coil-auth 0.1.1

Authorisation models and auth package support for the Coil framework.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

use super::*;

#[derive(Debug)]
pub enum CoilAuthError {
    Rebac(RebacError),
    MissingCapabilityBinding {
        capability: Capability,
    },
    ResourceNamespaceMismatch {
        capability: Capability,
        actual: Namespace,
        expected: Vec<Namespace>,
    },
    UnsupportedExplainNamespace {
        namespace: String,
    },
    UnsupportedExplainRelation {
        relation: String,
    },
}

impl fmt::Display for CoilAuthError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            Self::Rebac(error) => write!(f, "{error}"),
            Self::MissingCapabilityBinding { capability } => {
                write!(f, "no binding exists for capability `{capability}`")
            }
            Self::ResourceNamespaceMismatch {
                capability,
                actual,
                expected,
            } => {
                let expected = expected
                    .iter()
                    .map(Namespace::to_string)
                    .collect::<Vec<_>>()
                    .join(", ");
                write!(
                    f,
                    "capability `{capability}` does not apply to `{actual}` resources; expected one of [{expected}]"
                )
            }
            Self::UnsupportedExplainNamespace { namespace } => {
                write!(
                    f,
                    "cannot explain tuples or schema entries for unsupported namespace `{namespace}`"
                )
            }
            Self::UnsupportedExplainRelation { relation } => {
                write!(
                    f,
                    "cannot explain tuples or schema entries for unsupported relation `{relation}`"
                )
            }
        }
    }
}

impl Error for CoilAuthError {}

impl From<RebacError> for CoilAuthError {
    fn from(value: RebacError) -> Self {
        Self::Rebac(value)
    }
}