-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add initial game connection token implementation
- Loading branch information
Showing
7 changed files
with
264 additions
and
16 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,34 @@ | ||
| use actix_web::{post, web, HttpResponse, Responder}; | ||
| use uuid::Uuid; | ||
|
|
||
| use crate::{ | ||
| app_data::AppData, | ||
| errors::api::RouteError, | ||
| game_connection_token::{ | ||
| GameConnectionToken, GameConnectionTokenPrivate, GamePlayerData, GameServerAddress, | ||
| }, | ||
| }; | ||
|
|
||
| #[post("/v1/player/test")] | ||
| async fn player_test(app_data: web::Data<AppData>) -> Result<impl Responder, RouteError> { | ||
| let player_data = GamePlayerData::generate(Uuid::new_v4(), "SirLynix".into()); | ||
|
|
||
| let server_address = GameServerAddress { | ||
| address: app_data.config.game_server_address.clone(), | ||
| port: app_data.config.game_server_port, | ||
| }; | ||
|
|
||
| let private_token = GameConnectionTokenPrivate::generate( | ||
| app_data.config.game_api_url.clone(), | ||
| app_data.config.game_api_token.clone(), | ||
| player_data, | ||
| ); | ||
| let token = GameConnectionToken::generate( | ||
| app_data.config.connection_token_key.into(), | ||
| app_data.config.game_api_token_duration, | ||
| server_address, | ||
| private_token, | ||
| ); | ||
|
|
||
| Ok(HttpResponse::Ok().json(token)) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,174 @@ | ||
| use chacha20poly1305::{ | ||
| aead::{AeadCore, AeadMutInPlace, KeyInit, OsRng}, | ||
| XChaCha20Poly1305, | ||
| }; | ||
| use deku::prelude::*; | ||
| use serde::Serialize; | ||
| use serde_with::{base64::Base64, serde_as}; | ||
| use std::time::{Duration, SystemTime, UNIX_EPOCH}; | ||
| use uuid::Uuid; | ||
|
|
||
| const XCHACHA20POLY1305_IETF_ABYTES: usize = 16; //< todo: Get it from chacha20poly1305::Tag | ||
|
|
||
| #[serde_as] | ||
| #[derive(Debug, Serialize)] | ||
| pub struct GameEncryptionKeys { | ||
| #[serde_as(as = "Base64")] | ||
| pub client_to_server: chacha20poly1305::Key, | ||
| #[serde_as(as = "Base64")] | ||
| pub server_to_client: chacha20poly1305::Key, | ||
| } | ||
|
|
||
| impl GameEncryptionKeys { | ||
| pub fn generate() -> Self { | ||
| Self { | ||
| client_to_server: XChaCha20Poly1305::generate_key(&mut OsRng), | ||
| server_to_client: XChaCha20Poly1305::generate_key(&mut OsRng), | ||
| } | ||
| } | ||
| } | ||
|
|
||
| #[derive(Debug, Serialize)] | ||
| pub struct GameServerAddress { | ||
| pub address: String, | ||
| pub port: u16, | ||
| } | ||
|
|
||
| #[derive(Debug, DekuWrite)] | ||
| #[deku(endian = "little")] | ||
| pub struct GameConnectionTokenAdditionalData { | ||
| pub token_version: u32, | ||
| pub expire_timestamp: u64, | ||
| #[deku(writer = "deku_helper_write_key(deku::writer, &self.client_to_server_key)")] | ||
| pub client_to_server_key: chacha20poly1305::Key, | ||
| #[deku(writer = "deku_helper_write_key(deku::writer, &self.server_to_client_key)")] | ||
| pub server_to_client_key: chacha20poly1305::Key, | ||
| } | ||
|
|
||
| #[serde_as] | ||
| #[derive(Debug, Serialize)] | ||
| pub struct GameConnectionToken { | ||
| token_version: u32, | ||
| #[serde_as(as = "Base64")] | ||
| token_nonce: chacha20poly1305::XNonce, | ||
| creation_timestamp: u64, | ||
| expire_timestamp: u64, | ||
| encryption_keys: GameEncryptionKeys, | ||
| game_server: GameServerAddress, | ||
| #[serde_as(as = "Base64")] | ||
| private_token_data: Vec<u8>, | ||
| } | ||
|
|
||
| impl GameConnectionToken { | ||
| pub fn generate( | ||
