mirror of
https://github.com/ash-project/ash.git
synced 2024-09-20 05:23:03 +12:00
59 lines
1.5 KiB
Elixir
59 lines
1.5 KiB
Elixir
defmodule Ash.Test.Authorizer do
|
|
@moduledoc false
|
|
@behaviour Ash.Authorizer
|
|
|
|
use Agent
|
|
|
|
def start_link(opts) do
|
|
Agent.start_link(
|
|
fn ->
|
|
%{
|
|
strict_check_result: maybe_forbidden(opts[:strict_check] || :authorized),
|
|
check_result: maybe_forbidden(opts[:check] || :authorized),
|
|
strict_check_context: opts[:strict_check_context]
|
|
}
|
|
end,
|
|
name: __MODULE__
|
|
)
|
|
end
|
|
|
|
defp maybe_forbidden(:forbidden), do: {:error, Ash.Error.Forbidden.exception([])}
|
|
defp maybe_forbidden(other), do: other
|
|
|
|
def initial_state(actor, _b, _c, _d) do
|
|
%{actor: actor}
|
|
end
|
|
|
|
def strict_check_context(_), do: get(:strict_check_context, [])
|
|
|
|
def strict_check(state, _) do
|
|
case get(:strict_check_result, :authorized) do
|
|
:authorized_if_actor ->
|
|
if state.actor do
|
|
:authorized |> continue(state) |> wrap_authorized(state)
|
|
else
|
|
:forbidden |> continue(state) |> wrap_authorized(state)
|
|
end
|
|
|
|
other ->
|
|
other |> continue(state) |> wrap_authorized(state)
|
|
end
|
|
end
|
|
|
|
def check_context(_), do: []
|
|
|
|
def check(state, _), do: get(:check_result, :authorized) |> continue(state)
|
|
|
|
defp continue(:continue, state), do: {:continue, state}
|
|
defp continue(other, _), do: other
|
|
|
|
defp wrap_authorized(:authorized, state), do: {:authorized, state}
|
|
defp wrap_authorized(other, _), do: other
|
|
|
|
defp get(key, default) do
|
|
Agent.get(__MODULE__, &Map.get(&1, key)) || default
|
|
catch
|
|
:exit, _ ->
|
|
default
|
|
end
|
|
end
|