Crate oso[][src]

oso policy engine for authorization

Overview

oso is a policy engine for authorization that's embedded in your application. It provides a declarative policy language for expressing authorization logic. You define this logic separately from the rest of your application code, but it executes inside the application and can call directly into it.

For more information, guides on using oso, writing policies and adding to your application, go to the oso documentation.

For specific information on using with Rust, see the Rust documentation.

Note

The oso Rust library is still in early development relative to the other oso libraries.

Example

To get started, create a new Oso instance, and load Polar policies from either a string or a file:

let mut oso = Oso::new();
oso.load_str(r#"allow(actor, action, resource) if actor.username = "alice";"#)?;

You can register classes with oso, which makes it possible to use them for type checking, as well as accessing attributes in policies. The PolarClass derive macro can handle some of this

use oso::{Oso, PolarClass};

let mut oso = Oso::new();

#[derive(Clone, PolarClass)]
struct User {
    #[polar(attribute)]
    pub username: String,
}

impl User {
    fn superuser() -> Vec<String> {
        return vec!["alice".to_string(), "charlie".to_string()]
    }
}

oso.register_class(
   User::get_polar_class_builder()
        .add_class_method("superusers", User::superuser)
        .build()
)?;

oso.load_str(r#"allow(actor: User, action, resource) if
                    actor.username.ends_with("example.com");"#)?;

let user = User {
    username: "alice@example.com".to_owned(),
};
assert!(oso.is_allowed(user, "foo", "bar")?);
Ok(())

For more examples, see the oso documentation.

Re-exports

pub use errors::OsoError;
pub use errors::Result;

Modules

errors
macros

Macros

lazy_error

Structs

Class
ClassBuilder
Oso

Oso is the main struct you interact with. It is an instance of the Oso authorization library and contains the polar language knowledge base and query engine.

Query
ResultSet

Enums

PolarValue

An enum of the possible value types that can be sent to/from Polar.

Traits

FromPolar

Convert Polar types to Rust types.

FromPolarList
PolarClass

Classes that can be used as types in Polar policies.

ToPolar

Convert Rust types to Polar types.

ToPolarList