Extract crates_io_session crate

Cargo.toml

@@ -49,7 +49,7 @@ aws-ip-ranges = "=0.962.0"
 aws-sdk-cloudfront = "=1.57.0"
 aws-sdk-sqs = "=1.51.0"
 axum = { version = "=0.7.9", features = ["macros", "matched-path"] }
-axum-extra = { version = "=0.9.6", features = ["cookie-signed", "erased-json", "query", "typed-header"] }
+axum-extra = { version = "=0.9.6", features = ["erased-json", "query", "typed-header"] }
 base64 = "=0.22.1"
 bigdecimal = { version = "=0.4.7", features = ["serde"] }
 bon = "=3.3.1"
@@ -63,6 +63,7 @@ crates_io_github = { path = "crates/crates_io_github" }
 crates_io_index = { path = "crates/crates_io_index" }
 crates_io_markdown = { path = "crates/crates_io_markdown" }
 crates_io_pagerduty = { path = "crates/crates_io_pagerduty" }
+crates_io_session = { path = "crates/crates_io_session" }
 crates_io_tarball = { path = "crates/crates_io_tarball" }
 crates_io_team_repo = { path = "crates/crates_io_team_repo" }
 crates_io_worker = { path = "crates/crates_io_worker" }

crates/crates_io_session/Cargo.toml

@@ -0,0 +1,17 @@
+[package]
+name = "crates_io_session"
+version = "0.0.0"
+license = "MIT OR Apache-2.0"
+edition = "2021"
+
+[lints]
+workspace = true
+
+[dependencies]
+axum = { version = "=0.7.9", features = ["macros"] }
+axum-extra = { version = "=0.9.6", features = ["cookie-signed"] }
+base64 = "=0.22.1"
+cookie = { version = "=0.18.1", features = ["secure"] }
+parking_lot = "=0.12.3"
+
+[dev-dependencies]

src/auth.rs

@@ -1,14 +1,14 @@
 use crate::controllers;
 use crate::controllers::util::RequestPartsExt;
 use crate::middleware::log_request::RequestLogExt;
-use crate::middleware::session::SessionExtension;
 use crate::models::token::{CrateScope, EndpointScope};
 use crate::models::{ApiToken, User};
 use crate::util::errors::{
     account_locked, forbidden, internal, AppResult, InsecurelyGeneratedTokenRevoked,
 };
 use crate::util::token::HashedToken;
 use chrono::Utc;
+use crates_io_session::SessionExtension;
 use diesel_async::AsyncPgConnection;
 use http::header;
 use http::request::Parts;

src/controllers/session.rs

@@ -11,13 +11,13 @@ use oauth2::{AuthorizationCode, CsrfToken, Scope, TokenResponse};
 use crate::app::AppState;
 use crate::email::Emails;
 use crate::middleware::log_request::RequestLogExt;
-use crate::middleware::session::SessionExtension;
 use crate::models::{NewUser, User};
 use crate::schema::users;
 use crate::util::diesel::is_read_only_error;
 use crate::util::errors::{bad_request, server_error, AppResult};
 use crate::views::EncodableMe;
 use crates_io_github::GithubUser;
+use crates_io_session::SessionExtension;
 
 /// Begin authentication flow.
 ///

src/middleware.rs

@@ -8,7 +8,6 @@ pub mod log_request;
 pub mod normalize_path;
 pub mod real_ip;
 mod require_user_agent;
-pub mod session;
 mod static_or_continue;
 mod update_metrics;
 
@@ -59,7 +58,10 @@ pub fn apply_axum_middleware(state: AppState, router: Router<()>) -> Router {
             state.config.cargo_compat_status_code_config,
             cargo_compat::middleware,
         ))
-        .layer(from_fn_with_state(state.clone(), session::attach_session))
+        .layer(from_fn_with_state(
+            state.clone(),
+            crates_io_session::attach_session,
+        ))
         .layer(from_fn_with_state(
             state.clone(),
             require_user_agent::require_user_agent,

src/tests/util.rs

@@ -19,7 +19,6 @@
 //! `MockCookieUser` and `MockTokenUser` provide an `as_model` function which returns a reference
 //! to the underlying database model value (`User` and `ApiToken` respectively).
 
-use crate::middleware::session;
 use crate::models::{ApiToken, CreatedApiToken, User};
 use crate::tests::{
     CategoryListResponse, CategoryResponse, CrateList, CrateResponse, GoodCrate, OwnerResp,
@@ -72,7 +71,7 @@ pub fn encode_session_header(session_key: &cookie::Key, user_id: i32) -> String
     map.insert("user_id".into(), user_id.to_string());
 
     // encode the map into a cookie value string
-    let encoded = session::encode(&map);
+    let encoded = crates_io_session::encode(&map);
 
     // put the cookie into a signed cookie jar
     let cookie = Cookie::build((cookie_name, encoded));