feat: add FxA event webhook endpoint

docs/src/config.md

@@ -105,6 +105,7 @@ The following configuration options are available.
 | <span id="SYNC_TOKENSERVER__NODE_TYPE"></span>SYNC_TOKENSERVER__NODE_TYPE | spanner | Storage backend type reported in token response for telemetry. Valid values: "mysql", "postgres", "spanner" |
 | <span id="SYNC_TOKENSERVER__STATSD_LABEL"></span>SYNC_TOKENSERVER__STATSD_LABEL | syncstorage.tokenserver | StatsD metrics label prefix |
 | <span id="SYNC_TOKENSERVER__TOKEN_DURATION"></span>SYNC_TOKENSERVER__TOKEN_DURATION | 3600 | Token TTL (1 hour) |
+| <span id="SYNC_TOKENSERVER__FXA_WEBHOOK_ENABLED"></span>SYNC_TOKENSERVER__FXA_WEBHOOK_ENABLED | false | Enable the FxA webhook endpoint. When disabled, the route is not registered. |
 
 ### Tokenserver+FxA Integration
 

syncserver/Cargo.toml

@@ -61,6 +61,7 @@ woothee = "0.13"
 
 [dev-dependencies]
 temp-env.workspace = true
+tokenserver-auth = { path = "../tokenserver-auth", features = ["test-support"] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
 slog-journald = "2.2.0"

syncserver/src/server/mod.rs

@@ -208,6 +208,18 @@ macro_rules! build_app {
                 web::resource("/1.0/{application}/{version}")
                     .route(web::get().to(tokenserver::handlers::get_tokenserver_result)),
             )
+            .configure(|cfg| {
+                let fxa_webhook_enabled = $tokenserver_state
+                    .as_ref()
+                    .map(|s: &tokenserver::ServerState| s.fxa_webhook_enabled)
+                    .unwrap_or(false);
+                if fxa_webhook_enabled {
+                    cfg.service(
+                        web::resource("/1.0/webhooks/fxa/events")
+                            .route(web::post().to(tokenserver::handlers::handle_fxa_events)),
+                    );
+                }
+            })
             // Dockerflow
             // Remember to update .::web::middleware::DOCKER_FLOW_ENDPOINTS
             // when applying changes to endpoint names.
@@ -253,7 +265,8 @@ macro_rules! build_app {
 
 #[macro_export]
 macro_rules! build_app_without_syncstorage {
-    ($state: expr, $secrets: expr, $cors: expr, $metrics: expr) => {
+    ($state: expr, $secrets: expr, $cors: expr, $metrics: expr) => {{
+        let fxa_webhook_enabled = $state.fxa_webhook_enabled;
         App::new()
             .app_data(Data::new($state))
             .app_data(Data::new($secrets))
@@ -276,6 +289,14 @@ macro_rules! build_app_without_syncstorage {
                 web::resource("/1.0/{application}/{version}")
                     .route(web::get().to(tokenserver::handlers::get_tokenserver_result)),
             )
+            .configure(move |cfg| {
+                if fxa_webhook_enabled {
+                    cfg.service(
+                        web::resource("/1.0/webhooks/fxa/events")
+                            .route(web::post().to(tokenserver::handlers::handle_fxa_events)),
+                    );
+                }
+            })
             // Dockerflow
             // Remember to update .::web::middleware::DOCKER_FLOW_ENDPOINTS
             // when applying changes to endpoint names.
@@ -319,7 +340,7 @@ macro_rules! build_app_without_syncstorage {
                 SwaggerUi::new("/swagger-ui/{_:.*}")
                     .url("/api-doc/openapi.json", ApiDoc::openapi()),
             )
-    };
+    }};
 }
 
 impl Server {