gatekeep 0.3.0

Code-first authorization engine for Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

use std::sync::{Arc, Mutex};

use thiserror::Error;

use crate::{AuditEntry, AuditSink};

/// Error returned by the in-memory audit sink.
#[derive(Debug, Error, Clone, PartialEq, Eq)]
pub enum InMemoryAuditError {
    /// The shared test buffer was poisoned by a previous panic.
    #[error("in-memory audit sink buffer is poisoned")]
    Poisoned,
}

/// Shared-buffer audit sink for tests and examples.
#[derive(Debug, Clone, Default)]
pub struct InMemoryAuditSink {
    // Test-only shared buffer for asserting emitted audit entries. Production
    // audit sinks should write to durable storage instead of sharing a mutex.
    entries: Arc<Mutex<Vec<AuditEntry>>>,
}

impl InMemoryAuditSink {
    /// Returns the entries recorded so far.
    pub fn entries(&self) -> Result<Vec<AuditEntry>, InMemoryAuditError> {
        self.entries
            .lock()
            .map_err(|_| InMemoryAuditError::Poisoned)
            .map(|entries| entries.clone())
    }
}

impl AuditSink for InMemoryAuditSink {
    type Error = InMemoryAuditError;

    fn record(&self, entry: &AuditEntry) -> Result<(), Self::Error> {
        self.entries
            .lock()
            .map_err(|_| InMemoryAuditError::Poisoned)?
            .push(entry.clone());
        Ok(())
    }
}