feat: v0.3.0 — standardize codebase, centralize infra, merge QR into CMS

- Enforce axum best practices across all 13 workspace crates (max 200 LOC/file, no comments, no unwrap, clean architecture) - Fix domain→infrastructure dependency inversions in imphnen-iam and imphnen-dimentorin - Extract imphnen-storage (MinIO) and imphnen-email (Lettre) as standalone crates - Centralize all config in ENV struct: CDN_URL, CORS_ALLOWED_ORIGINS - Centralize SMTP through imphnen-email; remove dead HackathonConfig - Centralize database: QR crate now shares main DB pool (single DATABASE_URL) - Rename QR users table to qr_users to avoid collision with main users table - Merge imphnen-qr into imphnen-cms/src/qr (13 crates, down from 14) - Restructure imphnen-hackathon flat modules into clean architecture - Remove all stale env vars from .env.example (SurrealDB, QR_JWT, Hackathon infra) - Fix Dockerfile to include all current workspace crates - Bump all crate versions 0.2.0 → 0.3.0 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-02 22:29:08 +07:00
parent 2ae43b3bcc
commit 331a4a4e88
442 changed files with 22226 additions and 18700 deletions
@@ -1,87 +1,80 @@
-//! OTP generation utilities with time-based expiration and secure hashing.
-//!
-//! This module provides functionality to generate one-time passwords (OTPs) with
-//! a 5-minute expiration time and SHA256 hashing for secure storage and validation,
-//! preventing replay attacks.
-
-use rand::{Rng, rng};
-use sha2::{Sha256, Digest};
-use chrono::{DateTime, Utc, Duration};
-
-/// Represents an OTP with its code, hashed value and expiration time
-#[derive(Debug, Clone)]
-pub struct OtpData {
-    pub code: u32,
-    pub hash: String,
-    pub expires_at: DateTime<Utc>,
-}
-
-pub struct OtpManager;
-
-impl OtpManager {
-    /// Generates a new OTP with a 5-minute expiration and SHA256 hash for secure storage
-    pub fn generate_otp() -> OtpData {
-        let code = rng().random_range(100_000..1_000_000);
-        let otp_str = code.to_string();
-        let mut hasher = Sha256::new();
-        hasher.update(otp_str.as_bytes());
-        let hash = format!("{:x}", hasher.finalize());
-        let expires_at = Utc::now() + Duration::minutes(5);
-        OtpData { code, hash, expires_at }
-    }
-
-    /// Validates the user-provided OTP against the stored OTP data
-    /// Checks both hash match and expiration
-    pub fn validate_otp(stored: &OtpData, user_otp: u32) -> bool {
-        if Utc::now() > stored.expires_at {
-            return false;
-        }
-        let user_otp_str = user_otp.to_string();
-        let mut hasher = Sha256::new();
-        hasher.update(user_otp_str.as_bytes());
-        let user_hash = format!("{:x}", hasher.finalize());
-        user_hash == stored.hash
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_generate_otp() {
-        let otp = OtpManager::generate_otp();
-        assert!(otp.code >= 100_000 && otp.code < 1_000_000);
-        assert!(!otp.hash.is_empty());
-        assert!(otp.expires_at > Utc::now());
-        assert!(otp.expires_at <= Utc::now() + chrono::Duration::minutes(5));
-    }
-
-    #[test]
-    fn test_validate_otp_valid() {
-        let otp = OtpManager::generate_otp();
-        assert!(OtpManager::validate_otp(&otp, otp.code));
-    }
-
-    #[test]
-    fn test_validate_otp_invalid_code() {
-        let otp = OtpManager::generate_otp();
-        assert!(!OtpManager::validate_otp(&otp, 123456)); // Wrong code
-    }
-
-    #[test]
-    fn test_validate_otp_expired() {
-        let mut otp = OtpManager::generate_otp();
-        otp.expires_at = Utc::now() - chrono::Duration::seconds(1); // Expired
-        assert!(!OtpManager::validate_otp(&otp, otp.code));
-    }
-
-    #[test]
-    fn test_otp_uniqueness() {
-        let otp1 = OtpManager::generate_otp();
-        let otp2 = OtpManager::generate_otp();
-        // Codes should be different (high probability)
-        assert_ne!(otp1.code, otp2.code);
-        assert_ne!(otp1.hash, otp2.hash);
-    }
-}
+use chrono::{DateTime, Duration, Utc};
+use rand::{Rng, rng};
+use sha2::{Digest, Sha256};
+
+#[derive(Debug, Clone)]
+pub struct OtpData {
+	pub code: u32,
+	pub hash: String,
+	pub expires_at: DateTime<Utc>,
+}
+
+pub struct OtpManager;
+
+impl OtpManager {
+	pub fn generate_otp() -> OtpData {
+		let code = rng().random_range(100_000..1_000_000);
+		let otp_str = code.to_string();
+		let mut hasher = Sha256::new();
+		hasher.update(otp_str.as_bytes());
+		let hash = format!("{:x}", hasher.finalize());
+		let expires_at = Utc::now() + Duration::minutes(5);
+		OtpData {
+			code,
+			hash,
+			expires_at,
+		}
+	}
+
+	pub fn validate_otp(stored: &OtpData, user_otp: u32) -> bool {
+		if Utc::now() > stored.expires_at {
+			return false;
+		}
+		let user_otp_str = user_otp.to_string();
+		let mut hasher = Sha256::new();
+		hasher.update(user_otp_str.as_bytes());
+		let user_hash = format!("{:x}", hasher.finalize());
+		user_hash == stored.hash
+	}
+}
+
+#[cfg(test)]
+mod tests {
+	use super::*;
+
+	#[test]
+	fn test_generate_otp() {
+		let otp = OtpManager::generate_otp();
+		assert!(otp.code >= 100_000 && otp.code < 1_000_000);
+		assert!(!otp.hash.is_empty());
+		assert!(otp.expires_at > Utc::now());
+		assert!(otp.expires_at <= Utc::now() + chrono::Duration::minutes(5));
+	}
+
+	#[test]
+	fn test_validate_otp_valid() {
+		let otp = OtpManager::generate_otp();
+		assert!(OtpManager::validate_otp(&otp, otp.code));
+	}
+
+	#[test]
+	fn test_validate_otp_invalid_code() {
+		let otp = OtpManager::generate_otp();
+		assert!(!OtpManager::validate_otp(&otp, 123456));
+	}
+
+	#[test]
+	fn test_validate_otp_expired() {
+		let mut otp = OtpManager::generate_otp();
+		otp.expires_at = Utc::now() - chrono::Duration::seconds(1);
+		assert!(!OtpManager::validate_otp(&otp, otp.code));
+	}
+
+	#[test]
+	fn test_otp_uniqueness() {
+		let otp1 = OtpManager::generate_otp();
+		let otp2 = OtpManager::generate_otp();
+		assert_ne!(otp1.code, otp2.code);
+		assert_ne!(otp1.hash, otp2.hash);
+	}
+}