tokidator 0.4.0

Token based authentication framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123

use std::iter::FromIterator;

use PolicyCondition::*;

use crate::rbac::Policy;
use crate::rbac::PolicySet;

#[derive(Clone)]
pub enum PolicyCondition<P: Policy> {
    Nil,
    Contains(P),
    Any(Box<[P]>),
    All(Box<[P]>),
}

impl<P: Policy> PolicyCondition<P> {
    pub fn satisfy(&self, policies: &PolicySet<P>) -> bool {
        let set = policies.inner();
        match self {
            Nil => true,
            Contains(policy) => set.contains(policy),
            Any(slice) => slice.iter().any(|policy| set.contains(policy)),
            All(slice) => slice.iter().all(|policy| set.contains(policy)),
        }
    }

    pub fn contains(policy: P) -> Self {
        Contains(policy)
    }

    pub fn all<T: IntoIterator<Item = P>>(iter: T) -> Self {
        All(Vec::from_iter(iter).into_boxed_slice())
    }

    pub fn any<T: IntoIterator<Item = P>>(iter: T) -> Self {
        Any(Vec::from_iter(iter).into_boxed_slice())
    }
}

impl<P: Policy> From<P> for PolicyCondition<P> {
    fn from(p: P) -> Self {
        Contains(p)
    }
}

impl<P: Policy> AsRef<PolicyCondition<P>> for PolicyCondition<P> {
    fn as_ref(&self) -> &PolicyCondition<P> {
        self
    }
}

#[cfg(test)]
mod tests {
    use crate::rbac::test_helpers::TestPolicy::{self, *};

    use super::*;

    type Condition = PolicyCondition<TestPolicy>;

    #[test]
    fn no_should_always_satisfy() {
        assert!(Condition::Nil.satisfy(&vec![].into()));
        assert!(Condition::Nil.satisfy(&vec![Policy1].into()));
        assert!(Condition::Nil.satisfy(&vec![Policy1, Policy2].into()));
    }

    #[test]
    fn contains_should_satisfy() {
        assert!(Condition::contains(Policy1).satisfy(&vec![Policy1].into()));
        assert!(Condition::contains(Policy1).satisfy(&vec![Policy1, Policy2].into()));
    }

    #[test]
    fn contains_should_not_satisfy() {
        assert!(!Condition::contains(Policy1).satisfy(&vec![].into()));
        assert!(!Condition::contains(Policy1).satisfy(&vec![Policy2].into()));
    }

    #[test]
    fn any_should_satisfy() {
        let check_ps: PolicySet<_> = vec![Policy1, Policy2].into();
        assert!(Condition::any(vec![Policy1]).satisfy(&check_ps));
        assert!(Condition::any(vec![Policy2]).satisfy(&check_ps));
        assert!(Condition::any(vec![Policy1, Policy2]).satisfy(&check_ps));
        assert!(Condition::any(vec![Policy1, Policy2, Policy3]).satisfy(&check_ps));
    }

    #[test]
    fn any_should_not_satisfy() {
        assert!(!Condition::any(vec![]).satisfy(&vec![].into()));
        assert!(!Condition::any(vec![]).satisfy(&vec![Policy1].into()));
        assert!(!Condition::any(vec![]).satisfy(&vec![Policy1, Policy2].into()));

        assert!(!Condition::any(vec![Policy1]).satisfy(&vec![].into()));
        assert!(!Condition::any(vec![Policy1, Policy2]).satisfy(&vec![].into()));

        assert!(!Condition::any(vec![Policy1]).satisfy(&vec![Policy2].into()));
        assert!(!Condition::any(vec![Policy1]).satisfy(&vec![Policy2, Policy3].into()));
    }

    #[test]
    fn all_should_satisfy() {
        assert!(Condition::all(vec![Policy1]).satisfy(&vec![Policy1].into()));
        assert!(Condition::all(vec![Policy1, Policy2]).satisfy(&vec![Policy1, Policy2].into()));
        assert!(
            Condition::all(vec![Policy1, Policy2]).satisfy(&vec![Policy1, Policy2, Policy3].into())
        );

        assert!(Condition::all(vec![]).satisfy(&vec![].into()));
        assert!(Condition::all(vec![]).satisfy(&vec![Policy1].into()));
        assert!(Condition::all(vec![]).satisfy(&vec![Policy1, Policy2].into()));
    }

    #[test]
    fn all_should_not_satisfy() {
        assert!(!Condition::all(vec![Policy1]).satisfy(&vec![].into()));
        assert!(!Condition::all(vec![Policy1, Policy2]).satisfy(&vec![].into()));

        assert!(!Condition::all(vec![Policy1, Policy2]).satisfy(&vec![Policy1].into()));
        assert!(!Condition::all(vec![Policy1, Policy2]).satisfy(&vec![Policy2].into()));
        assert!(!Condition::all(vec![Policy1, Policy2]).satisfy(&vec![Policy2, Policy3].into()));
    }
}