alibi-plugins 0.4.1

//! Application-owned organization creation policies, evaluated on the persisted user.
use alibi_core::{AuthResult, wire::UserView};
use async_trait::async_trait;

/// Optional asynchronous overrides for the fixed creation settings.
///
/// `None` uses the corresponding fixed configuration. A limit override returns
/// `Some(true)` when the user has reached the limit, rather than when creation is allowed.
#[async_trait]
pub trait OrganizationCreationPolicy: std::fmt::Debug + Send + Sync {
    async fn allow_creation(&self, _user: &UserView) -> AuthResult<Option<bool>> {
        Ok(None)
    }
    async fn limit_reached(&self, _user: &UserView) -> AuthResult<Option<bool>> {
        Ok(None)
    }
}

use super::types::OrganizationResponse;
use std::sync::Arc;

/// One immutable membership policy, shared by trusted addition and invitation admission.
#[derive(Debug, Clone)]
pub enum MembershipLimit {
    Fixed(f64),
    Resolver(Arc<dyn OrganizationMembershipLimitResolver>),
}

/// Evaluated after the actual member count and organization lookup, over the
/// target user and raw stored organization. Read pages never invoke this callback.
#[async_trait]
pub trait OrganizationMembershipLimitResolver: std::fmt::Debug + Send + Sync {
    async fn maximum_members(
        &self,
        user: &UserView,
        organization: &OrganizationResponse,
    ) -> AuthResult<f64>;
}

pub(crate) fn truthy_number(value: f64) -> bool {
    value != 0.0 && !value.is_nan()
}

pub(crate) fn read_page_limit(policy: Option<&MembershipLimit>) -> f64 {
    match policy {
        Some(MembershipLimit::Fixed(value)) if truthy_number(*value) => *value,
        _ => 100.0,
    }
}

pub(crate) async fn admission_limit(
    policy: Option<&MembershipLimit>,
    user: &UserView,
    organization: &OrganizationResponse,
) -> AuthResult<f64> {
    match policy {
        Some(MembershipLimit::Resolver(resolver)) => {
            resolver.maximum_members(user, organization).await
        }
        _ => Ok(read_page_limit(policy)),
    }
}