fixture), None);    let fixture = resolve_url("https://deno.land:8080/x/mod.ts").unwrap();    assert_eq!(auth_tokens.get(&fixture), None);  }}