kirino 0.3.0

A customizable, zero-trust authentication framework.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

use std::collections::HashSet;

use async_trait::async_trait;

pub trait Permission: Eq + std::hash::Hash + Clone + Send + Sync + 'static {
    fn name(&self) -> &str;

    fn domain(&self) -> &str {
        ""
    }
}

pub trait Subject: Eq + std::hash::Hash + Clone + Send + Sync + 'static {
    fn subject_id(&self) -> &str;

    fn subject_type(&self) -> &str {
        "user"
    }
}

pub trait Role<P: Permission>: Clone + Send + Sync + 'static {
    fn role_name(&self) -> &str;
    fn permissions(&self) -> &HashSet<P>;
}

pub trait PermissionRegistry<P: Permission>: Send + Sync {
    fn all_permissions(&self) -> HashSet<P>;
    fn get_permission(&self, name: &str) -> Option<P>;
}

pub trait RoleRegistry<R, P: Permission>: Send + Sync
where
    R: Role<P>,
{
    fn get_role(&self, role_name: &str) -> Option<R>;
    fn list_role_names(&self) -> Vec<String>;
}

#[async_trait]
pub trait AssignmentStore<S, P>: Send + Sync
where
    S: Subject,
    P: Permission,
{
    async fn assign_role(&self, subject: &S, role_name: &str) -> anyhow::Result<()>;
    async fn revoke_role(&self, subject: &S, role_name: &str) -> anyhow::Result<()>;
    async fn roles_of(&self, subject: &S) -> anyhow::Result<Vec<String>>;
    async fn subjects_with_role(&self, role_name: &str) -> anyhow::Result<Vec<String>>;
    async fn extra_permissions(&self, subject: &S) -> anyhow::Result<HashSet<P>>;
    async fn set_extra_permissions(&self, subject: &S, perms: HashSet<P>) -> anyhow::Result<()>;
    async fn denied_permissions(&self, subject: &S) -> anyhow::Result<HashSet<P>>;
    async fn set_denied_permissions(&self, subject: &S, perms: HashSet<P>) -> anyhow::Result<()>;
}

#[async_trait]
pub trait RoleStore<P: Permission>: Send + Sync {
    async fn create_role(&self, role_name: &str, permissions: HashSet<P>) -> anyhow::Result<()>;
    async fn delete_role(&self, role_name: &str) -> anyhow::Result<bool>;
    async fn get_role_permissions(&self, role_name: &str) -> anyhow::Result<Option<HashSet<P>>>;
    async fn list_roles(&self) -> anyhow::Result<Vec<String>>;
}