| token_key: chacha20poly1305::Key, | ||
| duration: Duration, | ||
| server_address: GameServerAddress, | ||
| private_token: GameConnectionTokenPrivate, | ||
| ) -> Self { | ||
| let timestamp = SystemTime::now().duration_since(UNIX_EPOCH).unwrap(); | ||
|
|
||
| let encryption_keys = GameEncryptionKeys::generate(); | ||
|
|
||
| let token_version = 1u32; | ||
| let expire_timestamp = (timestamp + duration).as_secs(); | ||
|
|
||
| let additional_data = GameConnectionTokenAdditionalData { | ||
| token_version, | ||
| expire_timestamp, | ||
| client_to_server_key: encryption_keys.client_to_server.clone(), | ||
| server_to_client_key: encryption_keys.server_to_client.clone(), | ||
| }; | ||
|
|
||
| let additional_data_bytes = additional_data.to_bytes().unwrap(); | ||
|
|
||
| let nonce = XChaCha20Poly1305::generate_nonce(&mut OsRng); | ||
|
|
||
| let mut private_token_bytes = private_token.to_bytes().unwrap(); | ||
| private_token_bytes.resize(private_token_bytes.len() + XCHACHA20POLY1305_IETF_ABYTES, 0); | ||
|
|
||
| let mut cipher = XChaCha20Poly1305::new(&token_key); | ||
| cipher | ||
| .encrypt_in_place( | ||
| &nonce, | ||
| additional_data_bytes.as_slice(), | ||
| &mut private_token_bytes, | ||
| ) | ||
| .unwrap(); | ||
|
|
||
| Self { | ||
| token_version, | ||
| token_nonce: nonce, | ||
| creation_timestamp: timestamp.as_secs(), | ||
| expire_timestamp: (timestamp + duration).as_secs(), | ||
| encryption_keys, | ||
| game_server: server_address, | ||
| private_token_data: private_token_bytes, | ||
| } | ||
| } | ||
| } | ||
|
|
||
| #[derive(Debug, DekuWrite)] | ||
| #[deku(endian = "endian", ctx = "endian: deku::ctx::Endian")] | ||
| pub struct GamePlayerData { | ||
| #[deku(writer = "deku_helper_write_uuid(deku::writer, &self.uuid)")] | ||
| uuid: Uuid, | ||
| #[deku(writer = "deku_helper_write_str(deku::writer, &self.nickname)")] | ||
| nickname: String, | ||
| } | ||
|
|
||
| impl GamePlayerData { | ||
| pub fn generate(uuid: Uuid, nickname: String) -> Self { | ||
| Self { uuid, nickname } | ||
| } | ||
| } | ||
|
|
||
| #[derive(Debug, DekuWrite)] | ||
| #[deku(endian = "little")] | ||
| pub struct GameConnectionTokenPrivate { | ||
| #[deku(writer = "deku_helper_write_str(deku::writer, &self.api_token)")] | ||
| api_token: String, | ||
| #[deku(writer = "deku_helper_write_str(deku::writer, &self.api_url)")] | ||
| api_url: String, | ||
| player_data: GamePlayerData, | ||
| } | ||
|
|
||
| impl GameConnectionTokenPrivate { | ||
| pub fn generate( | ||
| game_api_url: String, | ||
| game_api_token: String, | ||
| player_data: GamePlayerData, | ||
| ) -> Self { | ||
| Self { | ||
| api_token: game_api_token, | ||
| api_url: game_api_url, | ||
| player_data, | ||
| } | ||
| } | ||
| } | ||
|
|
||
| fn deku_helper_write_key<W: std::io::Write>( | ||
| writer: &mut Writer<W>, | ||
| value: &chacha20poly1305::Key, | ||
| ) -> Result<(), DekuError> { | ||
| let str_bytes = value.as_slice(); | ||
| str_bytes.to_writer(writer, ()) | ||
| } | ||
|
|
||
| fn deku_helper_write_str<W: std::io::Write>( | ||
| writer: &mut Writer<W>, | ||
| value: &str, | ||
| ) -> Result<(), DekuError> { | ||
| let str_bytes = value.as_bytes(); | ||
| let str_len = str_bytes.len() as u32; | ||
| str_len.to_writer(writer, ())?; | ||
| str_bytes.to_writer(writer, ()) | ||
| } | ||
|
|
||
| fn deku_helper_write_uuid<W: std::io::Write>( | ||
| writer: &mut Writer<W>, | ||
| value: &Uuid, | ||
| ) -> Result<(), DekuError> { | ||
| let str = value.to_bytes_le(); | ||
| str.to_writer(writer, ()) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.