mirror of
https://github.com/mCaptcha/mCaptcha.git
synced 2026-02-12 02:25:41 +00:00
310 lines
16 KiB
HTML
310 lines
16 KiB
HTML
<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="generator" content="rustdoc"><meta name="description" content="Source of the Rust file `src/api/v1/pow/verify_pow.rs`."><title>verify_pow.rs - source</title><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../../../static.files/SourceSerif4-Regular-46f98efaafac5295.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../../../static.files/FiraSans-Regular-018c141bf0843ffd.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../../../static.files/FiraSans-Medium-8f9a781e4970d388.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../../../static.files/SourceCodePro-Regular-562dcc5011b6de7d.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../../../static.files/SourceSerif4-Bold-a2c9cd1067f8b328.ttf.woff2"><link rel="preload" as="font" type="font/woff2" crossorigin href="../../../../../static.files/SourceCodePro-Semibold-d899c5a5c4aeb14a.ttf.woff2"><link rel="stylesheet" href="../../../../../static.files/normalize-76eba96aa4d2e634.css"><link rel="stylesheet" href="../../../../../static.files/rustdoc-c4dbdcde0fbd8430.css" id="mainThemeStyle"><link rel="stylesheet" id="themeStyle" href="../../../../../static.files/light-db279b6232be9c13.css"><link rel="stylesheet" disabled href="../../../../../static.files/dark-cf923f49f397b216.css"><link rel="stylesheet" disabled href="../../../../../static.files/ayu-be46fdc453a55015.css"><script src="../../../../../static.files/storage-3891ce972e3a2bf8.js"></script><script defer src="../../../../../static.files/source-script-1b95b7cca98b26e5.js"></script><script defer src="../../../../../source-files.js"></script><script defer src="../../../../../static.files/main-98a684e84ae5b08b.js"></script><noscript><link rel="stylesheet" href="../../../../../static.files/noscript-13285aec31fa243e.css"></noscript><link rel="alternate icon" type="image/png" href="../../../../../static.files/favicon-16x16-8b506e7a72182f1c.png"><link rel="alternate icon" type="image/png" href="../../../../../static.files/favicon-32x32-422f7d1d52889060.png"><link rel="icon" type="image/svg+xml" href="../../../../../static.files/favicon-2c020d218678b618.svg"></head><body class="rustdoc source"><!--[if lte IE 11]><div class="warning">This old browser is unsupported and will most likely display funky things.</div><![endif]--><nav class="sidebar"></nav><main><nav class="sub"><a class="sub-logo-container" href="../../../../../mcaptcha/index.html"><img class="rust-logo" src="../../../../../static.files/rust-logo-151179464ae7ed46.svg" alt="logo"></a><form class="search-form"><span></span><input class="search-input" name="search" aria-label="Run search in the documentation" autocomplete="off" spellcheck="false" placeholder="Click or press ‘S’ to search, ‘?’ for more options…" type="search"><div id="help-button" title="help" tabindex="-1"><a href="../../../../../help.html">?</a></div><div id="settings-menu" tabindex="-1"><a href="../../../../../settings.html" title="settings"><img width="22" height="22" alt="Change settings" src="../../../../../static.files/wheel-7b819b6101059cd0.svg"></a></div></form></nav><section id="main-content" class="content"><div class="example-wrap"><pre class="src-line-numbers"><a href="#1" id="1">1</a>
