setup end point

Author: indpurvesh

.env

@@ -5,7 +5,7 @@ AVORED_DATABASE_FOLDER_NAME=rocksdb://data/avored.db
 
 PORT=50051
 
-AVORED_PASSWORD_SALT=pvumfkuyowpvqnk7j2n23g99ilnxw0znziw6vo6dp9me967j
+AVORED_PASSWORD_SALT=rO0ABXNyABdqYXZhLnV0aWwLSGVsbG8gV29ybGQgSEVMTE8gV09STEQgSGVsbG8gV29ybGQgSEVMTE8gV09STEQgl
 
 AVORED_JWT_SECRET=oikcvnmlmgumgxfhccfpsjhpazbvfazdojemqherghvseoedu
 AVORED_JWT_EXPIRED_IN=60m

Cargo.lock

@@ -16,6 +16,10 @@ serde = { version = "1.0", features = ["derive"] }
 async-trait = "0.1"
 serde_json = "1.0"
 
+# Additional dependencies not in workspace
+argon2 = "0.5.3"
+dotenvy = "0.15.7"
+
 
 ## Optional
 console_error_panic_hook = { version = "0.1", optional = true }

Cargo.toml

@@ -1,8 +1,9 @@
+
 #[cfg(feature = "ssr")]
 use tonic::{Request, Response, Status};
-
+use crate::infra::setup::get_env;
 use crate::{
-    application::use_cases::misc_use_case::MiscUseCase, domain::models::admin_user::StorableAdminUser, infra::grpc::misc::{
+    application::{extensions::string_extension::StringExtension, use_cases::misc_use_case::MiscUseCase}, domain::models::admin_user::StorableAdminUser, infra::grpc::misc::{
         HealthCheckRequest, HealthCheckResponse, SetupRequest, SetupResponse, misc_server::Misc
     }
 };
@@ -49,11 +50,17 @@ impl Misc for MiscGrpcApi {
             Err(e) => return Err(Status::invalid_argument(e.to_string())),
         };
 
+        
+        let password_salt = get_env("AVORED_PASSWORD_SALT")?;
+
+        println!("Pass salt: {}", password_salt);
+
+        let password_hash = storable_admin_user.password_hash.get_password_hash(&password_salt)?;
+        
         storable_admin_user.logged_in_user = "ApplicationSetupProcess".to_string();
         storable_admin_user.is_super_admin = true;
+        storable_admin_user.password_hash = password_hash;
 
-        // @todo hash the password
-        
         println!("Got a setup request: {:?}", storable_admin_user);
 
         // Think of implementing a generic result handler

src/adapters/grpc_api/misc_api.rs

@@ -0,0 +1 @@
+pub mod string_extension;

src/application/extensions/mod.rs

@@ -0,0 +1,23 @@
+// Usually we don't postfix the extension,
+// but naming only string might conflict so we use it.
+
+use argon2::{Argon2, PasswordHasher, password_hash::SaltString};
+
+/// `string_extension`
+pub trait StringExtension {
+    /// gets the password hash using the provided salt
+    fn get_password_hash(&self, password_salt: &str) -> crate::error::Result<String>;
+}
+
+impl StringExtension for String {
+    fn get_password_hash(&self, password_salt: &str) -> crate::error::Result<String> {
+
+        let password = self.as_bytes();
+        let salt = SaltString::from_b64(password_salt)?;
+
+        let argon2 = Argon2::default();
+        let password_hash = argon2.hash_password(password, &salt)?.to_string();
+
+        Ok(Self::from(password_hash))
+    }
+}

src/application/extensions/string_extension.rs

@@ -1 +1,2 @@
 pub mod use_cases;
+pub mod extensions;

src/application/mod.rs

@@ -1,4 +1,5 @@
-use leptos::config::errors::LeptosConfigError;
+use leptos::{config::errors::LeptosConfigError};
+use tonic::Status;
 use tracing::error;
 
 /// This is custom Result type for the application.
@@ -8,6 +9,10 @@ pub type Result<T> = core::result::Result<T, Error>;
 #[derive(Debug, Clone)]
 pub enum Error {
     Generic(String),
+
+    /// Error when the password encryption has some issue.
+    Argon2(Box<argon2::password_hash::Error>),
+
 }
 
 impl core::fmt::Display for Error {
@@ -30,6 +35,40 @@ impl From<surrealdb::Error> for Error {
     }
 }
 
+impl From<argon2::password_hash::Error> for Error {
+    fn from(actual_error: argon2::password_hash::Error) -> Self {
+        error!("argon2 password hash error: {actual_error:?}");
+        Self::Argon2(Box::new(actual_error))
+    }
+}
+
+impl From<dotenvy::Error> for Error {
+    fn from(val: dotenvy::Error) -> Self {
+        error!("there is an issue with loading env file: {val:?}");
+        Self::Generic("there is an issue with loading env file".to_string())
+    }
+}
+
+impl From<Error> for Status {
+    fn from(val: Error) -> Self {
+        match val {
+            // Error::InvalidArgument(error_response) => Self::invalid_argument(error_response),
+            // Error::Unauthorizeed(resource_name) => {
+            //     let error_message = format!("unauthorized: you do not have access to access this ({resource_name}) resource");
+            //     Self::permission_denied(error_message)
+            // }
+            // Error::Unauthenticated(error_message) => {
+            //     Self::unauthenticated(error_message)
+            // },
+            Error::Argon2(boxed_error) => {
+                Self::internal(format!("Argon2 error: {boxed_error:?}"))
+            },
+            _ => Self::invalid_argument("500 Internal server error")
+        }
+    }
+}
+
+
 impl From<std::io::Error> for Error {
     fn from(error: std::io::Error) -> Self {
         error!("IO error: {error:?}");

src/error.rs

@@ -8,9 +8,12 @@ use std::sync::Arc;
 use tracing_subscriber::layer::SubscriberExt;
 use tracing_subscriber::util::SubscriberInitExt;
 use tracing_subscriber::{filter, Layer};
+use crate::error::Error;
 
 pub async fn init_app_state() -> Result<AppState> {
     init_log();
+
+    load_env()?;
     // let db = init_database().await?;
     // rust_i18n::i18n!("resources/locales");
 
@@ -35,6 +38,27 @@ impl FromRef<AppState> for LeptosOptions {
     }
 }
 
+
+fn load_env() -> Result<()>{
+    dotenvy::dotenv()?;
+
+    println!("here");
+    match get_env("APP_ENV")?.as_str() {
+        "prod" => dotenvy::from_filename_override(".env.prod")?,
+        "stag" => dotenvy::from_filename_override(".env.stag")?,
+        "test" => dotenvy::from_filename_override(".env.test")?,
+        "dev" => dotenvy::from_filename_override(".env.dev")?,
+        // as if it won't match any we load dev as default
+        _ => dotenvy::from_filename_override(".env")?,
+    };
+
+    Ok(())
+}
+
+pub fn get_env(name: &'static str) -> Result<String> {
+    env::var(name).map_err(|_| Error::Generic(format!("environment variable {} is not set", name)))
+}
+
 fn init_log() {
     let stdout_log = tracing_subscriber::fmt::layer().pretty();