tokidator 0.8.1

Token based authentication framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

use std::iter::FromIterator;

use Predicate::*;

use crate::rbac::Permission;
use crate::rbac::PermissionSet;

#[derive(Clone)]
pub enum Predicate<P: Permission> {
    Nil,
    Contains(P),
    Any(Box<[P]>),
    All(Box<[P]>),
}

impl<P: Permission> Predicate<P> {
    pub fn satisfy(&self, permissions: &PermissionSet<P>) -> bool {
        let set = permissions.inner();
        match self {
            Nil => true,
            Contains(permission) => set.contains(permission),
            Any(slice) => slice.iter().any(|permission| set.contains(permission)),
            All(slice) => slice.iter().all(|permission| set.contains(permission)),
        }
    }

    pub fn contains(permission: P) -> Self {
        Contains(permission)
    }

    pub fn all<T: IntoIterator<Item = P>>(iter: T) -> Self {
        All(Vec::from_iter(iter).into_boxed_slice())
    }

    pub fn any<T: IntoIterator<Item = P>>(iter: T) -> Self {
        Any(Vec::from_iter(iter).into_boxed_slice())
    }
}

impl<P: Permission> From<P> for Predicate<P> {
    fn from(p: P) -> Self {
        Contains(p)
    }
}

impl<P: Permission> AsRef<Predicate<P>> for Predicate<P> {
    fn as_ref(&self) -> &Predicate<P> {
        self
    }
}

#[cfg(test)]
mod tests {
    use crate::rbac::test_helpers::TestPermission::{self, *};

    use super::*;

    type TestPredicate = Predicate<TestPermission>;

    #[test]
    fn no_should_always_satisfy() {
        assert!(TestPredicate::Nil.satisfy(&[].into()));
        assert!(TestPredicate::Nil.satisfy(&[Permission1].into()));
        assert!(TestPredicate::Nil.satisfy(&[Permission1, Permission2].into()));
    }

    #[test]
    fn contains_should_satisfy() {
        assert!(TestPredicate::contains(Permission1).satisfy(&[Permission1].into()));
        assert!(TestPredicate::contains(Permission1).satisfy(&[Permission1, Permission2].into()));
    }

    #[test]
    fn contains_should_not_satisfy() {
        assert!(!TestPredicate::contains(Permission1).satisfy(&[].into()));
        assert!(!TestPredicate::contains(Permission1).satisfy(&[Permission2].into()));
    }

    #[test]
    fn any_should_satisfy() {
        let check_ps: PermissionSet<_> = [Permission1, Permission2].into();
        assert!(TestPredicate::any([Permission1]).satisfy(&check_ps));
        assert!(TestPredicate::any([Permission2]).satisfy(&check_ps));
        assert!(TestPredicate::any([Permission1, Permission2]).satisfy(&check_ps));
        assert!(TestPredicate::any([Permission1, Permission2, Permission3]).satisfy(&check_ps));
    }

    #[test]
    fn any_should_not_satisfy() {
        assert!(!TestPredicate::any([]).satisfy(&[].into()));
        assert!(!TestPredicate::any([]).satisfy(&[Permission1].into()));
        assert!(!TestPredicate::any([]).satisfy(&[Permission1, Permission2].into()));

        assert!(!TestPredicate::any([Permission1]).satisfy(&[].into()));
        assert!(!TestPredicate::any([Permission1, Permission2]).satisfy(&[].into()));

        assert!(!TestPredicate::any([Permission1]).satisfy(&[Permission2].into()));
        assert!(!TestPredicate::any([Permission1]).satisfy(&[Permission2, Permission3].into()));
    }

    #[test]
    fn all_should_satisfy() {
        assert!(TestPredicate::all([Permission1]).satisfy(&[Permission1].into()));
        assert!(TestPredicate::all([Permission1, Permission2])
            .satisfy(&[Permission1, Permission2].into()));
        assert!(TestPredicate::all([Permission1, Permission2])
            .satisfy(&[Permission1, Permission2, Permission3].into()));

        assert!(TestPredicate::all([]).satisfy(&[].into()));
        assert!(TestPredicate::all([]).satisfy(&[Permission1].into()));
        assert!(TestPredicate::all([]).satisfy(&[Permission1, Permission2].into()));
    }

    #[test]
    fn all_should_not_satisfy() {
        assert!(!TestPredicate::all([Permission1]).satisfy(&[].into()));
        assert!(!TestPredicate::all([Permission1, Permission2]).satisfy(&[].into()));

        assert!(!TestPredicate::all([Permission1, Permission2]).satisfy(&[Permission1].into()));
        assert!(!TestPredicate::all([Permission1, Permission2]).satisfy(&[Permission2].into()));
        assert!(!TestPredicate::all([Permission1, Permission2])
            .satisfy(&[Permission2, Permission3].into()));
    }
}