|
||
<a href="#2" id="2">2</a>
|
||
<a href="#3" id="3">3</a>
|
||
<a href="#4" id="4">4</a>
|
||
<a href="#5" id="5">5</a>
|
||
<a href="#6" id="6">6</a>
|
||
<a href="#7" id="7">7</a>
|
||
<a href="#8" id="8">8</a>
|
||
<a href="#9" id="9">9</a>
|
||
<a href="#10" id="10">10</a>
|
||
<a href="#11" id="11">11</a>
|
||
<a href="#12" id="12">12</a>
|
||
<a href="#13" id="13">13</a>
|
||
<a href="#14" id="14">14</a>
|
||
<a href="#15" id="15">15</a>
|
||
<a href="#16" id="16">16</a>
|
||
<a href="#17" id="17">17</a>
|
||
<a href="#18" id="18">18</a>
|
||
<a href="#19" id="19">19</a>
|
||
<a href="#20" id="20">20</a>
|
||
<a href="#21" id="21">21</a>
|
||
<a href="#22" id="22">22</a>
|
||
<a href="#23" id="23">23</a>
|
||
<a href="#24" id="24">24</a>
|
||
<a href="#25" id="25">25</a>
|
||
<a href="#26" id="26">26</a>
|
||
<a href="#27" id="27">27</a>
|
||
<a href="#28" id="28">28</a>
|
||
<a href="#29" id="29">29</a>
|
||
<a href="#30" id="30">30</a>
|
||
<a href="#31" id="31">31</a>
|
||
<a href="#32" id="32">32</a>
|
||
<a href="#33" id="33">33</a>
|
||
<a href="#34" id="34">34</a>
|
||
<a href="#35" id="35">35</a>
|
||
<a href="#36" id="36">36</a>
|
||
<a href="#37" id="37">37</a>
|
||
<a href="#38" id="38">38</a>
|
||
<a href="#39" id="39">39</a>
|
||
<a href="#40" id="40">40</a>
|
||
<a href="#41" id="41">41</a>
|
||
<a href="#42" id="42">42</a>
|
||
<a href="#43" id="43">43</a>
|
||
<a href="#44" id="44">44</a>
|
||
<a href="#45" id="45">45</a>
|
||
<a href="#46" id="46">46</a>
|
||
<a href="#47" id="47">47</a>
|
||
<a href="#48" id="48">48</a>
|
||
<a href="#49" id="49">49</a>
|
||
<a href="#50" id="50">50</a>
|
||
<a href="#51" id="51">51</a>
|
||
<a href="#52" id="52">52</a>
|
||
<a href="#53" id="53">53</a>
|
||
<a href="#54" id="54">54</a>
|
||
<a href="#55" id="55">55</a>
|
||
<a href="#56" id="56">56</a>
|
||
<a href="#57" id="57">57</a>
|
||
<a href="#58" id="58">58</a>
|
||
<a href="#59" id="59">59</a>
|
||
<a href="#60" id="60">60</a>
|
||
<a href="#61" id="61">61</a>
|
||
<a href="#62" id="62">62</a>
|
||
<a href="#63" id="63">63</a>
|
||
<a href="#64" id="64">64</a>
|
||
<a href="#65" id="65">65</a>
|
||
<a href="#66" id="66">66</a>
|
||
<a href="#67" id="67">67</a>
|
||
<a href="#68" id="68">68</a>
|
||
<a href="#69" id="69">69</a>
|
||
<a href="#70" id="70">70</a>
|
||
<a href="#71" id="71">71</a>
|
||
<a href="#72" id="72">72</a>
|
||
<a href="#73" id="73">73</a>
|
||
<a href="#74" id="74">74</a>
|
||
<a href="#75" id="75">75</a>
|
||
<a href="#76" id="76">76</a>
|
||
<a href="#77" id="77">77</a>
|
||
<a href="#78" id="78">78</a>
|
||
<a href="#79" id="79">79</a>
|
||
<a href="#80" id="80">80</a>
|
||
<a href="#81" id="81">81</a>
|
||
<a href="#82" id="82">82</a>
|
||
<a href="#83" id="83">83</a>
|
||
<a href="#84" id="84">84</a>
|
||
<a href="#85" id="85">85</a>
|
||
