Something went wrong. Try again.
A lexicon-driven AppView for ATProto.
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238use serde::{Deserialize, Serialize};use std::collections::HashMap;use std::sync::Arc;use tokio::sync::RwLock;
#[derive(Debug, Clone, Serialize, Deserialize)]pub struct Domain { pub id: String, pub url: String, pub is_primary: bool, pub created_at: String, pub updated_at: String,}
impl Domain { pub fn host(&self) -> &str { let after_scheme = self .url .strip_prefix("https://") .or_else(|| self.url.strip_prefix("http://")) .unwrap_or(&self.url); after_scheme.split(':').next().unwrap_or(after_scheme) }}
#[derive(Clone)]pub struct DomainCache { by_host: Arc<RwLock<HashMap<String, Arc<Domain>>>>, primary: Arc<RwLock<Option<Arc<Domain>>>>,}
impl DomainCache { pub fn new() -> Self { Self { by_host: Arc::new(RwLock::new(HashMap::new())), primary: Arc::new(RwLock::new(None)), } }
pub async fn load(&self, domains: Vec<Domain>) { let mut by_host = self.by_host.write().await; let mut primary = self.primary.write().await;
by_host.clear(); *primary = None;
for domain in domains { let arc = Arc::new(domain); if arc.is_primary { *primary = Some(arc.clone()); } by_host.insert(arc.host().to_string(), arc); } }
pub async fn get(&self, host: &str) -> Option<Arc<Domain>> { let by_host = self.by_host.read().await; by_host.get(host).cloned() }
pub async fn primary(&self) -> Option<Arc<Domain>> { let primary = self.primary.read().await; primary.clone() }
pub async fn insert(&self, domain: Domain) { let arc = Arc::new(domain); let mut by_host = self.by_host.write().await; let mut primary = self.primary.write().await;
if arc.is_primary { *primary = Some(arc.clone()); } by_host.insert(arc.host().to_string(), arc); }
pub async fn remove(&self, host: &str) { let mut by_host = self.by_host.write().await; let removed = by_host.remove(host);
if let Some(domain) = removed && domain.is_primary { let mut primary = self.primary.write().await; *primary = None; } }
pub async fn set_primary(&self, host: &str) { let by_host = self.by_host.read().await; if let Some(domain) = by_host.get(host).cloned() { drop(by_host); let mut primary = self.primary.write().await; *primary = Some(domain); } }
pub async fn all(&self) -> Vec<Arc<Domain>> { let by_host = self.by_host.read().await; by_host.values().cloned().collect() }
/// Return `true` if `origin` (a browser `Origin` header value, e.g. /// `https://example.com` or `http://localhost:3000`) exactly matches a /// registered domain's URL. /// /// This is the trusted-origin allowlist for credentialed (cookie-bearing) /// CORS: only first-party domains HappyView actually serves may send /// credentials cross-origin. The match is on the full origin /// (scheme + host + port), not just the host, so `http` and `https` or a /// different port are treated as distinct origins. pub async fn is_allowed_origin(&self, origin: &str) -> bool { let target = origin.trim_end_matches('/'); let by_host = self.by_host.read().await; by_host .values() .any(|d| d.url.trim_end_matches('/') == target) }}
impl Default for DomainCache { fn default() -> Self { Self::new() }}
#[cfg(test)]mod tests { use super::*; use uuid::Uuid;
fn make_domain(url: &str, is_primary: bool) -> Domain { Domain { id: Uuid::new_v4().to_string(), url: url.to_string(), is_primary, created_at: "2024-01-01T00:00:00Z".to_string(), updated_at: "2024-01-01T00:00:00Z".to_string(), } }
#[test] fn host_strips_https() { let domain = make_domain("https://example.com", false); assert_eq!(domain.host(), "example.com"); }
#[test] fn host_strips_http() { let domain = make_domain("http://localhost:3000", false); assert_eq!(domain.host(), "localhost"); }
#[tokio::test] async fn load_and_get() { let cache = DomainCache::new(); let domains = vec![ make_domain("https://example.com", true), make_domain("https://other.com", false), ]; cache.load(domains).await;
let found = cache.get("example.com").await; assert!(found.is_some()); assert_eq!(found.unwrap().url, "https://example.com");
assert!(cache.get("other.com").await.is_some());
let missing = cache.get("unknown.com").await; assert!(missing.is_none()); }
#[tokio::test] async fn primary_returns_primary_domain() { let cache = DomainCache::new(); let domains = vec![ make_domain("https://example.com", false), make_domain("https://primary.com", true), ]; cache.load(domains).await;
let primary = cache.primary().await; assert!(primary.is_some()); assert_eq!(primary.unwrap().url, "https://primary.com"); }
#[tokio::test] async fn insert_and_remove() { let cache = DomainCache::new(); let domain = make_domain("https://example.com", false); cache.insert(domain).await;
assert!(cache.get("example.com").await.is_some());
cache.remove("example.com").await; assert!(cache.get("example.com").await.is_none()); }
#[tokio::test] async fn is_allowed_origin_matches_full_origin() { let cache = DomainCache::new(); cache .load(vec![ make_domain("https://example.com", true), make_domain("http://localhost:3000", false), ]) .await;
// Exact matches (trailing slash tolerated). assert!(cache.is_allowed_origin("https://example.com").await); assert!(cache.is_allowed_origin("https://example.com/").await); assert!(cache.is_allowed_origin("http://localhost:3000").await);
// Scheme, port, and host must all match. assert!(!cache.is_allowed_origin("http://example.com").await); assert!(!cache.is_allowed_origin("https://example.com:8443").await); assert!(!cache.is_allowed_origin("http://localhost:3001").await); assert!(!cache.is_allowed_origin("https://evil.example").await); }
#[tokio::test] async fn set_primary_updates() { let cache = DomainCache::new(); let domains = vec![ make_domain("https://example.com", true), make_domain("https://other.com", false), ]; cache.load(domains).await;
// Initially example.com is primary assert_eq!(cache.primary().await.unwrap().url, "https://example.com");
// Change primary to other.com cache.set_primary("other.com").await; assert_eq!(cache.primary().await.unwrap().url, "https://other.com"); }}