delegated 0.2.1

Minimal fail-closed capability-token evaluation core
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

//! Audit persistence contracts and reference implementations.

use crate::models::AuditEvent;
use std::io;

/// Audit persistence is supplied by the host so durability and tamper resistance are
/// explicit deployment choices rather than implied by a local file helper.
pub trait AuditSink: Send + Sync {
    /// Persists one authorization decision before the caller executes an allowed operation.
    fn write_event(&self, event: &AuditEvent) -> io::Result<()>;
}

impl AuditSink for VecAuditSink {
    fn write_event(&self, event: &AuditEvent) -> io::Result<()> {
        self.events
            .lock()
            .map_err(|_| io::Error::other("audit sink lock poisoned"))?
            .push(event.clone());
        Ok(())
    }
}

/// Small test/reference sink. It is not a production durability mechanism.
#[derive(Default)]
pub struct VecAuditSink {
    events: std::sync::Mutex<Vec<AuditEvent>>,
}

impl VecAuditSink {
    /// Creates an empty in-memory audit sink.
    pub fn new() -> Self {
        Self::default()
    }

    /// Returns a snapshot of all recorded events in insertion order.
    pub fn events(&self) -> io::Result<Vec<AuditEvent>> {
        Ok(self
            .events
            .lock()
            .map_err(|_| io::Error::other("audit sink lock poisoned"))?
            .clone())
    }
}