feat: add app-level authentication foundation

2026-03-30 23:47:09 +03:00
parent 91854a4153
commit ab2e603997
42 changed files with 1624 additions and 236 deletions
@@ -15,6 +15,10 @@ use crate::storage::StorageError;

 #[derive(Debug, Error)]
 pub enum ApiError {
+    #[error("{message}")]
+    Unauthorized { message: String },
+    #[error("{message}")]
+    Forbidden { message: String },
    #[error("{message}")]
    Validation { message: String },
    #[error("{message}")]
@@ -26,6 +30,18 @@ pub enum ApiError {
 }

 impl ApiError {
+    pub fn unauthorized(message: impl Into<String>) -> Self {
+        Self::Unauthorized {
+            message: message.into(),
+        }
+    }
+
+    pub fn forbidden(message: impl Into<String>) -> Self {
+        Self::Forbidden {
+            message: message.into(),
+        }
+    }
+
    pub fn validation(message: impl Into<String>) -> Self {
        Self::Validation {
            message: message.into(),
@@ -52,6 +68,8 @@ impl ApiError {

    fn status_code(&self) -> StatusCode {
        match self {
+            Self::Unauthorized { .. } => StatusCode::UNAUTHORIZED,
+            Self::Forbidden { .. } => StatusCode::FORBIDDEN,
            Self::Validation { .. } => StatusCode::BAD_REQUEST,
            Self::NotFound { .. } => StatusCode::NOT_FOUND,
            Self::Conflict { .. } => StatusCode::CONFLICT,
@@ -61,6 +79,8 @@ impl ApiError {

    fn code(&self) -> &'static str {
        match self {
+            Self::Unauthorized { .. } => "unauthorized",
+            Self::Forbidden { .. } => "forbidden",
            Self::Validation { .. } => "validation_error",
            Self::NotFound { .. } => "not_found",
            Self::Conflict { .. } => "conflict",
@@ -75,7 +95,9 @@ impl IntoResponse for ApiError {
            Self::Internal { message } => {
                error!(error_code = self.code(), error_message = %message)
            }
-            Self::Validation { message }
+            Self::Unauthorized { message }
+            | Self::Forbidden { message }
+            | Self::Validation { message }
            | Self::NotFound { message }
            | Self::Conflict { message } => {
                warn!(error_code = self.code(), error_message = %message)