gatehouse 0.5.0

An in-process authorization engine for Rust with composable policies and request-scoped fact loading.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122

name: CI

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "main" ]
  release:
    types: [ published ]

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: full

jobs:
  build-and-test:
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository
        uses: actions/checkout@v6
      - name: Cache cargo & target directories
        uses: Swatinem/rust-cache@v2
        with:
          key: "v2"
      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable
      - name: Build
        run: cargo build --verbose
      - name: Lint
        run: cargo clippy --all-targets --all-features -- -D warnings
      - name: Build Docs
        run: cargo doc --verbose
      - name: Test
        run: cargo test --all-targets --all-features

  loom-tests:
    name: Loom permutation tests
    runs-on: ubuntu-latest
    steps:
      - name: Check out repository
        uses: actions/checkout@v6
      - name: Cache cargo & target directories
        uses: Swatinem/rust-cache@v2
        with:
          key: "loom-v1"
      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable
      # Loom-incompatible dev-deps are gated on `cfg(not(loom))` in Cargo.toml,
      # so this build collapses to just the library + loom. The harness lives
      # in `src/session/core.rs` (see #29).
      - name: Run loom models
        run: cargo test --lib --release
        env:
          RUSTFLAGS: "--cfg loom"

  mutation-tests:
    name: Mutation tests
    needs: build-and-test
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - name: Check out repository
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Cache cargo & target directories
        uses: Swatinem/rust-cache@v2
        with:
          key: "mutants-v1"
      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable
      - name: Install cargo-mutants
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-mutants
      - name: Capture checker/combinator diff
        run: git diff origin/${{ github.base_ref }}...HEAD -- src/checker.rs src/combinators.rs > mutants.diff
      - name: Run focused mutation tests
        run: >
          cargo mutants
          --in-place
          --in-diff=mutants.diff
          --file src/checker.rs
          --file src/combinators.rs
          --baseline=skip
          --timeout=60
          --build-timeout=300
          --all-features
          --
          --test checker_contract
          --test tracing_contract
        env:
          PROPTEST_CASES: 128
      - name: Upload mutation test report
        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: mutants-out
          path: mutants.out

  release:
    name: Release
    needs: build-and-test
    runs-on: ubuntu-latest
    if: github.event.release && github.event.action == 'published'
    steps:
      - name: Check out repository
        uses: actions/checkout@v6
      - name: Cache cargo & target directories
        uses: Swatinem/rust-cache@v2
        with:
          key: "v2"
      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable
      - name: Build
        run: cargo build --release --verbose
      - name: Cargo Login
        run: cargo login ${{ secrets.CRATES_IO_API_TOKEN }}
      - name: Publish
        run: cargo publish