coil-auth 0.1.0

Authorisation models and auth package support for the Coil framework.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70

use super::*;

use super::conversion::parse_relation;
use super::index::GraphNode;

pub(super) fn inherit_rules_for(
    schema: &Schema,
    node: &GraphNode,
) -> Result<Vec<Relation>, CoilAuthError> {
    let Some(relation) = node.relation.as_deref() else {
        return Ok(Vec::new());
    };

    let Some(config) = schema.namespaces.get(node.object.namespace.as_str()) else {
        return Ok(Vec::new());
    };

    let Some(rules) = config.rules.get(relation) else {
        return Ok(Vec::new());
    };

    let mut parsed = Vec::new();
    for rule in rules {
        if let RelationRule::Inherit(target_relation) = rule {
            parsed.push(parse_relation(target_relation)?);
        }
    }
    Ok(parsed)
}

pub(super) fn userset_jump_rules_for(
    schema: &Schema,
    node: &GraphNode,
) -> Result<Vec<(Relation, Relation, bool)>, CoilAuthError> {
    let Some(relation) = node.relation.as_deref() else {
        return Ok(Vec::new());
    };

    let Some(config) = schema.namespaces.get(node.object.namespace.as_str()) else {
        return Ok(Vec::new());
    };

    let Some(rules) = config.rules.get(relation) else {
        return Ok(Vec::new());
    };

    let mut parsed = Vec::new();
    for rule in rules {
        match rule {
            RelationRule::Computed {
                tuple_relation,
                target_relation,
            } => parsed.push((
                parse_relation(tuple_relation)?,
                parse_relation(target_relation)?,
                false,
            )),
            RelationRule::TupleToUserset {
                tuple_relation,
                target_relation,
            } => parsed.push((
                parse_relation(tuple_relation)?,
                parse_relation(target_relation)?,
                true,
            )),
            RelationRule::Inherit(_) => {}
        }
    }
    Ok(parsed)
}