Merge pull request #94 from theseus-rs/add-sha1-hash-support

feat: add SHA1 hash support for older Maven repositories

Author: brianheineman

Cargo.lock

@@ -43,6 +43,7 @@ reqwest-tracing = "0.5.0"
 semver = "1.0.23"
 serde = "1.0.203"
 serde_json = "1.0.118"
+sha1 = "0.10.6"
 sha2 = "0.10.8"
 sha3 = "0.10.8"
 tar = "0.4.41"

Cargo.toml

@@ -28,6 +28,7 @@ reqwest-tracing = { workspace = true }
 semver = { workspace = true }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
+sha1 = { workspace = true }
 sha2 = { workspace = true }
 sha3 = { workspace = true }
 tar = { workspace = true }

postgresql_archive/Cargo.toml

@@ -1,6 +1,7 @@
 pub mod blake2b_512;
 pub mod blake2s_256;
 pub mod registry;
+pub mod sha1;
 pub mod sha2_256;
 pub mod sha2_512;
 pub mod sha3_256;

postgresql_archive/src/hasher/mod.rs

@@ -1,5 +1,5 @@
 use crate::configuration::theseus;
-use crate::hasher::{sha2_256, sha2_512};
+use crate::hasher::{sha1, sha2_256, sha2_512};
 use crate::Error::{PoisonedLock, UnsupportedHasher};
 use crate::Result;
 use lazy_static::lazy_static;
@@ -70,6 +70,15 @@ impl Default for HasherRegistry {
             |url, extension| Ok(url.starts_with(theseus::URL) && extension == "sha256"),
             sha2_256::hash,
         );
+        // The zonky maven central releases prior to version 13.2.0 only provide MD5/SHA-1 hashes.
+        registry.register(
+            |url, extension| {
+                Ok(url.contains("zonky")
+                    && url.contains("embedded-postgres-binaries")
+                    && extension == "sha1")
+            },
+            sha1::hash,
+        );
         registry.register(
             |url, extension| {
                 Ok(url.contains("zonky")

postgresql_archive/src/hasher/registry.rs

@@ -0,0 +1,26 @@
+use crate::Result;
+use sha1::{Digest, Sha1};
+
+/// Hashes the data using SHA1.
+///
+/// # Errors
+/// * If the data cannot be hashed.
+pub fn hash(data: &Vec<u8>) -> Result<String> {
+    let mut hasher = Sha1::new();
+    hasher.update(data);
+    let hash = hex::encode(hasher.finalize());
+    Ok(hash)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_hash() -> Result<()> {
+        let data = vec![4, 2];
+        let hash = hash(&data)?;
+        assert_eq!("1f3e1678e699640dfa5173d3a52b004f5e164d87", hash);
+        Ok(())
+    }
+}

postgresql_archive/src/hasher/sha1.rs

@@ -106,7 +106,8 @@ impl Repository for Maven {
         let archive_url = format!("{url}/{version}/{artifact}-{version}.jar", url = self.url,);
 
         let mut hasher_result = None;
-        for extension in &["md5", "sha1", "sha256", "sha512"] {
+        // Try to find a hasher for the archive; the extensions are ordered by preference.
+        for extension in &["sha512", "sha256", "sha1", "md5"] {
             if let Ok(hasher_fn) = hasher::registry::get(&self.url, &(*extension).to_string()) {
                 hasher_result = Some((extension, hasher_fn));
             }