1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139

#![deny(warnings)]
#![warn(unused_extern_crates)]
#![deny(clippy::todo)]
#![deny(clippy::unimplemented)]
#![deny(clippy::unwrap_used)]
#![deny(clippy::expect_used)]
#![deny(clippy::panic)]
#![deny(clippy::unreachable)]
#![deny(clippy::await_holding_lock)]
#![deny(clippy::needless_pass_by_value)]
#![deny(clippy::trivially_copy_pass_by_ref)]

#[macro_use]
extern crate tracing;

use std::path::PathBuf;
use structopt::StructOpt;

include!("../opt/kanidm.rs");

pub mod account;
pub mod common;
pub mod domain;
pub mod group;
pub mod oauth2;
pub mod raw;
pub mod recycle;
pub mod session;

impl SelfOpt {
    pub fn debug(&self) -> bool {
        match self {
            SelfOpt::Whoami(copt) => copt.debug,
            SelfOpt::SetPassword(copt) => copt.debug,
        }
    }

    pub async fn exec(&self) {
        match self {
            SelfOpt::Whoami(copt) => {
                let client = copt.to_client().await;

                match client.whoami().await {
                    Ok(o_ent) => {
                        match o_ent {
                            Some((ent, uat)) => {
                                debug!("{:?}", ent);
                                println!("{}", uat);
                            }
                            None => {
                                error!("Authentication with cached token failed, can't query information.");
                                // TODO: remove token when we know it's not valid
                            }
                        }
                    }
                    Err(e) => println!("Error: {:?}", e),
                }
            }

            SelfOpt::SetPassword(copt) => {
                let client = copt.to_client().await;

                let password = match rpassword::prompt_password("Enter new password: ") {
                    Ok(p) => p,
                    Err(e) => {
                        error!("Error -> {:?}", e);
                        return;
                    }
                };

                if let Err(e) = client.idm_account_set_password(password).await {
                    error!("Error -> {:?}", e);
                }
            }
        }
    }
}

impl SystemOpt {
    pub fn debug(&self) -> bool {
        match self {
            SystemOpt::Oauth2(oopt) => oopt.debug(),
            SystemOpt::Domain(dopt) => dopt.debug(),
        }
    }

    pub async fn exec(&self) {
        match self {
            SystemOpt::Oauth2(oopt) => oopt.exec().await,
            SystemOpt::Domain(dopt) => dopt.exec().await,
        }
    }
}

impl KanidmClientOpt {
    pub fn debug(&self) -> bool {
        match self {
            KanidmClientOpt::Raw(ropt) => ropt.debug(),
            KanidmClientOpt::Login(lopt) => lopt.debug(),
            KanidmClientOpt::Logout(lopt) => lopt.debug(),
            KanidmClientOpt::Session(sopt) => sopt.debug(),
            KanidmClientOpt::CSelf(csopt) => csopt.debug(),
            KanidmClientOpt::Account(aopt) => aopt.debug(),
            KanidmClientOpt::Group(gopt) => gopt.debug(),
            KanidmClientOpt::System(sopt) => sopt.debug(),
            KanidmClientOpt::Recycle(ropt) => ropt.debug(),
        }
    }

    pub async fn exec(&self) {
        match self {
            KanidmClientOpt::Raw(ropt) => ropt.exec().await,
            KanidmClientOpt::Login(lopt) => lopt.exec().await,
            KanidmClientOpt::Logout(lopt) => lopt.exec().await,
            KanidmClientOpt::Session(sopt) => sopt.exec().await,
            KanidmClientOpt::CSelf(csopt) => csopt.exec().await,
            KanidmClientOpt::Account(aopt) => aopt.exec().await,
            KanidmClientOpt::Group(gopt) => gopt.exec().await,
            KanidmClientOpt::System(sopt) => sopt.exec().await,
            KanidmClientOpt::Recycle(ropt) => ropt.exec().await,
        }
    }
}

pub(crate) fn password_prompt(prompt: &str) -> Option<String> {
    for _ in 0..3 {
        let password = rpassword::prompt_password(prompt).ok()?;

        let password_confirm =
            rpassword::prompt_password("Retype the new password to confirm: ").ok()?;

        if password == password_confirm {
            return Some(password);
        } else {
            error!("Passwords do not match");
        }
    }
    None
}