<a href="#86" id="86">86</a>
|
||
<a href="#87" id="87">87</a>
|
||
<a href="#88" id="88">88</a>
|
||
<a href="#89" id="89">89</a>
|
||
<a href="#90" id="90">90</a>
|
||
<a href="#91" id="91">91</a>
|
||
<a href="#92" id="92">92</a>
|
||
<a href="#93" id="93">93</a>
|
||
<a href="#94" id="94">94</a>
|
||
<a href="#95" id="95">95</a>
|
||
<a href="#96" id="96">96</a>
|
||
<a href="#97" id="97">97</a>
|
||
<a href="#98" id="98">98</a>
|
||
<a href="#99" id="99">99</a>
|
||
<a href="#100" id="100">100</a>
|
||
<a href="#101" id="101">101</a>
|
||
<a href="#102" id="102">102</a>
|
||
<a href="#103" id="103">103</a>
|
||
<a href="#104" id="104">104</a>
|
||
<a href="#105" id="105">105</a>
|
||
<a href="#106" id="106">106</a>
|
||
<a href="#107" id="107">107</a>
|
||
<a href="#108" id="108">108</a>
|
||
<a href="#109" id="109">109</a>
|
||
<a href="#110" id="110">110</a>
|
||
<a href="#111" id="111">111</a>
|
||
<a href="#112" id="112">112</a>
|
||
<a href="#113" id="113">113</a>
|
||
<a href="#114" id="114">114</a>
|
||
<a href="#115" id="115">115</a>
|
||
<a href="#116" id="116">116</a>
|
||
<a href="#117" id="117">117</a>
|
||
<a href="#118" id="118">118</a>
|
||
<a href="#119" id="119">119</a>
|
||
<a href="#120" id="120">120</a>
|
||
<a href="#121" id="121">121</a>
|
||
<a href="#122" id="122">122</a>
|
||
<a href="#123" id="123">123</a>
|
||
<a href="#124" id="124">124</a>
|
||
<a href="#125" id="125">125</a>
|
||
<a href="#126" id="126">126</a>
|
||
<a href="#127" id="127">127</a>
|
||
<a href="#128" id="128">128</a>
|
||
<a href="#129" id="129">129</a>
|
||
<a href="#130" id="130">130</a>
|
||
<a href="#131" id="131">131</a>
|
||
<a href="#132" id="132">132</a>
|
||
<a href="#133" id="133">133</a>
|
||
<a href="#134" id="134">134</a>
|
||
<a href="#135" id="135">135</a>
|
||
<a href="#136" id="136">136</a>
|
||
<a href="#137" id="137">137</a>
|
||
<a href="#138" id="138">138</a>
|
||
<a href="#139" id="139">139</a>
|
||
<a href="#140" id="140">140</a>
|
||
<a href="#141" id="141">141</a>
|
||
<a href="#142" id="142">142</a>
|
||
<a href="#143" id="143">143</a>
|
||
<a href="#144" id="144">144</a>
|
||
<a href="#145" id="145">145</a>
|
||
<a href="#146" id="146">146</a>
|
||
<a href="#147" id="147">147</a>
|
||
<a href="#148" id="148">148</a>
|
||
<a href="#149" id="149">149</a>
|
||
<a href="#150" id="150">150</a>
|
||
<a href="#151" id="151">151</a>
|
||
<a href="#152" id="152">152</a>
|
||
<a href="#153" id="153">153</a>
|
||
<a href="#154" id="154">154</a>
|
||
</pre><pre class="rust"><code><span class="comment">/*
|
||
* Copyright (C) 2022 Aravinth Manivannan <realaravinth@batsense.net>
|
||
*
|
||
* This program is free software: you can redistribute it and/or modify
|
||
* it under the terms of the GNU Affero General Public License as
|
||
* published by the Free Software Foundation, either version 3 of the
|
||
* License, or (at your option) any later version.
|
||
*
|
||
* This program is distributed in the hope that it will be useful,
|
||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
* GNU Affero General Public License for more details.
