Jan Wiebe
0db9c3cd88
- Add auth_provider field to UserDto, derived from oidc_provider
("local" for password users, provider name for OIDC users)
- Block change_password() for OIDC users with clear error message
- Block admin_reset_password() for OIDC users
Fixes #122, Fixes #123
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
126 lines
3.4 KiB
Rust
126 lines
3.4 KiB
Rust
use crate::domain::entities::user::User;
|
|
use chrono::{DateTime, Utc};
|
|
use serde::{Deserialize, Serialize};
|
|
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct UserDto {
|
|
pub id: String,
|
|
pub username: String,
|
|
pub email: String,
|
|
pub role: String,
|
|
pub storage_quota_bytes: i64,
|
|
pub storage_used_bytes: i64,
|
|
pub created_at: DateTime<Utc>,
|
|
pub updated_at: DateTime<Utc>,
|
|
pub last_login_at: Option<DateTime<Utc>>,
|
|
pub active: bool,
|
|
pub auth_provider: String,
|
|
}
|
|
|
|
impl From<User> for UserDto {
|
|
fn from(user: User) -> Self {
|
|
Self {
|
|
id: user.id().to_string(),
|
|
username: user.username().to_string(),
|
|
email: user.email().to_string(),
|
|
role: format!("{}", user.role()),
|
|
storage_quota_bytes: user.storage_quota_bytes(),
|
|
storage_used_bytes: user.storage_used_bytes(),
|
|
created_at: user.created_at(),
|
|
updated_at: user.updated_at(),
|
|
last_login_at: user.last_login_at(),
|
|
active: user.is_active(),
|
|
auth_provider: user
|
|
.oidc_provider()
|
|
.unwrap_or("local")
|
|
.to_string(),
|
|
}
|
|
}
|
|
}
|
|
|
|
#[derive(Debug, Serialize, Deserialize, Clone)]
|
|
pub struct LoginDto {
|
|
pub username: String,
|
|
pub password: String,
|
|
}
|
|
|
|
#[derive(Debug, Serialize, Deserialize, Clone)]
|
|
pub struct RegisterDto {
|
|
pub username: String,
|
|
pub email: String,
|
|
pub password: String,
|
|
pub role: Option<String>,
|
|
}
|
|
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct AuthResponseDto {
|
|
pub user: UserDto,
|
|
pub access_token: String,
|
|
pub refresh_token: String,
|
|
pub token_type: String,
|
|
pub expires_in: i64,
|
|
}
|
|
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct ChangePasswordDto {
|
|
pub current_password: String,
|
|
pub new_password: String,
|
|
}
|
|
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct RefreshTokenDto {
|
|
pub refresh_token: String,
|
|
}
|
|
|
|
/// Authenticated current user data (for use in application services)
|
|
#[derive(Clone, Debug, Serialize, Deserialize)]
|
|
pub struct CurrentUser {
|
|
pub id: String,
|
|
pub username: String,
|
|
pub email: String,
|
|
pub role: String,
|
|
}
|
|
|
|
// ============================================================================
|
|
// OIDC DTOs
|
|
// ============================================================================
|
|
|
|
/// Response with the OIDC authorization URL for client redirect
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct OidcAuthorizeResponseDto {
|
|
pub authorize_url: String,
|
|
pub state: String,
|
|
}
|
|
|
|
/// Query parameters received on the OIDC callback
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct OidcCallbackQueryDto {
|
|
pub code: String,
|
|
pub state: String,
|
|
}
|
|
|
|
/// Request body for the OIDC one-time code exchange endpoint
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct OidcExchangeDto {
|
|
pub code: String,
|
|
}
|
|
|
|
/// Information about available OIDC providers
|
|
#[derive(Debug, Serialize, Deserialize)]
|
|
pub struct OidcProviderInfoDto {
|
|
pub enabled: bool,
|
|
pub provider_name: String,
|
|
pub authorize_endpoint: String,
|
|
pub password_login_enabled: bool,
|
|
}
|
|
|
|
/// Claims extracted from the validated OIDC ID token
|
|
#[derive(Debug, Clone, Serialize, Deserialize)]
|
|
pub struct OidcUserInfoDto {
|
|
pub sub: String,
|
|
pub preferred_username: Option<String>,
|
|
pub email: Option<String>,
|
|
pub name: Option<String>,
|
|
pub groups: Vec<String>,
|
|
}
|