82 lines
1.9 KiB
JavaScript
82 lines
1.9 KiB
JavaScript
"use strict";
|
|
|
|
const validators = {
|
|
pass: require("./validators/pass"),
|
|
test: require("./validators/test")
|
|
};
|
|
|
|
class Authorizer {
|
|
constructor(permissionSets) {
|
|
this.permissionSets = permissionSets;
|
|
this.validatorCache = new WeakMap();
|
|
this.hasAccessCache = {};
|
|
}
|
|
|
|
hasAccess(resourceType, access) {
|
|
const cacheKey = `${resourceType}-${access}`;
|
|
if (cacheKey in this.hasAccessCache) return this.hasAccessCache[cacheKey];
|
|
|
|
let has = false;
|
|
for (const permissionSet of this.permissionSets) {
|
|
for (const perm of permissionSet) {
|
|
if (perm[resourceType]) {
|
|
if (perm[resourceType].access >= access) {
|
|
has = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
this.hasAccessCache[cacheKey] = has;
|
|
return has;
|
|
}
|
|
|
|
getValidator(resourceType, resource) {
|
|
if (this.validatorCache.has(resource))
|
|
return this.validatorCache.get(resource);
|
|
|
|
let funcs = {};
|
|
|
|
for (const permissionSet of this.permissionSets) {
|
|
for (const perm of permissionSet) {
|
|
if (perm[resourceType]) {
|
|
if (perm[resourceType].access >= 3) {
|
|
if (perm[resourceType].validate) {
|
|
for (const [k, v] of Object.entries(perm[resourceType].validate))
|
|
funcs[k] = v;
|
|
}
|
|
} else {
|
|
funcs = {};
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
const validator = (mutationType, mutation, any) => {
|
|
let valid = false;
|
|
for (const [k, v] of Object.entries(funcs)) {
|
|
if (v) {
|
|
const res = validators[k](
|
|
resourceType,
|
|
resource,
|
|
mutationType,
|
|
mutation,
|
|
any
|
|
);
|
|
|
|
if (res > 0) valid = true;
|
|
else if (res < 0) return false;
|
|
}
|
|
}
|
|
|
|
return valid;
|
|
};
|
|
|
|
this.validatorCache.set(resource, validator);
|
|
return validator;
|
|
}
|
|
}
|
|
|
|
module.exports = Authorizer;
|