Files
enclave-server/src/ws.rs
T
2026-08-29 13:35:58 +02:00

106 lines
3.0 KiB
Rust

use std::{borrow::Cow, sync::Arc};
use axum::extract::ws::{Message, WebSocket};
use futures_util::{
SinkExt, StreamExt,
stream::{SplitSink, SplitStream},
};
use tokio::sync::Mutex;
use crate::{
crypto::SessionCipher,
protocol::{ClientMethod, ServerMethod},
};
pub struct EnclaveWebSocket {
tx: Mutex<SplitSink<WebSocket, Message>>,
rx: Mutex<SplitStream<WebSocket>>,
pub cipher: Arc<Mutex<SessionCipher>>,
}
impl EnclaveWebSocket {
pub fn new(ws: WebSocket, cipher: Arc<Mutex<SessionCipher>>) -> Self {
let (tx, rx) = ws.split();
Self {
tx: Mutex::new(tx),
rx: Mutex::new(rx),
cipher,
}
}
pub async fn read(&self) -> anyhow::Result<Option<ServerMethod>> {
match self.rx.lock().await.next().await.transpose()? {
Some(Message::Text(text)) => {
let text = text.to_string();
match serde_json::from_str::<ServerMethod>(&text) {
Ok(msg) => {
log::debug!("Received message: {msg:?}");
Ok(Some(msg))
}
Err(e) => {
log::warn!("Failed to parse client message: {e}");
self.send(&ClientMethod::Error {
error: Cow::Owned(format!("Unable to parse message: {e}")),
})
.await?;
Ok(None)
}
}
}
Some(Message::Binary(encrypted)) => {
let text = String::from_utf8(self.cipher.lock().await.decrypt(&encrypted)?)?;
match serde_json::from_str::<ServerMethod>(&text) {
Ok(msg) => {
log::debug!("Received message: {msg:?}");
Ok(Some(msg))
}
Err(e) => {
log::warn!("Failed to parse client message: {e}");
self.send(&ClientMethod::Error {
error: Cow::Owned(format!("Unable to parse message: {e}")),
})
.await?;
Ok(None)
}
}
}
Some(Message::Ping(v)) => {
self.tx.lock().await.send(Message::Pong(v)).await?;
Ok(None)
}
Some(other) => {
log::debug!("Ignoring websocket message: {other:?}");
Ok(None)
}
None => Ok(None),
}
}
pub async fn send(&self, message: &ClientMethod) -> anyhow::Result<()> {
let text = serde_json::to_string(message)?;
log::debug!("Sending message: {message:?}");
let encrypted = self.cipher.lock().await.encrypt(text.as_bytes())?;
self.tx
.lock()
.await
.send(Message::Binary(encrypted.into()))
.await?;
Ok(())
}
}