|
||
*
|
||
* You should have received a copy of the GNU Affero General Public License
|
||
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||
*/
|
||
</span><span class="doccomment">//! PoW Verification module
|
||
|
||
</span><span class="kw">use </span>actix_web::HttpRequest;
|
||
<span class="kw">use </span>actix_web::{web, HttpResponse, Responder};
|
||
<span class="kw">use </span>libmcaptcha::pow::Work;
|
||
<span class="kw">use </span>serde::{Deserialize, Serialize};
|
||
|
||
<span class="kw">use </span><span class="kw">crate</span>::errors::<span class="kw-2">*</span>;
|
||
<span class="kw">use </span><span class="kw">crate</span>::AppData;
|
||
<span class="kw">use </span><span class="kw">crate</span>::V1_API_ROUTES;
|
||
|
||
<span class="attr">#[derive(Clone, Debug, Deserialize, Serialize)]
|
||
</span><span class="doccomment">/// validation token that clients receive as proof for submiting
|
||
/// valid PoW
|
||
</span><span class="kw">pub struct </span>ValidationToken {
|
||
<span class="kw">pub </span>token: String,
|
||
}
|
||
|
||
<span class="comment">// API keys are mcaptcha actor names
|
||
|
||
</span><span class="doccomment">/// route handler that verifies PoW and issues a solution token
|
||
/// if verification is successful
|
||
</span><span class="attr">#[my_codegen::post(path = <span class="string">"V1_API_ROUTES.pow.verify_pow()"</span>)]
|
||
</span><span class="kw">pub async fn </span>verify_pow(
|
||
req: HttpRequest,
|
||
payload: web::Json<Work>,
|
||
data: AppData,
|
||
) -> ServiceResult<<span class="kw">impl </span>Responder> {
|
||
<span class="attr">#[cfg(not(test))]
|
||
</span><span class="kw">let </span>ip = req.connection_info().peer_addr().unwrap().to_string();
|
||
<span class="comment">// From actix-web docs:
|
||
// Will only return None when called in unit tests unless TestRequest::peer_addr is used.
|
||
//
|
||
// ref: https://docs.rs/actix-web/latest/actix_web/struct.HttpRequest.html#method.peer_addr
|
||
</span><span class="attr">#[cfg(test)]
|
||
</span><span class="kw">let </span>ip = <span class="string">"127.0.1.1"</span>.into();
|
||
|
||
<span class="kw">let </span>key = payload.key.clone();
|
||
<span class="kw">let </span>res = data.captcha.verify_pow(payload.into_inner(), ip).<span class="kw">await</span><span class="question-mark">?</span>;
|
||
data.stats.record_solve(<span class="kw-2">&</span>data, <span class="kw-2">&</span>key).<span class="kw">await</span><span class="question-mark">?</span>;
|
||
<span class="kw">let </span>payload = ValidationToken { token: res };
|
||
<span class="prelude-val">Ok</span>(HttpResponse::Ok().json(payload))
|
||
}
|
||
|
||
<span class="attr">#[cfg(test)]
|
||
</span><span class="kw">pub mod </span>tests {
|
||
<span class="kw">use </span>actix_web::http::StatusCode;
|
||
<span class="kw">use </span>actix_web::test;
|
||
<span class="kw">use </span>libmcaptcha::pow::PoWConfig;
|
||
|
||
<span class="kw">use super</span>::<span class="kw-2">*</span>;
|
||
<span class="kw">use </span><span class="kw">crate</span>::api::v1::pow::get_config::GetConfigPayload;
|
||
<span class="kw">use </span><span class="kw">crate</span>::tests::<span class="kw-2">*</span>;
|
||
<span class="kw">use crate</span>::<span class="kw-2">*</span>;
|
||
|
||
<span class="attr">#[actix_rt::test]
|
||
</span><span class="kw">async fn </span>verify_pow_works_pg() {
|
||
<span class="kw">let </span>data = <span class="kw">crate</span>::tests::pg::get_data().<span class="kw">await</span>;
|
||
verify_pow_works(data).<span class="kw">await</span>;
|
||
}
|
||
|
||
<span class="attr">#[actix_rt::test]
|
||
</span><span class="kw">async fn </span>verify_pow_works_maria() {
|
||
<span class="kw">let </span>data = <span class="kw">crate</span>::tests::maria::get_data().<span class="kw">await</span>;
|
||
verify_pow_works(data).<span class="kw">await</span>;
|
||
}
|
||
|
||
<span class="kw">pub async fn </span>verify_pow_works(data: ArcData) {
|
||
