POST /api/v1/user/runner-token: a phone registers itself as a runner (refs oxygenhub-android#8) 5714347a6233

- **`POST /api/v1/user/runner-token` (repo:write):** a one-time registration token for a runner that serves the caller's own repositories and no one else's, as the Android app offers the phone as a runner (oxygenhub-android#8); it lasts a day, like the settings pages' tokens, and is audited.

/// `POST /user/runner-token`: a one-time token that registers a runner for

/// the caller's own repositories, as a phone does when its owner offers it

/// as a runner (oxygenhub-android#8). Spent by `flow runner register` (or

/// the app), within 24 hours.

#[derive(Clone, Debug, PartialEq, Eq, Serialize, Deserialize, JsonSchema)]

pub struct RunnerToken {

    pub token: String,

    /// Whose repositories the runner will serve.

    pub owner: String,

}

        .route("/user/runner-token", post(user_runner_token))

/// `POST /user/runner-token` (repo:write): a one-time registration token

/// for a runner that serves the caller's own repositories and no one

/// else's, as a phone registers itself (oxygenhub-android#8). Like the

/// settings pages' tokens it lasts a day.

async fn user_runner_token(State(app): State<Shared>, headers: HeaderMap) -> Result<(StatusCode, Json<RunnerToken>), ApiError> {

    let c = caller(&app, &headers).await?;

    let me = c.require("repo:write")?.clone();

    let token = format!("flowreg_{}", crate::auth::random_hex(24));

    let scope = db::runners::Scope { owner: me.username.clone(), repo_id: None };

    db::runners::add_registration(&app.db, &blake3::hash(token.as_bytes()).to_hex(), &me.username, &scope).await?;

    db::accounts::audit(&app.db, Some(&me), "flow.runner.token", &me.username, "registration token for the caller's repositories (API)")

        .await

        .ok();

    Ok((StatusCode::CREATED, Json(RunnerToken { token, owner: me.username })))

}

/// oxygenhub-android#8: an app asks for a registration token for its

/// user's own repositories; the runner it registers takes their jobs and

/// no one else's.

#[tokio::test(flavor = "multi_thread")]

async fn a_user_registers_a_runner_for_their_own_repositories() {

    use oxy_core::identity::SecretKey;

    let h = hub().await;

    create(&h.app, "andy", "demo").await;

    let andy = db::accounts::create_account(&h.app.db, "andy", "[email protected]", "", "salt", false).await.unwrap();

    let pat = "oxyhub_phone_test_token";

    db::accounts::create_token(&h.app.db, andy.id, "phone", &oxygenhub::auth::token_hash(pat), "repo:read,repo:write", "", None)

        .await

        .unwrap();

    let read_only = "oxyhub_read_only_token";

    db::accounts::create_token(&h.app.db, andy.id, "ro", &oxygenhub::auth::token_hash(read_only), "repo:read", "", None).await.unwrap();

    assert_eq!(call(&h.app, "POST", "/api/v1/user/runner-token", Some(read_only), None).await.0, StatusCode::FORBIDDEN);

    assert_eq!(call(&h.app, "POST", "/api/v1/user/runner-token", None, None).await.0, StatusCode::UNAUTHORIZED);

    let (st, body) = call(&h.app, "POST", "/api/v1/user/runner-token", Some(pat), None).await;

    assert_eq!(st, StatusCode::CREATED, "{body}");

    let got: serde_json::Value = serde_json::from_str(&body).unwrap();

    let token = got["token"].as_str().unwrap().to_string();

    assert!(token.starts_with("flowreg_") && got["owner"] == "andy", "{body}");

    let identity = SecretKey::generate().identity("andy's phone", "", 1);

    let info = serde_json::json!({ "arch": "aarch64", "os": "android", "version": "0.3.1", "labels": ["android"], "max_jobs": 1 });

    let reg = serde_json::json!({ "token": token, "name": "pixel", "identity": hex::encode(identity.encode()), "info": info });

    let (st, body) = call(&h.app, "POST", "/api/v1/flow/runners/register", None, Some(reg.to_string())).await;

    assert_eq!(st, StatusCode::OK, "{body}");

    let phone = db::runners::list(&h.app.db).await.unwrap().into_iter().find(|r| r.name == "pixel").unwrap();

    assert_eq!((phone.scope_owner.as_str(), phone.scope_repo_id), ("andy", None), "andy's repositories, all of them, and no one else's");

}