coil-auth 0.1.1

Authorisation models and auth package support for the Coil framework.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

use super::*;

use super::index::GraphNode;

pub(super) fn subject_matches_node(node: &GraphNode, subject: &Subject) -> bool {
    match subject {
        Subject::Entity(object) => {
            relation_matches(node.relation.as_deref(), None) && object_matches(&node.object, object)
        }
        Subject::Userset { object, relation } => {
            relation_matches(node.relation.as_deref(), Some(relation.as_str()))
                && object_matches(&node.object, object)
        }
    }
}

pub(super) fn subject_matches_subject(candidate: &Subject, target: &Subject) -> bool {
    match (candidate, target) {
        (Subject::Entity(left), Subject::Entity(right)) => object_matches(left, right),
        (
            Subject::Userset {
                object: left_object,
                relation: left_relation,
            },
            Subject::Userset {
                object: right_object,
                relation: right_relation,
            },
        ) => object_matches(left_object, right_object) && left_relation == right_relation,
        _ => false,
    }
}

fn object_matches(candidate: &Object, target: &Object) -> bool {
    (candidate.namespace == target.namespace || candidate.namespace == "*")
        && (candidate.id == target.id || candidate.id == "*")
}

fn relation_matches(candidate: Option<&str>, target: Option<&str>) -> bool {
    candidate == target
}