<span class="kw">const </span>NAME: <span class="kw-2">&</span>str = <span class="string">"powverifyusr"</span>;
|
||
<span class="kw">const </span>PASSWORD: <span class="kw-2">&</span>str = <span class="string">"testingpas"</span>;
|
||
<span class="kw">const </span>EMAIL: <span class="kw-2">&</span>str = <span class="string">"verifyuser@a.com"</span>;
|
||
<span class="kw">let </span>data = <span class="kw-2">&</span>data;
|
||
|
||
delete_user(data, NAME).<span class="kw">await</span>;
|
||
|
||
register_and_signin(data, NAME, EMAIL, PASSWORD).<span class="kw">await</span>;
|
||
<span class="kw">let </span>(<span class="kw">_</span>, _signin_resp, token_key) = add_levels_util(data, NAME, PASSWORD).<span class="kw">await</span>;
|
||
<span class="kw">let </span>app = <span class="macro">get_app!</span>(data).<span class="kw">await</span>;
|
||
|
||
<span class="kw">let </span>get_config_payload = GetConfigPayload {
|
||
key: token_key.key.clone(),
|
||
};
|
||
|
||
<span class="comment">// update and check changes
|
||
|
||
</span><span class="kw">let </span>get_config_resp = test::call_service(
|
||
<span class="kw-2">&</span>app,
|
||
<span class="macro">post_request!</span>(<span class="kw-2">&</span>get_config_payload, V1_API_ROUTES.pow.get_config)
|
||
.to_request(),
|
||
)
|
||
.<span class="kw">await</span>;
|
||
<span class="macro">assert_eq!</span>(get_config_resp.status(), StatusCode::OK);
|
||
<span class="kw">let </span>config: PoWConfig = test::read_body_json(get_config_resp).<span class="kw">await</span>;
|
||
|
||
<span class="kw">let </span>pow = pow_sha256::ConfigBuilder::default()
|
||
.salt(config.salt)
|
||
.build()
|
||
.unwrap();
|
||
<span class="kw">let </span>work = pow
|
||
.prove_work(<span class="kw-2">&</span>config.string.clone(), config.difficulty_factor)
|
||
.unwrap();
|
||
|
||
<span class="kw">let </span>work = Work {
|
||
string: config.string.clone(),
|
||
result: work.result,
|
||
nonce: work.nonce,
|
||
key: token_key.key.clone(),
|
||
};
|
||
|
||
<span class="kw">let </span>pow_verify_resp = test::call_service(
|
||
<span class="kw-2">&</span>app,
|
||
<span class="macro">post_request!</span>(<span class="kw-2">&</span>work, V1_API_ROUTES.pow.verify_pow).to_request(),
|
||
)
|
||
.<span class="kw">await</span>;
|
||
<span class="macro">assert_eq!</span>(pow_verify_resp.status(), StatusCode::OK);
|
||
|
||
<span class="kw">let </span>string_not_found = test::call_service(
|
||
<span class="kw-2">&</span>app,
|
||
<span class="macro">post_request!</span>(<span class="kw-2">&</span>work, V1_API_ROUTES.pow.verify_pow).to_request(),
|
||
)
|
||
.<span class="kw">await</span>;
|
||
<span class="macro">assert_eq!</span>(string_not_found.status(), StatusCode::BAD_REQUEST);
|
||
<span class="kw">let </span>err: ErrorToResponse = test::read_body_json(string_not_found).<span class="kw">await</span>;
|
||
<span class="macro">assert_eq!</span>(err.error, <span class="string">"Challenge: not found"</span>);
|
||
|
||
<span class="comment">// let pow_config_resp = test::call_service(
|
||
// &app,
|
||
// post_request!(&get_config_payload, V1_API_ROUTES.pow.get_config).to_request(),
|
||
// )
|
||
// .await;
|
||
// assert_eq!(pow_config_resp.status(), StatusCode::OK);
|
||
// I'm not checking for errors because changing work.result triggered
|
||
// InssuficientDifficulty, which is possible because libmcaptcha calculates
|
||
// difficulty with the submitted result. Besides, this endpoint is merely
|
||
// propagating errors from libmcaptcha and libmcaptcha has tests covering the
|
||
// pow aspects ¯\_(ツ)_/¯
|
||
</span>}
|
||
}
|
||
</code></pre></div>
|
||
</section></main><div id="rustdoc-vars" data-root-path="../../../../../" data-static-root-path="../../../../../static.files/" data-current-crate="mcaptcha" data-themes="" data-resource-suffix="" data-rustdoc-version="1.69.0 (84c898d65 2023-04-16)" data-search-js="search-8a59a8356673ec1f.js" data-settings-js="settings-f0c5c39777a9a2f6.js" data-settings-css="settings-0bcba95ff279c1db.css" ></div></body></html> |